skysight-inc/HackerNews huggingface dataset:
> I'm surprised Google encourages syncing the codes to the cloud... kind of defeats the purpose.

Depends on what you think the purpose is. People talk about TOTP solving all sorts of problems, but in practise the only one it really solves for most setups is people choosing bad passwords or reusing passwords on other insecure sites. Pretty much every other threat model for it is wishful thinking.

While i also think the design decision is questionable, the gain in security from people not constantly losing their phone probably outweighs for the average person the loss of security of it all being in a cloud account (as google cloud for most people is probably one of their most well secured account)
"escorted to my room" is entirely different than the story described here. And "other hotels/resorts" don't have over 5000 rooms and thousands of additional visitors to the casino, clubs, shows, restaurants, who are not hotel guests.

> maybe you won’t run into this crap

What "crap"? He didn't have ID. The employees should simply hand out keys on the honor system?
i want something that can take in a song and transform it into a different genre
There isn't any mention of OpenBSD in the article. It says:

> a bug in the macOS firewall, packet filter (PF)

> We believe the firewall bugs must be fixed by Apple.

I don't see how you can interpret that as shitting on OpenBSD.
If you bought it at a for profit pharmacy, then it did work precisely as they expected it to.
Yeah USB3 and greater is really only needed for high res displays and faster large storage.
Big Lebowski a glaring omission.

Rohmer deserves more than one film, Green Ray is not even his best.
I'd love to see this as well. I think for your purposes you could extend the emulator backed remakes article (which I still reference from time to time) you did a while back.
It's not particularly elegant but I've seen at least one main board with rear DP inputs to allow routing discrete GPU video to the system Thunderbolt controller.

It's hard to believe that solution exists but not either (a) TB-equipped graphics cards or (b) internal DP ports to facilitate a system TB controller.
I suspect they're referring to experiments like the famous "Rat Park". There is clearly a strong social and environmental component to addiction susceptibility, at least in rats.

I don't know if I'd go as far as to say it's the fundamental problem, but definitely a major factor.
Looks like they deprecated the rust plugin: https://plugins.jetbrains.com/plugin/8182--deprecated-rust that sucks.
You're looking for quorums, or key splits. They aren't super common. You see them with some HSMs (need M of N persons to perform X action).
> forcing people to transit signal harmful to them

This is like the third time you've swapped in a sympathetically-small example to make it sound as if any regulation of large companies implies that grassroots individuals would be forced to unreasonably do things against their will. But we're not discussing a vibrant competitive landscape of Mastodon instances, local mom-and-pop ISPs, websites run by individuals, or "people". Rather we're talking about the likes of Twitter, Google, and Comcast.

> I'm not so much in favor of authoritarianism as individual sovereignty, and sometimes the "individual" is a corporation or large association

I wholeheartedly agree with individual sovereignty, and that's precisely where my comment is coming from. The second part is fallacious induction - scale is the entire crux of the matter, especially with the context of Metcalfe's law. The larger these companies get, and the more they cooperate with each other, the more inescapable interacting with them becomes. This destroys the ideal of individual sovereignty for actual individuals.

Hand waving about "antitrust" is an excuse that doesn't redeem the narrative. If you were actually concerned about coercive power created through anticompetitive actions, you'd lead with the utter lack of anti-trust enforcement and arrive at very different conclusion. For example reforming this bundling of identity, data hosting, and software that is pervasive across the industry would go a long way to reforming the power dynamics.

On the topic of actually running more decentralized nodes, I'm all for it. If you want to discuss things non-normatively as an assumption of the worst case fusing of government and corporate power, I'm right there with you. But in the context of the big tech power consolidation, what are currently small-time self-help options for the technical few to hide from the overall trend aren't particularly relevant. For example even though I've always run my own mail server and recommend people get their own domains, I can still condemn the negative societal effects of Gmail having unilateral control over many individuals' online identities. (In fact doing so gets even more important because Google blazing the trail of unilateral corporate authoritarianism has caused the domain registries to want to get in on the shameless action)
No, that's not helpful. No one should suggest personal harm.
For okta, if it is set up properly, the user should get push notifications. And in that push notification is a number they need to select to validate the push.

