skysight-inc/HackerNews huggingface dataset:
And just to point out, the logical capacity of those disks increased with each physical reduction. Nearly doubling each time. (The best 8" disks had about 1/2 of the capacity of the worst 5 1/4" one, and the best 5 1/4" disk had about 1/2 of the capacity of the worst 3 1/2" one.)

I guess even if IBM didn't put it on the PC, everybody would migrate into 5 1/4" disks on almost the same timeline. Those changes were very compelling back then.
The number of housing units has not kept up with population growth. There's your housing shortage. Blaming Airbnb for this is laughable.
Not even once.

(too late)
Disagree completely. People walking away from public computer terminals, e.g. libraries, are greatly helped by shorter sessions, even if they're imperfect.
Well you do have it at home, the emulators are right there in the browser.

Understanding the past is the key to the future, my friend.
How is the pandemic relevant?
> I often work in secure environments and it gets tiring, tiring to the point I admittedly start to take shortcuts to make my life easier, shortcuts that ultimately defeat a few layers of security in some way to keep my sanity so I can... do the actual work.

Yeah, and without getting as agitated as that other guy in the comment thread, this is where security becomes its own enemy. And how achieving effective, practical security is a lot more subtle than it seems.

For example, we've been talking about putting 2FA onto the identity provider allowing access to internal high privilege administrative interfaces, for example via Duo, which requires you to authorize a login via your phone. However, an important question there was: How long would we trust a 2FA authorization?

If every single login after a session expiration requires 2FA, people would riot and/or start looking for workarounds. That's not great. But eventually, we ended up trusting a 2FA authorization for like 12 hours. That's one work day, even if it goes longer. Usually this means you have 2 Duo pings in the morning - one for the VPN and one for the internal IDP. That's entirely acceptable imo.

And in a similar sense, SSO can increase security while increasing convenience as well. For example, our ADFS allows sessions of about 4 hours, so if you access it once in the morning and once during midday, you stay logged in. And this in turn allows systems like the Keycloak acting as an IDP to work with very short session timeouts. As long as you're working, your keycloak session remains active. Once you're not active for 5-10 minutes, you're logged out from keycloak - but that's just 1-2 redirects on the next click and you're back in.

And once this is simple and convenient, people want to use this. And suddenly you got rid of a mess of local accounts in different systems and everything is based on the central directory. And that, in turn, is more valuable than validating MFA multiple times a day in the grander context, at least in my book.
How to Roman Republic 101, Part IIIb: Imperium
> I have a nice set of front windows, but that means a risk of someone breaking through them. I accept that risk for the windows - the extra light and visibility is well worth it, and the windows are not the only way in. Compare to short sessions.

Okay. I will compare using house to short sessions.

Short sessions is like having house with every doors having a lock and I need to use the keys to get into different room, if I stay in one room for too long, including the shitter. I also need to use the keys to open windows and the oven. And developer going "well, you shat yourself ? That's your fault, should've had keys on you at all times".

That's what short sessions are. Delusional security clowns ignoring usability. It's less than security theatre, it's security circus.

Requiring re-auth to pay some money or delete something important is reasonable stance.

Requiring re-auth few times a day just to browse data in the app is not,
> Also, try/catch will never compile in the JIT.

If this is an actual concern (as in you have measured and try/catch is actually affecting something performance sensitive): you can most likely mitigate the impact by isolating the try/catch bodies in separate functions.

I haven’t verified this in every JIT, but I saw meaningful perf improvement in V8 for real world degenerate cases where the performance did actually matter and make a significant difference. But seriously, as always, measure before optimizing stuff like this! It might matter, but it seldom will for anything more than academic curiosity.
It really depends. I would certainly comment less often on HN if it logged me out at 4 hours.

For my online banking it's okay if they kick me out after 15-30 min.
With all that has gone on, I think it is another example of how it works so well. Strife happens, what is key is dealing with it. And the us seems to be doing fine.
“Open” “AI” isn't (18 August 2023)
The world is incomparably better than pre-capitalism. Yes, the healthcare system in the USA sucks. Doesn’t invalidate the rest of the thing.
a mind reader? no, it's fairly clear in your writing.
> Does this change the scientific consensus?

No. This "possibly carcinogenic" classification (IARC group 2B) comes from IARC. While nominally IARC is an agency under WHO, in practice IARC is known to operate very independently. Independent of WHO, and independent of scientific consensus.

For example, cell phone radiation is also in IARC group 2B "possibly carcinogenic". While the scientific consensus is that cell phone radiation does not cause cancer.

Also, IARC never classifies anything non-carcinogenic. See the empty group 4 here:

https://en.wikipedia.org/wiki/International_Agency_for_Resea...

