skysight-inc/HackerNews huggingface dataset:
"A phone number is sufficient to password reset a Twitter account even if not used as 2FA"

This sucks because Twitter will sometimes force you to link a phone number to the account if it doesn't like your VPN or whatever
I think ER=EPR still implies physics is local, but locality is dynamic rather than static. It is a mechanism by which spacetime can be constructed from quantum physics, but all the physics still takes place locally on it.
.. and how many of the Microsoft applications actually use WinUI3? As far as I can tell they're doing their own thing (Office) or are Electron (Teams) or, at least in Windows 10, haven't actually been updated from WinForms.

The overhead of WinUI3 is pretty huge. The visual designer, a winning feature of Visual Studio for decades, is AWOL. Why? It's XAML, the same as the previous XAML designer! It's just .. broken?

The backward compatibility story is a disaster: you can get stuck in the UWP sandbox https://github.com/microsoft/WindowsAppSDK/issues/1780

What's the big Microsoft WinUI3 flagship app, then? Something people are actually using? Rather than just a few system dialogues. (How many Win11 settings pop up a Win32 dialogue box, still?)
Yes, somewhat for fun and somewhat for work. There are online cobol fiddle environments that can help you. Data is stored in something like a c Union on a buffer, and the programming style is pre-procedural, sort of like a very easy assembly language. The language is very wordy, and there aren't a lot of standard libraries.

It is ok for storing and updating records, but writing complex algorithms would be slow
In order (Western European perspective):

- base salary

- 100% remote

- flexible schedule (I can start to work at 7am/8am/9am/etc.; If I need to do some errands at 2pm, I can just do it)

- culture, product and tech stack. A standard no BS culture would suffice, but every company has its own shenanigans. A good product to work on would be nice, but I accept that the majority of products out there are just not needed at all. Also, I'm not anymore a zealot when it comes to the tech stack; and learning something new at the job is welcomed.

- standard vacation days (as dictated by the law of the country). I see the majority of unlimited PTO as a scam. There's a difference between what it's my right (my official 20-30 vacation days per year as per the law that no-one can take away from me) and what company says should be my vacation days per year (wich is highly dependant on my team/manager).

- at least in Western Europe, the health insurance is more or less the same everywhere, so it's not a perk in itself.

- free lunch/snacks/videogames is not a perk from my perspective if you are over 30. Even less now if we work remotely.

- education reimbursement could be nice, but I don't mind at all. I try to be self-substained when it comes to gathering knowledge that benefits my career

- no on-call rotation. But I accept that this is getting harder and harder to negotiate
I’m sure there’s a vocabulary in terms of local domains and being affected beyond the constraints of the light-cone as expressed on space time absent the wormhole so the absolute definition you offer can probably be tempered.
The newer Apple monitors use Thunderbolt 3, so unless your computer supports video output over TB3 on the USB-C port, it won't work. Macbook also supports video output using DisplayPort on the USB-C ports, so that's why it works with Dell and LG monitors as well as Apple monitors.
Pretty cool!

I would provide a live-demo link on the landing page, showing some examples of commits/projects, and the types of tweets that would be generated (or at least a link to your youtube video(https://www.youtube.com/watch?v=CsacqlCHlzE)

The only option is to sign up, and I'm reluctant to sign up with my GitHub account without first seeing the value.
So do you think it’s easy to convince people and governments to tie up capital waiting on a 20 year ROI on tech that doesn’t exist yet?

Minimize it all you want, but that nutcase has some big successes in advancing technology due to believing in a vision, expressing the patience necessary to get there, and yes, convincing others to do the same. I know I wouldn’t be able to do that and I suspect you can’t either.
Agreed, but it depends which TLD you use.

I used to have a .name domain which gave me trouble with less than 1% of every service I've ever used it with over 15 years.

I switched to a .net domain for my email last year, and I would be very surprised if I ever had any trouble with it.
(Context for below: I live in London)

I've grown to really appreciate and desire the "chilled out hybrid" model that some places are now offering -- primarily remote, but come into the office as much as or as little as you want, with a comfortable office that has the usual small company amenities.

