skysight-inc/HackerNews huggingface dataset:
For those using firefox there is tridactyl available as others have commented as well. They've gone a step further introducing native messaging [1][2] which opens up an endless ways of interacting with the underlying OS which makes implementing all sorts of useful day-to-day functionality such as personal automation a joyful breeze.

For example, saving the current page in a local file can be as easy as:
tri.excmds.exclaim_quiet ('echo "' + document.location.href + '"' > $HOME/notes')

Sky is the limit given that you can interface with any page with JS and then pipe and process the output with any system utility or system context.

A simple example for demonstration would be copying the contents of the body tag, piping them to a readability[3] util and have the output saved to a local vault.

Or have a video played with mpv with a press of a button since you can invoke any of these functions be it custom or built-in targeting any element the same way you would follow a link by hinting.

Here are a few other, pretty interesting use cases as seen in examplar custom user configurations taken from their github wiki[4]

alias playAllVideos js tri.native.run("mpv --really-quiet --ontop --keepaspect-window --profile=protocol.http " + Array.from(document.querySelectorAll("a, iframe, video")).reduce((s, e) => {let r=(/^https?:\/\/((www.)?youtu((\.be\/)|(be\.com\/((embed\/)|(watch\?v=))))[^ ]+)|(.+\.webm)$/);let l="";if(e.tagName=="IFRAME")l=e.src.match(r);else if(e.tagName=="A")l=e.href.match(r)||e.innerText.match(r);else if(e.tagName=="VIDEO")l=[e.currentSrc?e.currentSrc:e.src];console.log(l);return s+(l && l.length > 0 && s.indexOf(l[0])<0?"'"+l[0]+"' ":"")},""))

alias gitclone jsb -p tri.native.run("git clone --depth=1 '" + JS_ARG + "' /home/me/prog/" + JS_ARG.split("/").slice(-1))

alias rsssave jsb -p tri.native.run('cat >> ~/.config/newsboat/urls', JS_ARG + "\n")

alias openGithubNotifications composite js Array.from(document.querySelectorAll("li.list-group-item > span:nth-child(1) > a:nth-child(2)")).map(e => e.href) | jsb -p JS_ARG.forEach(url => tri.excmds.tabopen(url))

Edit: I assume native messaging has security implications you should probably consider if the browser is running directly with your system without any means of isolation like sandboxing with bubblewrap or better running under a virtual environment.

[1] https://developer.mozilla.org/en-US/docs/Mozilla/Add-ons/Web...
[2] https://github.com/tridactyl/native_messenger
[3] https://github.com/cixtor/readability
[4] https://github.com/tridactyl/tridactyl/wiki/
Very well said!

I think this applies generally to everything AI related. The common man has no idea, does not think and is easily fooled by all the hype.

However, my fear is that AI generated content masquerading as Knowledge will become mainstream sooner rather than later. How we as a Society deal with it is yet to be defined.

PS: Melanie Mitchell's Artificial Intelligence: A Guide for Thinking Humans is a must read for the "common man".
But Will they? Why would everyone choose to pay more just because large housing landlords wish it so?
And as an employee, "don't trust the company's local network" with your own devices either.
Google Cloud issue affecting 13 services across 35 regions
What I have noticed is that the bottleneck in editor vs. browser is different, which explains why I don't use Vimium anymore either.

In the editor speed matters: speed is a bottleneck. For example, if AI comes in writes a paragraph based on the function title, "bubble_sort_array", that's great, because now I've sliced 2 minutes off the 3 minutes that would ordinarily take.

But in the browser, time is cheap; in fact, that's largely why I used the browser, to luxuriate in the time it takes to, say, read an article, or write a long comment. I'm there to take it slow, to escape the tyranny of efficiency. So when I'm there to relax, shaving 4 seconds off a 10 minute reading time is irrelevant.

So I use shortcuts in my editor, but not my browser.
I don't know. Trans-fat turned out to be super bad. I'm leery of trans-sugar.
Aye, there's your problem.

https://web.archive.org/web/20151222043711/https://support.a...