Scientific consensus may change, but the odd nature of IARC is somewhat well known. If scientific consensus changes, it will be after some influential new studies, not because IARC has published a report.
This is just a demonstration of how unfriendly is Linux to supporting third-party software. You are supposed either to use software from distribution's repository or compile it yourself. And if you are a software developer, then you are on your own to decide how to support hundreds of different distributions (the most popular way is to statically compile everything into a single binary).

Such scripts remind me of DOS-era "installers", and they are awful:

- it is unknown whether your distribution is supported or not

- this script is probably not tested on many distributions and can break something

- it is unsafe, because you are running a code that some random person posted on the Internet without any sandboxing
>“a question arose as to whether chemicals in breakfast cereals interfered with the uptake of iron or calcium in children. An answer was needed. One obvious way to do the study, he said, would be to use radioactively tagged trace amounts of iron and calcium and to follow the fates of these minerals in the body when children ate cereals.” (Read Gina Kolata, The New York Times, Jan. 1, 1994)

Maybe you understand why my grandfather ate cornflakes and a banana as his only breakfast for 50 years... he was the control group.

Why do you think there has been an uptake in product marketing to push IRON and CALCIUM rich 'breakfast' diets on kids for "strong bones" (and by 'strong bones' I mean bone marrow blood production...) - you know.. the thing destroyed by radiation?

-

And I have some super sinister comments that I dont think I should share here...
Interesting… My mother was a flight attendant for 35 years and she developed breast cancer later in life. She was told it was probably environmental not genetic based on testing.

You do get additional radiation exposure while flying. Wonder if we should also study the effects of higher radiation exposure in the airline industry.
Sure, but why not?
Not sure I follow although interested.

Is the hypothesis that ASD is only over represented in male to female transitioners and do so younger but when all those have transitioned are considered there is no over representation of ASD?

It make be hard to pick apart since ASD male to female rates are so lopsided.
https://archive.is/Ojz5c
> Try saying, "Great, and you?" even if you don't mean it at all.

Nothing I hate more than a liar.
My bank does that but also:

* logs out after 10 minutes of inactivity - so doing anything that involved switching between accounting app and it is annoying
* not allowing more than one tab open at once - that's just stupid in its entirety.
If there were one food & safety item the Biden Administration should put its focus on, it's destroying the US addiction to sugar generally and high fructose corn syrup specifically. It would be an immense contribution to roll that backwards. And fix the mistake of proclaiming fat in general to be the problem decades past, by pushing national education on healthy / unhealthy fats. The US Government has a budget to put ads everywhere just focused on this matter.

And regarding the healthcare industrial complex. For the US scenario, there is only one approach that will work at this point: California needs to build its own universal healthcare system from the ground-up, and that includes utilizing the UC university system to train / educate its labor just to build that up. It's already understood how to model it, there are numerous good example nations to choose from (there are obviously multiple variations of a universal system that will work, and far better than what the US is doing now). California has scale and can control many aspects of a healthcare system that a smaller, weaker state can't (including manufacturing its own generic drugs if necessary).

Many prominent politicians keep trying to force universal healthcare as an idea, as though we can just slap it on top of our existing cost structure. It doesn't work right now due to the extreme cost of US healthcare (unless we want to instantly go broke nationally). You have to be able to start over from first steps and contain the cost correctly from day one. California is one of the few places that can do that, and it has the best shot at it overall (some money, majority favors universal healthcare politically, UC system, etc).
That's the thing — normally at first sight you might recognize "И" as mirrored "N". However when you're used to reading Cyrillic alphabet, you see it as "И" at first and only later realize that it's mangled Latin. Given enough similar looking characters, it becomes hard to read. This doesn't work all the time, e.g. if a word has a single "Я" ("ya") in place of "R", it's usually easy to read. Your milage may vary.

Speaking of keyboards, how the hell do they think this product would be sold in countries where there are two sets of alphabets on keyboards if it already comes prefilled with nonsense characters? :)
This is "flour is a whole ingredient because I say so".

The properties of flour are in fact quite different than the properties of whole wheat. And of course there is then a continuum, from whole wheat flour to white flour to bleached white flour.
Is the problem in Barcelona that the ration of tourists to locals is broken (I agree it is and didn't like it there when I visited because of this) or is the problem affordability as called out by the parent comment? If the issue is affordability this can be addressed by increasing supply.

If the issue is simply too many tourists flooding the city and changing the character, it's a different point than I was responding to and I don't have any well-formed thoughts on potential solutions and causes.
"Wayland" works fine, but as soon as you start mixing X11 and Wayland apps, it starts getting complicated due to different levels of functionality support for the two APIs.

