skysight-inc/HackerNews huggingface dataset:
These are each specific DB-as-a-services. Instead of sinking my time into learning something universal & competent & capable at many things (Kubernetes) now I'm investing in learning & using a niche service, that I won't have fine control over & whose limits might only be clear down the road. That's a risk.

Sure the dbaas might have superb autoscing and reliability. It may or may not have good OpenTofu/terraform providers available, or other custom niche deployment tools one would need to pick up & adapt.

Same questions as roughing it hacking together pg yourself, except now you have no power. Is observability going to be up to snuff? When performance problems come, how are you going to feel when you discover that analyst techniques a and b work fine but c and d can't be done because you are on managed service that doesn't actually give you full access to the db?

Costs can also add up, and are hard to predict. If you have a managed service, you'll be using a lot more network, which often has some cost (also some latency too). This isn't for everyone, but Kube makes it easy to start with anything (ex: RPi) and scale out. Works with hosted hardware with some local SSD, or I can get a 16-core 7950X and a bunch of gen 5 nvme drives and a fraction of a terabyte of ram for <$2000 and that'll scale me to godlike levels. Whereas I'll keep paying for something hosted.

I think it's so so ideal to have a reliably capable universal autonomic computing later underfoot. Most of the backend has had special specific answers to each question, each problem. We have been disjointed. Kubernetes provides a platform applicable to a vast range of workloads, where yes you need to tune and build different clusters for different workloads, but where the skills transfer much more readily. Everyone in Kubernetes knows how to ship resources definitions/manifests, and that base knowledge is all you need to learn to start consuming services - any services - on Kubernetes. Skill transfer is immediate. Having universal patterns (the API server), backed by autonomic operators making & keeping these resources real: it's so much better than the thousand different paths road of technology we've been on until now.
Where do you find that article? Also don't understand your comment about self promotion.
Show HN: No ads, no login website to track work hours
Since I went remote(working) last year, I found it hard to track my work/focus hours. To begin with, I started with my mobile stopwatch but found it to be inefficient and distracting. I then tried some time management tools online but they were geared towards enterprises than individuals. Plus, had too many features.

So, last weekend I created https://www.timemygrind.com/ - a simple focus time tracking tool that requires no login, no internet and has no ads. Once you finish your work, it shows the times in the table below.

I usually pause when I take a break or go out for lunch and has helped me figure out how productive I am.

Eventually, I will add more features but would like to hear your thoughts on this and remote work productivity in general.
Also a lot of "in Rust" rewrites include a substantial amount of unsafe FFI calls to the original C libraries...
if you choose to share data with Bob, you have to accept the consequences of Bob being sloppy with your data
A hardware keylogger has to sit as a MitM between the keyboard and the USB port.

Sufficiently paranoid endpoint security could trip when the keyboard is unplugged and then plugged back in.
Even places like CERN used to have an IT policy that you're on your own if not using Windows or Mac.

Even when they co-designed Scientific Linux alongside Fermilab, and all the servers were on Linux, moving away from Solaris.

Speaking as one of the beta testers, back in 2004.
Cities obviously cannot or do not build housing.

Given that, beyond say SimCity, has anyone developed simulations of how these new regulations / incentives would actually affect housing?
I'm guessing they mean on Tor-only websites.
Yeah, man. Honestly it's kind of a sexy picture that yiff png^0. I ain't into furry shit and I think it's weird, but that's a pretty sexy pose right there for people of a certain orientation.

And hilariously it ain't no different to stock-standard fare you see everyday on tabloids, TV, or Instagram! Like WTAF people having a moral-panic-meltdown over this shit? hahaha. Secretly Google just melting because somebody actually made a good Chrome fork. Tho I'm scared by even thinking of saying this I'll have to kiss goodbye to my GMail account, and they'll probably cancel all my accounts but still keep charging my credit card with no way to purge, right? Amiright, ABC.XYZ? Sergey, I thought we were freeeeeeens? :) heh.