It's like connecting a QLC SSD through an IDE port and complaining it's slow. It /is/ slow but not that slow.
Haha, you fell victim to the algorithm and they don’t care! That’s by design!

Look, they have an app that makes money. They care only about the app.

The only proper response is to take what you’ve learned and make your own app, an app that plays within their undefined rules. Oh, and makes money.

They don’t care. You’re an error, an exception, and a money pit. Better to cut ties than to deal with you. If the product is spoiled, throw it away.
* If you don’t treat maintainability as a requirement, you usually won’t write maintainable code.

* If you don’t know how differently other people model ideas, you usually won’t write maintainable code.

* If you don’t know how differently you’ll model ideas in the future, you usually won’t write maintainable code.

There’s nothing about being a lone developer that means you won’t write maintainable code, but gaining the perspective necessary to do so requires either experience or feedback. So the lone developer problem is only really a problem for early-career developers and incurious ones.
Yup. It’s more about the connections the inhabitants of an ecosystem has to each other. Something that yields something edible or useful for humans is also a part of this.

Our role as humans is not some ideal, “untouched”, “pristine” Nature, as if human activity and design necessarily spoils Nature. I think a more sensible perspective is that humans are stewards of the land, and there are yields for humans and the non-human inhabitants. It’s that our civilization has been terrible stewards, not that we are incapable of being good stewards. We can care for the land and people, and still get our fair share.
Yeah ok, hard to interpret THAT rant charitably.
It's good that you can solve this with 100% of the team following 100% of the time the rules/guides.

It's even better if your language has a way to express "the return value points to data from the input argument, so it's a compile error to pass a rvalue string to this function". The second we got a language able to do that, usable everywhere where C++ is, (yes, that one) the incapacity of C++ to express this became "a problem with C++". Our expectations have just increased.

Surely it can be catched via static analysis if you suppose the common case that the return value is a function of the argument, and not pointing to some static global data. But you will get false positives when somebody does the uncommon case. There is a lack of expressiveness in C++ here.
Kindle supports native text to speech.

I have minor accessibility issues. Kindle has been a godsend: large text, extra spacing, heck I could view one word at a time if I wanted.

Complaining about the Cloud Reader when you have an accessibility superstar in the tablet seems a bit weird.
Wait, was he not using a password manager or something?

I hear lastpass is pretty good, if he needs recommendations.
Wouldn’t that be susceptible to the same attack?
I think most browser designers expect you to use the trackpad or a mouse wheel
Reflectacles. I bought myself a pair of brass reflectacles. Reflectacles.
It sounds like you’re getting all the nutrients needed to create gastric juices.

Here’s a link to a study: https://journals.lww.com/nrronline/Fulltext/2022/03000/Penta...

As someone with Schizoaffective this works for me. Going to start eating more veggies!
FFmpeg 6.0
It was an example of an abuse not an example of an abusive class of people.

What a large group of people are doing now regarding racism is exactly what this one single woman is said to have done.
This is in part because of how Windows Defender works. It scans created binaries, blocking them whilst doing so and interferes with compilation. This is the reason there often exists a hidden Windows Defender exception folder for developers. I have seen IT of 2 different companies setting this up now and there really is a time difference.

Whilst not quite on topic, this is especially catastrophic for anything that uses fork() and friends via Cygwin. (i.e. the MSYS2 ecosystem and the MinGW64 compiler suite). MSYS2 native `git add -> [tab]` halts the freezes command line for a second and turning off Windows Defender or using folder exceptions easily cuts compilation time by for Makefiles with multiple small files 30%.
I've definitely been on the receiving end of experienced (10+ years) and competent (or, at least, clearly not incompetent) developers solo-developing inscrutable code that their colleagues had to pick up later. In contexts where they contributed code to bigger projects, their code showed more focus on readability.

