skysight-inc/HackerNews huggingface dataset:
Windows has a service called "Windows Hello" which can work with WebAuthn (otherwise it's hardware keys). It requires your computer to have various biometric or camera technology built in, such as a finger print scanner. I'm sure windows laptops are more equipped for this, but desktops obviously are not, and I'm certainly not advising folks to leave some insecure cheap imported webcam hooked up 24/7 "for security purposes".

I don't know anyone using "Hello" but I suppose it's an option. Most Windows users would likely have to use a hardware key though.
I wouldn’t call it a new thing. We began without virtual DOM and then Facebook sold us the vDOM as the ultimate way to go. Which svelte clearly shows, by removing the unnecessary layer for the vdom it’s much faster and is still reactive.
>And when you’re young you want to go for drinks after work and socialise with colleagues.

And risk getting fired when you say something stupid. And force those with anxiety issues into forced socialization.

What if you're disabled and have mobility issues ? Getting to an office everyday doesn't sound too fun.
The case of POP3 and STARTTLS vs POP3S is different, because practically all POP3 providers these days require encryption before the e-mail client is allowed to transact. It's the same encryption method/protocol and the same requirement, it's just that POP3S goes straight for the TLS handshake while STARTTLS (with the security concerns detailed in the article) begins talking on an unencrypted channel before getting on with the mandatory handshake.
Try the Forgot Password link?
You can use a neutral nickname.
> What's so bad about symlinks though?

I am not smart and will regularly forget the syntax to ln(1)
I don't subscribe to the 'it is expensive so it should be painful' line of thought. That's how you end up with cstrings, strcpy, strdup and friends.
The name "bufferbloat" is falling out of favor. First off, it has a horrible sound... And it doesn't really give an intuitive sense of what's wrong.

Referring to "latency" or (my favorite) "responsiveness" is better.

And I was encouraged to see this recent ZDNet article that mentioned the "ping rates" of 600-1000 msec, and notes that these would cause videoconferencing or gaming to be unusable.

https://www.zdnet.com/home-and-office/networking/i-tried-del...

And as @giuliomagnifico points out, you can fix it yourself if you get the right router.
I suppose that it could also be true that the facial expressions that someone regularly makes influences the wrinkles that develop as they age.
Gitflow and TBD are just two of the many possible ways to use Git. Several companies (such as yours) use other systems that have no name. And that is fine. We don't need to name every possible variation of a Git model.
Your veggie patty is not just ground veggies. Your almond milk is not just ground almonds and water.
In the context of this thread, why would somebody starting a new project be choosing between Orthodox C++ and Rust?
Um. No.

Stinky Tofu's smell is so distinct, so awful, and so powerful, it is the subject of numerous scientific studies on that topic alone. Wikipedia notes that "The main volatile compound was indole, which has an intense fecal odor".

For example, https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6268145/

This is nothing like sauerkraut. German towns don't have rules forbidding people from bringing sauerkraut into buildings.
The cable sleeve is also notoriously fragile. I've gone through 5+ first-party lightning cables from frayed rubber sleeving alone.
I am a true believer in the Science.

Are you questioning my faith?

The Science Pope doesn't like to hear such heresy. Better watch out or else he'll sic the Science Inquisition on yo' aess!
>Now what about active systems from back then? Almost 20 years ago Lexus had learned the lessons that Tesla kicked and resisted until about 2 years ago on

Lexus/Toyota doesn't "learn lessons". The are simply ultra-conservative about adopting anything so when anything is a dud or the V1 version sucks they wind up looking smart.
"Files are written to disk" is not strictly true. In the use case where the config contains (hopefully short-lived) credentials, one would pass them in a temporary file that usually only lives in RAM (unless /tmp doesn't use tmpfs or the temporary config file is put somewhere else) and of course doesn't get committed to the repo. (I'm not sure if you meant git commit or filesystem commit.)

I sometimes find secrets to be safer inside config files since so many times the environment variables get dumped into logs – hence all the popular CI/CD products have features to try to scrub such secrets from their logs.

