skysight-inc/HackerNews huggingface dataset:
What is a good way to generate a password reset token? Is this even close to standard?

generates_token_for :password_reset, expires_in: 15.minutes do
# Last 10 characters of password salt, which changes when password is updated:
password_salt&.last(10)
end

Using a value that can be known externally -- because it is saved in plain text in the database, which I assume has been, will be, and is being breached -- seems like a security hole.
Just drive on the gasoline engine.
I like discovering new random things and occasionally having more in depth discussions than reddit tier shitposterie.

I don't like that it's just as much of a time hole as any social media and 99% of the content isn't actually relevant to my life, but I might read it anyway knowing full well I'm wasting time.
I loved Chromebooks. However I've been pretty turned off by them when my Chromebook which was working perfectly fine recently told me it's not getting security updates anymore. Now because the OS and browser are the same machine, the whole system is insecure.

Next laptop will be a framework, so I guess I'll see how that goes.
While it's legal for employers to require employees to use personal credit cards for work-related expenses, it's a huge labor code violation not to timely reimburse employees for such expenses.

As in, huge mandatory fines on top of reimbursing employees for 100% of their costs (including interest and other charges incurred related to late reimbursement) type of violation.

If you're not willing to name and shame here, please report it to the state's Dept of Labor if this was within the past 5 years so current employees can be protected.
1. Correct
2. Yes. Since even if GPT-4 is producing transformative content from "itself", a new medium of profit was created (training AI models) which have not been done before.

(Example what I mean:) Even though a library is free, you are not expected to go into the library, and read 10,000 books within a few hours, and put the books back on the shelf, and walk out like it is fine. Humans can only listen, watch, and read only a finite amount of content in their lifetime, GPT-4 can read at a scale that eventually be all humans on earth reading at the same time.

Streaming services for music only exist because you cannot scrape all the music in the catalog. You will listen to few songs to pay the artists and record label more percentage in comparison to the whole catalog you wont listen to.
Absolutely agree. Those tools you use don't happen to work for me, but that's entirely beside the point. We shouldn't look down on people based on what tools do or do not work for them. What matters is whether they solve the problem and if they can maintain and expand the systems they build. If they can't, they can always get help. If they can, that's cool too, the amount of problems that need solving in the world seem about infinite from a practical perspective.

I see "no code" tools the same way: It _is_ code, visual programming is programming too. If that works for you, that's cool.

One of the main things I do in my CTO/consulting work is ironically to reduce the fear "non-programmers" often have of software. If they can program to some degree, my experience is that they'll respect the "real" programmers more - and collaborate better.
Taiwan looks into claims local companies helped Huawei advance China chipmaking
I used them heavily. Multiple times an hour. I’d be utterly lost without them. It would be like taking the shift key away.
I believe an important aspect is that the actual time offset between the clocks doesn't matter all that much - it is the drift between them you care about.

True UTC is essentially an arbitrary value. Syncing up with multiple clocks is done to account for a single clock being a bit slow or fast. It doesn't matter if the clock you are syncing with is 1.34ms behind, as long as it is always 1.34ms behind. If it's suddenly 1.35ms behind, there's 0.01ms of drift between them and you have to correct for that. And if that 1.34ms-going-to-1.35ms is actually 1.47ms-going-to-1.48ms, the outcome will be exactly the same.

This means you could sync up using a simple long-range radio signal. As long as the time between transmission and reception for each clock stays constant, it is pretty trivial to determine clock drift. Something like the DCF77 and WWVB transmitters seems like a reasonable choice - provided you are able to deal with occasional bounces off the ionosphere.

Of course these days you'd probably just have all the individual clocks somehow reference GPS. It's globally available, after all.
For a moment, I thought this would tell me WHEN or HOW in specific moments to use my current cc for maximizing cash-back.
Way too much parroting of corporate propaganda. I miss the days when HN was more anti GAFAM/BigTech and did not help them with their propaganda but was more critical and more pro free and open technology and promoting that.
I don't follow? Software developers... aren't students or children.

It's a different market with different product segmentation and feature sets, it just happens to run on the same hardware and OS. And it's true that schools and parents often demand that their kids not hack stuff that the "admins" don't understand. And maybe that's bad or misguided or whatever. But it's not a statement about using a Chromebook as a developer client, which IMHO works very well.
This will achieve the opposite: https://en.wikipedia.org/wiki/Jevons_paradox

If you make something less critical, cheaper, it will be used for more and more ridiculous things.
if this is US, file a wage claim with local state government. Reimbursement for expenses while traveling is valid.

