skysight-inc/HackerNews huggingface dataset:
> And almost in real time, I could see my interest in Magic wane and disappear. Instead of being fun, I began to see Magic as a chore, rather than something I just wanted to do for fun.

You're using the same productivity strategies used for school or work for the sake of something meant to be leisure

The lists or structures aren't bad in themselves, just you're applying them in the wrong place
It must be because streaming prices in Brazil are low, and people generally lack the technical knowledge to use torrents. Many don't even have a computer anymore and do everything on their mobile phone or smart TV.
I really do not like Google as a company, but this is one of those cases where I agree with them. It was always clear that websites could track you in incognito mode. Somehow people thinking that Google is not a website that can do that does not make it Google's fault. You still have to accept Google's cookie banner when opening the site in incognito, giving another indication they track you.
I'd second this, I just gave it a try and many of the results in the receipt breakdown did not seem to align with the nutritional information available from other sources.

Also, if it's going to give protein advice it should probably recognise meat - unless it's aimed solely at vegetarians & vegans. My receipt had a whole chicken, a lamb shoulder, and a couple of different kinds of fish - but it said I was getting 0 protein and recommended quinoa.
we need more context.
Desktop software, yes, but for which platform? Aimed at consumers? Business? Enterprise? Government?

Are you asking "before" you've written something, or "after"? Are you looking for a market to explore, or a market for something you have?

Is the market broad-based, or narrow?

Is it expensive (say > $1000) or cheap? (say < $50). Are you looking for a subscription or an out-right sale?

Are the competitors in your market? Is this a new market? Are you "cutting edge" (think crypto, ai etc) or boring (think accounting etc)?

Is it data for one person, or shared by multiple people, or a business?

Soooo many questions....
A parody isn't a scam.
Oh I'm a lot better informed about technology than most, no doubt.

I was surprised that Google settled a $5 billion lawsuit accusing it of illegally tracking users while in that mode.

The only thing I can think of is that they might have misled users about the degree of privacy they could expect in that mode. Like, if they said "you won't be tracked" and then they did.

Still, the technology of private mode browsing is not unique to Google and it all does the same thing: not record locally what you do.
You don't even have to do that, just escape single quotes and you've defeated everything but homomorphic attacks as far as I can tell.
I hope that javascript filter runs on the server and not on the web browser...
I thought there was already a message along those lines when opening a new private window
Considering that digital ownership is only a few decades old, I doubt it will take centuries to reinvent.
I would be interested to see any detailed locations of the finds.

Phang Nga ('Paang Nah') is a very beautiful province, with spectacular limestone mountains, tilting down to the south, to become astonishing stacks and islands in Phang Nga Bay and the Andaman Gulf. But it also includes a long west coast from Phuket up to Ranong.

There are several National Parks and scenic areas. So protection and access may both be problems for any exploitation.

However, Thailand is very corrupt, so Chinese money will find a way.
Yes, next we will be removing lead from the air and drinking water! Where does it stop?!? Life should never improve or change in any way, I say!
The original attribution is not W.E.B. Du Bois as he was born February 23, 1868.

The 1857 book "A polyglot of foreign proverbs : comprising French, Italian, German, Dutch, Spanish, Portuguese, and Danish, with English translations and a general index" has that quote in the index, on page 413 at https://archive.org/details/b24867664/page/412/mode/2up?q=%2... .

On page 354 you can see it's described as a Danish proverb, https://archive.org/details/b24867664/page/354/mode/2up?q=do... : "Den leder ikke gierne bag Dören, som ei selv har staaet der. A man does not look behind the door unless he has stood there himself"

That phrase is indeed in the 1850 book "Danske Ordsprog, Tankesprog og Riimsprog", p153, #2385 at https://archive.org/details/danskeordsprogt00copegoog/page/n... .

FWIW, the 1897 book "Men in epigram" attributes that quote to Henri Du Bois.
Don't hash the password on the client. That just changes the password to the hash of the password.

