skysight-inc/HackerNews huggingface dataset:
Sure. Maybe there needs to be an owner/assignees distinction?
Honestly, I hate Redmine with all of my strength, we use it at work and it's a really really large deployment, a fuckton of projects, another fuckton of people and I don't really know if the people managing it did a terrible job or if it's just bad. Some years ago we needed two new types of issues with all the baggage that comes with it and it was HELL, we almost had to do a sacrifice to Satan to make it work like we needed. It's so granular that it becomes an inconvenience, I'd say it's the best advantage and disadvantage of it. Also if it weren't for the python-redmine package I wouldn't touch that API not even with a laser.
This was fun to read, but I'm missing some context I think. What did Dan Brown do, to deserve such a vituperative put down? I mean besides the writing, which I understand is not great. Did he refer to himself as "renowned" something?
NumPower: A PHP Library for Numerical Calculations and Scientific Computing
Long live redmine!
The game loosely draws on the Roadside Picnic [1] by Strugatsky brothers but moves the plot to the Chernobyl zone.

Stalker the film is based on the Roadside Picnic story, btw.

[1] https://en.m.wikipedia.org/wiki/Roadside_Picnic
He also claims that TOTP storage in the password manager is useless. It's only useless if the entire password manager is compromised. If your attack vector is a keystroke logger, or compromise of a single password via a dump, or even someone having written down the password... storing the TOTP is still effective.
This kind of development is a terrible experience if the overall infrastructure isn't setup to support development also.

To have it be successful you need to not have persistent VMs that individuals are connecting to individually but rather ephemeral VMs that get created/deleted when a user needs one.

Those ephemeral VMs then need to be able to connect to the rest of the infrastructure that supports development - your artifact repositories, version control system, docker nodes, k8s clusters, etc.

Your artifact repository then needs to mirror public repositories where your source packages can be found, be it pypi, github, golang, helm, docker hub, etc. You will now have to setup your IDE or shell package manager to use this artifact repository as a proxy.

The developer tooling is usually an entire team and the infrastructure for the VMs is also.

Not an easy or cheap thing to setup. But it can be done so that the developer experience is good and so that you don't have developers running random versions of software.
this is effectively how nostr works. you generate a public/private keypair. the keys are bech32 encoded.

https://github.com/nostr-protocol/nips/blob/master/19.md
I have posted on HN before: If you can get out of Academia, do so. It's in your best interest to get out. This article spells out why. Academia is like spending your adult life in middle school.
You could have just stayed silent.
> Often this will be combined with fallacious notions such as “remember this device”, the idea being you only have to go through all this the first time when logging in from a particular device. This idea is fallacious because the web has no notion of a “device”, and this is a very intentional design choice made for privacy purposes. We are literally living through the gradual phase-out of third-party cookies, amongst other functionality, specifically to try and prevent this sort of thing, so why do web developers persist in believing in this fiction of a “device”? My own browser erases all cookies from an origin immediately after the last tab from that origin is closed, so these sites are convinced I am logging in from a new “device” every single time, and then demand I respond to one of these challenge emails.

The phasing out of third-party cookies has nothing to do with the "remember this device" functionality, because those are almost always powered by first-party cookies, which are not being phased out.

The author has configured their browser to throw away cookies when the last tab closes, and that's their prerogative, but anyone who is savvy enough to configure that setting is also savvy enough to understand that that will break "remember this device". For everyone else, that phrasing is a perfectly reasonable abstraction on what is actually happening.
Great post, I came to much the same conclusion when building my app - a secure token is generated on account creation and users are encouraged to save it in case the need to restore their account. I blogged about the implementation below together with how the UI looks (under the "Authentication" heading):
https://khromov.se/building-a-privacy-friendly-self-hosted-a...
That's not true. Most places still had vaccine mandates with Omicron and heavily propagandized hatred and segregation.

We always knew how Natural immunizaty worked and Omicron was easy to predict, but in 2020 it was a conspiracy theory to mention natural immunity.

