skysight-inc/HackerNews huggingface dataset:
A strong passphrase should be good enough to deter dictionary attacks, even if your kdbx file is leaked.

And even then the ciphers used to encrypt the kdbx file are highly configurable, you can future-proof the key derivation function as much as your hardware can reasonably afford to unlock the file.

Besides using a keyfile for daily use is impractical. For correct usage, you'd have to keep it in a separate drive from your kdbx (in a USB flash perhaps), as you very well mentioned. But then in the menu you'd have to go to the directory the keyfile is stored in every single time you want to unlock your database if am not mistaken about how the feature works on KeepassXC.
China’s Coming Lawfare Offensive
https://archive.ph/2O4Jg
No. It's a really fancy mirror.
No, my boss actually developed respect for me, for standing up to him.

I won't go into detail, as I don't want to cause trouble, even in reflection.

But I was not always good. I learned my lesson, from "going along," years earlier, at a defense contractor.
I assume it's the Navy doing the work, maybe the Army. If either branch is like the Air Force then they'd get some nice additional money for working there. You get a nice pay bump for working in Alaska and the North Pole. I assume it's the same, plus this would be out of country, so tax break.

But yes I get your meaning. Military is assigned work, they go where they are told.
Literally made this comment and been surprised with the notion of Shamir Secret Sharing! Check my comments
They seem to be doing it for a fee, which is just stupid.
When cars are 'booted' in US, is there no ticket to go along with it to bring further repercussions if it is illegally removed?
If Apple buys it, it'll quickly head down the path of exclusivity. They'll find some "security" excuse for it that'll be enough for their reality distortion field to do its thing.
About 8 years ago in Atlanta, I got booted on my first offence, by overstaying in the nearly empty parking lot in midtown by 15 mins (I paid for the hour of parking before that, but the restaurant took their time with the checks). I think "first time offense of being late on your parking by 15 mins - you get a boot" is pretty excessive.

Don't get me wrong, I am totally in favor of parking enforcement, and wouldnt have even been that upset to take the hit and pay the fine. Instead, I had to both pay the fine and wait an hour in that parking lot until someone (working for the boot company) came to unlock the boot on my car (and i was lucky they weren't busy that night).
It's longer ago but they did it in the Netherlands: https://www.acm.nl/sites/default/files/old_publication/publi...

Years later they couldn't find any direct evidence but providers were subsequently only not-guilty if they could show long term planning. With a duo- or tripoly it's not hard to have fix your prices together. This especially happens in the high-entry cost markets like telecom.
You realize those movies were inspired by something actually happening right? Like criminal enterprises are intertwined with legal businesses all the time. Whether it’s embezzlement/kickback schemes, espionage, or extortion there are independent agents or cut out organizations which undertake these illicit, clandestine activities. The casinos have been tied to mafia activity for many many years.
It's much easier to get legal representation and compensation if you are fired. That's because, assuming the paper trail is there, the damages are also there. Being pressured into resigning is harder to prove damages-wise. "Pressuring" is subjective.
I make WebGL multiplayer games using Unity.

The original changes essentially shut me down.

Yesterday, I just found out Unity has changed their definition to exempt WebGL games: a partial relief. I have little confidence Unity will stick to their plans.

In between I evaluated all the alternatives to Unity specifically about WebGL players.

unfortunately WebGL is either impossible or crippled in other engines, frameworks. Further, other engines are like MS Paint versus Unity who would be Adobe Creative Cloud.

Here is my WebGL summary:

Godot uses Node trees instead of Entity Component. Porting Unity scripts almost impossible because of this amongst other reasons. Attempts to weld Entity Component only supported on Godot 4 but….

Godot 4+ WebGL does not work on Mac with no plans to change. Godot is waiting for Chrome to fix something, no comment on Safari, FF, others. One forum poster doing Godot WebGL export noticed that the Empty Scene WebGL export of Godot is 17MB versus 4MB for Unity.

Unreal 5 does not export to WebGL. However you can use UE 4

UE4 WebGL is not much discussed and the pieces you can find imply the output size, and thus customer download time, is significantly larger than Unity’s

Stride does not export to WebGL.

So UE4 seemed the only other option
I have a kind of meta point on this whole discussion.

We like metrics because they are not subjective. We don’t like metrics because they tend to be insufficiently specified optimization problems (I.e. we are looking at 3 variables when we really need to look at 1000+). We dance around this with “Goodhart’s law” type statements, but this is blatantly insufficient.

My hypothesis is the brain is obviously working with raw data - photons and sound pressure changes fundamentally and is actually solving the broader optimization problem- albeit subconsciously in the immensely powerful associative cortex. If we were to present the same problem to AI, it would end up being similarly subjective - influenced by its training and structure.