I agree about not using .env files in production, I'd not use it at all.
Certainly not in the form of strings, no. That's a nightmare of run-time debugging just to make sure the tags are all closed and you have the correct attributes.

Perhaps pair it with a typescript library for composing it. There's nothing sacred about HTML for describing the DOM, but that it what it was created for, and the language the browser will report it.
So what you're saying is that big corporations run by some of the greediest people on the planet have somehow failed to recognize this? Or do you just think they are using plant based oils out of the goodness of their hearts?
Stuff like this gives me hope for an open-source future. I love my Steam Deck, and I'll be making Framework my next computer purchase. I want to see these companies succeed because respecting consumer freedoms and contributing back to the open source community benefits us all. I'd love to see the walled-garden, service-driven approach to electronics become a thing of the past.
No, strdup uses a general purpose allocator to put a string in a random place on the heap. Quite the opposite of a well-structured approach.

"It is complicated so let's see if there is a simpler approach".
That's really interesting to hear, I assumed wrongfully that most places have similar policies in regards to devices (from my experience, and my peers').

Maybe where I'm working we're more harsh than usual:D because we've got the full package - company laptop, transfering anything work related to personal PC is a no go, at home we must use VPN with 2FA, can't connect unapproved USB devices (including mice, keyboards, phone charging, anything), heavy website moderation, and heavy user-based access moderation for anything, and the company laptops are 100% tracked - you have no privacy on it. Even personal phones have to follow some security measures to keep Slack and authentication app (screen sleep <5min, screen lock is a must, and Slack is password protected).
> Memory leak is an old C++ problem, since C++11 there is no reason for not using smart pointers.

C++11 did not invent smart pointers, pretty much every C++ project had already been using them long before they were added to the standard. They help with leaks to some extent, but are not a panacea, I can do a memory leak with shared_ptr in just a few lines of code. I've seen this line of reasoning many times before and it needs to stop.
Open VSwitch vs. OpenFlow: What Are They, What’s Their Relationship?
All these things sound highly optimistic. You're just hoping that people will run all the tests before pushing (what if CI time is over an hour?). You're hoping that people retrospectively review changes (what if the project is very big?).

I'm only seeing disadvantages compared to traditional MR/PR/diffs.
Search is Google’s main business.

Displaying an incorrect result in their flagship upcoming product shows that there were no due diligence steps in creating this,
made even worse by being publicly published in their own social media account, without checking it first, which would have taken 5 minutes to do so.
Oh man. I forgot about Yahoo Finance. We had a class project in Econ in college circa 2005 that involved making market predictions based on Yahoo Finance with a couple points of your grade based on how well you did.

As I recall I did pretty well in the short term.
Startups are tech businesses, they literally live and die by the quality of their tech.

In particular for a product like this which is itself targeting developers.
There is a very good reason it was Pfizer who brought the covid vaccine to market first.

Decades of experience, thousands of employees who are experts in their own area and the capital to move fast.
Pixel 3a is EOL.

You can buy lots of obsolete stuff new from surplus inventory from scavengers.
This seems cool, but the article and the artists' web site don't show the game actually being played, only short snippets that don't provide much context.
That’s what I was trying to say but lacked coffee. Fixed now.
Creator here, I build this tool to create automatic vectorial designs, mostly focused on social media and canva-like designs, I scrapped a huge collection of quotes for the texts, and created an API for the illustrations (also mine), and used template-based as well as algorithmically created layouts.

It was hard to get designs visually appealing but the results are pretty good IMHO.
Everything runs in the browser ;)

PD: AI tools can't create vectorial designs (yet).
Thoughts and prayers to his good friend Austin Powers
The study purports to document physical characteristics in Republican and Democratic brains related to the good vibes associated with preaching to the choir.
Gitflow is very appealing to people that have multiple versions of the same thing in production. I would even consider it essential in such cases.