I started running into them pretty fast when I added a 4K monitor to my Ubuntu 22.04 system and enabled fractional scaling. All of my Wayland apps look fine, and all of my XWayland clients look awful, blurry and obviously scaled. Working one by one to switch them over to native Wayland has been a hassle for various random reasons, most notably:

* Slack: works from the icon in the taskbar, but when auto-started at login does so in X11 mode

* VS Code: works fine when run from Terminal, but when launched from taskbar icon shows up as a different "app" in the taskbar. Launching from the terminal starts in X11 mode

* Zoom: requires more setup in order to share screen. The Zoom UI for screen sharing doesn't work so it's not obvious how to stop sharing screen. It also freezes or crashes all the time for no discernable reason, including locking up when joining some meetings three times in a row and then succeeding on the fourth time.

So if you're not really leaning into what Wayland offers it works fine, but even just fractional scaling has been a four-month hassle to get things working as expected.
Have you seen that cool recent movie set on Arrakis? I believe it's called ⊃∪∩∈
> often sell

So it sounds like they sell a range of stuff and bulky stuff is sold "often". I don't see the point of bringing this up in the article or limiting the comment to it.
> I really hope that when it's my turn

I watched mother-in-law go through the expensive and painful burn/cut/poison and hospice with two morphine patches. On flight home I determined I was going to learn about it and find a different course than what was offered by the medical establishment. The book World Without Cancer helped start my journey. It's not just random bad luck, so take action.
This is so true, and so wrong. We will look back and see it as outright barbarism.

I think we're headed towards a major Constitution revision (or a sequel to the Declaration of Independence) within a couple of generations, and the "rights" we will enshrine will include things like "health care whose PKI is health outcomes and not profit" and "money cannot be a factor in elections".

Of course, voter education has to go right along with that.
I'm going to go with that old chestnut: It Depends. The author gives a variety of scenarios where the session could be stolen, but doesn't really discuss the context and threat models around them. There is no one-size-fits-all. Shorter expiration times might be the right choice in some scenarios, and useless in others.

Also, yes, shared computers without user separation are still a thing. Not all libraries have the budget or technical expertise to secure shared computers as well as possible. Also, there's public WiFi, something I'm betting the author uses all the time.
Some of these, maybe. It rains quite a lot in Miami and Houston -- Texas is big, and Houston is right on the Gulf Coast. It's more like New Orleans than it is Lubbock.
Bitcoin shaken out of lull by SpaceX sale worries
Why not? Those control combinations can be disabled if I remember correctly. Also, as they conflict with modern hotkeys, they should be changed everywhere.
Back to the Future: On Prem Is Back
Also good to discuss. Not really an AI startup (I won't be applying myself) but I did make https://scotchwerks.com ;)

Hopefully others are doing more interesting things!
Did a cursory dive through, check: https://textual.textualize.io/tutorial/ and https://github.com/Textualize/textual/blob/main/docs/example...

...what have people had success with in golang-world? Anything reasonably equivalent someone could recommend? There's a fair amount of "stuff" for TUI's in golang, the thing that's very attractive about 'textualize' is it feels very "web-browser-y" and has a nice (scrollable!) table view.

`tview` seems interesting (eg: check `brew install dbui`), but feels a bit more like _you're_ doing all the imperative `if KeyPress.A: do_something()` instead of declarative, nesting navigation, etc. (perhaps that's the difference between an "application-centric/SPA" view of "control all the things!" vs. a document centric: "add components to a page and let them flow").

Any feedback on the items in this list? https://codeberg.org/tecras/awesome-go#advanced-console-uis
I went to slovenia with my cousin and we stayed at a wonderful Airbnb. The host brewed his own beer, and we drank it while hiking the mountains, and while paddling a canoe across the lake there. The countryside was beautiful, the people were kind, wildflowers and fruit trees everywhere. We learned so much about the country and it's history, encountered dishes we had never tasted, and fell in love with a life that would only ever be a fleeting memory.

I think about that trip constantly even though i have had many since.

I understand why you might not want to travel, but... I don't sympathize, as it appears you do not sympathize with those who do travel.

To each their own, eh?
What kind of journalism is this?

First, The Guardian uses statements from a no-name group "US Right-To-Know" instead of doing fact-finding themselves. Fact-finding is what good journalism is all about.

Second, it is quite bold to assume that any academic who produced a joint industrial-academic report is corrupt. Setting aside the borderline irresponsible generalisation, many universities set strict conditions for such cooperation. The most prominent is a condition not to be paid or remunerated in any other way for the joint work. The Guardian did not even try to check if any remuneration took place.

This makes it impossible for me to form an opinion about the article contents.
I'm explaining it poorly; think about the urls for common authentication redirects and how it usually looks when you go through an SSO portal.