Depending on the state you can file many years later after you've left the job. So feel free to get a new job and file a claim with a spreadsheet of what they missed.
I stream to Twitch and also to an unlisted YouTube stream., using livepush.io. I do this so I have an archive of my live stream on YouTube that I can easily publish after 24 hours :-)
There's only about 500 "real" people on the Internet at any given time. that's why you keep running into them.

Everybody trades off, so you never know when you're one of the real ones.
Saying then Chrome did not communicate it wasn't supposed to answer how Chrome overtook Firefox.

What was really not very good about Firefox's alternatives to The Great Suspender? I read some opinions now. All but 1 recommended alternatives even in Chrome because The Great Suspender could lose tabs if the browser crashed. And tabs suspended with it couldn't be restored without it. The other preferred The Great Suspender because it let them activate a tab without loading it.

But the question was why Chrome beat out Firefox the way that it did. I think Chrome overtook Firefox before Chrome extensions overtook Firefox extensions.
for routers there's a simple and easy workaround. Let's say your router answers on "router.lan". All they would have to do is redirect this name via the router's DNS resolver to, say, 192-168-0-1.company.com, which would be an officially-registered domain that resolves back to ... wait for it... 192.168.0.1!

If you control company.com you can run wildcard DNS for any amount of "private" IP addresses, complete with an official and valid trusted certificate. For an internal IP address. Problem solved.

(and no, this is not theoretical, there were appliances some 10+ years ago that did exactly that...)
The Android libc is called bionic.
this works for the now as there was plenty of data to parasitise, sorry, train from

technology moves on

in 2030, when stackoverflow have folded due to lack of visitors, and all new data on new libraries/APIs are locked up beyond OpenAI's reach

how useful is the AI going to be?

the whole thing sows the seeds of its own destruction
There's a difference between the implied "I'm a programming newbie and AI helped me solve tough problems I couldn't otherwise do" and the arrogant "with AI, you don't need to learn how to code!" I am also not a fan of the latter.

Either way, it's irrelevant to the GP's comment.
What are you thinking?

I could have used a Mutex then cast the `&Mutex` to `&mut Mutex` so that I could call `.get_mut()`. But this didn't seem simpler.
How are you sourcing the current listings?

I see there's a "list your app" (which means I can't submit an app that isn't mine, right?), but there are some high quality installable PWAs that are missing. Hoppscotch is a good example.

Not expecting you to index the entire internet and filter out all the spam. Just curious how the current list was built.
I made my web app into a PWA and even went so far as to polish the home screen icon and splash screen to make it look nice once installed. However, in the end, I use the browser much more frequently, simply because I can access the URL of the page and share it elsewhere.
Do any of you know if this just hides the UI, or actually prevents it and all of its components from using any resources other than disk space?

Also, expect the registry key to change in a future release, "accidentally" re-enabling it and/or a pester widget to periodically ask you if you really meant to turn it off.

It's rather annoying that Windows 10 still periodically pesters me to set up / link a Microsoft account. I expect no less from this AI widget. Thank goodness Win11 doesn't support my laptop (though, I seem to remember getting pestered a few times to upgrade to Win11).
SEC Seeks to Force Musk Testimony over Twitter Stock Purchases
C no. Linux is C, and it works well.

C++ yes, there is no real reason to use C++ anymore outside of big libraries that require it.
In case you missed the little button on the left:

"TL;DR

In 2012, Dmitri Krioukov, a physicist at the University of California, San Diego, faced a $400 fine for allegedly running a stop sign. Instead of accepting the fine, Krioukov crafted an academic paper titled "The Proof of Innocence" to argue his case in court.

Surprisingly, the judge was convinced and acquitted him. Krioukov shared his paper online with a subtitle, "A way to fight your traffic tickets," humorously noting that the paper earned a special prize of $400, which he didn't have to pay to California.

The paper discusses a scenario in which if a car stops at a stop sign, an observer (e.g., a police officer) located at a specific distance perpendicular to the car's trajectory might perceive the car as not stopping under specific conditions. These conditions are:

1 - The observer measures not the linear but angular speed of the car.

2 - The car decelerates and subsequently accelerates relatively quickly.

3 - There is a short-time obstruction of the observer's view of the car by an external object (e.g., another car) at the moment when both cars are near the stop sign.

Disclaimer: the paper was submitted on April 1st, 2012, so there's a non-zero probability this could a be joke by Dmitri :) Either way, it's a good paper."
Google search to retrieve product marketing pages is pretty good. Specific factual information searches lead to product marketing pages. Opinion searches lead to product marketing pages.