I'm sure I've inflicted my share of hard-to-understand code too, most likely out of not wanting to spend extra time on some byzantine section of legacy code.
Yet the speech we are talking about general involves other people losing rights or violence against them. So that's ok but getting fired from a job is not? Seems like a double standard to me.
Changelog:

* Radiance HDR image support

* ddagrab (Desktop Duplication) video capture filter

* ffmpeg -shortest_buf_duration option

* ffmpeg now requires threading to be built

* ffmpeg now runs every muxer in a separate thread

* Add new mode to cropdetect filter to detect crop-area based on motion vectors and edges

* VAAPI decoding and encoding for 10/12bit 422, 10/12bit 444 HEVC and VP9

* WBMP (Wireless Application Protocol Bitmap) image format

* a3dscope filter

* bonk decoder and demuxer

* Micronas SC-4 audio decoder

* LAF demuxer

* APAC decoder and demuxer

* Media 100i decoders

* DTS to PTS reorder bsf

* ViewQuest VQC decoder

* backgroundkey filter

* nvenc AV1 encoding support

* MediaCodec decoder via NDKMediaCodec

* MediaCodec encoder

* oneVPL support for QSV

* QSV AV1 encoder

* QSV decoding and encoding for 10/12bit 422, 10/12bit 444
HEVC and VP9

* showcwt multimedia filter

* corr video filter

* adrc audio filter

* afdelaysrc audio filter

* WADY DPCM decoder and demuxer

* CBD2 DPCM decoder

* ssim360 video filter

* ffmpeg CLI new options: -stats_enc_pre[_fmt],
-stats_enc_post[_fmt],

* -stats_mux_pre[_fmt]

* hstack_vaapi, vstack_vaapi and xstack_vaapi filters

* XMD ADPCM decoder and demuxer

* media100 to mjpegb bsf

* ffmpeg CLI new option: -fix_sub_duration_heartbeat

* WavArc decoder and demuxer

* CrystalHD decoders deprecated

* SDNS demuxer

* RKA decoder and demuxer

* filtergraph syntax in ffmpeg CLI now supports passing
file contents as option values, by prefixing option name with '/'

* hstack_qsv, vstack_qsv and xstack_qsv filters
Yeah, because the description is inadequate. Is this BYOD? (… seems like not the employee's fault.) Is this the employee used the same password on the laptop and home, got credential stuffed, and LastPass isn't using MFA¹? (…seems like not the employee's fault.) Was there some jump from compromised home laptop to corp laptop? (The network is never to be trusted. …seems like not the employee's fault.)

The buck is supposed to stop at security, not at each employee's personal hygiene … if your game plan depends on the latter, it's game over.

There's more here than is being written, and I can only imagine because the truth probably stinks.

¹except TFA mentions MFA … but the mention of it doesn't really make sense.
Because it's taboo to suggest that men and women tend to have different interests.
> but rather that the entire state machinery – politicians, regulators, intelligence agencies, banks – was complicit in the fraud because they wanted to take credit for a German company

It's interesting how The New Yorker still made the "links to Russian intelligence" the lead in their headline. Foreign boogiemen are always more palatable than blaming regular old politicians/businessmen domestically. Or at least the more juicy tidbit for clickbait.
Mlk's kids are still alive dude. This is not ancient history.
My company isn't nearly as high profile or security focused and we're not allowed to use our own computers for any work related purposes,and our work laptops run threat detection software and we have a whitelist of software we're allowed to install.

I'm surprised that LastPass's policies aren't at least that strict.

My company has what I think is a big hole in this policy in that we're allowed to use our own phone for email, a few corporate apps (like Jira) and our corporate password manager (not LastPass), but IT doesn't do any management of phones (other than being able to wipe them remotely if you're connected to the company email server). I suspect that the company doesn't want to spend the money on giving everyone a managed phone.
Even simple shit they don't know. I walked into a door and busted my eyebrow open in the middle of the night so regular clinics weren't open. Went to the hospital. They gave me stitches. Routine procedure. This was months ago. I still don't know how much I owe them.

A few weeks later I went to a clinic to have the stitches removed. I paid them $20. Maybe if I told the hospital I didn't have insurance they would have let me pay in cash too, but probably not.
What could possibly go wrong with a centralized password database
I'd settle for an answer to "Is this thing going to cost in the ballpark of $500, $5000, $50,000, more?" - which is still impossible for the hospital to answer w/o lifting heaven and earth.
> that is occasionally correct

It's almost always correct, otherwise it would be worthless.

