skysight-inc/HackerNews huggingface dataset:
fyi, "hot reload" is a native part of every operating system (consider, even trivially, forking or https://en.wikipedia.org/wiki/Dynamic_loading).

It's a sign of how bad developer tooling has been that live reload is sold as an add-on feature. DX seems always to see-saw between bill gate's c. 1990 demo of VB, and the compile-time speeds of a N' Wirth.

At a guess, when the internet happened, all DX had to be thrown away and we still arent back to where we were 30+ y ago.

I support being paid for your work, but live reload is a fairly trivial thing to write for yourself -- I spent one day this gone weekend writing a debugger in C which does it.

(consider also, https://github.com/tsoding/musializer which has live rebuild via the nobuild system in nob.c)
> When George Clooney tells me he uses Nespresso coffee pods, I don’t entirely believe him. If I found out that he didn’t, I can’t imagine trying to take legal action against him.

If a person knowingly lies in order to make money, why shouldn't they be legally at fault for committing fraud? Like, fine, we can make allowances for people reasonably believing that they were telling the truth and I understand that there are fuzzy cases, but there are also just objectively factually incorrect statements that were completely obvious to everybody involved.
Are you using text-to-speech perchance?
Not to disagree with the cumbersome process - just want to point out that TOTP codes are valid for 30 seconds after the "expire" (60 seconds total). So as long as you are able to remember / copy the digits, there is no need to wait for the next code even if you don't have enough time to type it in. It will still work.

Tangentially, I really wish authenticator apps continued to show the previous code for 30 seconds so I can continue to refer to it for apps that don't allow copy and paste.
their history goes deep in LA (to the 1930s), if not Monroe specifically
https://en.wikipedia.org/wiki/Lumen_Technologies#History
but as others mention, L3 and or Qwest execs likely runs the show now.
Who did then? It happened on their site, they had the means to control/monitor/mitigate it. Are you saying then that if someone hacks into facebook, steals data, it is then not facebook's responsibility that that happened because they didn't publish the data?

Even the backwards cybersecurity laws in the US don't work that way.
Users reuse passwords. We've had decades of trying to educate people to do something else (use a password manager! come up with a unique password and keep it in a little book! anything!) but it simply hasn't worked.

That's an engineering fact. It would be good if it weren't true, just as it would be good if virtual memory were indistinguishable from RAM, but it just ain't so.

To be a responsible engineer, you've got to design and build for the real world, and that means not relying solely on username and password for extremely sensitive data.
>>Game Designing and Game Development are two very different things

Right on. Took me a while to realize this. Game Design is the blue printing process of a game. Game Development is the actual building of the game. And Game Design is way harder than what I expected.
Would be interesting to know how they were testing authentication. Were they using a botnet of any sort? Otherwise for every "valid" user/pass combo from an external leak they tested there'd be several failures. A single (or multiple) hosts smashing auth attempts should raise flags. They didn't "Brute force" one user account at a time, but they did brute force the authentication system in general.
And the other browsers don't?

I've had my share of weird issues in Chrome because they enabled an "experiment" of some kind.
Lol, enjoy your $20 because someone reused their password.
I will eat crow if it comes to light that this was entirely unavoidable on 23andme's part.
I don't know if this is a smart idea to steal a government design.
For those interested, the mothership is: incoming.telemetry.mozilla.org

I'm fairly certain the telemetry can be disabled, but it is enabled by default and it's among the top 10 most blocked addresses in my Pi-Hole.

Frankly, I'm weighing the benefits to cost ratio of just blacklisting all Mozilla domains if this gets worse.
No, CRAM has been of interest for neural networks for a long, long time. I find the “buzzword” analysis to be infuriating because people have been developing neural systems for decades: as annoying as those NIST digits (a facile response to so many papers is: “has anyone ever asked if it would work for some other data set?”) but Yan LeCunn delivered a handwritten digit recognizer to the US post office in the early 90s, I worked on a neural search engine for patents 10 years ago, etc.

If you are annoyed by the people who pivoted from NFTs to LLMs, I am annoyed even more.
'Rich Dad, Poor Dad's' Robert Kiyosaki Says He's $1.2B in Debt
This is a lovely book, thank you for putting it together! Immediate bookmark.

They really are fun. In fact making small games was my pandemic challenge: I decided that it was finally time to try these things. I ended up building a tool for cutting up and annotating tile maps first - https://tmt.computerpho.be/ - then used it to create a minimal browser city simluator, https://pc.computerpho.be/. These also served as experiments into building single-file "apps" for the browser, which was fun as well!
Ah so the government got to pick winners and losers
I can definitely understand this argument - imagining my dad setting up even SMS-based 2FA makes me shudder. However, for information this sensitive, it would have been smarter (imo) to strongly encourage 2FA, along with tutorials on how to set it up (articles, videos), and finally to add an option to not use it with a BIG SCARY WARNING and a consent checkbox.