> The end result was approximately halving the death toll, plus delaying a lot of infections until after the vaccine was available also cut the death toll considerably. All in all millions of lives were saved by the measures you shun

The halved death toll is a beautiful fabrication of yours. not at all supported by looking at excess deaths, which is another analysis that was frowned upon and ignored while implementing Draconian measures.

You didn't really saved much, you pretend you did and the excesss deaths are now more, funny that. Also, all the suicides, backlogged patients who didn't get treatment in time (cancer deaths) and the indirect deaths and lowered quality of life due to economic impact that disproportionately affects the least wealthy, that's all ignored for the hypothetical "my elephant repellent worked".

> And it's not a matter of wanting the masses to be scared.

WhatsApp messages between politicians and very obvious propaganda (see NHS) Zwith people on respirators say otherwise.

>Rather, the pattern I have seen again and again of people treating those they regard as good people as safe. That's been the huge chink in the armor against Covid all along. Doctors mostly got infected from coworkers, not patients because they were careful around patients and let down their guard in non-patient areas.

I don't even know what you're talking about here.

"Letting the guard down" was always a ridiculous thing when your "guard up" is unscientific and authoritarian hygiene theater. Your politicians didn't care for it but would send the police so you would.
> Using the the top 10 percent of incomes is meaningless...

Similarly, as the OC notes, quintiles aren't useful either.

The genius of coining "We are the 99%" was to better draw the distinction.

I'm struggling to think of possible labels and differentiators. To better inform both discourse and policy making.

Maybe something based on log-log scales?

Thoughts?
30 theaters showing "Oppenheimer" in Imax-70mm film

UNITED STATES

Tempe, Ariz. Harkins Arizona Mills 25 & IMAX

San Francisco AMC Metreon 16 & IMAX

Universal City, Calif. Universal Cinema AMC at CityWalk Hollywood & IMAX

Hollywood TCL Chinese Theater IMAX

Ontario, Calif. Regal Edwards Ontario Palace & IMAX

Irvine, Calif. Regal Irvine Spectrum 21 + IMAX

Sacramento Esquire IMAX

Dublin, Calif. Regal Hacienda Crossings & IMAX

Fort Lauderdale, Fla. AutoNation IMAX, Museum of Discovery & Science

Buford, Ga. Regal Mall of Georgia & IMAX

Indianapolis IMAX Theatre at Indiana State Museum

Detroit Chrysler IMAX Dome Theatre, Michigan Science Center

Grand Rapids, Mich. Celebration! Cinema Grand Rapids North & IMAX

New York AMC Lincoln Square 13 & IMAX

King of Prussia, Pa. Regal UA King of Prussia & IMAX

Providence, R.I. Providence Place Cinemas 16 and IMAX

San Antonio AMC Rivercenter 11 & IMAX

Dallas Cinemark 17 & IMAX

Nashville Regal Opry Mills & IMAX

CANADA

Calgary, Alberta Scotiabank Chinook & IMAX

Edmonton, Alberta Scotiabank Edmonton & IMAX

Langley, British Columbia Cineplex Cinemas Langley & IMAX

Mississauga, Ontario Cineplex Cinemas Mississauga & IMAX

Woodbridge, Ontario Cineplex Cinemas Vaughan & IMAX

Regina, Saskatchewan Kramer IMAX, Saskatchewan Science Centre

UNITED KINGDOM

London BFI IMAX, British Film Institute

London The Ronson Theatre at the Science Museum

Manchester, U.K. Vue Manchester IMAX & The Printworks

AUSTRALIA

Melbourne IMAX, Melbourne Museum

CZECH REPUBLIC

Prague IMAX Theatre, Palac Flora
That’s pretty neat, I didn’t realize there were any that large.
I agree that comparing serfdom to market labor and housing isn't particularly enlightening. But there were reciprocal obligations involved that would be unheard of nowadays even in the most renter-friendly places. A lord would be expected to provide physical protection against bandits. "Evictions" were comparatively rare. In times of hardship, it was customary to provide what we'd now think of as welfare. Common resources like ovens and roads were expected to be provided by the lord.