In summary, human intuition is currently the most powerful computational device. It should be objectively trusted over and above any gameable metric. Thus only non-gameable metrics should be accepted and intense scrutiny should be place on all metrics used.
By searching for "columnar data" in Google Scholar or even just plain Google, for example. Thorough literature review is a must for any researcher.
"We always comply with the labelling laws and regulations requiring objective information about how much product is in the package, including a net weight statement, a serving size, and a servings-per-container statement.

"Consumers can use this information to make accurate and informed purchasing decisions about the amount of product they are buying."

Only if I can remember from one purchase to the next what the price per gram of a specific bar of Lindt chocolate is.
Same as when the hackers shut down pipelines then immediately apologized and backed down saying it was never their intention to cause a international incident

https://www.theverge.com/2021/5/10/22428996/colonial-pipelin...
Probably more descriptive to call it an ActivityPub instance that implements the Mastodon API.

Still very cool.
Ask HN: WordPress vs. Django/Flask?
I may get to work for a small translation agency to build a website for them plus a bit of marketing stuff, and maybe a remote desktop and a platform for invoicing for their personnel. I am self-teaching myself web-design and the related stuff (Python mainly for everything, but HTML/CSS, C++, SQL and databases also) and a few years ago I also administered a Wordpress site for a while, so am a bit familiar with themes/addons etc.

But for a few recent months it seems I've seen some news on HN as about once per month that someone's Wordpress site was hacked.

Which web framework may be better for a small agency (or in a general business case): Wordpress or Django/Flask?

Can you describe a typical workflow and which other tools/frameworks/keywords/etc (like REST) I need to use for this?

As I am a bit nervous that I am self-taught in this field, though have tons of materials on that, but this job may provide some resources for my main projects.
So I agree that unperformant SQL is unperformant, but PRQL can _reduce_ the chance of making mistakes there.

Here's an example [1] of someone reporting that a query engine was far more performant with one SQL construction, and then PRQL changing the SQL we output to use that construction.

GCC & Clang are much better at compiling to assembly than any person! PRQL isn't there yet, but each improvement scales to everyone who uses it.

[1]: https://github.com/PRQL/prql/issues/2182

[Disclaimer: PRQL dev]
Off the top of my head, there's also LayerOne, RSA, and SchmooCon. (BlackHat doesn't count)
PostgreSQL Load Balancing: Pgpool Deep Dive
Sounds very Kabbalistic.
Everybody points to uber but uber won against taxis because they had an app and taxis had a phone number that often wouldn't even accept a downtown cross st.

As a seattlite who got tired of hunting for a building that still had a street number just to get a cab on 5th and Jackson or what ever I'm glad uber killed taxis
Sure, bigger than a mall. The main point is that transit enhances walkability, they don't really compete in the absence of other factors (like transit in a highway median)
I believe that in Canada, and certainly in Alberta, the titles are very much controlled. The regulatory group APEGA has a Professional Engineer designation for software engineers as well
Seems useful, but I'm not really sure how it reports. If you write a web server (and that's what a lot of go programs are), quite a few packages will have network and file access capabilities. How can I find out which ones are unwanted?
This sounds like a straw man argument.

It is simple to store and secure your cryptocurrency in a cold wallet.

1) Buy a Ledger* for $80

2) Make new 24 word passphrase and memorize it.

3) Copy your deposit address.

4) Reset the Ledger.

Hot wallets are harder and should never be more that 1-10% of your holdings. Most are safe using a combination of lit exchanges, like Coinbase and a phone wallet for their spending money.

You are GREATLY exaggerating the compelxity.

* https://shop.ledger.com/products/ledger-nano-s-plus/ruby-red
Pig Kidney Works A Record 2 Months In Donated Body
I hope they do this with the understanding that it almost certainly ends with a visit to the jail.
as a recent iOS user with years of android muscle memory. it infuriates me that scrolling from the top opens the useless siri suggestions instead of the notifications screen. I can’t take it.
I don’t know how you’d squeeze extra private cars on something like the Lexington ave line which runs a train every 2 minutes during rush hour.
ZFS on Linux is commonly used in HPC these days. E.g. https://computing.llnl.gov/projects/openzfs
The key point for me was the quote about asymetric information warfare, where it was impossible to know what the price of anything was until you were at the checkout. This used to be common on durable goods, professional services, and and big ticket items, but data science in retail has got it down to the micro level.
Find Your CQS
Background: https://old.reddit.com/r/modnews/comments/16is6dh/contributo...

According to Reddit staff, Reddit now assigns every account "a Contributor Quality Score based on a host of signals including past actions taken on a user’s account, network and location signals, and steps a user has taken to secure their account (e.g. email verification)."

