skysight-inc/HackerNews huggingface dataset:
At 5-10 books a year, there's also the "problem" that you've got more than a lifetime supply, just sticking to time-tested, very-likely-to-be-excellent classics. That's even true for relatively-modern genre fic and such, these days—it's not the 1960s anymore, you can fill shelves and shelves with good-reputation sci fi and fantasy. This is all true even if zero new books are published... ever.
Sounds like a good use case for fido authenticators or passkeys.
Rbaron – Projects
That's just evidence of Google's decay.

In no world does "Continental US" mean Canada.
The drive stats of Backblaze storage pods
There are lots of ways to mitigate against credential stuffing. There are methods to detect botnets accessing your system at scale. There are products like HIBP that can help prevent credential re-use. You can prevent logins from unusual locations with an additional factor ("it looks like you're accessing this website from Croatia when you've only ever logged in from California, check your email for a confirmation code"). You can force MFA if you want to go nuclear.
> Imagine a horizontal line. The very left is marked one thousand and the very right is marked one billion. On this line, where would you add a marker to represent one million?

> If you said somewhere in the middle, you answered the same as the roughly 50 percent of people who have done this exercise in a number line study. But the answer is actually much closer to one thousand since there are one thousand millions in one billion.

...AND yet another reminder that I stopped listening (& donating) to NPR for good reasons. They are writing a story about math, with at least 4 people involved and named - including a "fact checker" - but none of 'em seems to have any clue about logarithmic scales on graphs & such.
Movies of the 80s and 90s feel a lot more modern compared to the “old movies” we had living in the 80s. Black and white movies with cardboard acting sure felt quaint for the tv generation.

Today though I’m constantly surprised by the number of young people who recognize things from 80s movies and especially music. I’d say that number is higher compared to our generation.
That's because it is a SPOF. However, a password manager seems to me the best compromise along the security / convenience axes.

I memorise good passwords for a handful of my most critical stuff (and have MFA). They don't go in my password manager.

If my password manager gets compromised then I probably could lose some cash, maybe get embarrassed by being impersonated on social media - it could get very inconvenient but not catastrophic.
Ask HN: Serious; Do you have self amnisia in comment discovery? (see below)
There are times when I run across an answer or a response to a question I have held, only to find that I am reading a response, delineating the issues I am experiencing and being like:

"THIS BITCH GETS ME"

THen I look at the date and user....

IT WAS MY OWN POST.

--

Does anyone run across themselves either answering, responding, or asking the same darn questions?

And you realize what a weird feeling it is to have asked a Q, not received an A, then asking (some time later) again and being redirected to your own Q?
In the last 10 years there has been a global explosion in the forms of monetization possible on the web. Subscriptions, transaction fees, donations and just straight up charging people for goods and services is very possible now. It's no longer the case that people bristle at the thought of monetization. Even VC fueled businesses charge money from day 1. It's as though the gospel of Basecamp went mainstream
Xerox has been laying off people in the Rochester area for over 2 decades now. The local economy has adapted to it decently. I doubt this situation will be any different.

The irony which sometimes happens is that those who work for Xerox (or Kodak, who has been doing the same demise, just on a grander and faster schedule) end up working for a contracting firm and then get "rehired" back to do the same job they used to do, just now not as an employee of Xerox. I'm not convinced this saves Xerox any actual money but it must work out to their benefit somehow as TONS of people doing work for Xerox are not Xerox employees but used to be.
What's a good use case for this library? Something that needs to send messages from an embedded system?
I definitely do not want anyone to manually crop, dither and color index images. This should be done by the FrameOS software. It's already working if you use e.g. Inky Impression 7 color frames, but mostly because I just defer to their software/drivers, which already handle this...
I use a mouth pipette (really just a small piece of glass and some rubber tubing with a filter to transfer tardigrades to my microscope slide. This was recommended to me by a tardigrade expert. I had previously used bulb for large glass pipette (my high school lab had a big sign "DO NOT PIPETTE BY MOUTH") and micropipettes for decades, and I was blown away with the level of control you get from mouth pipetting. I'm not that bothered by inhaling some tardigrades.