On the other hand, serfs were also bound up in much more obligations than simply providing part of their income to the lord (e.g. it wouldn't be the lord building and maintaining the road that he had to provide). And they couldn't get up and leave, even in principle, if they had a bad lord.
I think there are two approaches to the issue:

- You consider that the user getting their account pwnd is their problem. Let them set their password. That includes things like forums and other websites where an user losing their account is not critical and you can easily just tell them "too bad, use a better password next time" if something goes wrong.

- You consider that the user getting their account pwnd is going to be your problem. You're a bank, or some paid service for instance, and the user will ask for support if they lose access to their account. In this case it 100% makes sense to force a password on the user to prevent them from selecting something stupid IMO.
I keep coming across examples where io_uring cannot be used. It seems like functionality that needs to be scrapped and replaced by something more robust. It's the fastest thing that no one seems to be able to use.
Especially the old canard "if everyone in your life is saying you're the problem, then maybe you are the problem"
metacrawler, IIRC.
Alerting: Expectation vs. Reality
> This is what happens when we let accountants run companies rather than engineers

While I agree with you in the essence of what you’re saying, you should replace “accountants” with “MBAs” or “CFOs”. Most accountants don’t care about how the final balance sheet looks, they care about the flow of money itself. I have gained a lot of respect for that, as I’ve understood it more over the years.

Accountancy is nothing but “financial engineering”, really. They don’t decide on the budgets, they just code it in.
Just declassified: US senator caught up in Section 702 FBI surveillance dragnet
Reddit Protests Escalate as Rebel Mods Are Kicked Out
This is basically exactly what WebAuthN/Passkeys is, right?
Important Coding Habits
I wonder if “true multi factor” security requires exclusivity between each factor. So, you cannot “know” anything about the “thing you have”. It should be more like a yubikey that you plug into your computer and which is secure enough that you cannot get the information out of it to “know” it. That’s a little harder to do for the “thing you are” factor because we can’t design a system to use a feature we can’t understand. And maybe we shouldn’t really “have” the thing we know, as in, it shouldn’t be recorded in something we have. Of course that makes it easier to forget. But then again, I don’t have my 1Password master password recorded anywhere. If I forget it, I’m pretty fucked.

I’ve often considered moving that master password to the frontier of email access and just never recording a password and using password reset for every login session.

Regarding API keys vs passwords, a difference is that API keys are something that are used on your behalf by automated systems, whereas passwords IME are always something you manually input at the time you need it.
Where I work restricts admin access. We can request it temporarily and all actions are logged.

Works just fine on macOS!
GitHub is a development platform, heavily related to tech though. People that are experienced enough to do git push can definitely manage API key-like passwords. This solution is not exactly suitable for any other industry, its literally a call for bankruptcy (unless you are B2B, and even with that, so many tickets, support overload...)
Shared accountability is no accountability.

Shared responsibility is called collaboration.
I give away for free all my programming output. But programming isn't the only thing I can do. I'd pivot to something else. Or I'd use that AI to enhance my programming productivity.

Just like word processors have eliminated the typing pool jobs, and have also greatly improved the productivity of writers.

(I know this because my dad wrote a book before word processors, and a great deal of the time was spent typing the draft double-spaced over and over and over again.)

And lastly, if you work in a make-work profession that is more efficiently done by automation, your career is doomed one way or another. For Hollywood, if the union makes it so that making movies is cheaper outside the US, the obvious is going to happen.
It's interesting to see how differently it all worked out in the US. I've never seen or heard about T1, I personally went from dial-up straight to Ethernet. Some people used to use ADSL. DOCSIS is also still a thing, but it's being replaced with better technologies (the slow uplink is meh).
Ask HN: Which CS publication used term “object-oriented” for the first time?
I'm curious which computer science publication explicitly used the term "object-oriented" for the first time.

