skysight-inc/HackerNews huggingface dataset:
If you call something a PIN, salted hashing is completely pointless (and software still doing it tells me that the vendor hasn't grasped this fact).

A Personal Identification Number typically has 10k (or less frequently a million) possible values. Hashing buys you a few seconds of brute force resistance here at most, which is completely useless.

If you dial up the hashing complexity enough to make a dent, even legitimate logins will start having an unacceptable UX and battery life impact. You're just on the wrong side of the e function with PINs.

> be more clear that users should use letters as well

The entire point of the feature is that the PIN, whether letters or numbers, is shorter and/or easier to type than your passphrase. If you require users to use something of equivalent security to their passphrase, you might as well remove the feature.
Well, he said he'll resign after finding a suitable replacement without giving a specific time frame on doing so...it can be tomorrow or in the next 10 years and he won't be technically lying
Amazon Plans to Lay Off Another 9k Employees
Probably. May be it's like Wayland-new and similar transition as from X? So they do need to coexist at the same time somehow, but also it can be a separate path.
My 11 and 13yo happily ride on the back of my cargo bike (Extracycle). Some of their braver, bike riding friends, do ask "Why don't you ride by yourself?"

I used to have a burley before the cargo. I think the cargo upright position makes it feel a bit more grown up. Plus, it is so fun.

The highschooler absolutely refuses to ride the back of the cargo, and insists on being driven by car. It takes so much longer with all the traffic, but he is willing to suffer to avoid looking uncool.
An Insider's Perspective on China's Strategy in Ukraine
It is not that simple. At any given time, there are probably numerous factors affecting a woman's decision of whether or not to want children. Maybe lots of women do, but they are unable to secure their requisite lifestyle. Maybe lots of women have an unreasonable requirement of their lifestyle after having kids.

All I know is having seen my wife give birth twice, I am not in a position to judge. It is an enormous risk and sacrifice, the likes of nothing that I (as a man living in a peaceful society) have come close to having to make.
What role does page size play here, and why is 16K a problem?
I did not mean that, but now I have a movie to watch! Thanks!
I would use Remote and Local for host networking first of all; rather than src/dest, because when you send you're the src, and when you receive, you're the dst... you don't want to include both permutations in the table (unless you're both the source and the destination, ie: connecting to yourself).

For NAT, you need to have a way to calculate the 5-tuple for SideA when you have a 5-tuple from SideB, and vice versa; most often, that'll be a table lookup, either for the whole 5-tuple, or for 1:1 NAT, it could just be a lookup for the "Local" IP. In that case, maybe src and dest make more sense, and the NAT isn't really Local in my book.
Moving applications on-prem kills its 'steady-state' status during the transition.

Plus there's some 8 fallacies going on here. The Cloud Providers generally make it very expensive to have some of your stuff in the Cloud and some on-prem. That's a challenge for most businesses, which I typically assert should be about 80% boring and 20% volatile/dynamic/interesting/on fire, because that 20% can soak up a lot of fees on chatter between the two classes.

That's by design. They want you all in or all out. They don't want you going back and forth. Whatever that was originally informed by (eg, the costs of their wires into and out of the Internet), that's where we are now and it seems to be considered a Good Idea.

If they change that they might keep some customers, but they'll also give others an easier exit strategy.
Or just do away with some of that decentralization. Germany also has a federalized system and based on our historical experience, avoiding centralized control over security forces has high priority in our constitutional system. But we still have a quite well-structured system that consists of a couple of federal police forces designed for very specific purposes and state police forces (which are subordinate to state governments only), which are those that interact with citizens on a day-to-day basis. States have their own regulations and laws that govern police work, but they have a loose process of coordinating those among each other and have to work within a federal constitutional framework that sets some explicit boundaries. Having 18,000 police organizations is just asking for bad outcomes, imho, we have plenty of stuff going wrong with 20-30.
Using the same acronym for two different meanings in one abstract doesn’t inspire confidence in their paper.
HN is the only place in my entire world where I read/hear people mention that they thought we did away with handshaking. Are you all in a different universe from mine?
The article actually discusses AT1's at length, and pre-addresses all of your arguments. I'm not sure I find Levine's argument 100% compelling — I mean, we're dealing with a sentiment based sale, not calculating engines — but I don't think he's as close to wrong as you seem to imply.
And apparently some (many?) got private back-room deals as well, a prominent example linked on a sibling tree: https://twitter.com/bradocapital/status/1635644287630159872
There was some discussion on HN about some VCs putting it in term sheets. I don't know if it's true, I guess we won't find out because law suits have been averted.

