skysight-inc/HackerNews huggingface dataset:
That’s not the point. If you use SMS (which isn’t encrypted) you’re trusting everybody.

Do you trust no encryption vs whatever Meta/WhatsApp claim to use?
You should give https://github.com/epwalsh/obsidian.nvim a try if you aren't currently. It isn't perfect, but I enjoy writing my notes in neovim more than the Obsidian app, so this works quite nicely.
It is an open secret that criminal groups also pay unscrupulous T-Mobile employees to assist with SIM-swap attacks. I am not sure at what scale this happens, as those instances _should_ be easy to trace and prosecute. But I have seen evidence of criminals reaching out and offering "side work" on the T-mobile subreddits, as an example.

In those cases, hardware keys for employees would not help.
I see, just wanted to help if you weren't aware of the shortcut. It took me a while to discover it on Firefox because <Alt-s> is used to toggle fingerprint resistance. That's why I remapped it to '<Ctrl-.>' in my setup.

// privacy.resistFingerprinting breaks alt keybindings
api.map('<Ctrl-.>', '<Alt-s>');
api.unmap('<Alt-s>');

SurfingKeys remembers disabled websites so it can be a time-saver.
What should you use ChatGPT for?
> like having one 2fa verification each time you use a credential would work

I'm interested in the technical idea here. You have a set of credentials encrypted with AES. So each vault item is encrypted with a symmetric key. How would you build a system to generate those keys using a rotating 2FA that isn't reversible by an attacker that can watch the entire process and can fake the timestamp or other elements on the computing device as needed?

I can see that you have code that enforces 2FA on each vault access, but that code is run on the local system, so it can be trivially bypassed by an attacker with root.
There's also good old i3, which has vim-inspired key maps by default iirc
Why isn't "write documentation" in that list?

I mean sweet Jesus, it's 2023. Write some fucking documentation. There are also these things called comments that you can put in your code so you can explain why you're doing what you're doing.

The code shows what, the comments show why. And it's the why that's important.

Anyway, the more code you read, the better you get at figuring out what code does. But instead of reading the code try to understand the intention behind the code. Think of it as you're reading the mind of the person writing it. Are they lazy? Bad? Overly complicated? Weird structure? What do they always do? What are they bad at? How do they approach what they're doing?

There are developers who are too clever by half, and you can see it in the code; they do something in a complicated way instead of doing it the simple way. They do things that look interesting but which have no real benefit.
Agreed. But I also think that "simple to implement," "simple to debug," and "simple to test" are different metrics -- and that one has to choose which one to optimize for. This is independent from assessment of "simple" varying with intuition -- "simple" alone isn't a coherent concept.
Yes thank you, I did try that. I can enable it and turn it from 1 to 4 but I wonder if it's because Chrome and Edge are both using my Intel GPU by default.
take longer; don't relent
I'm guessing that lone developer projects have a higher variance as they are a direct reflection of the skill of the single developer. Team projects trend to the average.

If you have a very good developer doing a lone project it's probably going to be good. Because they have full control. But I doubt an unskilled developer will have a very good lone project. You want them on a team environment for the structure and mentorship.

Finally, it's worth mixing your developers as their combined effort is worth more in the macro level rather than the micro level.
Or hackers going into politics like Beto O'Rourke [0] aka Psychedelic Warlord, (former?) member of Cult of the Dead Cow [1].

[0] https://en.wikipedia.org/wiki/Beto_O%27Rourke
[1] https://en.wikipedia.org/wiki/Cult_of_the_Dead_Cow
And I'll admit that I'm exhausted by eco-nostalgia and eco-doomerism, which led me to comment dismissively. I understand how that can be off-putting and unpersuasive.
The 21st century in a nutshell: too long; didn't read.
From the wiki article, "Phoneutria venom is potentially medically significant to humans".

