skysight-inc/HackerNews huggingface dataset:
> even though FIDO2/WebAuthn/TOTP has been a thing for years?

The problem is, as always, users. When the EU recently adopted PSD2, banks were forced to implement 2FA for online banking... and there was a ton of backlash. Anything more complex than "enter one-time code from SMS/e-mail" will lead to a lot of customer support issues.

With SMS based 2FA, you as a service provider only have to deal with people who lost/damaged their phones and need access while they get their new phone set up or with 2FA token messages being stuck in spam filters. With anything else, you as a service provider will have a lot more scenarios to cover in support: people unable to set up TOTP apps, people travelling who need access but forgot their Yubikey, an employee took their yubikey home to work from there and fell sick but now no one can log in any more from the office (because the yubikey is with the sick employee), the yubikey got damaged, the computer is in service so no webauthn possible, the users originally had an iPhone compatible Yubikey but now have an Android device or vice versa and now need new keys... and you will have scammers acting like one of the aforementioned scenarios has just happened. Oh, and at least TOTP usually has some sort of backup codes, but people regularly lose the files or, in very random edge cases, a regular TOTP code is the same as a recovery code so the system strikes the recovery code as having been used and people get confused as a result...

The easiest of the bunch is TOTP because the setup code can be backed up, but not all employees want to add corporate credentials on a personal phone, and because it's completely stateless (similar to classic JWT bearer tokens) it's impossible to keep track of the 2FA credentials and who has them, meaning a ton of work when employees depart.

Hell even the really large players don't get 2FA right. The best example is Amazon AWS: as a root account you should have 2FA enabled. But if you want a yubikey, you can only add one, with no fallback for a TOTP device - lose your yubikey and you're at the mercy of AWS support.

Identity and access management is insanely hard.

That, however, doesn't mean booking.com isn't a shitshow in itself. I have an account with them that should have everything saved - my name, address, credit card information and the name of my s/o - and yet, for every booking I place I have to enter all the information from scratch. How they haven't managed to implement that in years is inexcusable.
That was in 2020 though, be great to have an updated answer.
This is very interesting - did you read this in a book or a blog or something? I’d love to add it to my list.
> The hope is that the person installing the software doesn't actually read and uncheck the box

Yes. Because you have the "don't care" group being the important group. The users are split into a small group being positive (The would-opt-ins) and a small group being negative (the people arguing it must be opt in) and a large group who don't care.

The central "don't care" group is so large that the data is almost useless without them - i.e. you could just as well not have the system at all if you were going to do a full opt-in. So the unchecked box alternative really isn't an alternative.
>> many others are planning our retirements accounts around assumptions of 8-9% growth.

Another aspect of retirement should be figuring out how to lower the cost of living. Unfortunately the notion that housing should be a sort of investment goes directly against that. It can't be affordable and also be a good investment.
>people who are convinced they could never learn it no matter what

Do these people actually believe that it would be impossible for them, or merely that they would give up before success. i.e. do they think that they would not be able to learn the language in five years if they were offered a billion dollars?

Because personally I doubt I will ever learn a second language, but I'm sure I could given enough time and the right incentive.
The third parameter, I would argue, is a bit wired to begin with. If you need the entire collection, then you are probably doing more than map(), and if you really need it, then you could probably just close over it. But with that somewhat wired third parameter removed, you are right, that is something you could easily run into in a typed language.
There is a relevant article on APNews, and ~~it's~~ it was on their front page.

https://apnews.com/

https://imgur.com/a/Li9oDSO

An earlier article from APNews was submitted, but was likely missed due to timing.

https://news.ycombinator.com/item?id=34770772

Front Page Link (2023-02-13): https://apnews.com/article/evacuations-west-virginia-pennsyl...

Reddit Link (2023-02-08): https://apnews.com/article/rail-accidents-evacuations-ohio-h...

NPR Article (2023-02-05): https://www.npr.org/2023/02/05/1154718234/mechanical-defect-...