When you're mixing private deals (for investores and founders) with company deals, you're usually on the hook for something. Letting them off the hook is nice, but it sends a terrible message and will only lead to greater implosions later.
Well, depends, if now more than half of your company isn't in office after COVID and move to WFH I can see it being a pretty big part
Ah, I missed that.

> into 6809E disassembly and manual rom hacking

darn. I was hoping someone had a c/cpp code dump somewhere :-/. the repo doesn't have assets.
> Nobody seems to mention the fact that most of VR games out there require using the hard-to-familiarize hard-to-memorize joysticks to interact with the game.

> I own a Valve Index and I mostly don't play it because of it's just really a hassle to have to physically stand up (or even seated) and to wave your arms around, only to forget how to reload your damn gun after a couple of weeks/months of not playing.

> I wish that people built simple keyboard-and-mouse VR games that I could enjoy the VRness of the experience using my fingers and palms like I'm used to in the past 30 years.

all I hear you saying is that you're an older person now, and that you learned to play with a controller and that's how games should be.

well, I'm even older (or lazier) because I never even learned to play FPS games with a controller. WASD+mouse for me please.

I always see people confusing familiarity with "simplicity" and "ease of use". of course familiar things are better! but let's not mangle together the simple and well-made with the familiar; though it's hard to do this.
> it's clear that the uninsured deposits have fled First Republic

their customers are high-net-worth so this would basically means almost all customers have left FRB, which is obviously not the case

at this point the stock is so cheap you don't even need it to get back to previous levels to make a killing...even if it ends up at a 50% discount from its peak, thats 4x from the current price...which gives you an indication of how irrational the panic selling has become
Let me explain:

The reason opportunity cost matters is because he could have done something with the money, like buying bitcoin, instead of putting it up for a bet.

Balaji claims to believe that Bitcoin will be worth $1 million dollars in 90 days.

Also, Balaji has $1 million dollars in his bank account.

In 90 days, we can pretend there are three outcomes for Bitcoin's value:
a. It's worth $1 million+
b. It's worth between 0 and $1 million
c. It's worth zero.

If Balaji bought 37 bitcoins today with his $1 million, the value of his assets at the end of 90 days in those three scenarios would be:
a. Over $36 million
b. Between zero and $36 million.
c. Zero

Instead, here are the outcomes under the bet he made:
a. $2 million
b. Zero
c. Zero

Assuming he is being sincere in his belief, every other outcome in the price of bitcoin makes his bet suboptimal to just purchasing Bitcoin, outside of Bitcoin falling to zero, which is why it's been called a "sure loser" bet.
Same, but... Your Sinclair. (Also from Future Publishing). One of the best games I've ever played was on a cover tape: Chaos: Battle Of Wizards.
pump and dump is not 4d chess. its lame
I've been getting timeouts from the API since last night. No-one else was complaining about it, so I assumed the problem was my code, since it was only intermittent, and the status page said everything was OK.
And you are saying this is evidence of a security issue rather than a caching bug?
I wouldn't put my faith in ChatGPT for anything that matters.
Enabling the Inspection of Web Content in Apps
I don't really believe that you can separate the language from how it's used. I blame Java when people write code that beats the crap out of the GC because Java both makes it easy (especially with streams sometimes) and also is flippant about it in most recommendations (which emphasize that the gc is good, allocating an object is cheap, and so on). Python somehow doesn't seem to have that happen nearly as often, for instance.

So I also blame Scala when people over-use implicits and go functional-mad because Scala encourages it.
It might have made more sense if you'd included furries in the specialization...
So, use Tor browser or a VPN tunnel!
Except the CEO, they keep the bonus lmao
I enjoyed the quiz personally. I was kinda expecting more complicated questions, eg nat, iptables rules selecting local ip / interface, weird networking edge cases and so on.
I remember being a 12 year old running to the video game section of walmart to try the latest N64 game while my mom did the weekly shopping.

Germs/bacteria were not even 1% of what was running through my brain.

You're not the target audience for this, nor am I anymore.
I'm with you on this. And I am absolutely the furthest possible thing from a climate skeptic. If anything, it's just a recognition that this kind of communication from official sources is clearly ineffective. The climate crisis is never ever going to be solved by spontaneous collective action or by appeals to collective action. People will continue to do whatever it is they have to do to get their daily or yearly basic needs met.

What we need are people in positions of power that care.
A tool to compare the answers of multiple AI search engines
French is indeed an ethnicity in that there's a shared set of values, cultural traits and genes that you can distinguish from, say, the Greeks.