Yes, it's possible to construct questions that lead to nonsensical answers, and sometimes nonsensical answers are given even to sensible questions, but saying that ChatGPT's answers are "occasionally" correct is weapons grade BS. ChatGPT is a hair's breadth from being an ultimate answer machine, and is far more likely to be correct on almost any question than the average human.

The FUD that is currently being manufactured around language models is insane. I guess we should all stop using search engines, since those are even less reliable.
This cannot be overstated. The online managers have an absurd amount of complexity. Just think of all the millions already spent tracing back the attack, writing these statements, all the turmoil inside the company... just for the convenience of synchronizing passwords seamlessly.
I don’t think he’s necessarily working on his pc. He probably just had a shared LastPass account between work and his pc.
I don't understand the second part of the article. They decided to contest the charge with Visa, and had a very valid case for it. But then they saw that the seller had "submitted the charge" and Visa had "authorized it", so decided there was nothing they could do. What does that even mean? Of course you can contest a charge with the bank. The entire dispute process (required by law) exists for cases exactly like this. You can even do it online these days. Would definitely have been less effort than publishing an entire opinion piece about it.
Specifically, the internal Metalsmith-like core is here:

https://deno.land/x/goldsmith@1.2.1

Although I now see that I only documented in-code. It’s very similar to Metalsmith, except based on Deno, in TypeScript, async, and standarized on RegExp instead of a grab bag of globbing libraries.

Edit: generated docs link:

https://deno.land/x/goldsmith@1.2.1/mod.ts
And yet "Almost Always Auto" is "Modern C++"...
> Software should be developed by teams, period.

> Fabrice Belladd … legendary feats of coding

Maybe you didn’t mean to be so absolute in the first sentence? Our field is an art. An unmediated connection between one’s inner process and the code one writes can produce very compelling work that stands apart from others. In some cases, that work can prove “legendary”. That it may later take some support, documentation, study, and unwinding to make it maintainable doesn’t mean that the solitary effort shouldn’t be pursued in the first place.
Are you sure that "cheers" and "tschuss" are etymologically related? I would love that.

Everything I could find points to a Latin cognate, "cara".
No? You'd have to carry out the third-party software RCE on each individual user to install a keylogger. This attack installed a keylogger on a single computer, then exfiltrated millions of passwords. Centralization is a bad thing. Same modus operandi maybe, but nowhere near the same impact.
Basically yes, but the difference in threat potential between “random person” and “person who controls access to the secure passwords of many thousands of people, most of them more tech savvy than the average user” is exponential.
That wouldn´t help with a malware scenario.

A Hardware Security Module would avoid exfiltration of secrets.

(Off-line AND off-device)
Git branches are named sequences of commits
I tried this with my bank when I mistyped the email on a ticketing purchase (.con instead of .com) and they wouldn't initiate a charge back. Perhaps they were in a similar situation?
https://pberba.github.io/security/2020/05/28/lastpass-phishi...

From what I can tell, all of lastpass mfa options are based around some form of otp not webauthn.

We tested the above in our own environment, since we had control of the devices we did not need urls to do it. We just grabbed the data locally to confirm if it was true. At the time lastpass told us webauthn was in the pipeline so we stayed.
The bullshit service fee should, separately, be illegal (the Biden angle). But also the misleading sales practice that didn't display a total is anti-consumer, unrelated to Biden, and the majority of the expense that the author is complaining about.
> I would prefer to read someone's mental model of how the code works than the code itself.

I find this is often true for me. If there's a bunch of code that I'm having a particularly hard time understanding, it's usually because I don't actually have a working mental model of what the thing is supposed to do.

Problem is, with complex systems often the way to record the mental model is something like a design document, and getting programmers (including myself) to write thoughtful natural language to accompany our code is a constant uphill battle against business pressures to ship more.
The claim was "I've had enough Jacobin readers misinterpret Adam Smith to me to form an informed opinion." So the question is, how many do you believe is enough to justify the claim that your opinion is informed? Otherwise it would appear to be an unjustified overgeneralization based on extremely limited anecdotes.

