skysight-inc/HackerNews huggingface dataset:
Everything is a tradeoff - but the basic balance is very strongly in favor of password managers:

1. without a password manager that is shared on all your devices, you WILL re-use passwords out of frustration.
2. without a password manager, if you do any sort of regular sharing passwords with a engineering team, friends & family, you'll resort to pretty insecure channels.
3. true E2E encryption, while still providing some surface area, has proven in the field through multiple pretty bad breaches[1], that it's a security model that holds up under real-world circumstances.

On the flip side, you are right: you are one compromised browser extension / binary away from having your local vault decrypted, and ALL your passwords compromised. But think about this: if someone has this much local access, chances are they can install a keylogger anyway, or read your clipboard, so the real difference is you've conveniently pre-loaded all your sensitive information in one go for the bad actor.

[1]For example: https://blog.lastpass.com/2022/12/notice-of-recent-security-...
> But what inevitably happens is that you take a break from the system, your interests change and the priorities you assigned 6 months ago are now out of sync with your current interests.

Just a small little vacation will throw me off. If it's not part of your daily routine and you're not hellbent on following it, coming back to it takes a lot of activation energy.

> Because the goal is to maximize memory retention, the bulk of your reviews will be focused on the flashcards that are most difficult for you.

It really does feel horrible whenever I review cards because it's hard to make a good card. Sometimes, my style will change and I will have no idea what I meant in a card I made a year ago.

One thing that concerns me with making such a system is that one should be really careful when collecting people's data and preferences and then recommending based on that (thinking of YouTube recommendation slippery slopes).
several actuators per rocket * several dozen rockets * $115,000 >> 9 months salary.
Yup companies exist to make money, people work jobs to make money, investors invest to make money, we all just really love to move $s around from one bank to another or trade pretty green bills. No other reason nah.
that’s why I only share my profiles with people who have a strong password
> How many computers do you use normally? How hard would it be to link them to your accounts?

I use private browsing exclusively, so, I’d hope that’s difficult link to me reliably.
They used his name and image without permission and illegally in a scam. That's the opposite of participating.
They weren't from the same place. It was from a botnet over the course of several months.
Well... this sure looks better than my powershell script for hotreloading lol
(Paging Sundar…)
Any quick patches to apply to the source to enable this in all modes everywhere?:)
Ultrahigh-mobility semiconducting epitaxial graphene on silicon carbide
Of course it means exactly that. If you opt in to a feature that shares your data with other users, you're explicitly opting in to the risk that those users will steal/leak/share your data with a third party, either intentionally or through their own negligence.

If 23andMe had made any claim that they took steps to force users to secure their accounts properly or that they implemented measures to prevent data exfiltration then perhaps you could argue that you should have been able to rely on those claims, but as far as I can tell 23andMe made no such claims.
This seems to happen on subjects much broader than FE community direction. Fringe twitter posts on politics are very frequently interpreted as "what the entire <x> community believes."
It currently is still a competitor. The switch of an internal browser engine doesn't make two products no longer competitors.
I tell myself and other people if you have it saved in your browser are you okay if bad people know that password. Also it makes it easy for people in authority to get to that password with a simple court order.
I've learnt that Game Designing and Game Development are two very different things. You need a creative mind to know what mechanics will be tight and grab the audience. Development on the other hand requires ruthless execution.

hence imo in the beginning, it's best to recreate existing games with atmost a small twist. This makes sure i'm learning one craft adeptly before moving to the next.

Here's a freeboard of a game I worked on recently: https://li-quoridor.vercel.app/ [Still a work in progress]
As a 23andme user who has filed a complaint with the FTC, purposely opted out of arbitration and intending to join a class action, and is responsible for customer IAM at a fintech, I politely disagree. Poor IAM and AAA decisions are a choice, and there must be consequences for resulting harm.
While I disagree with you about licenses (I prefer permissive licenses as they grant more freedom), I at least give you kudos for having the good grace to not shit on the author for using a license model other than what you prefer. So many people in this thread are displaying a truly remarkable level of rudeness about the license when it is (as you said) the author's right to decide what he wants to use.
That is a great analogy.
How do they make it work across all websites, since it seems there’s many ad hoc implementations?
I also rather use Windows, even though I have an extensive UNIX experience since getting introduced to it via Xenix in 1993, and using most well known commercial variants since then.

Mac OS occasionally at work, in project assigned laptops.

Linux plenty of distributions since getting Slackware 2.0 on 1995's Summer.

Eventually I gave up on the Linux Desktop dream, around Windows 7 timeframe.
Why big numbers break our brains
The service requires authentication, but then does not take the obvious steps (industry mediocre(1) practices) to ensure widely known problems with authentication are mitigated - let's not blame regular people for the failure of this service to secure their accounts.