So far I didn't find an earlier one than Dan Ingalls' "The Smalltalk-76 Programming System" (https://dl.acm.org/doi/10.1145/512760.512762) published in January 1978, what surprised me.

Remarkably the term is also used in developmental psychology, especially for child development; I found publications about "object-oriented behaviour" from the sixties, e.g. http://www.jstor.org/stable/1126427 from 1966.

Does anyone have earlier CS literature references than 1978?
> Too often, grad school applicants are just kids that have overachieved in academic settings and think to themselves “I’ve been good at school my whole life, why not just do school forever?

Anecdotally, I did not observe this during my PhD studies (theorerical CS) in Central Europe. I think this might be due to the separate 3 year Bachelor track, then a 2 year Master track, and only then 4 year PhD studies.

Sure enough, a lot of applicants faced tough career decisions after graduating, but whoever started the PhD usually knew what research is about and that it's going to be work first and foremost, not just "more school".
Gosh, you're fun.
Can you specify what in practice could be an issue with a "forced" password? Are some characters harder to input than others or is it a different problem?

For the non-American aspect, it's extremely common for websites to force ASCII today (either explicitly, or because using anything else breaks in various unexpected ways) anyway, I doubt that any internet user around the globe will have an issue with that. That boat has sailed in the 90s.
> Is your concern with the fact that clients can lay out their sites with blocks?

Not so much.

> If it's with not being able to use a local IDE - that is something that's currently possible by bundling your Svelte components into vanilla JS and importing them into your Primo blocks & passing along data as fields - but I'd give it a couple weeks before using it in production until we smooth it out.

Yes. As a developer I don't want to deal with WYSIWYG drag-n-drop interfaces. I want the freedom to develop using my already established workflows. What you suggest sounds like development for the Primo interface, i.e. Primo dictates the high-level structure and I can develop components for it. What I'd like is at the other end of the spectrum: I develop the entire website in Svelte and make it compatible with Primo by adhering to some constraints.

> But what you've described is essentially how I do my client projects - I build it all with code (usually reusing blocks from other projects) and hand off a site that literally any of my clients can edit on day one with minimal training.

Sounds like we're on the same page then :)
One really important detail to mention. An advice or a personal opinion I have. Courses, books and theory are great; but practical experience is much, much better. Only when you are actually immersed in a professional environment doing things related to a particular topic will you really understand what that kind of job is really like, what practices are standard, how to use the tools, etc. In my humble opinion, go for it as soon as you have the chance! Don’t get bogged down in theory. It’s also important, but try no to be intimidated or feel underprepared. Jump into the pool. Good luck.
Files get deleted immediately, the USN Journal only keeps track of the events (including delete events). It's basically a log of all filesystem events (up until a certain point in time, due to size restrictions).
Using economics terminology doesn’t make this insensitive opinion any more valid.

Technology is for people, not the other way around.
This is basically what passkeys are, right? Except the autogenerated password isn't even shown to the user, just stored immediately in the user’s password manager.

(I recognize that it’s a bit
more involved, eg if i get it right, passkeys add some public key encryption to the mix to avoid sending the “password” over the wire needlessly often etc, but those are just icing on the cake as far as I’m concerned)
My main point was how they pushed the vax on people even when existing data showed young, healthy (which means no obese, diabetic, hypertense individuals), males were not at sufficient risk to mandate it in universities and push it on everyone regardless of the obvious data by age group, health, and susceptibility. That is not science. That is social policy and politics in the face of common sense. Please stop co-opting the word "science" in this manner.

I have had all of my children vaccinated with the standard course of immunizations, but I am glad I held off on this new vaccine. My children had COVID, and they are healthy by definition. Tell me how acting on common sense, the history of natural immunity in science, and data that was readily available on who was susceptible to COVID very early on contrary to what "The Science" (aka Social Policy and Politics) was saying , is listening to a mob? Use the same date source you used to pull your VAERS numbers and see how obvious it was who was susceptible by a margin early on, and maybe you'll be able to understand how I arrived at my decision to not vaccinate my family who already had COVID.