Ultimately, companies like this are making the choice of information safety vs profits - it’s a tale as old as the free market.
Interesting idea for making public meetings more accessible to the public. I know 3pm on a random weekday doesn't work for most citizens and yet... that's when it feels like many council meetings are.

Side note: Spotting a bit of lorem ipsum on the site which seems odd.
Well I use the necessarily complicated ones haha
Thanks, and they know: "Plb2 complements the Computer Language Benchmark Games."
Disclaimer: this is the co-author.

Sorry for the hyped language. If my guess is correct, the blog was "polished" by ChatGPT, and the intention was to "polish" the English. The paper has more content and should be read more seriously.

We will fix the animation error and update the writing shortly. Thank you for the feedback!

Regarding some of the complaints on SIEVE performance. Here are some more results that I ran for other purposes.
https://observablehq.com/@1a1a11a/sieve-miss-ratio-plots

I haven't had time to add other algorithms to the plot, but they are often similar to or worse than TinyLFU (I did not pick TinyLFU to compare deliberately; I happen to have the figures on hand).
While the results do not include byte miss ratio, which is important in some use cases, they are better than the results already shown.

We acknowledge that

* SIEVE may not work well on some block I/O workloads (this has been the statement in our writing from the beginning). However, SIEVE works well on large multi-tenanted block I/O workloads (see the Tencent and Alibaba figure in the link). For web workloads, SIEVE shows consistently good results.

* As the author, when I look at this algorithm. My own feeling is that SIEVE may not be robust because it keeps evicting new objects when the hand moves to the head, effectively behaving as MRU.
However, our large evaluations showed that modern workloads have certain properties that enable SIEVE to achieve a low miss ratio. We are still investigating this property and how to model it. If someone is interested, feel free to shoot me an email.

* implementing SIEVE with a log-structured design or circular buffer is not trivial, but we had a design called Segcache (https://segcache.com), which runs a constrained version of SIEVE.
In simple libraries, linked list implementation should be easy, and one can check the examples on the website.
I definitely understand the vision, but I’m curious why your chosen path is to rebuild the spreadsheet front end, as opposed to building like a two-way sync connector from Excel/Sheets to various data sources. Asking because I have an in-house tool that kind of accomplishes the latter, and it’s super useful.
You don’t know that they weren’t. HIBP is not omniscient. It doesn’t automatically get a list of leaked account info unless that info is published publically. Based on the current evidence I’ve seen so far, that’s not the case. It seems like the breached data was sold privately on the dark web and was tested for months via a botnet. It also seems like the leaked data included either IPs or last known login location info which means someone with a sizable enough botnet could have used that info to login from nearby locations, thereby bypassing any prompts triggered by “new locations”.
Agreed, my use of “naughty” is to acknowledge that rats in a relatively natural state have some characteristics deleterious to close human habitation.
Stable Diffusion for Realistic Image Super-Resolution and Stylization
Everything I've ever seen says that pipettor is in fact the pipette with additional components, not the scientist or the robot.
https://www.sigmaaldrich.com/US/en/products/labware/liquid-h...
Marketing is like cryptocurrency, it isn't inherently evil, but... only just.
The person could be uninteresting, but the stream of successful and not projects which happen to be united by the participant could be useful as a learning material.
Sure, maybe you wouldn't want it for a personal movie screen, since it's massive overkill for home use, but... you could definitely get use out of it for projection mapping your home and have the most amazing holiday displays on the block.
https://en.wikipedia.org/wiki/Ranga_P._Dias
Cambridge Analytica also didn't literally hack data or have it shared without a person doing something, right?

It seems the part where 14k leaked credentials provided access to millions of users data is where it becomes their responsibility. It means that people who were fully responsible still had their information leaked because of overexposure of the information.
If it's correct they got them via Cameo, Cameo does all the work, and the customer will agrees to terms that include providing factual information, so you're probably right that there's next to no DD because they know the money will be coming and unless it's some acute reputational risk I assume they'll just trust Cameo to deal with any problems. And presumably, Cameo does a lot of work to convince them they don't need to.
> Folks cannot buy contacts / glasses on their own

That's news to me.
No, how would they know this for any given password?

Gashibyu@gyoryana3: is that recycled, or freshly minted?
Github repo (code and demo images): https://github.com/yangxy/pasd
I don't care about the money, let the lawyers and regulators extract. That is the incentive mechanism.
I have a sports photography hobby so I am always looking up rosters and schedules for college teams in the U.S. Northeast and it seems that almost all of them use the same software which would make scraping that much easier. I wonder if the NCAA has an official software vendor for that.
It clearly means "up-to-date Firefox instances located in Germany", your nationality doesn't really matter.

