skysight-inc/HackerNews huggingface dataset:
tl;dr if a hacker gets access to your Google account it'll be like you didn't have 2FA at all

to be fair, storing your 2FA seeds in 1Password is about the same, except 1Password supposedly can't see your secrets. but if a hacker gets access to your unlocked 1Password data it's the same

tl;dr2 use offline TOTP or similar for real 2FA
In the early days of Unix (before rcp was a given), tar pipelines were a common way of moving ) from one machine to another on the network. It was a little nicer than FTP, not only because it didn't need an admin to set up the FT server, but also because you could transfer the files to any directory that you could cd to and had write access to. (And of course, tar made it easy to send a bunch of files and directories at once, too...)
Yeah, I find it's almost always best to just start fresh if the conversation starts to go off the rails.
This is sort of willfully missing the point, I concede, but I have my U2F token physically embedded in my arm and have minimal fear of losing it/being without it. Right now it runs OpenPGP and a Yubikey U2F emulator, but it can run just about any flavor of MFA with the appropriate companion app (full subdermal Java Card platform).

https://dangerousthings.com/product/flexsecure/

Hard agree, though, TOTP >>>>>> OTP via SMS
Assymetric keys aren't a requirement for E2EE. In fact, in most cases, assymetric encryption is only used to exchange a symmetric key to use for data decryption anyway. Assymetric cryptography is way too inefficient to encrypt and decrypt more than short secrets.

The whole reason you'd enable this feature is for when you lose your phone and need to provision a replacement. There's not really any way to do the whole key exchange dance if you don't have access to the original source. A password derived key is essential in this case.
I have the same problem like the others say in Germany. I have a Bundesliga season ticket for which I pay 360 euros and I see all home matches in person. Away matches are a completely different story. Half of them are shown by Sky, the other half by DAZN, and for some matches they only show highlights during the game. Sky wants 30 euros per month and at least a year of subscription and DAZN wants 25 euros per month.

My life doesn't revolve around football, I don't need to see all matches, just my team's. I would gladly pay 10-12 euros for pay per view, but no, that's apparently not an option.
Ha! You are right - I still can't type :)
The insanity of America is barely regulating food and medications, but then deciding supplements can be sold like snake oil. They should be regulated by requiring testing to verify what is sold is what it contains. And, of course, what's missing in almost all areas of American safety regulation is the precautionary principle. Tens of thousands of chemicals were ignored under TSCA due to placing commercial concerns ahead of public safety.
After Grails lost its steam, Gradle only matters because Android team made it unavoidable.

Gradle is Ant re-invented by those that didn't learn why we moved away from Ant.
I don't want to trust anything made by the Embrace, Extend, Extinguish company.
Correct. This isn't an HOA, it's the city itself.
Speaking of Ethereum, related:

Ethereum is a Dark Forest (2020): https://www.paradigm.xyz/2020/08/ethereum-is-a-dark-forest
While I can empathize with these thoughts, I hear them from people who I think have brilliant ideas, like Karl Popper N.N. Taleb, something about this sort of definition of intelligence and the strictness of forms I think it implies rubs me as presumptive and confused as the claims its critiquing.

For instance, what about the subconscious? The subconscious must play a strong role in problem solving and creativity, which is how I notice intelligence, anybody I think who has written a piece of music or struggled with a proof can attest to that. But are there abstractions at play when the unconscious is in the driver seat? And if the unconscious speaks in abstractions, are they the same "form" abstractions the conscious mind is so familiar with? Consider some different form of abstraction, informed by and tooled by information and methods you are not privy to.

Moreover, if humans did have unlimited short term memory size, suppose we had to find what numbers are divisible by a prime, how many of us would be checking numbers individually in our head and not using Fermat's Little Theorem? Suppose such memory allows us to discover new methods of compaction, wait then, we are playing the same game again and perhaps that would lead us to the presumption that we do it because our working memory is not "good" enough. Then "intelligence," which we outside of ourselves can only perceive in the ways it is demonstrable, and what motivates it, seems less then about the journey to compact information into coherence, producing objects for an inventory and thereby producing some super-order of workshopping, and more about heuristic success in pragmatic material terms. These are terms I'd argue out of the scope of "conscious" abstraction, hence the rejection of such ideas/thoughts on account of their supposed duplicity. But I don't know if the same can be said for the unconscious.