Reddit didn't provide a way for users to find their score (let alone the reasons for their score), so users filled that gap.

To find how worthwhile Reddit thinks your account is, make a top-level post in the r/cqs sub (https://old.reddit.com/r/cqs/). A bot will reply with your score.
A good design allows for expansion and contraction with temperature and stress, but those aren't usually considered moving parts.

I once had a car that had aluminum cylinder heads and bronze valve guides. The valve guides were a press fit with no keepers. Aluminum expands at twice the rate as bronze with temperature. So, when the engine got hot, the valve guides fell out.

Fun!
The internet aechive comes again to the rescue, if you want to read the article:

https://web.archive.org/web/20230916175256/https://www.lapha...
Russia has enormous resources and could have become an incredibly rich country where all citizens would prosper and have amazing opportunities.

Unfortunately the Russian culture prohibits this. Rampant corruption, citzen apathy and an eternal desire to murder their neighbours.
And this is why scraping is under technical and legal attack. To maintain their panopticon, where they see all, while you get only a pinhole view of, in this case, the economy.
Don't be afraid to be wrong
I imagine the issue is just that the approach doesn't scale.

What's the population of your area?

> And it makes money cause there’s enough popular destinations that the buses often have 3-5 riders sharing rides.

So a max of $10 per trip with multiple passenger pickups and dropoffs? That doesn't sound like it would make much money.
> Almost 15,000 years after the launch of Gold and at least tens of billions of dollars invested in development in the space there is still nowhere on the horizon any of this is ready for anything approaching mass adoption. No one uses gold for store of value or purchases, it clearly has failed miserably.
I think there are ton of great use cases for the cloud, but people should try and think for themselves and decide if their circumstances and workload is really a good fit.

A ton of people forget that a bunch of servers across a few colocations can pay for itself in months, especially if you go for second-hand gear that is dirt cheap.

Again, going (back) to colocating hardware could not be good fit. But with modern management tools and datacenter services like 'remote hands' I think people should not reject it upfront.
> He realized that rapidly changing the tilt angle of periodic facets on a diffraction grating, which can generate several replicas of the incident light traveling in different directions, could present a way to sweep through different spatial positions to gate out frames at different time points.

Is this saying that light through a lenticular lens sheet comes out slightly early/late depending on angles, and the sheet could be used as an array of delay lines with different time constants?
[PRQL dev here]

I strongly think we should have the best examples of SQL to compare against. I've ironically made this complaint for other libraries, so I'm alarmed that folks think we might have done the same.

We would take PRs for any improvements to the SQL that make it a better comparison.
This is true but housing cost has risen significantly (in percentage of spendable income) over time so there is an offset to play with here. You cannot take those basic costs alone.
It's not the police putting boots on, but private companies. It probably isn't worth their time to go after people who slipped away.
> Despite profound changes on the left, liberalism yielding to progressivism, there are few studies of this phenomenon.

This is a weird claim. There is no substantive change on the left associated with the change of label there; its a change in (mostly American) vocabulary because “liberalism” in the late 20th century was being simultaneously used for the center-right faction that believed that the progress made by 18th-19th century liberalism ought to be the endpoint of socio-politico-economic progress (AFAIK, this was already how it was predominantly used in Europe and elsewhere outside of the US) and for the center-left group that believed in continued progress in the direction set by preceding generations of liberalism (outside of the US, there were already several labels for different points in this space–e.g., both social democracy and democratic socialism are within it), so the latter faction adopted “progressivism” (which had been used in the past by very different movements) to distinguish itself from the former.

With the absence of a phenomenon to study, there’s not really much point to studying it. There is, of course, plenty of academic study of real phenomena within leftism (including the center-left) more generally, including the social justice movement (what the author here calls “social justice ideology” and claims, incorrectly, “progressivism” is a new name for.) So, insofar as the phenomenon of interest is the social justice movement, rather than some kind of “transition” heralded by the adoption of “progressivism” as a label by the center-left in America from about the 1990s, he’s wrong that there is no significant academic study of it as a phenomenon.
This article is barebones. I was expecting new news about this, not a restatement of the facts and a note about one legislator who's not making progress.