Germany was probably chosen because Firefox's market share is fairly high there
Should Patients Be Allowed to Die from Anorexia?
Cookie consent banners and GDPR are different things though - it just happens that GDPR also classifies cookies as identifiers.
This chrome extension that inspired this was probably inspired by this wonderful blog post that is very much worth a read:

https://waitbutwhy.com/2014/05/life-weeks.html
> Why does a fish swim?

It will likely die if it does not. Animals' actions are an endless search for food and mates and stimulation.

> you believe there exists only one intrinsic goal

Only one? No. But it does underly our decisions and actions.

> I was trying to demonstrate that you don't have access to other people's experiences and can't really know what motivates them, but you seem unmoved

I'm unmoved because I see how selfishness destroys about every human initiative that relies on unselfish behavior.

Frankly, I don't believe you do things from which you derive neither benefit nor satisfaction. Even people who self-harm derive a benefit from it.
Your liberty starts where mine ends. By the same logic password complexity should be left up to the users as well, but what responsibility is this user willing to shoulder when they are the reason sensitive information leaks?

I’m sure most people on HN have great passwords stored in password managers, but 99.9% of users are not like that, so mandatory 2FA does not only make sense, it’s the only reasonable choice for sensitive information.
You won’t have to. They could have forced MFA and been done with it. That doesn’t make it their fault that they didn’t. It just means they could have done better and assumed that at least some users (read: most) are ignorant about best practices with sensitive data. It’s not something they would be legally culpable for, though.
Simple and clean, thank you!
That page itself says:

uBlacklist (more efficient than uBO in this case)
Matt Colville's indie RPG has now earned nearly $4M on BackerKit
Perhaps if they make material statements of fact. If the Woz says something like "I personally invested $X in this company and guarantee it will make a profit" and it is all a lie, sure that is false advertising.

Otherwise, it is just paid actors acting.
Unfortunately the majority of people aren't very tech literate. We have to remember HN is far from average. The company I work for forces MFA and I think if you have sensitive data like this, yes, you should force MFA. Truth be told, it's not going to enter the public lexicon until some big players start forcing adoption. Rule of thumb: if my grandma wouldn't know to do it, I shouldn't expect my users to do it. If you expect your users to use bad practices, then you're not doing your job well. Idk if we should say it's somebody's fault when that somebody is a non-expert and is making a reasonable choice.
7 Steps to Effective Communication
Transcript of Matt Abrahams Lectures and Book
> It's easy for established programmers to forget the days when a pointer was beyond mindblowing

Oh? I distinctly remember – after hearing the same story over and over that they are mind-blowing – thinking "that's it?" when I was first exposed to them. I was primed to see my life change, and all I got was a nothingburger.

But maybe it is that I still don't yet truly understand pointers, and thus have not reached the point where my mind gets blown? What have I missed?
I think that's reductive orientalism.
The purpose of probability is not to give you good feelings
Again, this is wrong, actually a lie in regards of what I have been saying on this thrtead. I have been giving my opinion and explaining all along in all parts of this threads my views and opinions.

This is so bluntly disregading everything, I think you may very probably be a AI bot with a very small context window.
Maybe you shouldn't endorse a company when "there is no suggestion they had any knowledge of HyperVerse’s business model". I think every one of these celebrities should be held liable for the bullshit they say.
Aaaah gotta love me some Corinthians 14:34-35 in the morning
Curious how high this was upvoted with no evidence. Would imply unconscious bias within HN readership of Japanese as obedient.
As a Windows sysadmin AppData has been an unmitigated shit show forever.

Developers (including those inside Microsoft) don't give a damn about how Microsoft intends anything to work, and AppData has become a dumping ground of software installs to end-run IT departments. A lot of malware dumps into there but good luck limiting execution from that directory hierarchy because all your business-critical end user communication apps live there now too.

The functionality of roaming users profiles (i.e. registry settings "following" you to a different computer, which gives a really slick user experience when it works) was completely ruined by devs dumping piles of small files into "AppData\Roaming" (and completely not understanding that "AppData\Local" even exists, let alone what it's for).

In Windows 2000-land you could redirect AppData to a UNC path and mostly get around this behavior. That's not really "a thing" anymore because you've got apps like Microsoft Teams storing sizable databases in these locations and getting really, really cranky if network connectivity is interrupted.

Windows development betrays its legacy DOS parentage even for devs who never lived thru that era. There were no rules. There was no adult supervision. There was poor documentation of APIs so you just hacked something together that worked well-enough. Periodically Microsoft tries to start over (all the APIs w/ "2" at the end, et. al.) and the cycle repeats.
"The EU didn't force cookie banners, they just made it so that companies have to choose between the banners and their revenue, conversion tracking, and business metrics."