Google is a giant adware tool that’s been taken over by adware SEO sites. The example given - find the product marketing pages for some races - falls directly in its sweet spot. If you venture outside it’ll do its best to get you back into the product marketing sweet spot, and the SEO companies of the world take care of the rest.

Search is a lost cause.
Note that for NTP it’s better to use a Raspberry Pi 4 than older boards. The old ones have their ethernet port on the wrong side of a USB hub, so their network suffers from millisecond-level packet timing jitter. You will not be able to get microsecond-level NTP accuracy.

For added fun, you can turn the Raspberry Pi into an oven compensated crystal oscillator (ocxo) by putting it in an insulated box and running a CPU burner to keep it toasty. https://blog.ntpsec.org/2017/03/21/More_Heat.html (infohazard warning: ntpsec contains traces of ESR)
A shoe has no rights. No right to loiter, enter an airport, or climb a mountain.

Nor does an AI.

A human has a right to use a shoe. Or an AI.

I see no reason one tool is inherently profit-driven while the other benevolent.

(An exercise left to the reader: whether leather or pages are the more renewable and humane resource.)
ChromeOS is wildly underrated in general, not only for software development.

App sandboxing on standard (non-ChromeOS) Linux distributions is painful and finicky, while it "just works" on ChromeOS.

I wish there was a non-hacky way to use Chromebooks without a Google account.

The hacky options are:

- "Switch to dev mode". But I don't want to be prompted to factory reset each boot.

- "Create a dummy Google account and use that". But I don't want file syncing and tracking to reach Google at all, not even on a dummy account.

- "Create a dummy Google account and use guest mode". But I want persistent storage.
I don't see those petty discussion often, but they do exist. Most of the time, it is an interesting discussion on a unique perspective, or sometimes cutting through the "noise" of an article.
Wikipedia suggests that David Chaum first proposed what was basically a blockchain in 1982. He even had a crypto startup way before they were cool, with "eCash" in 1995.
stranger: Hey guys, my car was making a weird squealing sound the other day. Not knowing anything about cars, I went in there with a hammer and methodically hit everything I saw that was moving. Eventually the squealing stopped.

ianbutler: Congratulations! You're a car mechanic! And to be blunt, fuck anyone who disagrees with me!
I hate it when I'm wrong as well. Doesn't matter the source.

Bad information is worse than no information.
I find this very hard to believe. There is no "$200 Chromebook" that will ever out-perform a "high-end" machine no matter if it's running Windows + WSL2 or not. So what are the specs of this "high-end" machine?
Also seems like it would be pretty easy for twitch to remove the timer.
According to a news article, the first blockchain application is an application released in 1992 called AbsoluteProof by the company Surety [1].

[1] https://www.vice.com/en/article/j5nzx4/what-was-the-first-bl...
> Humans are more valuable than AI models, and should retain many inherent rights that AI models should not.

This argument feels disingenuous. There aren't people out there trying to get AI votership or property rights. Even the most ardent AI supports will agree that AIs shouldn't automatically enjoy the inherent rights we enjoy as human beings. This is a pure strawman.

The issue at hand is copyright laws, and IMO the conversation is a necessary one. With or without AI, a significant amount of people have been wondering whether or not the current set of legislation is effective in enforcing the spirit of the copyright law, which is to incentivize and protect original ideas. The fact that we have AI's that can learn and iterate at blazing speeds was just a catalyst that exposed some large holes in our legal system - the holes were always there.

The question now is where do we draw the line for AI? Even if everyone in the world agrees that "Humans [...] should retain many inherent rights that AI models should not", we still need to decide where that line should be drawn.
Blockchain Data Connectivity vs. Traditional Telecom Carriers
Shameless plug: if you are interested in viewing and/or embedding glTF or USDZ files on the web, I worked on an HTML element for that called <model-viewer>

"It's like <img> or <video> tag for 3D models"

https://modelviewer.dev/
My daily driver right now is a mid-tier Tiger Lake board. You can get the equivalent for sub-$300 on Amazon. The client doesn't need to do much in the modern developer flow, running a browser, an X server and an ssh client is 90% of anything that needs to happen, with the occasional Linux Wayland client from the VM thrown in (Thunderbird for personal mail, occasional use of Audacity, stuff like that).
That is a nifty solution
The reality of this is the only engineers involved will be "prompt engineers."
Better to post a link to the paper on arXiv: https://arxiv.org/abs/1204.0162

Note also that the Fermat's Library copy is version 1 of the paper; it was subsequently updated and version 2 is available on arXiv.
Most green parties, and greenpeace in particular grew up around opposing nuclear power as unnatural. I think that's where it comes from.

https://www.greenpeace.org/international/tag/nuclear/

So naturally, people assume anyone fighting against global warming is against nuclear. As far as I can tell, it's also true.
> Now we’ve transitioned to mostly AI writing the bulk of the code with the senior developers still doing their thing.