0: https://github.com/Alex313031/thorium/blob/3759529384a18ae7c...

I mean, weird to include it in a GitHub repo, but not evil. The fact that some NPCs are falling over themselves to call this evil (while probably repressed-guilt-projectively retreating to their private stashus of furry-et-al pon when the sun rises) suggests there's "rotten" in the state of browser forking, methinks! hahahahaha :)
Someone gains access to a DB for a site (through any variety of means) and then goes on Tor and tries to get people to buy their list of credentials.
> ...despite the fact that no one has actually stopped any tyranny with rifles over there.

I suppose they didn't cover the American Revolution in much depth in your history classes. It was not a peaceful protest.
get on Reedsy. You can put work out for bid, and the quality is quite high, IMHO.
Like generations of laid off Rochester tech workers before them, they’ll find jobs at local startups or UofR/RIT.
They make it easy to have strong passwords and sync across devices.

You could use a local vault and sync yourself, use a piece of paper in a safe, or use your brain to store them.

All of these come with tradeoffs and their own risks. Pick your poison.
I manage a fleet of over 1500 raspberry pis and sometimes put microsd cards in the same pocket I put my supplements and just scoop the pocket full and put it in my mouth and drink some water and swallow

After that happened once I did it again deliberately in front of some friends because it was funny
I use a mixture of Cloudflare and Porkbun.

Cloudflare offers domains at cost however there are a few caveats:

- they don't support all TLDs

- they require use of their own nameservers

- in order to transfer a domain from one Cloudflare account to another, you have to transfer it to an external registrar first and then transfer back in. A bit bizarre

I still like Cloudflare though :)
You can do holomorphic encryption.
> Nothing on 23andme’s end failed unless you consider someone using a correct user/pass combo while not being the owner as a fail on the part of 23andMe rather than the end user.

This seems to be the big societal discussion, in the same way that people blame banks for them sending money to crypto and romance scammers overseas.
Amazing sportsmanship, talent and determination! Kudos to this young man and this community, a true lesson of humanity.
If you’re not providing secure MFA as an option and invalidating breached credential pairs via HIBP, you’re negligent as an idp. 23andme failed hard, and they should own it.

FFS, default to magic link login via email if you have to. At least then you're relying on Google, Apple, or someone else for auth (in most cases of unsophisticated users).
Yes. I could have been clearer but didn’t think that was a sticking point.
There is an over abundance of farming on the great plains, and nearly none of it goes to feeding humans. It's corn, soybeans, and sugar beets in Minnesota. A lot of it is used for industrial purposes, for creating ethanol for vehicle fuel, and for feeding livestock.

If we took even a fraction of the fields that are used for ethanol and did solar farms instead, we could power our entire transportation energy needs. It's hard to overstate the inefficiency of using farm fields for ethanol. We just have such a huge over abundance of farmland that this inefficiency doesn't really matter.

Honestly, it would be best to pay farmers to restore a lot of farmland back to plains, instead of subsidizing such huge amounts of overproduction of inedible crops and sugar.
I think the string "15%" is going to give me anxiety for the rest of my career.

(Context: I was 15%'ed back in April.)
Worked on a similar product 10 years ago at Pandigital. They used some custom os from china and the way you send photos to the frame is by giving guid email id. It was doing good in those days until they got ddos on holidays season and lost all the business.
Adding Command Line-Esque Parameters to C64 and C128 Programs [video]
Doesn't mention his role in burning Washington, DC, and attacking Baltimore. If he had been brave enough to send one of his ships of the line into Baltimore harbor instead of just a few frigates and gunboats, Ft McHenry would now be a long-forgotten pile of rubble.
Full unrestricted disk access for all users and code isn’t the only way an OS can be designed.
The problem is the word "safe," which is inherently ambiguous. Safe from what? A better term would be "correct," because at least that implies there is some spec to which the developer expects the program to conform (assuming the spec itself is "correct" and devoid of design flaws).
But if these machines are so isolated, and given they've been running with the "if it ain't broken" mindset: why, and more importantly how do they even get updated? If they aren't being updated, why discuss constraints on updating them?
You don't need to tell me you're vegan, yours is indistinguishable from someone who likes the propaganda.