But being lazy one of my side projects is to make an automatical tardigrade pipettor (ML-based with motors and stuff).
I don't think elmu "switched sides" unless you're talking about his claims he supported free speech before he cracked down on free speech. But yeah, he made twitter pretty bad, hence this article.
> when your program or one of its libraries relies on reflection

Fair enough; perhaps it'd be worthwhile to throw a compiler error if both reflection and trimming were attempted.

> Native AOT is good for startup time (FaaS), but tiered JIT will likely outperform it in long-running applications

This is intriguing; could you elaborate on the latter? Would tiered JIT perhaps have more runtime information which would be more useful when optimising frequently-accessed code paths or tight loops?
It's funny we (EU, CCPA?) regulate cookies and hit use cases of companies trying to better themselves via analytics or maintain user presence, but we haven't done much in the way of stopping MAGMA from owning the means of communication and commerce outright.

The Apple/Google duopoly on smartphones is insane.

- Companies face 30% tax, can't deploy, can't do native (Apple) or get scare walls (Google), can't form a customer relationship, get ads sold against their brands, forced to use Apple/Google tech and adopt their upgrade cycles, no VMs/runtimes/plugins, etc.

- Customers also have it bad: they're faced with planned obsolescence, no upgrades, encrypted parts ecosystem, green text FOMO. Apple/Google are owning all of payments, navigation, date/sex life, work calendars, emails, etc. etc. And they're not collecting data on us throughout all these activities?

Or what about Google practically owning web discoverability by paying everyone off?

Why don't we regulate smartphone vendors? This seems fair:

- Web is first class. Users can download apps off of it without scare walls.

- Apps can have native code, WASM, self-update, pack runtimes, etc.

- Apps can use their own auth rails, payments rails, etc.

- No limit on the types of apps. You can deploy non-Safari browsers and app stores of your own.

- Search engine providers can't buy access to every single pane of glass.

I'd argue that we should also regulate them on the basis of the power of their defaults, but we're in such a bind that I'd be fine with just the above.
> "If there is something extreme here is the karma slash upon displeasing the pro rust people and AI bots on HN."

It's refusing to backup your position with anything more than saying "you're wrong" "you're wrong" "you're wrong". You've repeatedly been asked to explain why RISC_V would be better, why RISC_V changes anything, what you propose for how it would work (e.g. emulators), and you haven't. That's annoying, timewasting, and downvoteworthy.
And how would they know that when the access was done via the correct user/pass combo for accounts where the users chose not to enable MFA?
Russians are the very extreme example — we're much more individualistic and self-centered than Dutch, English, or Americans.
There are was a standard called P3P that would allow you to specify this kind of thing. However unsurprisingly for an industry driven by surveillance economics making this kind of thing doesn’t get that much traction unless you do things like GDPR. If think I heard somewhere that there is an amendment on the way to address this kind of thing.
> Ryzen 7000 limits 4 dimms to 3600MHz

This is official support, just like 2 dimms are officially supported only at 5200MHz. People have been running them higher.

How are you measuring the power? At the wall? I think you are measuring the memory controller too, not just the dimms.
I think 1319 better represents this comment than 1205.

In addition to laziness/efficiency, curiosity and lateral thinking are helpful qualities.

https://xkcd.com/1319/

https://en.wikipedia.org/wiki/Lateral_thinking
Well, you if want to both refuse that a site reliably identify you and have a flawless process for identifying you, you'll have a hard time.
On the competition aspect, I think it's also important to look at the consumer side. For me it was wild knowing Mission Impossible struggled at the box office because of Barbie/Oppenheimer, especially because it was such a big budget film and it was actually my favorite of the three. The reality is that most people would maybe go once a month to the cinema, so they have to prioritize what to watch.

