skysight-inc/HackerNews huggingface dataset:
Unlike what reading HN comments might lead you to believe, SIM swapping is neither easy nor common. It requires an insider accomplice with limited bandwidth and who is running a very real risk of getting caught. That's expensive. Just trading off the phishing risk against that would be an amazing deal for most people. (Of course not everyone, I know you'd never be fooled by a phishing attack.)

But also, account recoveries are in principle rare events, as opposed to logging in which is common. So you can and should apply very different security policies to the two cases. A very simple solution to preventing SIM swapping attacks on account recovery is to just add a delay to the recovery, and notify the user about the attempt via other channels. That means that not only does the attacker need to hijack the phone number, they also need to keep control of it for days, prevent the real user from seeing the messages and blocking the recovery attempt, etc.

(There's plenty one can do to decrease the friction and to increase the security on top of that, but even that simple solution gets you most of the way there.)

That wouldn't be acceptable in a login scenario, you can't tell the user to wait for three days for the login to complete. But for a once per decade loss of all credentials? That's a lot more palatable.
Did you open it in a new tab? In an existing tab, it loads fine.

On reflection, it’s also quite possible this is a platform-specific bug. I’m on Linux. I think I experienced it in Windows a few years back, but the memory is fuzzy.

… hmm, apparently if I start a blank Firefox profile this doesn’t happen either. Though I know I’ve encountered this with at least two completely distinct Firefox profiles over the years. This bears closer investigation.

Anyway, it’s still indicative of the disrepair of this feature set. It’s still used widely enough that I don’t think it’ll be torn out, but honestly on technical robustness grounds it could warrant being removed.
I have heat pumps and currently pay 31c a kWh in New York. Starting to regret them. They need to address electricity prices
Even in Europe, washing machines typically have a quick-wash setting that takes 30 mins or less. But the standard and economy wash modes take much longer because those are the ones that must be measured for the appliance's energy efficiency rating.
Well they failed miserably at that first thing. Azure's only leverage is really AD, InTune, O365 etc for corporates and then shovel everything else in there around the edges. Even in the MS house I work in, other than AD, all the product stuff is in AWS.

And the Azure hardware situation is so crap they had to buy in capacity from Oracle!

Source: https://www.oracle.com/news/announcement/oracle-cloud-infras...
Thanks for sharing my Repo. Hope it is helpful. PRs to submit your own RSS-relevant projects are welcome.
I think the dependence on china as a) a competitor in the supplier market, b) as a sales market and c) as an indispensable supplier of semi-finished products for its own industry also plays a major role.
Yes, i think all ofthese are factors.

A particularly annoying one is the debt break (Schuldenbremse) Germany introduced a few years ago. It prevents many investments currently. This one could be fixed relatively quickly though.
When talking about Hetzner pricing, please don’t change the subject to AWS pricing. The two have nothing in common, and intuition derived from one does not transfer to the other.
That allows other code to run while e.g. files are being moved. It indeed can be somewhat painful ([1] is the classic criticism) and in shell scripts is not as beneficial. I think there are even sync alternatives (i.e. equivalent functions that don't need `await`) for most of them, but again: these are the APIs I'm already familiar with, which is the entire point - and thus the await-stuff comes naturally for me, because I intuitively know those APIs are async.

[1] https://journal.stuffwithstuff.com/2015/02/01/what-color-is-...
The losses are a problem not even NASA had a solution to!

"During NASA's Space Shuttle program, which was carried out from 1977 to 2011, more than 24,500 tons of liquid hydrogen were purchased, of which 54.6% was used on-board; the rest was lost during storage, loading, or replenishment"

https://ntrs.nasa.gov/api/citations/20110008561/downloads/20...
All communication is communication with people in the future.
For my use cases the aim is really to not deal with events, but deal with the rows in the tables themselves.

Say you have a `thing` table, and backend workers that know how to process a `thing` in status 'new', put it in status 'pending' while it's being worked on, and when it's done put it in status 'active'.