"The print magazine is released quarterly and reaches 75,000 subscribers, in addition to a web audience of over 3,000,000 a month." https://jacobin.com/about

I would guess that the number you've had Adam Smith specific conversations with is one, possibly even zero, but unlikely more than two. After all, since you're an "Only in passing" reader, it's unclear how you would get into large numbers of conversations of any kind with large numbers of Jacobin readers, much less specific conversations about Adam Smith interpretation.
A lot of people seem to swear by Zojirushi and Panasonic.

I've heard people say not all brands cook brown rice equally well though.
Addressing just the capture: I don't see the problem with `||` at all, in-fact I think it's elegant. I do like (most of) Ruby's syntax so that's probably where my fondness of this comes from but I am not a veteran or seasoned Ruby expert by any means.
That used to be my solution for managing tabs in chrome. Every few months it would just crash, I'd lose all my tab, and I'd think "probably for the best". Now chrome is a lot more stable :/.
I'm on a work break now. At the moment I have two thoughts about it. Sabbaticals are like a nuclear option for recovery, and I feel like never should have let my self get to that point that I feel like I needed one. When I return I should find some kind of better balance.

Another part of me feels work will always suck and I should figure out how to not work for as long as possible, using corporate jobs to fund long breaks. I heard this described at an anti-sabbatical.
You are right in that the tone/medium of the message is the problematic issue.

But, even outside that, claiming something is/has/uses AI is practically meaningless. It's not a concrete claim, so consumers of said product aren't damaged by such claim. A claim of risk free returns of 50% causes harm. A false claim of curing cancer causes harm. So no, I'm not in agreement with it. The FTC should find more important things to spend the time of their 1100 people on, especially when they don't even seem to understand the topic at hand.
The golden child is often given the benefit-of-the-doubt in human culture. Especially when people bet their horse on them being the golden child. And especially in tech (humans inherently love their popular stories and stereotypes).

It makes it easy for the golden-child to skate off their early reputation for years, before it comes time to really ask whether they became the golden-adult everyone expected them to become.
> Relatedly, it’s it’s easier to have bad ideas if you don’t have to explain them.

This resonates a lot.

So many ideas that seem to make sense at first (you’re having the ideas in the first place after all), but start crumbling even with simple rubber ducking. Taking distance to try to explain if to a third party, even if they don’t exist, is underrated.

Funnily enough, writing comments and documentation don’t trigger that switch. There might be some hidden assumption that the reader is supposed to “get on board” and come share the same mental model perhaps.
You probably at least need remote access within Plex in order to install new plugins, meaning you could probably run the exploit by just having his username and password.
While it's very civil of you to wish recovery upon LastPass, I don't really think the product is deserving of redemption. This is not the first major incident and it demonstrates little growth in relation to prior breaches. The world as a whole would probably be better off if LastPass were to breathe its last.
Since what? The Orwell incident? I wasn't aware of it. I discovered the book I'm talking about missing on July 16, 2013. It reappeared in my Kindle library a few years ago but was gone for most of the intervening period.

In the case of the anime, I have the order on Amazon and can follow the link to the item. I also know a bit about the production and release of this anime in different markets and can assure you I'm not mistaken.
Well I would prefer to have both. I don't think we need to choose.

However, I think tests are high-maintenance. Often they consume the same amount of time to write as the actual business code.

I don't know how automatic null checking tests would work. Wouldn't you need to specify what happens if a null is input?

In contrast, I find the cost if typing very low for the value it delivers. Unless the code is very ephemeral (like a one off script) then I highly prefer typing.
One month isn't a sabbatical, it's a long vacation. I regularly had Co-workers take off that long
It should be a criminal offense with prison time. Not fundamentally different from a burglar.
I can appreciate the effort to warp something into doing a task it wasn’t designed for. That is cool!

But life is too short to not use a slides tool. Manually aligning bullet points, moving around ascii art, all of the settings to remove the vim status bar and a custom syntax mode to style text… I don’t know what you gain other than oh-that’s-not-google-slides brownie points. Your time is probably better spent working on the presentation.
You opened a dispute. This person hasn't. So not the same situation.