The typical example is a B2B company that maintains one prod deployment per customer and each customer wants a completely different release schedule

There are also several people that don't really care about release speed
Two use cases. Tell the Microsoft Ai to not let anything interrupt during the PowerPoint presentation coming from the Windows Pc. And, before that, tell Ai to "just work" with the projector or meeting screenshare at maximum diplay/audio performance spec.
They should ship the 15 with USB c on one end and lightning in the other.
Yeah the second I saw the string block I noped out. JSX works really nicely and I dislike weird template string stuff now. Same with vue.
Because your transfer speeds are bottlenecked at USB 2.0 instead of Thunderbolt?
The EU-law applies to the seller, not the manufacturer.

And only for "defects presumed to have existed at the time of delivery", for which the burden of proof is on the seller in Year1 and on the buyer in Year2.

Year1 is usually covered also by the manufacturer warranty, so the seller doesn't have to prove anything and just forwards the buyers' claim to the manufacturer as warranty-repair.

If Year2 is not covered by the manufacturer, the seller needs to cover the cost. If Apple is not the seller, this regularly opens a journey of pain for the consumer (especially if the seller was also in the business of selling insurance and the buyer didn't buy any --> "he's gotta learn to buy insurance for his iPhone")
Yeah, but only for the songs covered, not any originals that the cover band did in the style of anyone else. Which is the point.
Valve meant that to indicate they'd designed with high frequency signals in mind, not that it's a consideration unique to the Steam deck.

You're likelier to generate interference to radio performance from the display mode or USB devices, and ensuring datarates from common internal storage won't interfere is part of that.
OpenAI will 100% need to start paying royalties. For instance it knows a whole lot of things that are not publicly available and locked away behind science journal paywalls.
Almond milk is usually mostly sugar.
> ...web accessibility is an afterthought (if thought about at all).

Sadly, yes, it is almost never thought about by developers or business stakeholders....But, there are legitimate offerings (such as plenty of html elements and atributes) that exist/can be leveraged. The only way that i ahve been able to get folks on board to leverage such offerings is to say something like: Oh, but it will help with SEO to a degree. And, then, almost immediately, busiess folks want to throw money at adding accessibility elements...Sad really, when folks who need this stuff, and can benefit most from it, don't get thought of.
https://www.freedesktop.org/wiki/Software/xdg-user-dirs/
> that's what an old professor told me

Well then your prof has no idea what (s)he's talking about I'm afraid. XML is just what the spec says on page 1 sentence 1 [1]:

> The Extensible Markup Language (XML) is a subset of SGML that is completely described in this document. Its goal is to enable generic SGML to be served, received, and processed on the Web in the way that is now possible with HTML.

Where "generic SGML" refers to the property of XML being always fully tagged and not needing markup declarations, but still able to make use of those for validation and limited forms of entity expansion. Full SGML OTOH uses markup declarations for tag inference/omission (as in HTML), attribute short form canonicalization (also as in HTML), Wiki syntaxes (as in markdown), stylesheets (as in CSS), and other features such as type safe/injection free templating, processing pipelines/document "views" and as general extension mechanism.

[1]: https://www.w3.org/TR/REC-xml/
> But take a step further back: why should anyone care about what the XDG says in first place?

Because their users are asking them to not pollute the home directory? This isn't bikeshedding config locations without reason, there is a clear motivation for letting users a) specify where data should go and b) separate different types of data.

> It's been my observation that good standards can be adopted broadly and quickly with little controversy or need for advocacy.

The XDG basedir spec has been adopted broadly amongs many organizations and individual devlopers including all major desktop environments. It is not adopted universally yet, but few things are.
I shall refer you to my first post up there!

> the massive risks and manipulation inherent in the ecosystem, making it effectively impossible to "provide full, fair, and truthful disclosure and investor protection"

I don't know for sure, as I don't work for the SEC, but it certainly seems likely that if cryptocurrency-centered securities aren't getting through the registration process, it's likely because cryptocurrency and cryptocurrency asset prices are inherently massively unstable, subject to manipulation by unknown forces uses both fair means (large currency and cryptocurrency hodings) or foul (looking at you tether), and in general it's probably not possible to provide such a disclosure or any real evaluation of risk.