Parameterize the SQL on the server instead of concatenating strings.
Why not have a 'pin-to-cache' functionality then.
Agree, I had the same thought reading the above comments. GNU is not holy correctness, it’s a first draft that worked well. Opinionated reimplementation with divergence isn’t a bad thing.
For people wondering how to do this properly it's called parametrized queries.
> A government agency isn't in a business to make money.

true, but it's not in the business of wasting money either. if they don't take care about economic efficacy, then someday voters are going to judge them for wasting tax payers money
Web application firewall

It’s a reverse proxy that inspects requests for bad stuff like sql injection.
This reminds me of the death of WWE wrestler Owen Hart.
He fell when his harness malfunction during his entry to the ring.
American Wrestler dies in America - WWE is a listed company.

Reading all the comments about India, low pay and the value of life makes one wonder.

The Post Office Scandal in the UK that's popular in HN shows the value of life and justice in UK.
Pretty sure that everyone involved was well paid - the Post Office Heads, the Software company etc
No one bothered to do the right thing.
Is it the British culture ?

The Engineers at Boeing surely are well paid and should have a 'culture of safety' and 'value human life'.
But Boeing seems to be in news for safety issues that don't fit the American Engineering culture.
Software issues that killed 346 people in 2 crashes in 2019 - Source Verge
Boeing planes are still flying. Doors flying off now.

Tesla - Keep reading comments about Tesla crashes and the lack of responsibility.
Tesla keeps selling in record numbers.
Other day read about Tesla employees spying on camera of customer's car. American love for Voyeurism.

Can you call this lack of concern for safety a part of American culture ?
Tesla and Boeing are Big Listed American companies.

What's the issue here - lack of decent pay ?
Or that Americans obviously don't value life considering how easily Americans take lives as per all the news that one reads.

Point being blaming an accident like this on a certain people and their culture is easy.
It's quite common to see this subtle racism on HN.

Why are bigger incidents in other countries not a failure of their culture when these are done by bigger institutions and companies.
Given that IIRC cookies are not included in private mode nor saved, what are your footprints made of? I guess firefox at least erases obvious ones like user agent, resolution or other fingerprints from incognito mode ?
Why use unreliable solutions that rely on various assumptions that may change in the future and rely on you not forgetting about even 1 case where it wouldnt work

When you can use approach which fundamentally prevents SQL injection?
And top of that, password should NEVER be stored to database
It is also very common not to do things right. https://www.bbc.com/future/article/20160325-the-names-that-b...

That article is a few years old now and things should have got better, but even by 2016 everyone should have known properly sanitising inputs was critical for a decade or two.
Similar to Crackhead Strength you might encounter in the states. There's videos of sketchy looking folks hauling away anything they can find while riding bikes that were probably stolen too. One guy hoisted a fridge into his shoulder and biked it away.
The more interesting question is whether he lifted entire plots from other books or just used the collage-of-website-text to fill specific details

This just looks like a sloppy writer saving time on understanding typical California mansion layouts and features or how snipers set up or British music in the 1990s or what Juarez is like by minimally revising the first Google result he found to generate the descriptive passage. But how a sniper sets up might not be the only bit he's taken from a book about a sniper, and a couple of evocative bits of description in a parody article not the only bits he's taken from Bond.
Not sure where you live, it's worth noting that India and China combined have 8x the population of the United States, so certainly we'd expect something like 8x the number of "industrial accidents" there. Perhaps more, since we've offshored so much of our industry.
stop acting like I’m the idiot or the one acting in bad faith here. You responded to a comment about 0 degrees Fahrenheit temperatures making teslas work way worse than normal with a comment that you were relaxing in yours in 0 degrees Celsius.

Any way you try to walk it back is just that. I’m not missing the point, you’ve changed the point now that you’re being downvoted for this obviously false equivalency.
Not disagreeing but also 20+ years ago we, the general public, were more likely to be on a shared desktop machine at home rather than each having their own laptop/phone.