It seems to me then that so called compression, conscious abstraction, is more than an evolutionarily-devised-resource-scarcity-solution, it's baked in, *ontologically*. We are, in part, motivated to look for solutions not necessarily on account of our limitations but because we can imagine solutions. I do anticipate your eye roll.

I would posit then, part of what is at play for what I'll term demonstrable intelligence, is the degree to which the conscious mind has strength in itself as an abstraction workstation and how much access the "unconscious" mind seems to grant it to other spheres of tooling. In this sense, not only is the success of abstractions and their varieties relevant, but those very attributes of the abstractions are informed by the diversity and complexity of a little something else.

So sure, the map is not the territory and the cat is in my mind and not necessarily a reflection of the material reality, but I think we exaggerate the problems in abstractions/forms because we are unsatisfied with the whole enterprise of consciously accessing the territory in the first place.
No it won't or that would already be the case on Android. Your fears are entirely fabricated
South Korean IQs went up by an entire standard deviation for people born between 1970 and 1990. Japanese IQs went up by more than a standard deviation between 1940 and 1965. https://www.sciencedirect.com/science/article/abs/pii/S01918...

If you truly believe your extraordinary claims, you must believe these countries performed large scale human genetic engineering during these periods in a conspiracy hidden from the rest of the world.
You'll also need to befriend some conservative politicians.
The point is that this way you can get an LLVM that's licensed the same way as GCC.

This whole exercise has a point, if and only if there's a point to insisting that GCC's license is fine, but LLVM's license ain't.

It's just a reduction. https://en.wikipedia.org/wiki/Reduction_(complexity)

If you don't have any problem with the license of LLVM in the first place, the reduction is obviously useless to you.
Very interesting, thank you. I knew that vowel inventory in Germanic languages can get very impressive, but that formant chart is quite something:

https://en.wikipedia.org/wiki/Norwegian_phonology#/media/Fil...

In the phonetic realization section, though, there's this:

"The close /ʏ, yː, ʉ, ʉː/ have been variously described as protruded [ʏʷ, yʷː] and compressed [ʉ͍, ʉ͍ː] as well as compressed [ʏ͍, y͍ː] and protruded [ʉʷ, ʉʷː]. The backness of /ʉ, ʉː/ has also been variously described as central [ʉ, ʉː] and near-front [ʉ̟, ʉ̟ː]. Therefore, /ʏ, yː/ may be differentiated from /ʉ, ʉː/ by backness and the type of rounding or even only by the type of rounding"

This last bit is actually even more surprising: two front-ish rounded vowels that are distinguished solely by how the lips are rounded? I can't help but wonder how stable such an arrangement could be long term.
Why does Coalton require two different implementations of Lisp to be installed?
Guided access via the accessibility shortcut is a good way to force the screen to stay on. Go onto the accessibility settings, enable Guided Access, and tell it to activate when you triple click the power button. Then when you’re in an app and you don’t want it to turn off, triple click the power button, select options, disable the power button, and start. It’s also great for locking other aspects of the phone if you’re going to hand it to someone else for example.
EU law would crack down if Apple tried that
Even if they synchronize cross platform, there's no reason why they can't take the Android backup algorithm and stuff it into their iOS app. Google owns both side of the connection here and the Android code is even open source.
I've had two Macbooks (2012 MBP, M1 Air) with no issues. I've had Lenovo laptops going back to 2005 with most of those machines running great --almost as great as the Apple machines do.

Got a coffee spill on my 2012 MBP and Apple didn't really want to fix it. I was quoted nearly a new machine. I bought parts myself, fixed it for $150 and some (intense) labor. Apple really doesn't want me doing that. Had it happen again a few years later. Parts were HARD to get, and so... yeah, that one is in a box now.