Probably you start at a page like:

sso.company.com

When you try to access a service, you're taken to probably something like

sso.company.com/auth

If your company uses Microsoft or Gmail, very likely before you reach your SSO login, it may temporarily flash MS/Google's auth page briefly before redirecting or loading the elements for your company's SSO portal

After login, probably it will then load something like:

saml_provider.company.com/autheticate/redirect

saml_provider.company.com/[some generated string in the url]/some_action_page

and depending on how it's configured, you might go through a few of those types of URLs with no direct connection to your company or the resource you want, but it's just the authentication process passing your authentication from service to service until finally it figures out to return you to your originally requested resource and it passes an auth token. †

The reason I think this is frustrating is that it's very fast, no user input, but it is observable by the user; you will see the pages loading and the long urls, sometimes some basic info is printed to the page with simple HTML, but the user has no idea what's going on.

Combine this with the fact that this is exactly what happens when you accidentally click on a spam site from search results, and my problem is "how can a user possibly know if this redirect spiral is a legitimate authentication process or if they've accidentally clicked on something compromised?"

† sometimes these auth-spirals don't even take you to the correct item you were trying to get to in the first place, it takes you to a generic landing page...Reddit is guilty of this from my experience where logging in to subreddits that are flagged NSFW will redirect me to the reddit front page instead of back to the subreddit I initiated the log in to check
I wandered just a bit south on a whim with no destination and as you go even a bit past the first major city the roads are empty, people just leave the highway whenever, the city streets are dirt with massive pits, and the small towns can resemble permanent homeless camps with fences cobbled together from box springs. The experience feels quite lawless (or at least significantly different enforcement) than a drive at random in the United States.

I know the whole country is not like that, but it is not a vacation spot I would go without a plan unlike the US where you can do a cross country drive and rely there will be services almost everywhere.
What about the crypto gals?
Article just turns into blatant spam for a Sonos Soundbar about 3/4 of the way through.

--

Last week, I tried the Sonos Arc...

At $900, the Sonos Arc is pricey. But it’s one of the few soundbars on the market with a speech enhancer, a button that can be pressed in the Sonos app...

[etc]

In conclusion

The Sonos Arc soundbar was helpful for hearing dialogue without the speech enhancer turned on most of the time...
> I think it's fairly telling that you started this thread with "What black magic do you have to cast to get devs to look at the documentation?" and have then pretty aggressively rejected all the simple answers to that question.

I only rejected your answer. I didn't reply to anybody else. How telling is that?
Maybe that something was the explosive availability of added sugar and other carbohydrates.
That question is so loaded because it begs for a loss of knowledge about Airbnb, and that’s not something I would not want to lose. However, do I think Airbnb is a net gain for humans? No. But I wouldn’t “uninvent it”, in the literal sense.
Of course I know that happens. Misinformation counts on it, to some degree (among other factors) or it wouldn't have any impact.

That said, I also don't support the idea of withholding information then telling people to be afraid of it. Show people what to watch for so that they can be vigilant with other information they come across. This tweet could have explained discrepencies, reviewed trusted sources for said info, but instead chose to amount merely to a "Be Afraid of X" which is arguably as bad as the misinfornation itself, in some cases.

Teach, don't just tell.
It doesn't even apply to consumer products. Thankfully to Apple's shareholder, they obviously ignored these rules.
Oh, that's also the sequence with the "peace / war" switch! That did make me laugh. Turns out it's a real thing, though - but they probably wouldn't have flipped it in this situation.
Texas approves plan to mandate Tesla tech for EV chargers despite opposition
The rules of engagement on this site call not for radical candor but for taking the most charitable interpretation of someone's words.

Maybe the OP wasn't blindly saying 'defend in depth'? Maybe they were advocating for evaluating what that defense does to the product as a whole? If they were, is their attitude worth describing as cancerous?
Another pet peeve is getting logged out just because chrome or FF upgraded in background...
You can compare a 737 to 777 and if the 777 per person were 10x more expensive then airlines wouldnt use 777. Not sure why this is hard do unterstand.
Not op, but as i understand it: they swoop in, load up the company with debt, fire lots of people, then go "oh, fiddlesticks.. whelp, what can ya do??" and throw up their hands as the company inevitably crumbles.

Citation: Read up on how Toys'R'Us was put through that wringer.

Edit: actually, here's a good write-up:

"Less attention was paid to the albatross that Bain, KKR, and Vornado had placed around the company’s neck. Toys “R” Us had a debt load of $1.86 billion before it was bought out. Immediately after the deal, it shouldered more than $5 billion in debt. And though sales had slumped before the deal, they held relatively steady after it, even when the Great Recession hit. The company generated $11.2 billion in sales in the 12 months before the deal; in the 12 months before November 2017, it generated $11.1 billion."

Article: https://www.theatlantic.com/magazine/archive/2018/07/toys-r-...

Archive link: https://archive.is/OH9QF
Best smoked bacon available in the U.S. — but it will cost you!:

https://vanderosefarms.com/product/americas-best-uncured-bac...
They say correlation does not imply causation, but have you noticed how often sentences with the word "correlation" also have the word "causation"?