I feel like that sentence gives very little actual information while giving readers' imaginations the opportunity to run amok.
Orgmode does let you search invisible text, it even expands/collapses headlines/lists etc... automatically as you search.
I love the app “seek” by iNaturalist for finding out more about bugs and plants and such.

https://www.inaturalist.org/pages/seek_app
Rich Hickey's Simple Made Easy presentation is a fantastic introduction to this philosophy: https://www.infoq.com/presentations/Simple-Made-Easy/

Simple isn't the same as easy, and it isn't always obvious where the complexity is. One should beware of "simple" solutions that either hide the complexity, or shove it someplace else. The skill is to identify and minimize unnecessary complexity, which is another way of phrasing "Do The Simplest Thing That Can Possibly Work".
Good luck buying it outright - and even if you do, new cars are all delivered with a bunch of tech that takes away your control and it gets worse every year.
And some people can be with others and still feel lonely.
>People value long-lasting, quality devices

But only 3 years of software support
The bar isnt even low in this industry, its in the damn basement...
In Vietnam ROE were tight enough that the BVR sparrow couldn't be fired until within sight leading to dogfights.
Jobs also said he'd have to whittle his fingers down to use the small Samsung tablet, knowing that Apple was working on the iPad Mini. He would say anything if he thought it would help shift more units.
To add to that:

6. Promising that every car has all the hardware needed for FSD in 2016. Then promising to update hardware as needed to achieve FSD. And then in 2023, saying we can't upgrade hardware anymore as it's too expensive. Anyone that has current FSD Beta knows that this thing will never be fully autonomous.

7. Tesla legal team stating to CA regulators that FSD is a Level 2 system and even when fully realized will remain a level 2 system.

8. The 2016 video stating that the driver is only there for legal purposes, overselling the capabilities, and then Tesla fans calling out frustrated consumers for being confused and assuming that the car can actually drive itself safely.

9. Continuously moving the goal post. FSD has been a year away since 2016 and every single year Elon has publicly stated "I'm confident we'll see it next year." At what point is enough, enough?
And my tractor tole' me I don't matter, ever since John Deere told me to Steer clear, from them old repairs. Used to be, you could fix'em for free, now it's all John Deere IP.

Edit: And Monsanto, don't you know, told me ya'best not go, usin' your own seeds.

(no joke folks, I think there's some real potential for a satire country song here, I'm thinkin' by a Jonathan Coulton type singer)
Benchmarks of JavaScript Package Managers
For the newer GPUs nvidia's open kernel modules have created less hair pulling for me and are much more comparable to amdgpu than the traditional modules. Recently I was reading Nouveau is working on re-clocking support on newer GPUs via GSP support which is just starting to be upstreamed, that'll be even nicer if it materializes.
I guess it depends on what to prioritize. In a world of high speed internet, I prioritize fast onboarding time and common developer environments with minimal friction. But yes, it does add a network requirement. However VSCode remote dev works well even with a poor connection ime (coffee shop wifi).

I guess it's less important when working in mostly hermetic languages/runtimes like Java. But for things with native dependencies or lots of required tooling where local setup can be a large pain, it really does help a lot.

For the dev it becomes: Install VSCode, request VM, done.
> Propaganda, an influential book written by Edward L. Bernays in 1928, incorporated the literature from social science and psychological manipulation into an examination of the techniques of public communication.

> ..Bernays' thesis is that "invisible" people who create knowledge and propaganda rule over the masses, with a monopoly on the power to shape thoughts, values, and citizen response. "Engineering consent" of the masses would be vital for the survival of democracy.

> ..He asserts that the emotional response inherently present in propaganda limits the audience's choices by creating a binary mentality, which can result in quicker, more enthused responses.

> ..Public relations scholar Curt Olsen argues that the public largely accepted Bernays' "sunny" view of propaganda, an acceptance eroded by fascism in the World War II era. Olsen also argues that Bernays's skill with language allowed terms such as "education" to subtly replace darker concepts such as "indoctrination."