And that's if the players involved are honestly attempting to do that, many/most players in the crypto space seem to be cowboys.

> Isn't just the SEC saying "We don't feel like answering your request. Continue as you see fit, but we can't promise we won't come after you for whatever reason"?

No.

The SEC is saying that these schemes are securities, and you categorically cannot operate unregistered security schemes. The SEC is saying that these things must be registered, and until/unless they are registered they must stop.

This one commissioner is then saying "But that's not fair because we don't see crypto security schemes getting through the securities registration process".

I don't think she's wrong, they probably aren't getting through even if they do apply, but I also don't think the denial is wrong - it seems highly unlikely they can meet the criteria.

And dear god no, we should not be carving out exceptions to the securities laws for crypto-hucksters to get easier registration status without having to meet the same bar for honesty, transparency and investor protection as 'traditional' finance schemes.
Just what I need: Another big social media platform connecting one of my many anonymous pseudonyms to my phone number!
Satire protects you only if you needed the thing imitated to make your point [and you have $$$ for lawyers to argue that]

The example I like (even though Weird Al always obtains permission so doesn't need Free Speech protection) is "Smells Like Nirvana" compared to "Fat".

Smells Like Nirvana is satire. The thing criticised is Nirvana's "Smells Like Teen Spirit", and the wider Grunge phenomenon it exemplifies. Al's song talks about how Kurt's lyrics are mumbled and hard to understand, "It's hard to bargle nawdle zouss / With all these marbles in my mouth", and about how it's too loud so it'll annoy your mom and dad, "We're so loud and incoherent / Boy, this oughta bug your parents". This can't work if Al uses Mariah Carey's "All I Want For Christmas" instead of Teen Spirit.

"Fat" isn't satire. Michael Jackson wasn't obese or even overweight, and his song isn't causing people to eat too much junk food, Al's song is just using the outline structure of Jackson's "Bad" because that fits and his new song is funny. If his lyrics had fitted better to Rick Astley's "Never Gonna Give You Up" that would have been fine.
What exactly does this offer over, say, SolidJS, which also has reactivity without a virtual DOM, and has a much larger community, ecosystem, etc? As do several other frontend frameworks. Does the world really need another one, unless it can offer something substantially different?
"Rad" more than "dope" :)

I've seen a DIY system where the panels are boxed in, and the hot air created behind the panels used for blown air / heat recovery heating.
It suggests they could have, if they were competent to do so. But for all their genius at product-market fit, I don’t think any of these companies have conquered the beast of self-serving bureaucracy.

> I think having an identifiable rationale for layoff choices makes a layoff less shitty to go through.

I don’t know. When I went through one the identifiable rationale was “move jobs to a cheaper country with weaker labor laws and more corruption,” and I think “oops sorry random” might have felt better.
Yep, and on those snippets it looks like a bland pinball with "something" in the middle of those pinball tables.
I don't drink milk (I don't like it), but I do eat meat. But I totally agree that the dairy industry is pretty grim, even here in the UK where we have pretty good animal rights.

Loads of calves die to supply milk, and cows are kept in a near permanent state of either being in milk (and missing their calves) or pregnant.

I really don't mind what anyone eats or drinks - but anyone who claims to be vegetarian 'because of the animals' - but then consumes dairy, is on pretty weak ground.
"Mock tudor" is an abomination. Fake lead-paned windows? Fake beams that are too low, so people bump their heads?

There are some old country pubs with low ceilings and beams; but they're low because back in the day, people were shorter. So you see beams labelled "Duck or grouse". It's mad that they chose to emulate in a moving train a dangerous mis-feature of old pubs.