The first article linked is more informative for those who are hearing about this for the first time. https://abcnews.go.com/US/atlantas-rise-car-booting-prompts-...
Compare and contrast with https://en.wikipedia.org/wiki/Tyre_Extinguishers
If they were, how much do you think they'd pay for it to not leak to the public? (which is illegal, but that doesn't stop corporations from acting that way). If, say, Netflix got hacked (not ransomware, but user+credit card db dumped) but they paid to hush it up, how would we know? If the thieves were smart, they wouldn't use all of that dump simultaneously, so it couldn't be correlated.
Ask HN: Is there any Hacker News but for Biology
And related matters?
Absence of evidence is not evidence of absence ;p
I'm very much loving the next.js / Vercel experience, but I've been using typescript since near when it was released.
I recently bought my first server, just about the cheapest Dell had available (still €2000). I was completely undewhelmed by the specs, it even has spinning rust. The upgrade costs to SSD's were like 250 per disk. So reading these specs, how much does such a server cost? Or do you put the disks in yourself? Can you negotiate a 50% discount? So many questions I have as a newbie in the entireprise server world.
Gah. I need to skim better. Thanks. Here is a translation for anyone else who uses fish. Just hit it with a :%s/^\n//g to fix the formatting.

# Rename this file to match the name of the function

# e.g. ~/.config/fish/functions/ya.fish

# or, add the lines to the 'config.fish' file.

function ya

set tmp (mktemp -t "yazi-cwd.XXXXX")

yazi --cwd-file="$tmp"

if set cwd (cat -- "$tmp") && [ -n "$cwd" ] && [ "$cwd" != "$PWD" ]

cd -- "$cwd"

end

rm -f -- "$tmp"

end
Great story, thank you!

> I've started to wonder if I just have an academic fascination with it and the practical use cases are more limited (limiting?) than I think

I don't think the linked post should prompt such wondering? (It's not clear if you are drawing a causal link between the two) It was an issue with the interface _to_ the algorithm, not with the algorithm itself.
Classes [ES6]
I would bargain, however, that scamming people over SWIFT would swiftly put you into jail.
Looking forward to the continuation of this article!
Maybe being naive here, but that would be entrapment wouldn't it?

Since, in this case, they would only be doing so because a cop asked them to. Of course not sure how that fits into drug/prostitution stings.
It's gotten absolutely bonkers with all the demand for GPUs and the cloud companies are just raking it in hand over fist.

On AWS reserved instances with 8x A100s or H100s (if you can even get them) cost more per year than the total upfront retail price of the equivalent pods from Lambda Labs. The on-demand price is even more absurd.
The entity conducting the pen test -- i.e. a third party with no interest in shipping the product -- is what makes it a pen test. Otherwise it's just QA.
I really need to set aside some time to work on some kind of usable interface, graphical stuff has never been my strong suit. At the moment, all of the features work but you need to copy-paste the contents of the QR codes into the command-line. And I need to freeze the on-disk (on-paper?) format.
It's a hard problem because there are no good answers.

> We need more trust and fewer metrics / games.

Except, at scale when dealing with a lot of people, there are plenty of people who are willing to abuse that trust.

I made this mistake early on in my career as a manager. I gave an important piece of work to one of the very senior engineers who I managed. Over the course of a month, he repeatedly said "trust me" regarding the status of his project. When 6 weeks went by and he finally showed it, it was in such a state that it was essentially unusable. We ended up throwing the whole thing out. Furthermore, he left for another job about two months after that, leaving his work in a shitty state.

I made plenty of mistakes there, but I also learned a valuable lesson, "trust but verify". Until someone shows me concrete evidence of what they've done, I really have nothing to go by.

To be clear, I'd love to be able to "have more trust and fewer metrics". But at the end of the day, it's really hard to give people the freedom to, say, hole up for months at a time while they say "trust me".
Given the ubiquity of tech debt in Unity I could see Apple maintaining support for the current C# version for the time being and in the long term, replacing it with a full rewrite based around Swift with a temporary C# compatibility layer to pull the ecosystem through the migration, which wouldn't be everybody's cup of tea but could be interesting.
In the UK the supermarkets (I assume they have to by law) quote the weight of contents of a single unit of product (which is supposed to be total weight - packaging weight), so you could analyse this quite rapidly.
Atlanta is one of the few places in America that allow booting.

It’s done by private orgs, not the city. There is no ticket. Just a boot and a fine to pay to remove the boot.

These boot girls are charging $50 or something. The fee to remove the boot is usually 85-200+.

Personally, I’m happy to pay these people any amount over paying the super jerk boot people.

I had a guy put a boot on my car while I was walking over to pay the parking box. He wouldn’t remove it until I paid $85.

I had another boot put on my car from a bank’s parking lot. The bank was closed, the lot was open, there were no signs or attendants. Just an open lot. The boot operator claimed he had the right to boot but would not produce any documents. I paid $160 to remove my boot. I contacted the bank the next day and they said they don’t contract with anyone for parking enforcement when they are closed.

Atlanta booters can all go bankrupt for what I care. These ladies are heroes.
One works for the citizen and the other works against them.