First Article (2023-02-04): https://apnews.com/article/pennsylvania-ohio-evacuations-fir...

See related discussions:

https://news.ycombinator.com/item?id=34758525 1 day ago, 128 comments "Health concerns mounting as animals become sick after train derailment"

Source: https://www.wkbn.com/news/local-news/east-palestine-train-de...
If it happened in Venezuela would it be a failure of communism? If it happened in Iran would it be a failure of theocracy? Of f-ing course not.

When you start talking about big organizations with tons of legacy rule-making and policy there tends to be a lot of misalignment of incentives that pops up over the years. It doesn't really matter the societal structure.

I'm betting this is a classic "when everyone is responsible nobody is" type of failure you tend to get in organizations that have double and triple redundant rules to prevent failure but no realistic way to do your job without shirking some of your responsibility.
That's not the problem they talking about. It would be useful in some cases (and I'd be surprised if they haven't already considered experiments along those lines) but what you have on GitHub doesn't easily tell them about your build or runtime environments.

Here's a long list of questions Russ Cox was interested in - notice how many of them would really want something like “what is your CI configuration?”, and consider that while they could sample GitHub Actions configuration that doesn't tell them anything about the much more varied set of projects who don't use that service:

https://research.swtch.com/telemetry-uses
HeyCLI just launched – Command line in natural language
You don't need to retain commands in your head anymore. Just type what you want in natural language using the word hey <what_you_want_here>
Eg, hey make a dockerfile for this dir using the ubuntu image
The military was happy to reveal the providence of the so called spy balloon.
Not sure what the reason for the current course of action is, but if they're shooting stuff down, then perhaps it's not that banal.

Even it ends up being a pair of teenagers pulling off an elaborate hoax.
Why Has Streaming Become So Complicated?
My biggest worry with such a solution is a program going crazy and blowing up my bill at the end of the month.

Less a concern for enterprise projects where you can setup cost monitoring, but terrifying for hobby projects running on credits. I can't find the article, but I remember reading something similar happening to someone using GCP not very long ago.
You can make new functions while keeping the old functions, but making them print a warning that they are obsolete now.
I feel similarly to this, and often find when working on a TypeScript codebase that I get "distracted" by spending more time trying to get my types just perfect.
In Judo you don’t take a beating, magically absorb all the force and then release it all in a gigantic blow that sends the opponent flying towards the moon, shattering it on impact, like in an anime.

The stuff you describe doesn’t have anything to do with the sport. It’s insane how people twist things to make them fit their ideas.
The bigger question is why do they suddenly need this to such a degree that they need to do a backhand tactic to get the data? Most other programming languages have no such data and have survived and thrived for years, decades even before Go existed.
I think a lot of users don't actually interact directly with the CLI. Think IDEs, editors, CI/CD. You'd be cutting them out, again skewing the stats heavily.
Some do think that. Often an impression formed from no obvious progress after a few weeks.
> but libc needs to keep the same API

The "needs to" is debatable. Compared to the C++ stdlib, the C stdlib is so small that adding a modernized and incompatible "v2" next to "v1" is realistic. The effort could start as a 3rd party implementation similar to MUSL.

The old headers with the old APIs would still exist for "legacy code" but would generate "deprecated" warnings.

Once that new "3rd party stdlib" has proven itself in the real world, the C commitee might consider it for inclusion in the standard.
Is that 8-9% growth before or after inflation? Because if it's before, that's going to end up being only 3-4% at best.

More and more I think people need to plan for retirement around expense reduction versus capital growth.
And so we have "object" being the most generic and useless way to refer to something.
Pig Butchering Scams Are Evolving Fast
This strikes me as no different from the GPL or any other license (api compatibility, how do you detect infringement, etc.) along with a tasty smattering of misrepresentation ("poison pill", "Your entire codebase needs to be a quine that can fit in a single HTTP request")
Having taken a few rides on America’s rails, I don’t think it needs any sabotage. It’s collapsing on its own.
Agreed - multi-core processing is now ubiquitous, from a Raspberry Pi on down, and negative affinity concepts ought to be in every junior engineer's toolkit (NOT that they should be cargo-culted, but understood and deployed where it is beneficial).
you just pwned yourself Sir: AI was programmed and trained by a lot of people
Is it possible to create a streaming endpoint that returns real-time transcriptions?
"but I have many times talked with people who hope to learn French to fluency in six months, and people who are convinced they could never learn it no matter what."