Merit why it and other fake diet documentaries like super size me are legitimate. They are all grifters and propaganda, from the full carnivore to the full vegetables, most of them are vegan and vegans are commonly known to die of malnutrition.
>Either it is flawed, and therefore the service's job to catch, or it is acceptable. But the service doesn't get to say afterwards "haha, that was really dumb of you, you should have used a stronger password".

You are missing the category of attack that happened here.

The password was acceptable. But the users used the acceptable password on multiple websites. A different website was breached, and the password was leaked.

It is not 23andMe's responsibility to check if other services are breached, cross-reference the users in that other service, get the leaked password list, and then see if those leaked passwords are currently in-use on their website on accounts that are used on both sites.

However, as noted in my top-level comment, they should be checking against known-compromised passwords at password creation/change time, and disallow those.
I really like David Kopec's Classic Computer Science Problems series. He has it implemented in multiple languages too.

https://classicproblems.com/
It's a lot like picking a career as an artist, a musician, or an athlete. A very small percentage makes a lucrative living, and the rest wander in the desert.

> unconscionable contracts

Self-publishing has never been an easier option than today.

> book bans

As far as I can tell, these are only for R rated books in schools and libraries. Isn't it the same as R movies? Nobody thinks of R movies as being banned.

> action to build a system that properly values the essential contributions of writers

They're valued by the free market, i.e. people freely paying what they believe the book is worth to them. I'm curious how the Guild expects to change this. Have government regulations that mandate payment per word? Government subsidy?
The potential impact of a breach doesn't just affect you, and their security decisions should be made with a wider consideration of concerns than the short lived frustrations of users.
+1 curious about F#
SvelteKit actually lets me enjoy writing webapps.

I haven't played with Astro much, it looks quite sane, but oriented more towards content-heavy sites vs webapps.
Reminds me of the Sound Princess in Japan https://en.wikipedia.org/wiki/Toilets_in_Japan#The_Sound_Pri...
I'm pretty sure it's just more options, mainly social media. Everyone I know has plenty of leisure time to browser stuff on their phone, but book reading is a distant thought for most.
Really? Seems analogous to sharing, I dunno, a private Google sheet with somebody. If my friend's Google account is compromised, because they reused a password lost on another site, I wouldn't blame Google for the attacker being able to read the sheet. I shared it with my friend knowing that might happen.
This is accurate. NeXT was sitting right there but Taligent, Pink, and Cairo sucked all the oxygen. It’s kind of funny how NeXT won in the long run by acquiring Apple for a negative 430 million and re-skinning as macOS.
Or, users can check their passwords against known-compromised lists. It's not on them to hold users' hands and check for their mistakes.
Agreed. But it was Eastern European migration that turned the working class against the EU.
And it could be that diktats from "one of own" is easier to swallow than coming from "that foreign lot"
Isn't that obvious? If I share a Google doc with you I'm taking the implicit risk that your account might be compromised along with my document when you e.g. forget to log out at a public computer.
It's a security flaw in life itself.
Reminds me of this[0] post on NullProgram about how to apply hot reloading to C.

[0]: https://nullprogram.com/blog/2014/12/23/
Those will not simply give you close to optimal performance (>~90% of peak), even, say, POWER10's 4x4 matmul instruction. You need a structure matching the micro-architecture -- the cache and register structure [1]. That's not a triply-nested loop. Any remotely decent compiler will unroll and vectorize the micro-kernel appropriately, but you may still have to resort to assembler-level prefetch fiddling for the last 10s of percent performance (specifically on avx512). Compilers may recognize the loop structure and replace it with an optimal-ish implementation. I've an idea that FORTRAN H extended did that, but Polly does it in clang.