(1) the bar to do better is quite a bit below "best practices".
I've used this extension for a long time, but there are actually websites like CNN that don't work with it now, because according to their lawyers they have to show that banner to everyone from the EU.
This seems like something where the outcome of the simulation is dramatically influenced by the starting assumptions to the degree that the results are useless.

It allows plots of land to be smaller, but is the extra space taken up by housing or businesses? Is the housing single family or high density? How do wider economic trends interact with developers' interest in building/not building? I would think interest rates interact with developers' willingness to build and what they want to build.

Those factors feel very subjective to me.

Not to mention that if a model existed that could accurately predict this, I would eat my hat if the model wasn't immediately bought out by a fintech firm for some absurdly large sum. Being able to accurately predict the housing market is a blank check for printing money.
Based on screenshots that looks like dearimgui. You can see similar widgets here: https://github.com/TimoSalomaki/awesome-dear-imgui

Edit: I’m wrong, it’s actually React Flow!

https://github.com/FrameOS/frameos/blob/037af53e94a3b47ce5df...

https://reactflow.dev/
Amazing savings on yachts, too; all they need is a 3D printer, a bathtub full of water and the tears of executives for salinity.
I think of a lot of the school algorithms as stepping stones and good practice. It's easy for established programmers to forget the days when a pointer was beyond mindblowing and, sure, OK, I get the idea of a function, but a function that calls a function? A function that takes as a parameter a function to call? What is this?

A linked list is useless in 2024. But it is also just about the simplest possible non-trivial data structure, and while you may not ever implement one ever again the pointer practice is good, and so I support keeping it in the curriculum, albeit I also support being very clear and up front about the fact that it is not actually useful anymore as well.

Even something like a compilers course, odds are decent you're not going to ever use those exact algorithms ever again, but the general overview and practice is very valuable and the difference between those who understand those concepts and those who don't is often pretty clear to me.

You've got to bootstrap off of something and I think a lot of people fall into the unexamined trap of defeating the curriculum in detail ("well, this thing is useless, and this next thing is useless, and the next thing is useless" and therefore the entire thing is useless) and in the process cutting off any way of getting enough experience with the space in the first place to get to the point that they don't need the bootstrap anymore. There is no scenario where we sit a student down in a seat, say a few words over a couple of hours, and presto they're as fluent as any other programmer with decades of experience with the basic tools of data structure design.
The author integrated GPT-4 into the "app builder" that FrameOS has for building custom views, so you can ask GPT to make improvements to the underlying code. See https://frameos.net/blog/gpt4-support

My first thought seeing this was that it validates that new apps from now on will be LLM-integrated from the start. Why not, right? LLMs used right are a great UX-improvement for almost any app.
Back when I worked at TI we had a neat machine that used X-Rays to map and reverse competitor chips (mostly to discover they were duping ours). It would work down to just short of a 10nm resolution.

You'd need to use gamma spectrography to map out more modern chips. I'm sure someone's got the equipment somewhere; the chip manufacturers themselves must verify they got a good etch somehow.
No its not. See: https://gitlab.redox-os.org/redox-os/redox/

https://www.redox-os.org/news/development-priorities-2023-09...
Parrot Captions Teach Clip to Spot Text
Ok but it assumes the domain is compromised as stated in the article, and if the domain controller is compromised, it’s a game over for connected machines hence these attacks usually focus on domain admin or schema admin.
Edit: it seems the second non-biometric method doesn’t need domain, it’s still however need that local access

> S-1-5-21-505269936…

Kind of off topic but around 20years ago when I had my first portable harddisk, I used this method by creating these type of folders and remembering the numbers sequence in a creative way to hide my files when traveling/crossing borders while putting some decoy files in the plain sight, before knowing/using data encryptions, and it worked, I remember the agent taking my hdd and seeing him going through the decoy files and then returning my hdd normally.
It's still exhausting.

Literally every time I pay for something via PayPal on my computer, I need to pull out my phone, find the authenticator app, open it, scroll to PayPal, tap it, see if there's enough time for this code or if I should wait for the next one, type the 6 digits into the site...

I mean it takes half a minute, and this easily gets repeated several times a day if you engage in a lot of transaction-type things. And it's no faster if it's by SMS or by e-mail because I'm still spending 15 seconds waiting for the message, and then opening it, typing, then going back to delete the message so it doesn't clutter my inbox -- half a minute total again.
What does Xerox do these days? Do they just sell/service copiers and printers?

Gartner has discontinued printer, copier and MFP market coverage.

Their website lists printers, copiers, and supplies, as well as 'Print Solutions' and 'Document Solutions'.
Doesn’t this fundamentally guarantee the enshittification of every company driven this way?