It is a question of intensity. If all you do is speaking french and learning grammar and are surrounded by french people, you could reach some level of fluency in 6 months. But not while learning it on the side (unless you are very talented).
Strudel – live coding patterns in JavaScript
The same argument could be made by many other entities include government bureaucrats and LEOs. Justifying data collection with "it makes my job easier" is a very slippery slope IMO.
What a gross attitude. At its best , life means you get to do hard work now and see it benefit others later. Eg raise your kids and then enjoy their kids when you are old.

This is incredibly meaningful and if someone can get their mind working this way, they appreciate every minute of life.
Abusive DMCA takedowns are unfortunately extremely easy, very time consuming to report, and seemingly very rarely have any action taken against the person who falsely claimed. Not excusing Namecheap here, what they did was totally shit.

Heroku did the same thing to me for same reason - completely shut down my entire account with several revenue generating websites with zero notice.
bing.com/new doesn’t have a length restriction, and the Edge sidebar version can do it like this.

Disclosure: I work at MSFT but not on Bing
There have been engine reimplementations without decompilation or source releases - OpenMW being perhaps the most complex example.

I'm also not sure why you think remakes are that different from cover bands - neither are a 100% identical copy.
And then use your lack of not wanting to prioritize free work for corporate daddy as evidence that the project has stalled and a "community" fork is necessary.
Fuck NameCheap. I have no sympathy towards them after they decided to kill the service for my account, just because I happened to be born in Russia, without even refunding.

Ironically, after all that high morals grandstanding, they are still sending me notification emails "reminding to prolong a yearly subscription". Like, WTF.
I think the message is getting garbled. The person doing a startup is in their 30s and wasn't fired. The next response was someone offering assurance that even 40 isn't too late in response to their concern that it was "now or never".

I don't think we're advising any particular person, we're just talking about the potential for a dev to do a startup at any point in their life. Obviously if someone is going to attempt a startup they should know their own situation which includes knowing you have enough money and the inclination to go into business for yourself. Whether the 10% would be higher or lower if everyone did it we can't really know. A lot of people that have great ideas and can execute them well probably never attempt to go out on their own, same for the opposite.
Stan McChrystal on Leading Like a Gardener
Pygame – Community Edition
Is this similar too Java/Vaadin, that also allows calling of backend database repos and the like from the frontend ?
It looks really impressive, seems like it's largely oriented towards PCBs though?

Anyone have experience using it for woodworking modeling? Is there a better tool out there for that? I've been using SketchUp, which is "only ok": The modeling for parts is good, but setting it up for spitting out a cut list kind of sucks. Plus, it's like $300/year to buy the version that does cutlists, the web version will not. I use tinkercad for modeling 3d prints and mostly like it, it's kind of klunky, but easy for simpleish models.

I'll probably donate something to KiCAD, it'd be a no brainer to donate $300 instead of buying a year of SketchUp, but "buying" SketchUp for $300 for a year for something I'm going to use 3-5 times in the year is kind of a hard sell.

Been meaning to look at FreeCAD and SolveSpace.

Any recommendations for woodworking?
From now on any anti-telemetry comments will be replaced with "farts farts farts".

Seriously, though, I think this kerfuffle pretty much cements Rust as the go-to native-compiled network infrastructure language for future projects.
>This feels like early days of COVID, when common sense evaporated like spit on a hot griddle and the Narrative became the goal of itself.