1. https://www.cs.utexas.edu/users/flame/pubs/blis1_toms_rev3.p...
> Using HIBP is a partial solution, but not sufficient to prevent a leak like this.

I didn't say it was sufficient to prevent this. I said it was another tool that would have mitigated some of this (and which presumably 23&Me did not implement).
Don't headquarters usually move to accommodate where the CEO wants to live?
SEEKING WORK | Remote
Immediately available to join data engineering teams.
Location: India
Remote: Yes
Willing to relocate: Not now, but in future.
Technologies: Synapse, ADF, Matllion, Databricks, Apache Spark, Apache Airflow, SQL, PySpark, Kafka, Python, Pytest Résumé/CV: https://www.linkedin.com/in/dmistri/
Email: devendramistri@gmail.com
What is [1] referencing?
There are so many Co-op / PVP scenarios I can think with this screen warping mechanic...

Puzzles that require you to go different directions, to gather components for the puzzle, but you have to first find the warp-thrower to transfer resources, which you have to gather and transfer to your warp partner to solve the puzzle, but you need that BFG to throw resources to the other.

Multiplayer maps where your maps are vastly different, but you have certain "tiles" that are all shared... when two of you run into the same tile - you are warped in multi.... and then you either have to fight or work together.

Some tiles can be "ok we are warped together: what are our goals? "Fight eachother|team against other guy|find a resource| trade| etc"

This mechanic can be so widely used....

I LOVE IT (BTW - I AM one of two of the guys that built the gaming marketing for Intel for proving that a <$1,000 Celeron Machine could satisfactorily play games such as DOOM, Descent, UO, etc.... I know a little bit about gaming. My cohort at intel is an EVP at gaming companies you have all impacted by) (I went tech, networking, medical, etc - he was all in on gaming)
Most kids don't even have a desktop, just a cell phone.
Ah, duh, I see that now. That's what I get for commenting too quickly ;-)

The choice of stacked bar charts is also strange because the languages are not all comparable

> Every language has nqueen and matmul implementations. Some languages do not have sudoku or bedcov implementations. In addition, I implemented most algorithms in plb2 and adapted a few contributed matmul and sudoku implementations in plb. As I am mostly a C programmer, implementations in other languages may be suboptimal and there are no implementations in functional languages. Pull requests are welcomed!

So the point still stands that many charts doing one thing each would be better than fewer charts doing many things each
SEEKING WORK | Remote
Immediately available to join data engineering teams. Location: Indore, India Remote: Yes Willing to relocate: Not now, but in future. Technologies: Databricks, Apache Spark, Apache Airflow, SQL, PySpark, Kafka, Python, Pytest Résumé/CV: https://www.linkedin.com/in/dmistri/ Email: devendramistri@gmail.com
I don't think we're talking about the same thing.

Parent said "but I'm not privy to some of the investor calls where they elaborate on how they define these terms. Typically things like "business unit operating model" will be illuminated / detailed in other presentations with a smaller audience". I'm saying that I think that Xerox can't be explaining things in this much depth to some investors but not others.

Certainly Xerox can give information to CNBC to release to all investors (who read CNBC) at roughly the same time. It's basically public since everybody has CNBC access but a private presentation is by definition not public.
That privacy policy... at least it is honest and upfront about it
Yes, users can (and should) be doing that as well.
“We” is going all the work here. By “we” he means every single person in the whole freaking world. Good luck convincing everybody in the whole world to do anything.
I've done identity for bigger places that have credential attacks all the time. There's sophisticated attackers that are aware of each victim's location and can get through geolocation anomaly detection, and there's such thing as hitting the jackpot through lucky credential stuffing, so any check for failed attempts doesn't hit. It's not possible to detect everything. There's a whole lot things a serious place will do to detect naive attacks though, so a whole lot of volume there fails. It might even be good to let an obvious stuffer keep attacking you, and help us mark the accounts they have working credentials for, so we can instantly lock them and ask for password changes.