> ..Writers such as Marvin Olasky justify Bernays as killing democracy in order to save it. In this way, the presence of an elite, faceless persuasion constituted the only plausible way to prevent authoritarian control.

> His techniques are now staples for public image creation and political campaigns.
> Then they decided they were going to shoot themselves in the foot and drive off a cliff. Unbelievably frustrating.

Wait I missed this, what did Signal do?
> But there's still a large number of sites and services that rely on SMS.

I avoid using my actual phone number whenever possible and use a Google Voice number. Hacking Google Voice would require hacking my actual Google account instead of just tricking someone at the phone company.
It seems you've been posting every two minutes for too long to have noticed how wrong you are. Calm down with the nonsense labels and conspiracy foolishness, maybe take a break from posting to touch nature.

The State of California recently revoked the rights of quite a few smaller jurisdictions to set their own zoning laws because they abdicated that right by refusing to set zoning laws that allowed for new development. So...

Voters at every level pretty consistently vote for more development, seeing clearly that development beats homeless encampments, and that a rising tide lifts all boats. The obstructionist lawsuits come from sub-jurisdictional groups like the residents of one particular building in this case. Federalism doesn't apply here any more than "socialism" does.

Appeals to imaginary international conspiracies aside, this is pretty simple: in many areas we have, and will continue to have, more people who need places to live than we have places for them to live. Either we build more places, or we deal with the consequences of failure. People abusing the legal system to stick their fingers in their ears until the problem moves a few blocks or a city or a state away are running out of time, because the tricks are seen clearly.

Every selfish NIMBY is saying much the same thing: any and all development that led to the point where I could move here and buy my place is well and good and the natural order of things, and every bit of construction that happens after I close on my property is horrible and evil and will irreparably damage the character of the neighborhood. Of course, anyone who has lived in the area just a few years more could say the same thing about the freshly-minted NIMBY, all the way back to those who lived here 500 years ago.

It's obvious nonsense.
In both scenarios there are laws encouraging these outcomes. Minimum lot sizes and CAFE standards, respectively, lead to bigger cars and houses. There are also small utility trucks and electric vehicles in other countries, but they’re unfortunately illegal in the land of the free, ostensibly for crash test performance opposite the giant trucks that are considered safe. Indeed, distorted markets are worse.
Hey, any plans to let us know about pricing? Thanks!
And it’s also possible to experience loneliness while being surrounded by people.
> When you finance a car, the vehicle becomes collateral for a loan, but it belongs to you.

The title stays with the lender until all the payments are made per the loan agreement. I would not say the vehicle legally belongs to a borrower until they have possession of the title.

> The reason we have laws is so that people have recourse to principle, whereas when you implement something like this in hardware (a car), it's dystopian vigilantism.

The legal system is costly to use. Reducing the costs to repossess collateral would reduce borrowing costs, and ultimately help borrowers with lower borrowing costs because there is less expense towards repossession.
Encrypted backup to two cloud services (eg, AWS Gacier) is the best option in my view. Copy the backup software binary (that will run on any X86 hardware). Test every year. The encryption password must be written down and stored.

Archival at home is time consuming and expensive. If you absolutely must, consider hot storage, say, a ZFS array with ECC RAM, that runs periodic scrubs. You have to attend to the storage system, and migrate the pool every 5-10 years to new technology. It’s a pain, frankly.
When I read the parent comment, I thought “Am I on Reddit?”.

HN used to bury Reddit-like comments a while back, but it seems the Reddit influence is becoming more and more accepted on HN these days, as I’m starting to see them more at the top vs. the bottom of threads.
One of the KEMS they've elected to (McEliece) has been around since the 70's, and has arguably been studied more than the others. If you're not quite sure about lattices, I've heard it called the "conservative choice" for a PQ KEM.
Wow, had no idea about this. Hopefully they can just automatically interpret .values as .to_numpy or else a ton of old code is going to break.
I'll withold judgement until I see CIO.com's survey of CIOs on this matter.
https://support.apple.com/guide/messages/change-imessage-set...