What is the narrative obfuscating?
This mostly just left me with a greater appreciation for the seamlessness of the original rabbit-duck illusion.
Google isn't particularly well known for caring about the laws related to privacy.

Besides, opt out via env var is a broken idea. It forces me to go through all sorts of dockerfiles, ci config, dev machine scripts, etc to make sure its set. Not to mention the ongoing maintenance of keeping it that way. Id rather just use the go-with-at-least-some-minimal-respect fork and write scripts to verify that's the base docker image, installed golang, etc. It actually seems easier to do that than verify every environment that runs golang has that env var set.
Google getting their playbook from the VScode and .NET teams I see.

https://code.visualstudio.com/docs/getstarted/telemetry

https://stackoverflow.com/questions/64570113/how-do-i-stop-n...

I think it's pretty obvious that opt out telemetry rubs most people the wrong way.
I'm surprised they'd bother actually planting something ahead of time.
Call me cynical but that explains why the media suddenly seems to care now but didn't seem to care earlier when it was a "developing story" they could have slung more eyeball grabbing ($$) fear porn into.

People on the parts of the internet HN stays far away from were sharing pictures of the crash and fireball for a few days before anyone gave a crap. Then someone arrests a reporter and suddenly the media has a bone to pick.
I mean phenomenon was pretty generic. Though I suppose they could get childish and start calling them "things" or "stuff" like small children do.

Maybe the military is about to degenerate into Munro's limit of 1000 basic words to describe everything.
I think this is going to be/already is a crowded space. SaaS companies are feeling the burn of layoffs due to per-seat pricing, so metered billing seems like a good alternative. Unfortunately, as a SaaS consumer, I despise it, as it's meant to be obtuse and hard to estimate, plus I have yet to see any SaaS/IaaS offer real spend controls like stopping the service.
Sounds like WW3 planning. Great.
There is one way to be both without causing disaster - defeat the devil of depreciation.

If you "invest" in your home/property by making it more durable and better you can have it go up in value and down in costs without needing infinite appreciation of land and structure.

For example, if you can spend $20k (random amount) and forever cut your heating bill in half, that's an investment that will continue to pay dividends "forever".
Conspiracies are a part of life and history. It pays to keep an open and curious mind.
Do these accidents happen regularly in capitalist countries such as Sweden, Norway and Germany? If not then perhaps the problem is not capitalism but America's regulatory system.
Are you saying that package mgmt solution should not use network to download actual packages?
IMO this is all a PR exercise to build momentum against China and urge the US to begin some kind of trade and/or cold war, or even worse, military action around Taiwan.

A week or so ahead of all this a US general was saber rattling[1] about war with China, it just seems convenient that in close succession we have this balloon crisis.

I just don't buy any of it. I've been lied to by governments so many times it's hard not to see anything as a big propaganda campaign now.

[1] https://www.theguardian.com/world/2023/feb/02/us-general-gut...
> The solution in these scenarios is to simply ask the user, with no default, whether they want telemetry to be enabled or disabled.

And this is the way the Debian installer asks for participation in the Debian Popularity Contest. Which is the ethical (and legal) way.
The fork is created out of thin air, and maintained invisibly, for free?
I think it only makes sense in a specific environment/context. And then you can also have a meaningful interpretation of "orient".

It seems many people want to take these sort of decision making frame works to new contexts or generalize them to a point they no longer make sense to market them.
This is the interesting thing about the current situation. A tinfoil hat seems appropriate regardless of the direction you point your tinfoilery.

I think the truth is far more likely to involve the government keeping secrets than aliens, but in both cases, something is up.
After Earthquakes, Turkey Makes More Arrests Connected to Collapsed Buildings
What’s the alternative? Pensions? If your retirement is dependent on a pension, and the pension goes belly up, then you’re left with a fraction of what you planned for (since PGBC doesn’t cover it all)
> for every booking I place I have to enter all the information from scratch.