Edited to add: flexible hours to accompany the above!

With this in place, I'd also look for an employer that's signed up the the Cycle2Work scheme, and has their office in a reasonably sensible location.

And to be honest, with the state of the NHS these days, I'd really want private health/dental insurance on offer.

I don't much care for the following [any more?]:

* Parental leave (although I use the existence of a generous policy as an indicator of the workplace culture)

* Unlimited PTO (I'd rather have clear expectations)

* Games in the office (Nice to have, but I'm wary of what sort of working culture this might indicate)
> it would benefit both technically and ethically from using non-Tor networks

Obviously the performance of tor is reduced when traffic increases, but performance isn’t the goal, privacy is. Increasing the traffic of "normal" use cases (as opposed to those targeted by state-level opposition) improves privacy for the entire network.

I agree that using tor for all your video conferencing and streaming needs is probably irresponsible, possibly unethical, but the performance is likely to be so poor that it’s not a good use case anyway.

Using tor for everyday text chat (by real humans) is unlikely to have a negative performance impact, and it does provide more noise for attackers to sift through, so it could arguably improve privacy for those who need it most.
So they have plenty of time on their hands, right?
I remember first time I tried Steam. I asked a mate "what is this steam thing?" to which he answered "its the piece of crap you need to install to play counter strike". They have come a long way since then.
I remember that, in the beginning, there were some concerns:

- "I need to download a lot of data, I want discs!"

- "I will be forever bound to Valve. What if they go out of business?"

I think the first point got kind of obsolete, because broadband is readily available compared to 20 years ago. And the latter also lost importance, I guess? At least I don't read that any longer.
Good Night San Jose – A Children's Book About San Jose California
Hrm, in which country? I'm Irish; in modern writing in Ireland and the UK, certainly anything from the last 50 years, it's generally used to mean racists, sexists et al. Wasn't aware there was any English-speaking country which had held onto the archaic meaning, at least as a primary meaning.

(India? Indian English has a few things still in common use which are obsolete in UK English).

Example UK usage from 50 years ago: the "Barry bigot" doll in S3E5 of Monty Python's Flying Circus (1972; it's a wind-up racist doll).
You can, it's called valgrind (or more accurately, memcheck). And people don't use valgrind because it is slooooooow. Dynamic checking is useful, but not an ultimate way to go.
Pragmatic Engineer interviewed [0] about Threads creation. It is built on top of Instagram systems, and the whole project is seen as a resounding success.

[0] https://newsletter.pragmaticengineer.com/p/building-metas-th...
Wak, a stack-based text processing language
Apparently decriminalised (fineable only) in ACT australia next month (along with the usual slew of recreational substances in small quantities), might be worth a trip, so to speak ;-)
I cover the "search keyword" use case with DuckDuckGo's bangs, but it seems even more general than that. Good to know. It's unfortunate that DDG's search quality is still behind Google's, as bad as the latter's still is, so the utility is still limited compared to searching those sites directly with bangs (e.g. !gh, !so, !bugzilla).
We deploy Erlang VMs to EC2 and they communicate just fine. Deploying via a Dockerfile and `mix release` has been a breeze.

As a bonus point, no real need for container orchestration as the BEAM just figures it out.
> Then they might assemble something like a robotic attack army and send it over after

Violence is undeniably primitive behavior.

It amazes me how many humans assume that other species would advance technologically to the point of interstellar travel while still holding on to primitive roots.

It's extra surprising from a community like HN where an abundance mindset is the status quo.
Are you saying that the renderer can't send information back to the website?

Also, perhaps you turned off JavaScript, and now all of a sudden the website can still execute code?
But would have been these bugs discovered if the browsers had not adopted the new format? There are many other image formats and their libraries which are most likely riddled with bugs, but nobody cares because they are not used by major software (certainly not the people capable of finding and exploiting these bugs because of poor time reward ratio). Being unused for longer wouldn't make them any less buggy.
I don't think they can kill it, ever. On the other hand, it looks old, and you'll forever have DPI awareness misery for cases like "two monitors with different resolutions".
> If I had any good idea, I would go pick up my Nobel Prize.