This eliminates credential phishing and "notification exhaustion" where a user just clicks "ok" on an auth request by a bad actor.

As much as I advocate for non cloud services, what okta provides is very secure.
The 12" MacBook was in a lot of ways the spiritual successor to the 12" PowerBook and was hard to beat for portability. It's a shame it was hobbled by the hot and weak Intel CPUs of its era and butterfly keyboard… if they resurrected that form factor with an M-series CPU and improved keyboards of modern MacBooks it'd be a wonderful little machine.
> ...or could withstand the same scrutiny.

Not going to argue with the "greater impact" part, but mean pretty much every C-level executive in America with a twitter account manages to refrain from using it to repeatedly commit securities fraud.
Yet another evidence, the EU is not interested in having an industry and even less a sovereign economy, instead is just a giant market for US corps

Tesla being subsidized is no surprise, it's a US DoD program

This is a wake up call for Europeans, these non elected leaders should be reminded who they are supposed to serve

It's also quite funny, Musk was crying out loud when Arianne received EU funding for various missions, calling it anti-competitive practice and "unfair"

https://worldcrunch.com/business-finance/exclusive-spacex-ac...
I don't see stars and fork given on my repos anymore
They mention in the article that their zero-trust architecture is what prevented the attacker from gaining access to on-prem data. So it seemed like it worked pretty well in mitigating the damage.
Apple lodges confidentiality protest on Day 2 of Google antitrust trial
https://archive.ph/a7nTm
And a genius lol. Don’t tell him I said that
Luckily all my Slack workspaces except for one have left for Discord so I won't have this problem!
This is a great idea, and I love that it's based on power draw. It means it can be used for all sorts of things, like a TV or lamp turning on. I might experiment with something like this for my grandmother who lives alone.
I don't understand why anyone would be against a gravity driven water filter. The issue is that the EPA is trying to classify it as a pesticide because it contains silver. The EPA should not be creating friction when it comes to water filtration. Seems like there are other important things they could focus on.
If this was the pitch for a movie, it would be turned down on account of being too unbelievable.
I will confess I miss skeuomorphism, but even if Apple never embraced flatness, Ventura's System Preferences.app is horrendous. I've become reliant upon the search bar to find most things in there, which I rarely had to do before.
> During every iPhone release for the last few years, they have used the previous-generation SoC for the non-Pro models

iPhone 14 (last year) was AFAIK the first time they did this (non-pro iPhone 14 didn’t get a new SoC and kept the one used in ALL iPhone 13 models) and there was quite an uproar.
Symantec VIP is TOTP under the hood.

https://github.com/dlenski/python-vipaccess
Note that this can annoying make your Mac refuse to shut down because it is doing something wirelessly with your phone.
i wonder on this too if people really use shamir secret sharing as part of some security compliance
I tried to write a serious response to your comment, but as I got further into it and you got further into personal attacks and away from substance, I decided to delete it and I'm instead leaving you with this:

You should get off your high horse. Nobody cares about you having been a "CTO" of some random venture-backed company, it doesn't give you any credentials which you can fling at people to "win" debates online. 80% of the people on this forum have some useless title like that in their CV. You being able to write lots of words about irrelevant superficial topics doesn't mean that you have anything useful to say, even if you've previously been led to believe that these are equivalent.

I don't care where you flock. I publish all my Nix related work for free, I don't have a personal stake. Your decisions are your problem.
(2003) - I think this is far enough in the past that 'modern OpenGL' has to be qualified!

Edit: 2003 is the first edition, this is a draft of the second and really is modern. Thanks d-161 :)
7TB of data (the article mentioned 800GB of financial data) is impressively small for an organization that brings in over a billion USD a year[0] and has over 10k employees, especially when it operates in as many countries as Save The Children does.