If you must grow by x% every year, and infinite growth is impossible, you begin shoving more and more low quality ads into your search results, partake in more legally and ethically grey activities, and eventually rupture?

Are there any examples of large corporations that have said, “we make billions in profit each year. We’re going to focus on maintaining that enormous success. We’re not going to focus on growth.” (I can already hear the spreadsheet squinting logic about how growth is necessary for some reason)
Tether makes money from interest on the funds that they do actually have. Maximizing the amount of money that they hold would actually increase the amount of profit they make. They have no incentive (and a pretty strong disincentive) to be insolvent.
Github repo: https://github.com/opendatalab/clip-parrot-bias
"promote the Progress of Science and useful Arts" - Not sure if this the the parent's view of the purpose of copyright, but seems to have been what the original constitution writers had in mind.

By that measure though, it seems the US has had pretty good results. We have a flourishing scientific research and arts community regularly producing amazing things. Certainly at least as good as anywhere else. And the other countries that also do well in these areas have similar copyright systems for similar reasons. I don't know of other countries with substantially different copyright laws/systems that produce similar quantity/quality of science and art.

I'm not saying it's perfect, just that before we so roundly criticize something we should at least have in mind what we are trying to achieve, and some reasonable idea of an alternative that would achieve it.

Do you have some ideas of how the US copyright system has failed at the stated purpose, and how something else might work better?
> You're assuming that the body builder aesthetic is everyones desired aesthetic, it's not.

I'm not, it was just an example. I can't edit, but you're right this could be more clear. What I mean is that if aesthetics is the only goal then people would exercise optimizing for aesthetics exclusively.

> Also, working out for your health and working out to be more attractive are not mutually exclusive things. I'd argue they're the same thing, and even if you disagree, it's still reasonable for a large numebr of individuals to cite both health and aesthetics as their motivation/reasoning.

This is a strawman. I didn't say exercise is only for health, nor did I even imply it. I said that health can be a primary motivator. That said, I'd still disagree with your statement.

Someone who is diagnosed with diabetes and changes their lifestyle to be more active and eat better might get the benefit of looking better after some time, but I'm pretty sure their primary motivation is to not die. Remember, OP claimed the real reason people work out "is to look good".

But you're ignoring a lot of people who simply want to see what the human body is capable of, or just have fun, or any other number of motivators. Someone who runs ultra marathons, doing bodybuilding shows, powerlifting, etc. surely is more interested in testing their limits possibly at the expense of their health/aesthetics.

Or sometimes people just want to play basketball because it's just exceptionally fun.
Originally governments didn't just give out corperations whilly-nilly so if you weren't doing something that benefited the public you just didn't get one.

Which really wasn't a big deal since you could always do business as yourself although you (and not the corporation) also got liability then.
As someone who splits their time between Thailand and the US, I cannot wait for satellite phones to become commercially viable.

Everyone in Thailand uses LINE for (data) messaging and calls. Everyone in the US uses (cell) SMS and calls. Having just a US number with satellite data would give me total coverage
Toward a shallower future: Adversity isn't worth the price of adversity
> But the longer you look the weirder they tend to get. Not that this always happens, but enough.

Especially with the HDR-esque glow that shouldn't exist.
Humanity benefits if Twitter truly dies.
Do you share your banking info with complete strangers? If not, why would you share your DNA with them and be surprised that they could do something stupid, foolish, or reckless?
No one said they don't. Just there still are and always will be parts which are computationally heavy but written in python. e.g. pandas map is 300x slower than numpy map[1] for the same operation. But not everything could be vectorized and even if some complex function could be vectorized it will involve multiple passes over memory for the same array.

[1]: https://www.exxactcorp.com/blog/Deep-Learning/how-to-speed-u...
In the unlikely event hackers were prosecuted for actually breaking into them, I wonder if there is any material in this release the defendants could use to their benefit: "the purported victim here says in their own words their system was secured properly".
Location: Boulder, CO
Remote: Yes
Willing to relocate: No
Technologies: Scala, Play/Zio-http, Akka/ZIO, Akka streams, Rust/Axum/Sqlx, Kafka, Redis/Memcached, Mongo, Postgres, and many more.
Résumé/CV: linkedin.com/in/jordanneumeyer
Email: jdneumeyer + hn [at] gmail.com

Backend developer with over 12 years experience seeking another backend Scala role preferably, but I'm actively learning and excited about Rust. I've done a variety of backend work from data processing/ingestion, web-services and R&D. I like addressing performance and scalability challenges, enforcing best practices and seeking engineering quality & excellence.
Location: NYC

Remote: Yes

Willing to relocate: Yes

Technologies: Python, Microsoft Power Apps, Java, Azure, C, Docker, Flutter

Résumé/CV: https://docs.google.com/document/d/1NkYgUPa8ZcKiAS713D2biGB5...