> Send read receipts

> Turn on read receipts so that people who send you messages see when you’ve read them.

> You can also send read receipts for a conversation only. The per-conversation setting overrides the global setting.

---

Note that some people don't enable this. One member of my family has read receipts off and I don't see anything on that one. Another member has them on and I can see 'delivered' and 'read' show up.

Many people who are security conscious have that setting off by default because, well, security conscious.

I would contend that not having read receipts as an option is important functionality for some.
I've wrestled with this since I graduated in '08 with an English degree from a shit school and far, far too much debt. Still, you can't put a price on what I learned. My thinking changed fundamentally. The world opened up. It's a rich field, connected to history, politics, philosophy, and more. I had wonderful professors and the epiphanies I had in their classes I will cherish forever. Life without art is not really life.

After I graduated, I was in so much debt I became suicidally depressed. I thought my future was over. (I ended up learning to program and got a job doing that, instead.) The outlook that reduces education in the abstract to its ROI is bleak; the refusal to descend into the real world and consider the economics of education is naive and useless.

I've given a lot of thought about what I'll advise my son to do, assuming he listens to me. It's true that he could always read any books in his free time, but that would leave out the discussion, writing, and instruction, which are indispensable. I do NOT want him going into a horrible amount of debt for it, or miss out on a career that will actually support him. But I want so much for him to have something like the mental and cultural enrichment I got to have, whose effects are hard to even explain because they've touched every part of my life. I don't have an answer yet.
It's equally frustrating for iPhone users. iMessage sends and receives and full, beautiful quality. Meanwhile an Android user will send a photo and it comes through with about 10 pixels total. Don't even bother with video it's not worth trying, impossible to watch.
At the very least, I can confirm that ProtonMail and Apple's Mail clients let you search through the message contents of encrypted email. I'm sure there's a performance hit, and admins wouldn't be able to search through the encrypted emails of their Workspace users, but that's a much more reasonable tradeoff.
Simple is something that either can't be reduced further without changing the output (ideal, simplest), or it is very hard to do so (real world).
Not sure if they're still available, but I have a handful of "Badgy's" along the same lines:

https://www.tindie.com/products/sqfmi/badgy-iot-badge/
because we discovered that LLMs are capable of emergent understanding and reasoning.
Heads up that US mobile is an MVNO operating on T-Mobile and Verizon, so how good their 2FA system is irrelevant if hackers get deep enough into tmobile.
Why is it weird that people expect the default preinstalled message app to work?

Especially when it is from Apple, famous for it just works, and being the largest company on the planet.
So that leaves Verizon, AT&T, and Dish networks[1]

And all of them have supposedly been compromised, but T-Mobile is the most compromised.

> While it is true that each of these cybercriminal actors periodically offer SIM-swapping services for other mobile phone providers — including AT&T, Verizon and smaller carriers — those solicitations appear far less frequently in these group chats than T-Mobile swap offers. And when those offers do materialize, they are considerably more expensive.

So the choice is, which one is the least compromised, unfortunately

1. https://en.wikipedia.org/wiki/List_of_United_States_wireless...

technically there are a bunch other small carriers that run their own equipment (not resellers), more than I thought there were:
https://en.wikipedia.org/wiki/List_of_United_States_wireless...
I'm not saying that everyone should go up against the system. Simply choosing not to play at all is an option, up to and including finding another place to work.

When I see this line trotted out, it's nearly always referring to someone being in a group of people that are doing things that are widely held to be unacceptable. I see that saying as an attempt at trying to have it both ways -- to continue to engage in unacceptable things without having to take responsibility for doing so.
Truly; there is only the experiences of one half of humanity worth studying.
There are dozens of us! :)
A year or so back there was an HN discussion about a service that offered an all-in-one messaging app for most of the major services (including iMessage), but for the life of me I'm having trouble remembering their name. As I recall, they were using a pile of older iPhones that could still be jailbroken and a custom shim to get messages from the phone to their server. Clever, though that method would eventually hit a wall if jailbreaking stopped being feasible.
How do you define "uselessness?"