To make matters worse, you are also competing with all of history. If you want to read 12 books this year, when are you going to get to the small creators with years-worth of classics to go through?
The EU forcing this garbage is one of the worst things to happen to the web.
Interesting approach. Would you share how many people you have on staff? Do you have any certifications?
It would be interesting to know the rough amount of cumulative wasted joules on both the computer side and humans doing the extra clicks this cookie banner nonsense adds up to. Unintended consequences of laws.
My bad, I skimmed the article and must have misunderstood. Fair point.
Interested to see what others display when opening a new terminal. I have a personally meaningful but somewhat embarrassing trite platitude followed by 3 random fortunes. A quote from my personal collection, a bit of advice from Kevin Kelly, and a Deep Thought by Jack Handy.
Max Boardroom
The impact on land is not small, you need quite a lot of concrete to anchor panels supports to the ground.

Also I wonder how the soil will evolve under solar panels, with less light hitting it. Probably better than when farmed, but worse than leaving it alone.
See https://en.wikipedia.org/wiki/Do_Not_Track, though this wasn't part of any regulations.
Is there something like this for learning words of another language?
similar, only I use dadjoke and the thinking cow to keep things a lighthearted :)

dadjoke | cowthink -s
Cook’s an engineer with an MBA
Changed the life expectancy variable to 90. A bit of optimism but also based on the fact that people on my family usually dies at really old ages.
Have you ever done literally anything that is actually exhausting? Because this.... this is not exhausting.
> FLAC works by running a lossy compression pass, and then LZ encoding the residual.

Since when does FLAC run a lossy pass? You can recover the original soundwave from a FLAC file, you can't do the same with an MP3.

I'm pretty sure FLAC does not run a lossy compression pass.

Flickering textures in game engines are likely due to z-fighting, unless you're referring to some other type of flickering.

If you're looking to preserving as much detail as possible from your masters then floating points make sense. But its really overkill.
Someone writes this same article every time a new version comes out. It's just not that interesting to know that adoption of the new version of Windows is slow because it always is.
One of my favourite ongoing jokes is Word, the program that exists for typing, 'randomly' deletes what you type:

https://techcommunity.microsoft.com/t5/word/word-online-web-...

https://answers.microsoft.com/en-us/msoffice/forum/all/how-t...

https://answers.microsoft.com/en-us/msoffice/forum/all/why-d...

https://answers.microsoft.com/en-us/msoffice/forum/all/word-...

https://answers.microsoft.com/en-us/msoffice/forum/all/text-...

https://answers.microsoft.com/en-us/msoffice/forum/all/text-...

https://answers.microsoft.com/en-us/msoffice/forum/all/word-...

https://answers.microsoft.com/en-us/msoffice/forum/all/when-...

https://answers.microsoft.com/en-us/msoffice/forum/all/word-...

https://answers.microsoft.com/en-us/msoffice/forum/all/why-i...

I have no idea how many engineers work on Office Online, but other than security bugs I cannot think of a more important issue to resolve.
No, I don't see that it does. Basically the idea is that a company should operate in a way that is beneficial to its owners (shareholders). This is what any sole proprietorship or partership also does. Growth is not the only way to measure that. Many companies do focus on maintaining success and return value to the owners by paying dividends. Driving the company to failure by relentlessly cutting costs in the name of "growth" is not in the interests of the owners.
I always get downvoted for saying this but I think the cookie banners broke taboos about intrusive and annoying pop-ups in web sites. There was a time the tech and design oriented people could fight against it for the users but once it was required or maybe “socially positive” it got much harder to fight against all the others so you find the blogs now that will interrupt you three times to give your email and such.

Cookie banners were the “broken window” that led to the whole car being demolished.
For the most part even that isn't even required. If a server sends your browser a cookie it's under no obligation to pass it back in the next request. I suppose you could argue that's a bit all or nothing and separating out essential vs everything else is potentially useful.
Sweet! So my J2EE and SOAP skills will become relevant again?
It's quite strange to include LSTMs/GRUs/RNNs here. I can maybe see why a programmer should be familiar with generative AI, and how a neural network works at a high level, but people not working in AI (that is, people who are at least touching a tensor library - making OpenAI API calls doesn't count) really have little reason to study RNNs, let alone GRUs.