Well, we already have many ideas, as summarised by the various interpretations of quantum mechanics, some of which have instantaneous non-local interaction.

> The only thing I can really say is that I do not think that the wave function instantly collapses as this would be a non-unitarity evolution of the wave function.

Sure, but many people do think it does, and such an interpretation is totally compatible with QM.

> You missed my point, I of course did not want to say that turning on the TV is a non-local interaction, just that it looks like one to humans. So if non-local interaction was all that is going on in quantum mechanics, than it would not be that hard to make sense of it, as we have an intuition for non-local interactions, even though only from things that look like non-local interactions to us but are not actually non-local interactions.

But it's irrelevant because physics isn't about what things "seem like to humans", it's about what we actually measure and how to create theories that explain and predict it.
There’s a special version released in conjunction with Lambda labs that comes with Ubuntu - called the Tensorbook. High prices though
For those reading who are not able to switch stacks, these same ideas are being applied in other languages very successfully as well.

1. Laravel Livewire for PHP

2. Hotwire for Rails/Ruby

3. Blazor for C#/.NET

4. HTMX* as a general tool for any other web server

5. React Server Components (if you squint hard enough)

Phoenix Liveview definitely started the trend by showing a mature implementation of these ideas on the same level as the application developer.

I would argue number 5 is a bit of a meme, since you still have to write a ton of JS, but if you're more interested in the architecture ideas for structuring your app, there is an interesting parallel that I think can be drawn.

[*] HTMX doesn't really embrace the idea of calling a function from your server by name, but the ergonomics are similar when writing frontend code.
meredydd, can I host my own instance of an anvil app?
Plenty of IoT devices out there that run on full-blown Raspberry Pi's or equivalent boards. Paying someone to write embedded firmware is expensive, throwing together a UI in Python is cheap.

Not that this poses such an issue for those devices; I doubt they ever received firmware updates in the first place. Still, you'll find OpenSSL in the weirdest places.
Ever since I read a book on what Erlang/OTP and Elixir do, I question why we put up with kubernetes/openshift and microservices at all. Even phoenix seems to do what SPA/SSR frameworks want to push atm. Does this stack really put everything under the sun to shame?
The answer for any language is just to stick it in a container. Elixir fits inside a container, and the Phoenix generator creates a Dockerfile for you out of the box.
41 deaths seems to be on the low end to me.

Also sounds like he's blaming the tool, instead of the operator of the tool. I really expected that number to be higher when you account for:

Have all the operators had proper training to even work on this machinery?

We'lre all the safety features built into the machine from the OEM being utilized? Alot of the additional safety features are disabled to make it easier to run. Also no training is needed to have someone press the run button.

We're there auxillary safeties installed? (Light curtains, safety scanners with properly set warning and red zones).

A lot of times machine operators have no control over the work environment or equipment integration and are told to just get the job done with what they have.
Watershed event and "when"? There are multiple documented instances of the exact thing happening: https://en.wikipedia.org/wiki/Civilian_casualties_from_U.S._...
It's a difference of intent. Quite frankly, when I refer to someone as a bigot, I couldn't care less whether they find it hurtful or not; I do absolutely intend to condemn them, though.
Some people like being in the office. If you're a person that likes being in the office, it's not fun if there's nobody else in there with you (as is often the case in hybrid or remote-optional work environments).

It's not for everyone, and it's certainly not something that I'm interested in. But it's not unreasonable that someone prefers in office and isn't management.
> No, you shouldn't have to install this game on an SSD in order to avoid video or audio stuttering. No, you should most definitely NOT upgrade your NVIDIA 1080, 20xx or 30xx something card in order to play this crap.

Oh please. An SSD and a modern video card are the price of entry for AAA games.