Lenovo doesn't seem to care. Parts are inexpensive, I've had to do a few more repairs, but they were not hard. I can still get parts for my Lenovo machines.

For a lot of reasons my daily driver remains Lenovo. I do use my Apple a lot more than I used to now however...

Homd[k

Lenovo takes a beating better than Apple does. Apple is very petty
Exactly this. I am a rabid women's soccer fan. I study and follow the draft like a professional coach, watch as many matches as I can, drive three hours to NWSL matches when I can, try and catch overseas games when possible, and I am continuously frustrated by the broken state of sports streaming. The NWSL shows up on ParamountPlus, unlesss its on CBS, unless its on CBSSN, unless its on Twitch on like three different Twitch channels - it is maddening as a hardcore fan and in no way leads to a casual fan having an easy time to watch.

I am heartbroken too at the amount of historical matches that will be lost because they simply aren't available. NWSL, FA WSL, International Friendlies or International Cups. It will all be lost over time as streaming partnerships change. The key to making better players is a better soccer culture and that means the key is to have them watch the game, love the game.

I have had seasons where I have almost quit as a fan because how frustratingly disorganized it all is. I know partnerships are important, but these leagues need to start pushing for their own streaming infrastructure or unified streaming partner or they will see the sport tip into irrelevance with the general public.
In the United States regulated by the FCC CBRS Tier 3 is available to "general authorized users." You can operate a private lte-network so long as you authorize and follow the spectrum rules. From the FCC Website

> The GAA tier is licensed-by-rule to permit open, flexible access to the band for the widest possible group of potential users. GAA users can operate throughout the 3550-3700 MHz band. GAA users must not cause harmful interference to Incumbent Access users or Priority Access Licensees and must accept interference from these users. GAA users also have no expectation of interference protection from other GAA users. Technical rules for GAA users can be found in Subpart E of Part 96.
This is interesting, for sure, but the steps here are the easy part. The challenge is doing this legally, since I’m pretty sure srsRAN is going to use bands you almost certainly don’t have a license for.

The only viable options for the hobbyist is a network using unlicensed bands (like 2.4 GHz / 5GHz, or the 33cm ISM band) along with CBRS[0]. As I understand it, most UEs (handsets) that support one of those bands will not use it exclusively—only in tandem with another licensed band.

The other alternative is Amateur Radio bands, which some hams have apparently experimented with: https://github.com/mmtorni/HamLTE.

[0] https://en.wikipedia.org/wiki/Citizens_Broadband_Radio_Servi...
you could say the same about any shitty security, but most people don't want shitty security
So, presumably if I bought one of their phones and turned it on, I would wait ten minutes to get a GPS fix instead of it using a almanac and working out the lat and long of three cell towers at certain signal strength?

Does anyone know if it's possible to get at this info from user side ? Some API access? sounds fun
The US have unlicensed spectrum available for "Citizens Broadband Radio Service" (CBRS) which can support 5G and LTE.
I have heard that the DJI control app requires sideloading on Android.

That's a huge install base and seems to be a sign of a pretty bad system, no?

The system being that an major app provider wants to do something potentially shady, and the sideloading system allows it.
If you have money burning a hole in your pocket, I suggest you have a look at https://www.givewell.org/ and pick any of their top charities.

Randomly giving people more money, just because you happen to interact with them seems cruel and patronising.

Compare https://web.archive.org/web/20220705105128/https://blog.jaib...

(And in case you don't care about helping people, why do you bother?)
I know the question is meant to be flippant, but are you not aware of where you learned most things? For any of my post-1st-grade vocabulary, I remember the first time I saw the word in print, or where I heard it. I'd qualify that to say for most non-daily words, except that I don't believe there were many of those for me after I started school.
Emacs web wowser, for those of us not in the cult
This resp has very chatgpt tone of voice…
You can still run all the software and use virtual eNodeB and UE to simulate the radio comms.
WebAuthn doesn't work with apps. At the moment, FIDO2 relies on either your Big Tech account of choice or an expensive USB key. TOTP is free. There are no backups, so you also need to manually get your second USB key out of that safe place (the fire resistant safe in another physical location people talk about) every time you need to register a 2FA device.