The fact that it has substructure and blurred lines doesn't mean it isn't a valid abstraction.
"What I learned while ChatGPT was down"
I never understood the metaverse thing. Was Zuck unaware of vrchat? I was always confused why they thought users of a niche market geared towards hackers and nerds would gravitate towards the soul-less corporate solution as opposed to the existing one.
Same! Self-hosted enthusiasts rise up!
That's my understanding as well. I bet the 996 culture, 69-hour max workweeks, and constant rat race definitely don't help with this. Add to this a younger generation that thinks that they don't want to make the "sacrifices" that their parents did and would rather maximize their own quality of life (though I don't think this latter is just an Asian problem).
What they're referring to is how if I click that link it gets redirected to the image's viewing page instead of opening the image file directly.
Ideally, robot clear up time from menial, mechanical labor to offer more social interaction to avoid loneliness. This is far off though and our world is far from ideal...

That has never happened in the history of "efficiency", it's a lie people use to pretend that jobs won't be cut. What actually happens is the savings are repurposed for administrative bloat.
Everybody in charge lived through 2008. Now we all get a live fire test of the question: did anybody learn anything useful from that crisis.
I've come into contact with students at different levels of their university degree... between freshmen and junior (but almost senior) and I'm baffled by what I hear.

No concept of processes, no idea about any data structures, intimidated by everything. They've studied C/C#/Python in a class but can't remember anything about it. It's really a lack of passion and interest and it's endemic I think. People study CS because they've heard it pays well.

I fully expect these people to become my managers!
> Drowning is when a living organism is submerged...

...and dies from it, which is a pretty important aspect to the word. If the organism doesn't die, it's swimming or just submerged.
Yawn. Mute and block.

The less oxygen given these clowns, the better society fares, and the fewer desperate, naive, or avaricious, fools who will be taken advantage of.
"Hacks" aside, this looks more like caching issues.

Assuming this is real, I wonder how many people got access to other companies' communication and code via access to random "chats".
Yeah rolling stop issue is farcical but afaik actual problem is Teslas miss like 10% of stop signs altogether
He is not dumping BTC
People elsewhere in the thread seemed to imply that if Viewport size != window size dev tools is likely opened.
> shouldn't be treated as just some random grifter who lost equity.

Indeed, he should be treated as a very influential grifter, with _even more_ incentive to make shit up when it benefits him.
Consumers may not like chatbots that show emotion
No, you misunderstood me. I like the realistic reload mechanisms in Pavlov, I think they're fun and wouldn't change anything.

But the parent comment complained about having to relearn complex control schemes every time they pick up a VR game, which is valid. Effectively nobody is going to have the muscle memory for reloading a gun, making it strictly more complicated than just mashing a reload button.
Turtles all the way down ;)
For the simple tar command, I've read somewhere that it's best to not encode the output using the tar command itself (i.e. tar -cvf blah; zip blah instead of tar -cvzf blah), but I'm not sure what the reasoning is. Has anyone else heard this? Something to do with passing files between systems that may not the right encoding software maybe?
https://archive.ph/ShjlX
Do a google image search for 'Dutch on bicycles'. None of those people in the pictures need to change or shower after their ride. Same thing were I live. We only wear special cycling clothes if we go out cycling on a road bike or mountain bike in the weekend. And of course then you need to shower afterwards.
Man all these comments are not going to age well
I think you're both being a little unrealistic. There are just not going to be many of either of those kinds of jobs coming open in the near future. At least not enough to absorb all those affected by layoffs. Not only that, but even when they do start hiring again, businesses will still find ways to get H1B's instead domestic employees if they feel H1B's are something their business model necessitates.

I think when people are planning for the future, they need to be realistic about what actually may happen rather than hoping for their preferred ideological outcome to happen. Don't write yourself off from ever getting a job, but at the same time understand that the job market of the medium term future will probably look radically different from the job market of the past. Very little of it will have anything to do with location. In fact, most jobs will probably be in the same places they've always been, it's just likely you won't get paid as much to do them. There will be more people vying for them. And they won't be quite as secure as they used to be.
If you don't see the need for the ability to program in a cloud infra job, you aren't building them very big at all.
There are two problems in Portland that could benefit from focused non-police groups. I dont know if city could organize them or if police would allow them.

There has been big jump in murders since pandemic, mostly gang violence. Other cities have had success engaging with gang members and breaking the cycle of violence. Teams with trusted community members and social workers might have some success. Police probably wouldn’t work unlike cities where they are more trusted. Not sure if group should work with police to solve murder or if that hurt their position.

The other place would theft task force, probably inside police but staffed by non-officers. Taking reports would be sufficient but would be better if they could investigate and make cases, No need for armed police except for arrests.
> ...know how computers work...

That's what worries me. There was a time when I could write low level C and even some assembly. Similarly there was a time when I could explain the ins and outs of IP packets and routing. However, none of that is what the market wanted and I don't remember any of that anymore.