> We’ve found the code quality coming out of our AI is a lot better than the H1b’s could produce.

That sounds weird. In my testing GPT4 falls apart for medium/large codebases. It's good for small microservices though.
I would have enjoyed it tremendously.
Nationalize Google.

Nothing will change as long as search is optimized for revenue over user value.
As I understand it, yes, albeit it's much easier at Google than some places. Google is pretty much a supercomputer with a company built around it; the Chromebook can serve as your terminal into that supercomputer, accessing your files, codebase, and other resources all remotely.
Ok but then anyone in control can change the entire tree, why need this Merkle tree?
They've extended updates recently
https://support.google.com/chrome/a/answer/6220366

For old models as well
The fact that Jurgen doesn't know doesn't help your argument, you're the one creating the identity to apply the same laws in the same way, and if you don't know about some relevant property of human brain activity, you can't make a claim that it's identical to whatever AI is doing.
Quick, not fast. Low 1/4 times are mostly associated with acceleration, not speed.
Yeah as much as people complain I still haven't found any site with as high quality discussion as here

Although some of the smaller subreddits on niche topics are pretty similar in quality if you find those
Wait, are you saying that because they were failed states, it was a-okay for America to bomb their water supplies, etc?
Wall or fence
So who is responsible for the listing on booking.com? I always figured it was the hotel who managed the listing on the site, similar to e.g. AirBnB, but if I understand you correctly it's completely separate and booking.com is responsible?

Or: obviously booking.com should have gotten back to you, but I'm also not entirely sure the hotel also didn't just fob you off with a bullshit story for their own mistake.
Chromium OS might be a good choice for you. I ran it on my Pinebook Pro for a bit and really liked it, and it's much more open.
Yeah we’re going to need specs of both machines to begin to believe that lol
Extremely impressive, and VERY well explained. I can't overemphasize how much I wish there were way more stuff like this online. I also really like something about having the English and Japanese text right next to each other... maybe it's just the visual reminder that there's so much more internet outside of the English-speaking bubble.
Man, Linus Tech Tips talked about this ~6 months ago: https://www.youtube.com/watch?v=1vpepaQ-VQQ

and refers to the same investigation: https://github.com/DesktopECHO/T95-H616-Malware
I've thought about writing a fuse system that tracks rename / move / delete and updates the torrent client. Never had the time, though.
I am learning programming -- or rather, relearning programming from a middle school/high school course basis into further achievement. While I believe that using AI to "code for you" is just undercutting your potential to be any sort of "good" programmer, using AI to learn and ask questions repeatedly without fear of judgment is the key.

That being said, using AI to code can just screw you over by presenting bad code, faulty code or the LLM simply not understanding the demands. It's not a tool to use in lieu of actually knowing/learning how to code and understanding the programming language in question.
Or coca-cola, or baby formula, or the myriad of construciton materials that we all consume but are produced by a few obscure, giant entities.
For reliable travel with a dog, I highly recommend BringFido. I’ve done two cross-country trips with my dog and BringFido delivered both ways. Half the reviews in their app are just from dog owners talking about the hotel experience from that perspective.
Search + top row registers as the first few f keys. Cumbersome but workable.
Why wouldn't the Democratic Party just buy the company if it's so central to the party operations? Letting a PE firm buy it and squeeze it seems like bad planning.
I would argue Gin/Go isn't really statically typed.

I mean sure you can specify that this var is a int32, but pretty much every tutorial, every code snippet out there, will do.

myvar := 10

And just let Go guess what the type should be. So yeah, Go CAN be statically typed, but in practice it rarely is.
If an attacker has plain text access to the database, they likely don’t care about resetting a password to gain access to a user’s account.
Install a GPS module in your computer.

Your Android phone is already capable of receiving GPS, so that's probably the most readily-available accurate time source. Getting your Android phone to sync to GPS time instead of just displaying it in an app might be a bit tricky, though...
Not exactly but the equivalent yes. Workstation and VMs. All tests and builds are basically run in borg by default.

For most Google developer developing on a Chromebook basically means running ssh and chrome remote desktop.