WebAuthn and friends are definitely an improvement, but it's not quite a perfect replacement yet.

Besides, even some banks still use SMS for 2FA at this point. TOTP would make a lot of sites more secure already.
To say it with SpaceX fans words: The launch was a success. /s
> I get the broader point. But at this crossroad, re-designing our cities for trains is a moot point.

Why not? Cities were redesigned from 1940s-60s to be compatible with cars. It took an enormous amount of capital, but it was done because of the promise of a new technology.

Most of the infrastructure in suburbs currently under construction will be tear-downs in 30 years. The only redesign that needs to happen is letting current developments age out, removing restrictions on denser and multi-use architecture closer to the city center, and pricing utilities by effective utilization (suburbs use more utilities but don't pay more for them). Denser architecture and urbanization will naturally re-emerge because it is more economically competitive.

Mass transit can then be added in piecemeal, first with busses, then light rail and street cars, then underground trains.
> Would have gotten the point across better to just inline the CSS source [...]

I agree. The way they're presenting this is truly burying the lead.

I'd suggest something along the lines of "Here are 135 lines of CSS that we like, and that we feel might be reusable".

It took me an inordinate amount of time to figure out that this was what was being presented to me here. Calling it a "Minimalist Framework" certainly pushed some buttons for me, because I'm all for minimalism, but militantly opposed to almost everything that calls itself a "framework", so as soon as I saw this, I had to go on a mission to figure out what this was, and why they put these two words in a sentence, and was then rather underwhelmed.
Like with Internet Explorer once upon a time, government intervention will prove to be unnecessary. While the two monopolies sit around and push out minor updates each year, rearranging chairs on their decks, alternatives are quietly being developed and from out of nowhere a “TikTokOS” will appear and solve the monopoly issue.
The initial HTTP request that they mention to Google is not related to Qualcomm at all but rather a part of the Google Play Services implementation in microG which /e/OS uses [1]. MicroG, as many might be aware, is an open-source implementation of Google Play Services that tries to avoid leaking sensitive user data amongst other things.

The request to android.clients.google.com though is required in order to checkin the device and receive a device ID and security token [2], which is needed for Firebase Cloud Messaging and push notifications [3]. The checkin include hardware details such as available features (GPS, WIFI, Microphone, EGL version) [4] but sensitive details such as HW MAC address, serial numbers and SIM operator ID are spoofed. [5, 6]

Basically if you're running deGoogled and still rely on Google Services, there _will_ be a few calls to Google owned servers. MicroG avoids sending sensitive HW and user data though, more can be read in this thread: https://github.com/microg/GmsCore/issues/1508

[1] https://doc.e.foundation/support-topics/micro-g
[2] https://github.com/microg/GmsCore/blob/master/play-services-...
[3] https://github.com/microg/GmsCore/blob/master/play-services-...
[4] https://github.com/microg/GmsCore/blob/master/play-services-...
[5] https://github.com/microg/GmsCore/blob/master/play-services-...
[6] https://github.com/microg/GmsCore/blob/master/play-services-...
> Emacs Org mode.

And org-roam. Org-roam is trully great and if it dies, I'll die with it.
This is a really good idea, I wish I had thought of it. Thinking of chat as a graph instead of a list is very weird and very cool.

I think this could be especially useful in a research context where someone is trying to evaluate the performance of a model. Sometimes you just want to compare how a model responds with and without certain context, and doing so with the classic UI is cumbersome.
One possibility is companies pay a website to include desirable content (i.e. ads) in the information fed to the AI.
If you glue IKEA stuff together while you're assembling it, and attach it to the wall, it's as strong as you need it to be.
Huh? What makes you think they don't speak English?

Angela Merkel can definitely speak English.
I think I can assure you they weren't there.

There was a lot of noise a few years ago about a Norwegian band[1] who had a song "Neger på Ål stasjon"[2] ("Black man on Ål train station") describing the fascination of the author first time they actually saw a black person in their hometown.