Email: tjbaldwinx2@gmail.com

I'm looking for a product or technical program management role. I am also open to SWE and technical consulting positions.
There’s a really blurry line that needs more clarity.

When George Clooney tells me he uses Nespresso coffee pods, I don’t entirely believe him. If I found out that he didn’t, I can’t imagine trying to take legal action against him.

But Chuck Norris endorsing a cryptocurrency? Should he be required to do due diligence on a client before doing paid advertising for them? That also seems unfeasible. Then what about the Kardashians advertising dieting pills? Supermodels advertising cosmetic surgery?

It seems the line is affected by the fame of the celebrity, the product being advertised, and exactly what it is they say.
Not the GP but that's clearly the case IMO. If I share my tax records with my accountant and their office is broken into because they left the office key sonewhere, do I blame the office building or the accountant?

We can argue about whether the office building should have had better security and noticed weird people around, but ultimately it's the accountant's negligence that allowed my info to be compromised, and if I suspected they weren't the best with their security, I should have factored that into who I decided to share my info with.
You've reminded me to go back and see what's new on https://www.shlinkedin.com.
> One can like one tradeoff more than the other, but the fact that infrastructure means subsidy, and that urbanism choices are picking some people's interests over others is just factual.

You do have a point.

But, do you think cities prosper in spite of this subsidy? It seems like an investment that pays off in second error effects. I mean, why aren't cities without infrastructure growing like mad? Because it's not possible and cities with infrastructure outcompete them.

Only way to make this work is if you outright ban infrastructure and then make competition impossible in that domain.
> It's not STP (standard temperature and pressure, 0C/1atm

Nit: STP is 20C/1atm, not 0C/1atm.
I think by most people's standards that's pretty cold. Summer high in the mid 50s. 8 Months of the year with near freezing nightly temps.

What inhabited place would you be comparing it to to get "not all that cold"?
When you send people secure information through any means, you are accepting that the security of that information is now equivalent to the worst level of security practices of all the people who received that information. When the recipients are a large collection of random strangers on the internet, you should assume the data is as good as public, because the average random stranger on the internet has terrible security practices (not to mention the non-zero probability that they're actively malicious).

23andMe could have done a better job communicating the risks of sharing your data with random strangers on the internet, but it's also not unreasonable for them to put some level of blame on users. If you wanted to treat that information as secure, you shouldn't have opted in to sharing it with an arbitrary number of strangers.
This is awesome! Maybe 2024 will be the year of Firefox
Of course you can move heat from something hot to something cold, it’s called a heat pump. Though yeah I get what you meant. There are heat pumps that have entered production that are designed to generate the kind of industrial levels of heat required to heat the water to the level required to add heat to such reservoirs. Whether it makes sense, I can’t say. But it certainly makes sense for geothermal well used for district heating (not electricity). It’s already being done.

Funny thought: if you use a heat pump to store heat energy in summer to be used in winter.. and your reservoir can retain the heat efficiently (think the heavily insulated sand reservoir used in a project in Finland for instance)… could that make the battery effectively more than 100% efficient?
>there's no technical requirement to do so

It lets you avoid tearing even if the sender starts acting weird.
I'd love for FrameOS to support ESP32. Two days ago FrameOS was a slow and interpreted Python app. Today it's a 3MB statically linked binary. The margins are tight, and I'll likely need to cut out some features (e.g. threading), but theoretically it should be possible to get it to run. However I'm not planning on taking this on any time soon, as there's still a lot of work left to make the Raspberry version great. :)
And of course this person or any of us could keel over tomorrow. So maybe add :"Or maybe you have no Sundays left. YMMV.'
Airbnb, eBay, Vinted and other apps to share more information with HMRC
Interesting, thank you for finding that looks like I misremembered.

I would exclude rts and fps for the simple fact that those are made with mouse in mind on pc, but fps is challenging because they do work well with controllers on split screen (and you can't play an fps with just keyboard).

I think the good answer is in the stats, 35% of players connected a controller, that's a lot of controllers. There might be more, there might be some with multiple.

But it's a chicken-egg problem. People don't have multiple controllers because they don't make split screen games anymore, most of them require multiple consoles/pcs.

I follow the genre a lot since I want to play with my wife and my friends. It's mostly indie games with the exception of bg3/divinity original sin.
Ask HN: Did you have kids later in life, how did it do for you?
Did you regret it? I mean... what's...even the way to think about this?
Just to provide a counterpoint, my experience was that there was far more stupid bullshit in high school than in college, much of which we were told would prepare us for college. By this I mean petty, overly complicated processes and nitpicky rules. There was also more stupid bullshit in college than in the workforce that we were told, again, would prepare us for the workforce.
They haven’t.

> “The cookie banner blocker works by using a careful selection of websites that we've put together.”