Whoever's bright idea that forcing an annoying banner on users was going to make any company currently employing tracking think even for a microsecond about not tracking needs to have their head examined.

Because you employ tracking you're legally obligated to make someone else's life more annoying is a brilliant piece of legislation.
That’s the point. Is “being near the CEO” a sign a weakness. That the CEO cares more about their own comfort instead of being close to the people that make the business work.
I'm of the mindset that it takes work to keep democracy, freedom and egalitarianism alive. You can't just let anyone publish anything and think that it will all work out in the end.

It is tough because separating freedom of expression from hate speech is hard and prone to errors, but the alternate is to let Nazis and other hate groups to grow and strengthen. History has shown that when evil is given a platform, it grows instead of withering away in the light.
You can't keep companies from spying on you by asking them to "pretty please stop". DNT had the same problem.

The banners aren't even the real problem here, it's the surveillance of users.

We either create strong regulations with teeth and enforcement that make it prohibitively costly for companies to spy on people, or we're left with a technological game of cat and mouse where users have to protect themselves as well as they can by not trusting adversarial companies to play nice and limiting what data they make available in the first place. I'd prefer a mix of both.
https://archive.is/8FXrT
Making it easier / less work for more devs to do the right thing doesn't seem like an inappropriate request. If users are misusing your system, there are other solutions than RTFM
I think you are misunderstanding my comment. I'll add some context that may help.

The discussion centers around automated tools to detect infringing content. These tools are not 100% accurate and may cause false positives. I am of the opinion that issuing takedowns on false positives should come with consequences.

If an artist wants to enforce their copyright on every case of infringement, no matter how minor, they're welcome to do so. Where I take issues is issuing takedowns because an automated, unreviewed system flagged the content, and no manual review took place.

Automated review puts the onus on the secondary content creator to prove that their work is not infringing in response to bogus requests. They must take on the cost in time and energy to do so. The cost should be on the copyright holder, and if that means automated reviews are not economical, so be it.
Or the way people blame bars for stuff when it’s the drunken fools who go to bars and drink too much that are the actual problem.
Gonna arguably talk out of my ass here, but as far as I understand the law, it doesn't dictate implementation details. You have to get consent to keep any sort of persistent session state on your users that can be used to track their browsing behavior. It doesn't say you need to do this by offering a popup that itself stores a cookie saying you do or don't want other cookies, but you're largely guaranteed browsers will support displaying a popup banner. You're not guaranteed browsers will send a non-standard header. Doing this is in the scope of browser developers and the IETF, whereas GPDR is in the scope of lawmakers. One of those groups decided to act and the other did not.
While it's a lot for the planet as a whole, 2 or so degrees is trivial in these contexts. This discovery would raise the available temperature range of high temperature superconductors by 157 degrees K.
Sieve: An Efficient Turn-Key Eviction Algorithm for Web Caches
No definition of the Web and REST are the same.
> people who were fully responsible...

We're talking about people who 'friended' others on 23andme, right? How is that responsible user behavior? I had an account with 23andme before I forced them to delete my data, which was not that difficult to do.

One of the things I remember was getting friend invites from random people who were distant cousins, and while I suppose that might be fun conceptually, I never did it because I didn't know any of these people. In what world does a "responsible" user who cares about their privacy add access to personal information, on a website that profiles your DNA, to people who are blood-related but still total strangers? I would call that highly irresponsible, personally. But that's just me, an idiot who avoided all of this by deleting my 23andme account half a decade ago.
SvelteKit: Best Practices – Performance
> History has shown us, time and again, that tools created for one purpose can and often are repurposed for more sinister ends.

Back in 2008...

"UK terror law used for Iceland deposits" - https://www.ft.com/content/55398517-1ea9-3248-8205-3268e037b...
Have you tried a password manager? Many of them will autofill the code for you. It makes it quite seamless.
If the user logs in from a device we haven't seen before, or they haven't logged in for more than a year (or six months, or two weeks etc), send them an email challenge.

Maybe the email address on file is also cracked but it'll make it harder, and it's more work for the attackers.
There's been an overall progression toward intrusiveness for as long as commerce has been on the internet. We had "sign up for our newsletter" and other pop-ups way before GDPR.

I think popup blockers turned back the tide for a while, but businesses eventually learned how to leverage dialogs for some of the same purposes. And, over time, that's been rolled up into WordPress plugins and other easy to implement solutions for one-off site owners, which makes them even more common.
"System" could refer to a botnet -- i.e. a whole bunch of distributed computers from which the credentials may have been exfiltrated.
The sad reality is they will be audited, found lacking, slapped with a small fine, told to implement 2FA as a requirement for all accounts, and go about their business. That’s been the precedent the last decade.
I downvoted it because the tone of the response was rather annoying, more fitting to some popular subreddit than HN.