The only thing the backend needs to know is "thing id:7 is now in status:'new'", and it knows what to do from there.

The way I generally build the backends, the first thing they do is LISTEN to the relevant channels they care about, then they can query/build whatever understanding they need for the current state. If the connection drops for whatever reason, you have to start from scratch with the new connection (LISTEN, rebuild state, etc).
A Declarative Front End Framework from Scratch [pdf]
European washing machines typically take 2 hours or more on a standard cycle. They take longer in order to meet energy and water-efficiency requirements.

But they do have 30-minute (or less) quick wash option too.
On the other hand cloud platforms can be hard to migrate off, which is very much taking away options.
I'd never buy anything from Pakt without seeing it endorsed by someone I trust.

It's a shame because there is good stuff in their catalogue, but it's littered with trash.
> Try opening https://kmaasrud.com/blogroll.xml in a new tab (Ctrl+click or whatever), and observe the correct document title, but how the actual document area remains blank and the status bar says it’s still “Transferring data from kmaasrud.com…”.

It worked for me: https://imgur.com/a/Qccw9kT
Downside: you can put stuff on top of front-loaders. It saves space.
Still, what was wrong with iSlate?
The only place I have ever seen the kind of sentiment you mentioned is on Reddit and then on LessWrong (not sure which came first).

Don't tell me about the resources I read to do my daily job.

Axel Springer hasn't touched the Politico operation (if it did, I would be the first to have heard).

And Axios is heavily used in the dealmaking community. They hired most of the ex-Protocol, Reuters, Bloomberg, NYT, TechCrunch, and Politico reporters who's beat was the intersection of dealmaking and policy.
I remember when I was in COMPSCI-101 or something like that and was introduced to sorting, and after coming up with a basic bubble sort algorithm, thinking that there was no way that could be improved because it looked self-evident that you needed to do all the work the algorithm was doing or you couldn't be sure the list was really sorted. Then, of course, I was introduced to multiple better algorithms like merge sort and quick sort which showed just how wrong I was...

Perhaps, for the "scientist" writing that initial code, their algorithm was also already the best that could be done because they just don't know much about algorithms and techniques to make them faster?! But once you learn about things like divide-and-conquer, work avoidance etc. it becomes pretty much self-evident when your algorithm sucks... it's really not that hard - definitely not for people whose job is stuff like climate science who have a very good understanding of maths.

Maybe by teaching scientists the basic "smart" algorithms and just a little about algorithm analysis (Big O notation), massive computation improvements could be had.
It does. Their argument is a farce. By now they've had many chances and made many attempts to illustrate their point if they had one. They don't have one, but they somehow don't know it. What can ya do?
Quest is outselling PSVR2
https://www.roadtovr.com/quest-psvr-2-unit-sales-holiday-202...
If you're interested in an open source, (including the server) self hostable, E2EE and federated/p2p storage, sharing and app protocol (including calendar, docs etc) who doesn't have VC investors, check out Peergos:

https://peergos.org

Tech book - https://book.peergos.org

Source - https://github.com/peergos/peergos

Sign up to our server - https://peergos.net/?signup=true
Time for some dark humour! After careful analysis of the situation...

The frogs in the 2 degree warmer pond will be complaining a lot more than the other frogs, so that must be worse.
People are blaming energy prices but I don’t understand:

As far as I can tell, wholesale prices for both gas and electricity are lower than before the start of the war.
Very cool idea! Looking forward to that
Heat pumps represent roughly the same goal as nuclear -- the physics makes it possible for great efficiency gains and just needs engineering & clever management of installation lifecycles to get the cost down.

To be clear, digging up your yard is for highly specialized geothermal heat pump installations. We should be skeptical of these projects because the geologic sites that allow it to be cost effective are quite rare. Normal heat pumps are just an air conditioner with a reverse configuration (not to minimize some of the difficulties of both implementing and then successfully retrofitting this)
Gas prices are lower than before the war.