Sounds like an issue with you or your account. I never have to enter my information and bookings go usually pretty smoothly if you ignore the dozens of dark patterns. I just tried and it takes about 7 taps from list until Pay button (my CC is saved) on my iPhone app. Technically I didn’t even have to scroll.
The Weight Loss Scientist: You've Been Lied to About Calories, Giles Yeo
>But, it's not implausible that some future model will simply have a superhuman learning rate and a superhuman ability to distinguish "right" from "wrong" - this paragraph will look downright prophetic then.

There is already a paper for that:
https://arxiv.org/abs/2210.11610

Large Language Models Can Self-Improve

>Large Language Models (LLMs) have achieved excellent performances in various tasks. However, fine-tuning an LLM requires extensive supervision. Human, on the other hand, may improve their reasoning abilities by self-thinking without external inputs. In this work, we demonstrate that an LLM is also capable of self-improving with only unlabeled datasets. We use a pre-trained LLM to generate "high-confidence" rationale-augmented answers for unlabeled questions using Chain-of-Thought prompting and self-consistency, and fine-tune the LLM using those self-generated solutions as target outputs. We show that our approach improves the general reasoning ability of a 540B-parameter LLM (74.4%->82.1% on GSM8K, 78.2%->83.0% on DROP, 90.0%->94.4% on OpenBookQA, and 63.4%->67.9% on ANLI-A3) and achieves state-of-the-art-level performance, without any ground truth label. We conduct ablation studies and show that fine-tuning on reasoning is critical for self-improvement.
Same as how cumulative effects and exponential are unintuitive.
Philippine Coast Guard says Chinese ship aimed laser at one of its vessels
Yep. You can slap a logo on there pretty easily.
At THOR, we believe the future is going to be dominated by big, sturdy hammers and bashing of enemy heads in. Now please would you raise your head?
Another example of people not taking into account the full life cycle of the products they purchase. Vinyl chloride was one of the main toxic chemicals dumped in this derailment and it is used to make PVC. You might want to think twice about using vinyl siding, windows, flooring, etc..
This is fair criticism, and I accept being called a Luddite, but I stand by the idea that many of us just terribly underestimate the implications of having not-very-intelligent, inscrutable bullshit generators running our lives.

It is exactly as terrifying as the idea of hyper-intelligent machines running our lives.

Perhaps at this turning point in time we might see philosophy and meta-discussion flourish in the nascent science of software engineering, to understand what exactly are we trying to achieve out of artificial computation, and what are the long term societal effects of this pursuit.
yes, the US played a role, but so did germany, where biontech is based. That is why it's not accurate to say "the EU is so technologically backward and anti-science", just like you couldn't say the same about the US.
I will do that. Thanks for you suggestions.
Not sure why you are trying to move the goalposts. Look where our discussion started.

In your more recent reply above you cherry-picked the features of both wars in a way that's supposed to make your argument look valid. You ignored facts that contradict it.

I don't think you are arguing in good faith and are prepared to change your position. You seem to model Russia as "the enemy" that does everything bad. That's fine by me.
A trio of new intrusions leaves America’s leaders grasping for explanations
And it'll be easy too since vaultwarden implements the easy bits but the real value is the high-quality clients on every platform which aren't OSS.

Can't be worse than LastPass tho.
Because it doesn't affect random Joe on the street in his daily life, nor do other nationwide topics (think market economy, wars, natural disasters on the other side of the planet).
Kicad is oriented toward PCB and PCB only.
> This study does not contemplate shallow cloning or performance.

Hmm?

> cloneJSON is very slow and can’t do much. Please avoid it.

I always thought that javascript is fast at JSON parsing. Atleast the benchmark shows nice results: https://www.measurethat.net/Benchmarks/Show/18541/0/jsonstri...
Go Test and Parallelism
> if you don't modify the code, you don't have to redistribute the source code.

As with the GPL it should be noted that by default linking to [A]GPL code (e.g. by installing it with a package manager) constitute a modification.

So unless the [A]GPL code includes a linking exception your code must be [A]GPL if there is anything [A]GPL in you node_modules folder.