Funny how browsers adding browsing history as a feature sort of necessitated private mode.
There are crappy combination padlocks that can be picked by turning the combination wheels and pulling on the shackle. When you've turned a wheel into its unlocking position the shackle will shift open slightly, signalling that you've cracked that digit. So a padlock with 3 digits could be opened in at most 30 moves, instead of 1000.

When you have a selection mechanism, the randomness of mutations becomes kind of moot. Each step of the way that produces a new adaptation only has a handful of optimal (or optimal-enough) solutions. Now, suppose that we're an underwater species that's in the process of developing light-sensitive cells, and from our present genome there are 2^64 possible genes that will produce a good protein for the transduction step (of converting light into some other form of energy). Do we need to mutate 2^64 times to find the "correct" gene? No, all of those 2^64 genes are "correct". Our descendants should not fall into the trap of thinking that because they got gene #5541741487894936799 that it was a special outcome. They could have just as easily gotten gene #5541741556614413535.
You mean storing plain text passwords in a database is safe?
I don’t see anyone walking away feeling ego bruised from this, I mostly see people annoyed that the _more_ correct option of “I can’t know because you didn’t provide enough information” isn’t represented and the author is attempting a “clever” gotcha moment instead.
The article addresses this. One hypothesis is that the cold shock counteracted the vasodilation, and being drunk allowed him to make it through the cold shock without drowning. How he managed to not go hypothermic is unclear, but maybe paddling around without noticing the fatigue or pain was enough to keep him going until he found the overturned boat.
Yes I think using a flavor of the cloud providers document tooling is probably optimal. Gpt vision is great for general recognition but I found it to be hit or miss when you started throwing too much text at it in an image.

If you can get image working via vision that’s great. On the cloud ocr side, I know tooling like Textract is good enough to generally provide output as if you were reading left to right. So in theory the text should not be that transposed or fragmented and nutrition labels are standard enough that you can probably pull the portion you want. On top of that, like you allude to, LLMs are pretty good and figuring things out.
A medieval war horse is too much responsibility for a gift and it isn't ethical to brand one. But a Dodge sports car is acceptable.
It has no bearing on this issue which will be identical for either Chrome of FF (or Safari, or others). Private browsing has nothing to do with server side tracking, so there's no "obvious" reason to respond by switching a browser over this.
Not really a surprise with all the "free" stuff Google is providing on a daily basis to so many people.

Kagi costs a few $/month for search only and they're not building a "free" browser, "free" office competitor, "free" phone os, "free" video sharing platform, "free" storage of all their research work...

Someone said it better before I was even born.
"If something is free, you’re the product"
- Richard Serra, 1973
Well, not in plaintext.
All five words are also common English words found in any major dictionary. If you're not actually doing anything stupid with the passwords, all you have to do is use that same diagnostic for that situation: "password may not contain dictionary words". Then you don't have a diagnostic which raises red flags.

That the developer is not aware that their diagnostic raises a red flag itself raises a red flag. It doesn't occur to them that a system which issues this diagnostic will be suspected of doing stupid things. That tends to betray a lack of sophistication in the area of security.
I've never seen a cookie banner from Google in incognito, do they only do that for the EU?
It should have been called “porn mode”, to prevent any confusion among the less tech-savvy.
Right but that's not really an excuse not to do them right.
As others already said you can do this out of the box with ChatGPT. Take a picture and it will do a good enough job with what it identifies.
>and they're not building a "free" browser

https://kagi.com/orion/
> Google has always tracked me

I can be outraged at Google for tracking me regardless of what mode the browser is in.

Or maybe that is what you are saying.
still better than "password used by another account"
This article [1] I found from 2017 goes into a tiny bit more detail:

Smartflash was founded in 2000 by inventor Patrick Racz, who obtained several patents on a system for storing data like songs, videos and games and accessing that data through electronic payments systems. Racz was unable to commercialize the technology and Smartflash sells no products of its own.

And then on the connection with Apple:

Smartflash’s complaint alleged that Racz has discussed his ideas in 2000 with a technologist who later became a senior director at Apple.