I'm not from Ål at all[3](although I have visited it) but I can verify the feeling. Black people were very much excotic were I came from too, and if one of them had shown up we would probably have discussed it at school next day, wondering if they could speak our local language etc.

Edit: I should add that we had nothing against black people. A couple of stories to show what I mean: forsome reason we often ended up next to a black family at camping, and I remember my dad and their dad being friends and he took built a toy boat with us once and another time I met a black boy at my age at the beach who was actually from Africa (the first family was from somewhere in Europe) and I was existed that I had met someone from Africa and it was the first time I can remember using English for real.

[1]: Hellbillies, awesome sound and some interesting texts BTW

[2]: It is a very respectful song

[3]: Norwegians might find this funny as "Ål" and English "all" is pronounced about the same way (of course depending on how thick their "L"-s are.
For personal java/kotlin projects I just use IntelliJ for building. Things are much simpler and it is easy to do most things.

My biggest problem with gradle on personal macs is that memory hog daemon that is mostly unavoidable. Just to run a build once in a while I don't want to run a daemon. Yes daemon can be turned off but it is prevalent in the ecosystem and IntelliJ gradle integ doesn't work without it.

Gradle makes me appreciate how good both cargo is.
How Conversational Programming Will Democratize Computing
True. Everyone knows Stanley Kubrick directed the moon landing shoot. Due to budget cuts they just had to shoot on location with 2 Astronauts.
You’re glossing over the problems.

Font rendering is wrong, even if you aren’t an extremist like me. Stuff is just never going to feel right.

Middle clicking is wrong, it didn’t open in a background tab like it should have, and this is indicative of the fundamental problem, and you couldn’t right click on the link to get the browser’s context menu, which is what you want >99.998% of the time. Browser’s context menu is also rather important in things like text boxes.

Most people won’t be significantly affected by these issues, probably won’t even notice them, or disregard it if they do briefly. But quite a few will loathe your app, because it badly messes up their way of working in ways that no site on the internet does.
I am absolutely not aware of where I learned most things.

I acknowledge you as my superior.
You can see the licensing fees here for Canada.

https://ised-isde.canada.ca/site/spectrum-management-telecom...

Looks like you’re charged about CAD.04 per MHz per population of the licensed area. Didn’t dive too deep but it might be viable for a small town to put something together, if they’re unhappy with the big providers.
sum types is not something supercritical, it saves few lines of code.

Also, somehow I rarely have need to use something like that personally.

> And ease of use is important

the question is if insignificant syntax sugar worths switching to unpopular platform with undeveloped toolings and uncertain support.
Yeah, I always read it as Häh-agen-das as well.
Interesting, a few observations:

-It's really just a container, p, img, and button CSS framework (short of CSS's default flexbox)

-There are no components (Codeblock, quote, etc.)

-There is a semi-obfuscated IP tracker in index.html

While I find it noble in some aspects to create a simplistic blog layout, I also find it odd to post this project.
There's literally millions of kids who think a fat man with a beard delivers them presidents once a year if they're nice.
Republicans counter Biden announcement with dystopian, AI-aided video
> The difference is that Gradle has an obvious better alternative: Maven.

I do not find Maven to be an obvious improvement. I would say it's equally bad.
Of the DVCS systems that came out at around the same time (hg, git, and bzr all came out within a month or two of each other), I would probably rate git the worst.

The most notable issue with git is that it's help is... anti-helpful. It is pretty jargon-filled, and there have been numerous moments where reading a help page has left me actively more confused about what a git command is doing.

Of course, part of the reason why the help is so unhelpful is because git's UX is poorly designed. When even the help page has to admit that a command actually does three different things depending on parameters, you know it's bad.

I'll also point out that I've seen far more repository corruption issues with git than I have with any other VCS (and I've used CVS). Accidentally torching your data is quite easy in git, and appreciate the irony of an immutable store of data needing a garbage collector for the data it's storing. Something like Mercurial's changeset evolution and phases is far, far saner for development than working with branches in git.
YouTube Ad Revenue Drops to $6.7B During First Quarter