It's normal for charities to store data: not only do they have financial regulations to comply with (and people that ask for receipts for tax deductions), but the best donors are repeats and it's well established practice for charities to make sure to keep sending former donors marketing materials and requests.

[0] https://www.savethechildren.net/about-us/accountability
See https://news.ycombinator.com/item?id=37501964
The ineffectiveness of "security training" is precisely why TOTP is on its way out - you couldn't even train Google employees to avoid getting compromised.
Its durability issues aside, the TiBook more or less became the template modern laptop. Easily one of the most timeless apple portable designs.
not good with acronyms, what is hsm here?
I totally understand your #2. My long drives are across Canada, and between Ottawa and Winnipeg (2200km) it's all relatively unpopulated Canadian Shield so it's rare to find a stop that isn't well treed. Most of the superchargers on the route are in "towns" with populations of about 10 and pleasant environments.

Re #1: I find that those types of stops happen at the beginning of trips. If you're only an hour or two into your trip when you need to grab gasoline, you grab it quick. But with an EV you should be charging at home or at your hotel overnight, so you start out with a full battery and don't need a charge until about 4 hours in. Once you're 4 hours into a driving day, you want to stop for more than 3 minutes.
Some do, using s-expr as config files is pretty common in the ocaml ecosystem (ie dune).
Hmmm. Readme unfortunately fails to note what the required hardware is (that apparently has a common/shared control interface) which makes these USB hubs controllable.
Okay, Great! Thanks for your input!

Anyway i'm assuming the trick is a free trial I have been getting ads for? I have been getting them for a while, anybody care to explain more into this?
So living on a narrowboat in the UK this is something I have experience with. We have a 335 W panel with an MPPT connected to a 200 Ah 12 V flooded lead acid battery. The battery in reality has a capacity of half that and in the 6 years of seasonality it has probably halved.

A few things :

* you don't need a fridge in winter so you can just turn it off.
* charging battery banks / laptops in sunny periods results in the battery bank being useful in times when the weather isn't so kind.
* no amount of solar is enough in the deep of winter.
* any amount of solar is too much in the height of summer.
* pubs are great for charging devices.
* lead acid batteries last substantially longer if you only let them drop to half their true capacity and regularly charge them. Yes alternatives exist but there's something to be said for making what you have work for as long as possible.
Here's another political bias: https://openmoji.org/library/emoji-1F52B/

Mixed signals, hah. The character is - incorrectly, according to UCD, where it's still "pistol" - called "water pistol" (name probably coming either from Emojipedia or CLDR) but supposedly features a firearm.
Anyone can add to progress, if they acknowledge that progress is whatever works for everyone, literally, for everyone.

Who succeeded in doing that? There is Confucius, and Norman Borlaugh, and many others ...

https://en.m.wikipedia.org/wiki/Confucius

https://en.m.wikipedia.org/wiki/Norman_Borlaug
More of is the most important part of this comment. Tesla would be building these anyway, since the stations will be built where the cars go, but the subsidy directly enables more stations, faster.
Thanks for the clue, apparently it's the GaAs MMIC technology according to the ChatGPT-4 [1]. I've should have figured it out in the first place due to my previous research work of Gallium Nitride (GaN) technology that now become the successor to GaAs technology due to high power Radar requirements. I suppose this is where ChatGPT become really handy for research, as Google is extremely useful for search.

Similarly with LIDAR, the autonomous vehicles demand has made the LIDAR sensor now become very affordable for the masses.

[1] ChatGPT-4 response:

"The key component of the F-22's APG-77 phased array radar that was made cheaper by Wi-Fi technologies, according to Bill Sweetman's reports, is the Gallium Arsenide (GaAs) Monolithic Microwave Integrated Circuit (MMIC) technology. This technology was significantly reduced in cost due to its widespread use in commercial Wi-Fi systems, allowing the defense industry to leverage economies of scale and reduce the overall cost of producing the radar system for the F-22 Raptor."
Subsystem OTA
These low-level constructs in the client libraries exist so that people can build controllers and operators on top of it, no? There's a lot that goes into making of implementing a Kubernetes client such as keeping up with semantic changes (dry run, server-side apply, tracing, rate limiting, patch support etc). Does your library also cover these?
Ask HN: Would you pay to get on the front page of Hacker News?
Since September 2008, I've checked Hacker News almost every day.