The Guardian however states:

But in the fallout from 9/11 and the dotcom crash, Spears and Gemplus pulled out, and Racz says in court that Gemplus – also a partner to Apple – then claimed the product as its own.

[1] https://www.reuters.com/article/idUSKBN1685D5/
That would be copyright infringement. What’s with this trend of saying ‘genuinely asking’ that always seems to be followed by putting words in someone’s mouth? It’s the new less subtle version of ‘it sounds like you’re saying’.
Yeah, has been tried a few times. I only followed Bountysource closely-ish, but they ended up taking a lot of money and then that money sat in bank accounts indefinitely because it often didn't lead to issues being fixed. I heard that eventually someone bought the company for peanuts and drained the bounty accounts, despite promising that they definitely wouldn't do that.

The problem as I see it is that a lot of those bounties are $2,000 for $20,000 worth of work, especially since they end up getting attached to the most gnarly bugs whose true solution involves deep refactoring or building essentially whole new products. Thus the maintainers need to be willing to support the features indefinitely, and they need to agree with the architecture of the solutions, and quite rapidly you start to understand why a little cash is not sufficient to solve the most intractable problems.
Then you’re back to the current state problem where it just buzzes
I've heard that a strong reason to live can get you through tough situations. E.g. in prison camps. I've also been solo skydiving and first hand experienced the loss of agency that comes from a poor response to life threatening situations:)

So, I'm not optimistic about my own chances in those situations.
Not OP, but they are likely referring to the MMIWG crisis [0], which Justin Trudeau called a "genocide" in 2018.

[0]: https://en.wikipedia.org/wiki/National_Inquiry_into_Missing_...
Until very recently the online banking password for a major (big-5) Canadian bank couldn't be longer than 9 characters or contain ANY special punctuation characters from the ASCII code set. It was very clear that they're storing them in plaintext in a database on some archaic mainframe somewhere.
Ask your parents if the message was absolutely clear.

We're nerds, of course it was clear to us.
I remember reading about Battle of Atlantic.

Statistically on a sinking ship a sailor who couldn’t swim had better chance of surviving than a sailor who was a good swimmer. In a cold Atlantic water the former had been expending less energy then the later, so he would last longer until being rescued.
I expect this will attract a lot of criticism, but I actually think it's a good idea, at least in some cases.

There are a lot of people writing bad code and bad system architectures for their organizations. There are not enough people with the competence, organizational power, and time to catch what's bad and force change in those organizations. In the US you are probably forced to do business via many such terribly coded websites, e.g. your local healthcare provider. In such cases, it might be better if we assumed the implementation might be as awful as it commonly is, and recommended mitigations based on that.

It's also easy for people to test if the website actually allows the nominally prohibited password patterns and complain to some oversight authority if so. Whereas it's not so easy to test, from the outside, whether it's really been done the right way.

It's inelegant and tragic, but in the end it might be a good idea to accept that things are often done poorly and without adequate oversight, and consider what mitigations can prevent the worst outcomes in these cases.
That would imply WAF gets to see unhashed passwords, so not good at all.
JerryRigEverything: After 13 YEARS I tried an Apple iPhone 15 Pro [video]
The empire was collapsing on itself. USSR occupied nearly 1/6 of the total landmass, it had on the ground every imaginable element in the periodic table and yet it was not a self sustained developed country. Large part of it was corruption and constant stealing on every level possible, but also the fact that all of its economy was managed by what comes effectively down to a large Excel sheet - completely top down.

Gorbachev tried to turn it around and failed. Fortunately he was a great man because he had a lot of humility and he allowed to fall it apart gracefully (relatively speaking). This gave freedom (from Russians) to many nations, yet too many of them are still imprisoned within Russian Federation (the name is a hint - it's not Russia but a federation of many nations) and I think of it as a great tragedy, especially now, when mainly the minority nations are sent to kill Ukrainians and to get killed instead of Russians.
I don’t think any of that is relevant.