What's the purpose of life if not striving for joy? When the dust of war has cleared and the labor of humans has been made obsolete, shouldn't we be free to do the things that we enjoy?
They will pay the fines and keep doing business happily and another "we're sorry, it won't happen again..." The joys of being too big to fail.
Anecdotally, the API instability of those R packages is what stopped me using them. Try running any tidyverse code after more than 6 months, it's almost guaranteed to be broken.

If I can't rely on them in my packages or long-running projects, then I don't see the point in learning them to use in interactive work.
OT: Pet peeve 'refactor' is not synonymous with arbitrary (or even deduplicating) change to source code. It's to consciously choose a (different) factor to separate out and allow seams to form around. People who use 'refactor' too generically are often focused more on the form of solution than the problems themselves.
What should not have happened is the Sprint T-Mobile merger. Like when Wells Fargo bought the failed bank (forget which one) after 2008, Wells Fargo went from a reliable company to all kinds of suspect things going on with our account. So far T-Mobile has been fine for us but we are seeing some marketing things floating around suggesting the Sprint influence might be having a negative impact on T-Mobile. I miss John Legere as the CEO, he had it going on.
I'm actually honestly surprised how FEW errors McDonalds has with those dual order drive throughs feeding into a single line.
Brazil Suspends Beef Exports to China After Finding Mad-Cow Disease
Care to elucidate?
https://archive.is/uijJp
https://archive.ph/CD6JU
Any user interface will be misused, so "click to repo" will mostly be used accidentally in error. The vast majority of cars are not repo'd and as such the vast majority of clicks on the "repo" button will be in error. The customer service rep will be trying to click "x" to close some other website's popups or they thought they were clicking "reset" but that's right next to "repo". Or the new hire is told to click "repo" on every loan with no payment last month; I made no payment last month because I made my final payment two months ago but it hasn't closed out the process.

There will be a few high profile stories of cars driving off with newborn babies strapped in the car seat, then the tech will be banned.

Weirdly enough by patenting the business method, this makes every car mfgr OTHER than Ford much more appealing, so what we really is patent trolls as a service patenting really bad ideas to make sure nobody can implement them. I don't think Ford's new invention was intended to get me to buy a Toyota. Patenting bad ideas as a weapon is an interesting concept. Other than the obvious fraud issue, what's to stop me from filing a REALLY bad idea patent, then selling the stock short, then drumming up some PR, then closing out my short position at profit? At some point this is inevitable as "the internet" along with "the stock market" and everything else becomes more bot than human.
My #1 wish is for this branch to become main (WAL2 + BEGIN CONCURRENT)

https://www2.sqlite.org/src/timeline?r=begin-concurrent-pnu-...
Maybe it's just me, but I no longer trust news from Krebs ever since he got the Ubiquiti story so utterly wrong.
> This is only slightly closer to a real-world implementation than a patent for asteroid mining

I think we actually have a better idea of how to mine an asteroid.
You assume that regulation can just make security magically happen.

I see no reason to assume that premise to be correct in practice. It's not like the US Government hasn't been breached countless times or had Supreme Court opinions leaked; and it's not like corporations that really tried and should be examples of best practice haven't also been breached. Also, what law can prevent insider attacks? There's already plenty of laws making that illegal.

There's no law that just "makes security happen" - and, actually, I would be fundamentally opposed to such a law because it turns security into a simple matter of compliance. "We're SCA compliant, therefore we're good!" And technology changes way too much - a security law that was written 10 years ago would be a disaster today. See South Korea's Banking Security laws for an example - they basically enshrined ActiveX in their law with roll-your-own-crypto to this day. And we know now that was a trash idea but nobody wants to take the blame for upsetting the security standards. https://palant.info/2023/01/02/south-koreas-online-security-... and https://www.nytimes.com/2022/07/08/business/korea-internet-e...