Looking at this again - the book description is "Delve into the realm of generative AI and large language models (LLMs) while exploring modern deep learning techniques, including LSTMs, GRUs, RNNs". This doesn't sound like 50 algorithms every programmer should know at all.

A very strangely put together book. It's definitely not a generic book for the average programmer as the title seems to suggest (just way too much machine learning for that), but even we interpret it as a machine learning book, it's really odd to include content on the TLS handshake and dynamic programming.
for sensitive data, logging into an account from a new IP should trigger an email for verification
> see if there's enough time for this code

I haven't tried PayPal specifically, but websites will usually still accept the previous code for at least a few seconds after a new one rolls over
Right now, the web experience for 2FA is very poor compared to using a mobile app.

I wish I could just put my phone on an NFC reader when a site requires 2FA, and then all I have to do is to confirm on the phone itself.
Yes, we've managed hundreds of salary negotiation with varying companies and roles. So we've become the leader in this space by using a data-based negotiation approach.
I always heard of this algorithm under the name "Not Recently Used" cache.
Sounds like you're using the concept of statically served files vs dynamically generated, but that's a different conversation to whether content files are generated at all.
The insect apocalypse is even more pronounced. In the 1980s and 1990s, you couldn't drive through Minnesota without your windshield being absolutely covered in bugs. I remember driving through the state & being forced to pull over to literally scrape the bugs off the windshield. That just doesn't seem to exist today...
Can Workplaces Have Too Much Psychological Safety?
It's worth noting that, at least on the electronics manufacturing side (which is indeed what we're talking about here) the undeniable success story of TSMC was very much a government-led capital structure from the beginning: https://en.wikipedia.org/wiki/TSMC#History

Government can often be a failure-prone capital allocator, but it can also result in improved alignment when an entire industry with wide socioeconomic implications is about to be born.
Regardless, full unrestricted disk access for all users and code is insecure.
> There are no downsides to being conservative until more evidence is acquired.

There are, but I'd agree that there aren't downsides we should be concerned with. The downside is that if you're trying to publish the work that it can make it easier for the work to be rejected. I'd agree this is dumb, but it is a thing I've seen happen, and be not too uncommon. Just comes down to metrics: academics are judged by citations and number of papers published, thus papers are written to reviewers as opposed to peers (not necessarily the same thing, but assumed they are), also incentivizes flashy results to generate more publicity, or overselling the novelty of work (sometimes even by mistake). But otherwise I agree, and I think it should be encouraged to take a more tempered approach (I think it'll also really help build back social trust in sciences (again, small part of a larger pie)).
How could they not know this? This is common knowledge for anyone involved in online consumer security. And the correctness of this common knowledge is beyond dispute, with numerous publicly-known breaches traceable to this practice, as well as the development of scaled, repeatable attack methods associated with it.

The only way they could have not known is if they failed to employ or consult with the appropriate professional expertise in this area.
> We’re going to focus on maintaining that enormous success. We’re not going to focus on growth.” (I can already hear the spreadsheet squinting logic about how growth is necessary for some reason)

Where is Xerox going to get the money to do R&D to not be obviated? Replace Xerox with any other business.

All the businesses obviated by spreadsheets, mobile networks, smartphones, GPS? Maintaining success is continuing to make bets and moving forward, and bets require money. More money means bigger bets.

Another example, you have two businesses, one with a 5% profit margin (because they feel like 5% is enough), one with a 10% profit margin. The one with 10% profit margin is going to be able to continue renovating the business, upgrading the facility, buying more land, hiring better employees with higher payrates.

What will happen to the 5% profit margin business? Do you think customers will keep rewarding them (assuming the 10% profit margin business is worth the additional marginal cost)? You can insert restaurant, hotel, retail store, etc in here.