Heck, with most of my work involving running around trying to hold understaffed systems together and juggle the unreasonable demands of management; I don't even have the programming/web development skills that I used to.
I feel your pain. I've been to the same kind of corporate drudge-fests. But sometimes the free food includes chessecake.... which almost makes up for the ennui.
Competence isn't an unlimited resource. On-prem is nearly impossible to run without regularly taking your servers or storage or networks down with incompetent staff. Cloud costs will make your eyes water with incompetent staff who decide to run everything 24/7 on over-provisioned overpriced vms. At the end of the day "but if we had awesome staff (that also didn't ask for too much in salary) it would be like this and that" is an academic consideration because that's not the hand we're playing with.

Cloud is also so centralised that even if everybody collectively got better at optimising costs there's a serious risk that cloud vendors would just collectively fatten their margins. The inverse is also true, if on-prem suddenly became much easier to run, expect licensing and hardware costs to start creeping up from anybody with anything resembling a monopoly or cartel.
It would be an impressive post-mortem if it could fix itself and report on the reasons why.
Yeah, I just moved from SF Bay to Pittsburgh and I have to agree with this. Although everyone here complains about the weather, I WANTED weather again (SEASONS!), and I wanted affordability and a relatively left-leaning city.

I bought a pretty damn big house (comparative to what I had in the Bay Area). I'm taking more vacations. The people are nicer than SF Bay Area, you can go places (restaurants on a weekend, for example!) without having to wait in long lines or park a million miles away. You can get tickets to concerts without having to be the FIRST person on Ticketmaster the moment they become available. You can get to nature a lot faster (I went skiing a couple months ago and it was bonkers how there were no lines or waiting for anything). Everything just feels easier, like you get to enjoy everything 20% more than you can in a metropolis where everything feels like a hassle and you've got people crawling on you like roaches.
Are there any resources that show the improvement we've already made in those terms? I think that would be helpful. Like, there's got to be an estimate of what our rate was when growth was before we started introducing what we've already been doing. I know there are cynics who want to make the argument that we've done absolutely nothing and that we're still in the base scenario, but I think that doesn't give credit to the advancements we've made due to environmentally-influenced policy changes across the world.
Ventilation (or lack of it, due better sealing that prevents continuous ventilation through cracks) will have much more impact than background concentration.
Very few things give me as much hope as reading this kinda of doom spam. To know the people pushing this are so detached from reality gives me a lot of confidence we'll be all right.
A lot of them dynamically generate new anonymous functions to get around this. Last I looked (~1 year ago I think) neither Chrome nor Firefox supported disabling the keyword completely. Do you know if that's changed?
"built totally in the open" seems to make "risks of company data being leaked" moot
> I fully expect these people to become my managers!

They have better social skills than the CS students of the 1990s, so this is a really good bet.
The burden is on those products to compel you, not you to break a force of habit. :)

Code search historically has been adopted by <10% of devs, although it's usually binary within each company, with equilibriums at both ~1% adoption or >80%+ adoption. My model of LLMs applied to code search is that they make it so even a first-time user can use (easily, via the LLM) features that were previously only accessible to power users: regexps, precise code navigation, large-scale changes/refactors, diff search, other advanced search filters, and all kinds of other code metadata (ownership, dep graph, observability, deployment, runtime perf, etc.) that the code search engine knows. The code search engine itself is just used under the hood by the LLM to answer questions and write great code that uses your own codebase's conventions.

I bet you (and the ~90% of devs who don't use code search today) will be compelled when you see and use /that/.
VRchat. It's the best or worst VR experience depending on who you are.
Also don't underestimate the resistance of employees who built their careers only ever knowing how to do cloud - they'll make sure the cost reports and plans are always doctored in a way that cloud wins because that's the only way they know how to do their job.
Ask HN: Is ESG Dangerous?
One of Scala's biggest mistakes was probably to support higher rank types, because it seems to have resulted in a in a hostile takeover of the Scala community by pure FP zealots. No one in the world ever thought: "why don't I write Haskell code on top of a VM that really isn't well-optimized for it, using a language that wasn't designed at all for it?" But that seems to be what a large portion of the community does nowadays.

This wasn't Scala's only mistake though. It seems to have a history of implementing features that then die out due to a combination of lack of support and of never being implemented well in the first place, including:

* specialized types

* macros

* delimited continuations

* Scala reflection

* Eclipse IDE support

* Scala native (technically still going but only whenever there is funding at a university to pay a student to work on it)

* Multiple collections library rewrites (this one is pretty core!)

* other half-baked bundled libraries that have been deprecated/removed over time

Not to mention the number of community-owned frameworks that have been discontinued or declined in usage over time. Anyone remember Lift? That used to be the most popular web framework in Scala! And how are Play Framework and Akka doing nowadays?