Phonyness all is phony, to misquote The Zim.
Many places used some kind of vegetable patty long before the invention of modern meat substitutes. They choose to use the modern meat substitutes because people prefer the taste of them.
The develop branch is main + feature branches currently in qa.

> But then, because they're different, you're never really testing the code that you actually deploy.

That's true, and I alluded to it in my comment. It's conceivable that feature-1 and feature-2 are simultaneously in develop, feature-1 gets tested successfully and is merged into main; and then it turns out you needed feature-2 to actually fulfill all requirements. Seems like it'd happen all the time, but in practice, it just doesn't. Probably a combination of unit tests, backend code being written in a static language, and developers, qa, and pms using their head.

> Why would this way of working be helpful?

Having little experience with anything else, it's difficult for me to say. It seems quite flexible: we release individual features or, sometimes, related features that are compounded into a feature branch.

Main essentially never breaks, and it's nice that you can essentially deploy it whenever you want without explicitly packaging a version and testing it. That seems to be the idea behind trunk-based development, too.

But then, develop does break occasionally (i.e. a bug was discovered during testing), and it's nice that this is allowed, as well. Having to revert a feature branch from trunk because a bug was discovered sounds terrible, and also what if you released trunk in the meantime? It sounds to me like it could only work if the feature branches itself are the subject of QA (and then you have a similar problem as testing our develop branch).
TBF, The wifi in the whole of sector C has been awful since Gordon was poking around with the anti mass spectrometer!
If you have a function that fails on a substantial number of inputs, random testing is probably a better idea, as it will find a failure in short expected time. An exhaustive testing harness may waste large amounts of time on a segment of the input space it hits first, if that initial segment is free of bugs.

You can use random testing for exhaustive testing. On an input space of size N, you will cover that space completely in O(NlogN) tests on average, and you will include any single input in O(NlogN) trials with high probability.
Israel should head CIA's intifada warning
Go to Oshkosh some year. You'll see thousands of daughters flying experimental aircraft.

"Experimental" is a legal designation, not an evaluation of an aircraft's safety.
Choosing a backup solution: easy, effective and secure · Bob Swinkels
That's what makes it so awesome when you start recognizing the same username on comments where you subconsciously bother to check the name because it was so interesting
I like this system overall, but this particular aspect seems like a mistake [0] to me. Instead of a simple rule like "use these envars", it has this more complicated logic that must be replicated in all apps supported by all developers. Users would have more agency if they could inform apps of their preferences by simply setting some envars. [1] If this simpler, more user-friendly regime had been in the spec, we would have seen better adoption initially and also two decades later.

[0] of course one shouldn't assume that a totalitarian decision is a mistake, because it's just as likely that the decision-maker has priorities other than "support users"

[1] yes of course users have agency with respect to where XDG is implemented, but the simpler rule would also have given them agency with respect to whether it is implemented
One of the main guys behind Maven Central guy did a thing on this: https://blog.sonatype.com/eu-cyber-resilience-act-good-for-s...
It also sucks too.
Personally I don't get why you wouldn't use JSX for such a tool. If you're building JS apps for production you'll invariably use a bundler like Webpack so transpiling JSX to JS is not an issue, and it makes Markup code in JS so much more readable.
Yeah, it does have significant performance improvements, because diffing the Virtual Dom adds heavily to computation costs if you aren't being extra careful or as the application grows to real-world size, especially in mobile.

No VDom is always faster than having a VDom.

But I do agree with your point 100% that it should tell you right away about it on the README what that means, and the significance behind the claim.
You can’t win. People have different beliefs. Some will tell you, vociferously.
And the variables should not be set if the user/distro wants the default (probably to force developers to handle the default case which is needed for compatibility anyway).
In addition to being a highly volatile source of revenue to the government, you would have to give tax breaks for unrealized capital losses out of fairness; which would introduce a ton of complexity.
Honestly, I posted this because I cannot find any detailed articles about it, and was hoping SOMEONE on HN might have more information they could comment.
Which is completely illegal without permission from the artist they sample.