Note that having a higher profit margin is not the only way to survive, having a lower profit margin to better compete on price and gain market share is another way too. Balancing the two and delivering the right product at the right price for your customers is the key skill, but it’s a moving target.
On a planet undergoing global warming.
It's almost as if marketing is inherently evil.
Yeah, it is one of those things that I’d like my agent YOShInOn to help me with someday.
The general trend of Not-A-Button Buttons in GUIs can die in a fucking fire.

We have screens capable of rendering 8K in literally billions of colors and the silicon to drive them and yet we can't spare a few pixels for some borders and shading?
This has been working in the DDG browser for me for awhile, nice to see Firefox catch up.
Devil's advocate (and as a very lightweight Whatsapp user), is this just based on a scrape/listen of how whatsapp currently works, so maybe prone to breaking?

Pessimistically any bit of code can scrape a present day service, is this easily maintanable, how often will it break, maybe permanently?

That said, fair play for sharing in the open, just querying the long term efficacy of using it.

Unless using an official API, things can be a bit brittle.
> the mental and emotional health I get from lifting

this should not be discounted -- a lot of studies back up the anti-depressant effects of regular exercise. i find it's the closest i get to a 'moment of zen'.
I don't think most workers have fallen for that scam, rather that most workers feel that they're powerless to change things.
I am reluctant to say I am glad a comment has been down voted, because I am wary of mob mentality, but in this case I am very glad this comment has been so thoroughly down voted.
Totally agree.

Orgs with this kind of data will at least track geolocation and maybe device information and require proof despite a correct password as well as attempts to access multiple accounts from an address block. Many also incorporate the have I been owned leaked password database .

The have to act responsible when handling and caring for this kind of data. It’s irresponsible not to.
Last commit in 2019, I wouldn't expect it to work. And why would this specific library be interesting?
Noticed that https://wozniak.ca/blog/2024/01/02/1/index.html (on the HN hompeage as I write this) was serving a 451 response, which I’ve never seen before.
He didn't get the downvotes because of the technologies though.
I agree, I don't need an existential crisis every time I open a terminal session
https://developer.okta.com/blog/2018/06/11/how-to-prevent-yo... ("How to Prevent Your Users from Using Breached Passwords") | https://github.com/OktaSecurityLabs/passprotect-js is an example.

Good behavior:

> The new NIST recommendations mean that every time a user gives you a password, it’s your responsibility as a developer to check their password against a list of breached passwords and prevent the user from using a previously breached password.

SP 800-63 specifically: https://pages.nist.gov/800-63-3/ | https://pages.nist.gov/800-63-4/
Actually, one software-developer-turned-writer did something close. Check out Chris Fox's book "Write to Market" on Amazon. He sat down and analyzed sales figures for different book genres on Amazon then chose a genre where he thought he could squeeze onto the top ten bestseller list. He's been cranking out books for years and selling pretty well. If you check his author page, you'll see he has quite a few titles out.
That's basically the device I'm trying to replace because I think it's so dated.
The problem with is;
a) It's ugly and plays annoying sound
b) it's wall mounted with screws
c) and mainly; due to the user having to hold their hand in front of a proximity sensor which then indicates to everyone you are doing something embarassing it doesn't really solve the problem in a good way.
I mean, the right thing would have been to force password changes for the breached accounts. This is doable through have I been owned etal, right?
No reasoning process rooted in reading comprehension can come to the conclusion that I wrote such a thing.
I'm not totally up to date but once you are in the system they keep tabs a bit and you have a tax ID number and such like. But for people not in the system, say come in from abroad or young and not involved yet they didn't in the past. I don't know if that will change and they'll make a database of everyone with a bank account and the like.

Some years ago I moved abroad for a while and then they'd kind of drop your records after three years out of the country. Now I'm not so sure.
A pernicious potpourri of Python packages in PyPI
Presented with the opportunity to learn more about how a system works, the HN cries, no, I hate learning.
The q-q-q-q-quarterly earnings are up!