Since then, I've had fifty-six of my submissions make it to the front page (not only in this account but my older ones, too).

It's become almost a game for me, and I really enjoy writing essays or helping companies shape their message in order to get to the front page (or even the #1 spot).

For instance, I helped Skyfi get to the number one spot and they received 713 points.[1] This resulted in over 20,000 visitors and an (undisclosed) number of new user registrations.

Some submissions that hit the front page, like my one this week, "only" received 2,000 visitors in a day.[2]

I've learned there is an art to hitting the front page; however, there are a lot of people (and companies), who have valuable knowledge, products, or services, yet—because they don't know how to shape their content, they never see the light of day on here.

For this reason, I'm considering the idea of offering my services.

In trying to determine an appropriate price, I was thinking either a $5,000 Retainer + $5 Cost Per Visitor (which essentially maps to CPC).

Or keeping it simple: a flat $15,000 to get you on the front page of Hacker News.

20,000 visitors / $15,000 = $0.75 Cost Per Visitor

2,000 visitors / $15,000 = $7.5 Cost Per Visitor

Even at $7.5 CPV, the caliber of people you get visiting your site, I'd argue, is worth $7.5 CPV (considering many of Google's keywords are well over $10 CPC for keywords many apps/companies compete for).

Instead of "Front Page", I could also tranche it: $25,000 for #1 spot, $20,000 for Top 10, $15,000 for Top 20, $10,000 for Front Page.

Also, this would be results-based. Meaning, if I don't get you to the front page (or Top n Spot), I'd refund every penny.

What do you all think of this?

I'd love help with an appropriate pricing model.

Or if you think this is completely cringe, and you think I shouldn't offer this service, I'd love to hear this perspective, too.

You're also welcome to email me privately here: scott@scottscheper.com

[1]: https://news.ycombinator.com/item?id=34468644

[2]: https://news.ycombinator.com/item?id=37476399
I don't understand the benefit relative to lfp that the parent comment mentioned. Those are very safe.

Lead acid is much more dangerous than that, IMO, due to the potential offgassing.
https://mathweb.ucsd.edu/~sbuss/MathCG2/SecondEdDraft.pdf

3-D Computer Graphics
A Mathematical Introduction with OpenGL
Revision draft Draft C.4.a. November 21, 2022
Samuel R. Buss
November 21, 2022

https://mathweb.ucsd.edu/~sbuss/MathCG2/SamBussVideos/

This page holds videos of lectures by Sam Buss for Math
155A at UC San Diego, recorded in Fall 2020 during the
campus Covid closures.
Hey everyone for those interested I built an updated version of the lanterndb semantic search application that should be a bit nicer. An instance is running at

http://170.187.170.169/

And code can be found at

https://github.com/ezra-varady/react-semantic-search
I'm sure you can find such places, is there enough of them to fund the service which is very expensive? That I'm not so sure.

When people are richer, they also tend to live in countries where the internet access is very important to the state and where installing good internet is an important public policy.

Of course you have exceptions to that general case but I'm not convinced those exceptions are enough by themselves.

They are in a very different market than a traditional product, they are basically servicing the people that nobody else want to service and the distribution of revenue in that group is going to be drastically different from the norm.
All good. I've also been working on LLMs since 2019-ish, so I wanted to toss a hat in the ring for the underrepresented transformer models. They were cool (eg. dumb), fast and worked better than they had any right to. In a lot of ways they are the ancestors of ChatGPT and Llama, so it's important to at least bring them into the discussion.
The Science of Slumps
I think technically Blizzard Authenticator (even the app) was available before Google Authenticator, but obviously for extremely limited use.
I think you mean (1696)...
Devs React to Unity's Newly Announced Fee for Game Installs
Investment news is full of these statistics with dubious relevance.