I have no idea of the actual sophistication of the attackers here though: It's way too common to see big companies that have paid no attention to prevention, and therefore will only notice an attack if it becomes an accidental denial of service attack. Maybe 23andme are sophisticated and only the worst shared passwords got breached, or maybe they have minimal security.
Funny, I use the "I still don't care about cookies" extension (https://github.com/OhMyGuus/I-Still-Dont-Care-About-Cookies) right now to automatically accept the cookie banners. They're literally one of the most annoying things that has happened in the web's history
> Nothing on 23andme’s end failed unless you consider someone using a correct user/pass combo while not being the owner as a fail on the part of 23andMe rather than the end user.

Well not recognizing you have 14k logins coming from the same place, possibly with a lot coming from someplace else than the last login on the account, is definitely a failure on their part. That's why more and more websites send you emails to allow logins from a new location. Or have login rate-limiters (too many request from your network).
Oh! I meant SFF (small form-factor) desktops (to which I add SFP+ cards—that must have been where my mind was).
I think they are called Macintoshs now, but instead of an ethernet port they have this thing called "appletalk".
"mostly wrong" except it's not. Safari is under developed, restrictive and... bad.

"Based on usage" Chrome is doing something right but that doesn't mean better options don't exist. JS exists and is massively popular but that doesn't make it the "best". Most popular also doesn't mean it's not horrible in its own right - like Safari (and JS, etc).

"firefox" You use firefox because it's better... better than what? Safari for one.

"let me try your argument for size" Just because people pay doesn't mean it's better and because it's popular doesn't mean it's better. People buy ripped up clothes at a massive markup because it's "better". You keep saying Firefox is better even though it's not "in" or cool.

Nothing in your response addresses the fact that SAFARI is subpar amoungst its peers because Apple uses that to push people to the App store. Likewise, they "pair bond" stuff to phones so 2ndary markets can't fix their stuff. Not because safari is better... not because their parts are better... because they get 30% on the store and they get the fees for fixing stuff "properly". Same for their custom connectors (which are on the way out)

Your focused on Safari vs Firefox. You're ignoring the forest for the tree.

Apple as a whole can be a better product (arguably, the complete package is "better" because it's more consistent and "secure" and all that than say Android) while also having parts that are worse. Safari is a part that's worse (and as incentive, the 30% cut on app store $$$).

"different priorities" I'm all for better regulation and some places are headed in the right direction (IE: USBC requirements, sideloading requirements, banning google from monopoly practices on their store, etc)... but that doesn't change the fact that safari is the IE of today - forced on customers, ignored by its creator and clearly worse as you admit in your stalwart defense of Firefox.
Thanks for the information. I have a set of stickers for blocking camera lenses on tablets and phones but never thought to look for LED dimming stickers. Seems a bit obvious now but guess I'm so accustomed to using electrical tape that I never gave thought to another solution.
Kiwi fruit FTW...
It is an option. Every user has the option to setup MFA when they set up their account. The fact that people reused their passwords and chose not to setup MFA is not 23andme’s fault.
"AppData" is where user specific application data is supposed to be stored.

"The Registry" is where application configuration is supposed to be stored.

"ProgramData" is where application specific data is supposed to be stored.

"Program Files" is where read-only application binaries and code is supposed to be stored.

It really is a simple concept from a Windows perspective. What ruins everything is overzealous and/or ignorant programmers who don't take any pride in their work, or lack all respect for the users environment. For example; an .ini file should not be a thing in Windows. That is what the registry is for. But the programmer writes the code for Linux, half-ass ports it to Windows, and leaves the .ini file because his code is more important to him than the end-users operating system.

There is nothing wrong with AppData permissions. The problem is with the users understanding of what it is for, and the developers understanding of how it should be used.
It will sure do great to inflation when your plumber has to take the bus and instead of having 5 customers per day only has 2.
Do you work with Peter? If not, this will probably be the third paper...
The name is a missed opportunity - instead of "Last Sunday" it could be called the "Terminal Sunday".