The publishers don’t have to provide physical media, just the ability to install it at any arbitrary point later. So an install file is fine (even if it’s 100GB) and backing that up can be up to the consumer.

In terms of your argument with older devices this exists even with physical media. Who still has reel to reel or laserdisc? The publishers don’t have to make it future proof, just make themselves only necessary at the purchase step.
Kunimune's Imago
Absolutely right-- the warning is only necessary if they're not hashing the password before templating the string prior to storage.
Or their lawyers are trying to "clarify" it (for a very different audience).
Desktop UX is okay (a little slow and brittle on KDE Plasma, both X and Wayland), not a fan of the mobile UX still around Q3 2021
Sort of but they do offer a paid tier for it but I would say it does not really buy you much. I do wonder if they will ever close it off.
What goes around comes around (2005) [pdf]
How much responsibility does Square/Toast/whatever POS with integrated client facing tipping have for the recent change in culture? How much did they drive it vs. respond to demand? Does it matter?

(Personally I don’t think they have any culpability per se, just interesting to think about the mechanisms at work).
Counting down until somebody names a sports car Destrier
Honestly surprised how low those rates are, given the constant enshittification of streaming services (and countless other things).

Remember, if buying isn't owning, piracy isn't stealing. https://pluralistic.net/2023/12/08/playstationed/#tyler-jame...
It's how Tai Lopez got wealthy. Rented a house and lambo for his infamous "knowledge" video [0]. He seems to be a good marketeer though :)

Fake it till you make it.

---

[0]: https://www.bing.com/videos/riverview/relatedvideo?q=tai+lop...
Somewhat unfortunate when the police do a routine breathalyser test an hour later though.
I find there are maybe about 10 commands I use regularly that I care about being in history. The rest I never search history for.

So a couple of thousand seems to do well by me.
Never use Tiktok
>I can be outraged at Google for tracking me regardless of what mode the browser is in.

Your browser, their server. It's like being upset amazon can track your orders even though you're using firefox.
They'll probably use the disclamer as an excuse to blame you if something breaks.
Followers of Jesus Christ are commanded and equipped to test prophets rather than blindly believing them. Here's God's Word on that:

"If a prophet or a dreamer of dreams arises among you, and he gives you a sign or a wonder, and the sign or the wonder comes to pass, of which he spoke to you, saying, “Let’s go after other gods” (which you have not known) “and let’s serve them,” you shall not listen to the words of that prophet, or to that dreamer of dreams; for the LORD your God is testing you, to know whether you love the LORD your God with all your heart and with all your soul. You shall walk after the LORD your God, fear him, keep his commandments, and obey his voice. You shall serve him, and cling to him." (Deut. 13:1-4)

"But those who are determined to be rich (greedy) fall into a temptation, a snare, and many foolish and harmful lusts, such as drown men in ruin and destruction. For the love of money is a root of all kinds of evil. Some have been led astray from the faith in their greed, and have pierced themselves through with many sorrows." (1 Tim. 6:9-10)

More Scripture on that topic:
https://www.biblestudytools.com/topical-verses/is-gambling-a...

Knowing these, we can look at the cryptocurrency market to see it's mostly gambling, get rich quick schemes, attempts to rebel at authority (esp IRS), unstable, and often with illegal activity. This would keep us away from most of that even if we'd consider it for legitimate instruments or smart contracts. Anything that's helpful, not sinful, is a gift from God who raises up many brilliant inventors to solve our problems. Even indirectly like how smart contracts inspired millions to be invested in tooling for verifying software.

With that general impression, we look at the guy starting a cryptocurrency with high skepticism. We'd say: "Brother, why would a man of God charged with preaching Christ dying for our sins and moving money to society's helpless need a cryptocurrency? Are you serving God or money? And should the church's money be focused on such things? If you lack a Biblical answer, then perhaps you have been tempted by the Devil to set your heart on the wrong things. Please pray God helps you overcome this, focus on what truly matters, and serve Him faithfully."

And we'd pray for them. And God would help them overcome temptation or set an example of who to protect His flock from.