Drawing any conclusions from this data is likely a fool’s errand.
Robert Sapolsky: “The Brain, Determinism, and Cultural Implications”
>and dividing cost of service among several tenants could be considered to violate that

Show me the caselaw where multiple people splitting a bill would be "reselling", not your head canon make believe if you're going to make such an assertion. ISPs grab enough power already without us needing to invent new things they can do. Reselling as far as I understand means taking a good or service and then selling it again for a profit. I'd really like to see any examples of people at one address being sued for privately deciding to share a bill. Also FWIW I don't think it should be legal for ISPs to prohibit reselling anyway, but I don't dispute they probably can in theory. Splitting a bill though?

>Most ISPs would require a specific agreement for those sort of things.

I think this sounds like absolute bullshit.
"mostly", but there are notable examples. Intelligent Systems Fire Emblem Engage, Atlus' Shin Megami Tensei 3 HD port, or Bethesda Classic Doom re-release come to mind for bigger company Unity releases. It is less prominent in AAA, but not every company can afford to build their own RE Engine, and some companies chose Unity over Unreal, which in hindsight is stupid.

Or might be related to them working on the Wii U before, where Unity was officially supported (you even got a free license as a Wii U developer), while Unreal Engine 4 wasn't supported (until it was?). Maybe not a big deal given that there's like ten Wii U games in total, and that Unreal is supported on the Switch (Yoshi's Crafted World and Octopath Traveler come to mind).
They could have done far more with charging by standardizing early and providing a bunch of open CAD and source files. It would have made them the unquestioned standard from the beginning.

Their actual Supercharges could have still been Tesla only either way.

But their destination and home charges would have had a much bigger market.
Seems these Nazca aliens have already been debunked two years ago as a re-arrangement of human and animal bones. If you can ignore the comedy skits, the video below points out all the inconsistencies.

https://youtu.be/-DmDHF6jN9A
That's exactly what I want to do :) But I want to build tooling around x86 + devices (VGA + sound card mostly) + basic OS, rather than building all that from scratch.
Parsing the Infamous Japanese Postal CSV(2020)
I honestly have no idea what the point of your comment is, other than deflection, I guess. What does Barbara Liskov have to do with either of my comments?
And obviously untrue. If you’re an employee who just caused a security incident of course you’re going to make it seem as sophisticated as possible but considering Retool has hundreds of employees from all over the world, the range of accents is going to be such that any voice will sound like that of at least one employee.

Are you close enough to members of your IT team to recognise their voices but not be close enough to them to make any sort of small talk that the attacker wouldn’t be able to respond to convincingly?

If you’re an attacker who can do a convincing french accent, pick an IT employee from LinkedIn with a french name. No need to do the hard work of tracking down source audio for a deepfake when voices are the least distinguishable part of our identity.

Every story about someone being conned over the phone now includes a line about deepfakes but these exact attacks have been happening for decades.
TOTP is helpful when you don’t fully trust the input process. If rogue javascript is grabbing creds from your page, or the client has a keylogger they don’t know about, TOTP can help.
>Berkey and its manufacturing arms agreed to a request from the EPA for Berkey filtration products to be identified as “treated devices” (which is a different classification than a pesticide or a pesticide device), because they incorporate silver (a registered pesticide) in their filter media (a common additive in water filters which does not leach into the water) that protects the filter from biological grow through

I mean if it were truly common, wouldn't many other filter manufacturers be affected? I don't understand how they can claim the silver doesn't leach into the water.
Ask HN: Revisiting Bandcamp 1.5 years after being acquired by Epic
Bandcamp was acquired by Epic in March of 2022. A lot of people (myself included) were concerned how things would change. See: https://news.ycombinator.com/item?id=30529780

How have things changed in your experience? Are you still using Bandcamp?

I've purchased several things recently and been very happy with it, although discovery could really use some improvement. However I've noticed a lot of newer music from bands that are on Bandcamp isn't on Bandcamp.

Are artists starting to leave the platform?