That’s just PC gaming with AAA titles. They’re made to have the best graphics possible, not cater to old hardware. If someone doesn’t like it, consoles are a great value. They can also play any number of older games released over past years that are now heavily discounted.

Complaining that a blockbuster AAA title doesn’t work well on mechanical HDDs in 2023 is one of the weirder critiques I’ve heard. This person is just out to complain and/or would be better off on consoles.

> Take a look at the remastered PC versions of Crysis, they all look fantastic and they all run really well even on an old NVIDIA 1050 Ti GPU.

Crysis was released in 2007. The NVIDIA 1000 series came out a decade later. Of course it runs well. What point is the author trying to make? This whole article is strange.
When I read that once they got into the account all the attacker did was post a link to a crypto giveaway scam, I briefly wondered why someone who managed to get into an account like this wouldn’t try to pivot it into something more sophisticated. Then in the next sentence we learn they made $700k off of the scam!

I’ve seen these giveaway scams on hacked popular Twitter accounts for years, I’m surprised they’re still so effective. No need for an attacker to risk making $0 on a more involved attack when they can get easy cash like that, I guess.
I have the same:
- I don't have great work conditions at home
- I live in the city so commuting is not a problem(currently it's 7 min by bike)
- I enjoy having face to face contact with coworkers

I still can work remotely but I mostly work from office
Hah, sort of.

The difference is after 15 years the entire crypto ecosystem has somewhere in the range of 50-100m "users" worldwide (at best). ChatGPT alone has an estimated 100m monthly active users after less than a year...

You're correct in making the comparison but user adoption is the best metric to separate hype vs utility and AI is already absolutely blowing past crypto (obviously).
Think in terms of enterprise apps. Jira, say. But with enterprise stuff, you can't totally insist that the company do it your way. Too many companies have custom steps at points in their workflow. So you need the ability to do some custom process at some points in your enterprise app.

So you needed more than just a configuration file. You needed a configuration file that could contain code. That's what brings you to Lisp - the ability for a data file to contain code that could be imported and executed by a running program.
Negative articles get views.

I'm really enjoying Starfield, it's great.

End of story.

(Proof that positive stories don't get views)
> You seem keen on implying this is limited to "the current administration's staff", but that's just what we happen to have data on. Unless proven otherwise, it's reasonable to assume this over-representation is the rule

So this prevalence is an aberration compared to the base rate in the population, and therefore this aberration should be presumed to be the norm? Interesting approach.
Cool, a wild vector appeared.
You can find people today arguing for a single absolute standard of beauty. Usually they mean "neoclassical architecture".

And indeed it's what the original author from that time was arguing against, the "bigotry" mentioned. So it was clearly an attitude held by some people at the time.
The fact that they’re a private company helps a lot. There’s less incentive to extract money from customers in new ways that are lucrative in the short term but damaging in the long run.

I think their company structure also helps, where employees generally don’t work on things unless they actually want to. This means that you don’t end up with designers redesigning UIs that don’t actually need it, etc.
Smashing post. Just emailing you!
I had to learn it as part of my undergrad. It was the most unfun course of my undergrad.
Twitter has had support for proper TOTP based 2FA ever since Jack Dorsey got SIM Swapped in 2019[1]. This was also the time when they added support for hardware tokens like Yubikeys. Of course, one needs to enable it.

[1]: https://www.nytimes.com/2019/09/05/technology/sim-swap-jack-...
I've worked in two companies in Germany and, unless I'm wrong, both of them had 6 months periods for Senior position. At least the second one has no problem retaining good staff.

As several others mention here, this is mostly on paper only. In both companies I've seen people leaving with any amount of notice, between 1 and 6 months. You just asked your manager and, if you have decent relationship, you'd get an okay. If you didn't, there's really no reason for them to keep you doing nothing (which, at that point, is almost a given). The only real risk is if you have a really bad manager who wants to "punish" you for leaving, even if this is at detriment of everybody involved.