>...and is one of the safest vaccines ever produced.

This December 14, 2023 will be three years from the first vaccine given. "one of the safest" is a blanket statement and "one" although a quantity is non-quantifiable in that sentence. The article you site is from data collected from December 2020 to August 2021 only 8 months from first vaccine. Pfizer vaccinated their control group from the initial vaccines, so that long-term study was squashed by Pfizer. And the adverse effects data are still being collected and examined in light of reporting criteria and classification. Yet, the blanket policy to vax everyone without prioritizing by harm-benefit analysis and ignoring the science was not just negligent but intentional to push a social policy over the data. Three years is not long-term in the vaccine world. Tell me, if a long-term effect comes up like higher incidences of leukemia or other diseases or undesirable side effects 5 to 7 years from now, will you look back and feel good about the non-scientific pushing of a vaccine on those who were well outside of any reasonable benefit-to-risk ratio? I am glad my young children didn't get the vax. None in my family have had another COVID symptomatic infection or tested positive since we had it the one time. Meanwhile, "healthy" coworkers with 2 or more boosters have had multiple infections with loss of work even when working from home because they were that sick. So do you agree with vaccines and boosters for the non-susceptible demographic who have already had COVID? I'd be curious on your viewpoint on this.

EDIT: Your name explains it all ;)
> You realize that the "rent" you pay includes the cost of the land, as well as the actual building on top. My point is that comparing whatever serfs paid and got in return (ie. only access to the land) and what the typical renter today gets (ie. access to the land and a finished building) isn't comparable.

I'm pretty sure most serfs were renting pre-existing dwellings.

And I'm not sure what you're getting at with this welfare state stuff. Yes we get taxed and receive things in return but so did the serf. The only difference is the serf typically only paid one tax for everything that also included his rent. Currently, people are paying the same amount as the serf did just for rent (30-50% or more) yet the landlord has no responsibility to maintain roads and any of the other basic services he did back in the day. Instead the worker has to pay for these things on top of what he is already paying the landlord. The only benefit the modern worker is getting over his medieval counterpart is better quality housing.
...unless the metal at the crack location reconfigures itself to a lower energy crystal structure due to the boundary condition. Which apparently is not happening here.
I don’t push with any access token, I push with SSH keys.

An alternative IIRC is to a UI client like GitHub Desktop which lets you login/SSO everything like that, although I’m not sure if that only works because my SSH credentials are configured.
I just realized that the top 10% in the UK is what a software engineer earns in... Poland.

Sometimes it is good to realize that those of us who work in tech are privileged.
Maybe she used a spell to get the job?

I watched this 8-part documentary where kids get invited to a special school to learn magic.
That is quite the statement, sarcasm aside. I guess I need to read more on hard materialism. These sound like folks you probably don’t want to chat with at a dinner party.
I play a japanese gacha game and there is no password there for your account. If you want to login they send you a code to your email and then you use that (valid for 30 seconds). I'm not a security expert but I always liked that for some reason
For awhile "poor man's ISDN" was a thing with some local ISPs - you'd get something on your end that could shotgun multiple 56k modems, and they'd be able to bond them together.
Those request IDs can be used if you escalate to AWS support, they can point you in the right direction. It’s generally not a fast process, but it’s something.
Its always awkward when the treasury department needs to reshuffle their terrorist organization designations because the same organization is getting bombed in one country and gets a shipment of money, guns and explosives in another. Gets especially surreal when you got members of the group in gitmo, I guess you just hand them some weapons crate on their way out the door. Maybe the CIA can start to issue work visas for terrorists.

Perhaps terrorists should just name themselves after whatever the state department is calling them, seems to work fine for the wikipedia.
Just use passkeys. Then we can get rid of 'passwords', 'Forgot passwords', 'SMS 2FA', etc for good and make password breaches (not data breaches) a thing of the past.
Ben Franklin laid groundwork for the US dollar by foiling early counterfeiters