At least if the company from the OP is a very large one, I wouldn't assume it to be a red flag, but rather bet on the company having an overdeveloped bureaucracy department, who created central contracts who-knows-why and won't change them even though the practice is always different.
You'd set up the server so that it's okay if it gets exploited. For example, maybe its only job is decoding images.
The "author" either recently learned English as a second language or needs to upgrade from GPT-2.
We’re *finally* making a full-sized SD Expansion Card [video]
Not sure where you work but absolutely nowhere do managers tell devs what to do. They just have to accept whatever time they take off.

At GE everyone I knew took a lot of time off--including myself. At least 30 days per year and some quite a bit more. If you took less it was because your group didn't have a budget hammered out and all work had stopped anyway. I knew a dev that built houses until we had funded projects. I didn't work any of December in addition to my ad-hoc vacations throughout the year. Life lived. In no way shape or form do I like earned PTO. That's the scam.

I'm a highly paid consultant/partner/owner now and I have to fund my time off. Do not like it. I'm paying maximum taxes on all of my PTO. Tax position has a huge impact for high earners and getting boxed into a non-optimal rule/strategy is very costly.

When I take time off I don't bill, and I have to pay out of savings AND I pay tax on the savings. Meh.
I'm playing on a 1080ti with a 10 year old CPU. My partner plays on a 980ti with a more recent CPU.
Yes, the fix for the truncation attack was originally rolled into 1.1.1e (March 2020) and then withdrawn in 1.1.1f because the new errors were too disruptive; IIRC the fix was already in the 3.x prereleases by that stage. So effectively if you stuck on 1.1.1, you've been living with this risk for 3 years.

The truncation attack is one where the client thinks their ssl session has ended but a malicious actor prevents the session from ending correctly; the threat is something like, after doing this your gmail can be messed with even tho you think you've logged out. From the descriptions it seems like you'd need to layer it with another attack or two to do anything useful with it. It's not something that keeps me awake at night.

When I dug into the python code we had hitting this a few months back (python 3.7 on recent ubuntu) it appeared that the error would not only trip up a client expecting to use 1.1.1 but could mean the last buffer read from the socket was not flushed (so, you can't just catch the error in python and assume it's ok because the other end had closed the connection anyway - you're missing some of the response). I wasn't certain but that possibility was a big bucket of NOPE for me, far easier to tell people to get the upgrade done and stop using software that had been built against 1.1.1.
That would require a regulated market. The scenario was based on a hypothetical free market.
But those taxes mean that things like health-care, childcare, schools, public transport, and all those other things work well.

Sure more money would be nice, but having decent maternity/paternity leave, a good work-life balance, no expectation of working on-call for free, etc, all add up.

For me benefits I value include a nice central office, free transport allowance, free phone, a decent sauna, interesting colleagues, and the ability to work from home as/when I feel the mood take me.
My I suggest the options, like "Hide non-matches", be at the top? Then they are easier to spot, and are in a persistent location relative to the input area, even if characters are hidden.

I like on my Mac how its choose shows similar characters, so "u" suggests "U", "ü", "ú", and so on.
haha fair. just from an initial investment pov and if you are up for the long haul, they give back a huge ROI!
What's the meaningful distinction between the robot ignoring or missing relevant information? We're not in a court of law trying to suss out intent or lay blame on a specific entity. The essay is about robots killing people, and supposing this will continue without government regulation. The people will be killed either way...
You can host Elixir apps on PaaS like Gigalixir[0] or Fly.io[1] (no associated with these).

I personally use mix release[2] that assembles a tarball of itself (together with BEAM), then rsync that to Hetzner, restart the remote process and viola. I like simplicity.

Re cluster of nodes, the easiest would be to use a library[3] to automate the formation of said cluster.

[0] https://www.gigalixir.com/

[1] https://fly.io/docs/elixir/getting-started/

[2] https://elixir-lang.org/getting-started/mix-otp/config-and-r...

[3] https://github.com/bitwalker/libcluster
Then transcode in a different server.

Not transcoding user-uploaded files is borderline negligent.
Phone. Keys. Wallet Brain?