So that cannot be it.
Popularity doesn't equate to quality or lack thereof; as far as I can see. Everybody's different: what a boring world it would be if that was not the case. Popularity is not about the thing that's popular, but the tribe (enjoying / hating) the thing.

I often avoid things while they're fads; even when its a case of genuine Quality. The experiences people are able to turn into fads like that are likely to be available later, after the noise has faded, when the tribal implications of the thing are no longer so severe.

"Firefly" was great. I didn't need to subscribe to a TV service to experience it "new"; I just waited until a DVD set showed up cheap. I don't think I lost anything by failing to join in the tribal, emotional dramas that surrounded it.
> This one could be fixed relatively quickly though.

In the sense that you could just repeal it, but not in the sense that there is a majority for that. The opposition parties are against repealing it, because it damages the current government, and roughly half or more of the government coalition are also against repealing it, because they consider austerity sound economic theory (meanwhile the other half considers rapidly ballooning welfare and transfer payments a feature, not a bug, and also believes rent control works, so arguably there just aren't very many adults in the room setting German economic policy right now).

So it's something that cannot be fixed quickly because people are actively against fixing it.
The West will be the poorer for it
If they'd go to JavaScript, they'd feel a sense of unfamiliarity similar to what JS developers going to Python would feel.

But the Python equivalent of TypeScript is mypy, and I don't think it's controversial to say (even among Python developers) that it's way behind TypeScript, generally.
We don't know that for sure, and either way, I'm capable of making my own judgement calls.
Demographics. The Baby Boomers have started to retire. Population is aging, birth rates are low, labor pool is shrinking.
My grandparents lived through this and were fine. It'll be ok I'm sure.
Went through this fad. Ended up with Muji gel pens. Much less maintenance!

Best fountain pen experience I had was actually Rotring ArtPen EF. Pretty bomb proof and you don't cry too hard if you lose it.
> All of this expense goes away when they migrate to cloud.

They need to replicate everything in multiple availability zones, which is going to be more expensive than replicating data centres.

They still need to test their cloud infrastracuture works.
Supply curve shifts left, demand curve shifts left -> price is the same.
Automation in the works since at least 2016 in western Europe, it was a leg of the Boost4.0 project (an other leg was better repairability and part manufacturing, which might have pushed 3d printing but I haven't worked on that part so do not believe me on this, it's an unfounded guess).

The leftist in me is sad to acknowledge that (not really, I'm more on the autogestion side), but EU institutions dropped the ball on this subjects, the main drivers were auto companies and universities/engineering schools.
I used to have a cheap TWSBI eco EF and looooved it. Changed for a more expensive pilot e95s EF and it feels a bit like the montblanc I’ve tried: not as smooth at my TWSBI. How can I prefer a much cheaper pen? Am I doing it wrong? (Also that cartridge is so freaking small, and who thought half a pen was a good idea)

Also I tried all sort of pricey paper and now I buy exclusively the Maruman spiral one with dotted paper: Maruman SPIRAL NOTE BASIC 8.98 x... https://www.amazon.com/dp/B09S631H8Z?ref=ppx_pop_mob_ap_shar...

OK I guess the post motivated me to go back to TWSBI…
Study captures hard truth: Walking home at night is not the same for women
NYPD launches 24/7 "E-commerce Exchange Zones" to combat online shopping risks
Do clothes really need to be 100% clean?

I know people who never wash their jeans to reduce wear, and they seem to have no problem with it. (They do occasionally put their jeans in the freezer overnight to kill germs).
Author here. I wasn't suggesting it would have any perf impact. Just that it was an interesting change set.
And the "premature optimization" excuse is used almost every time someone argues that over-abstraction can cause performance issues.
Related post from a few days ago:

“Postgres Is Enough”: https://news.ycombinator.com/item?id=39273954

Queue section in the gist: https://gist.github.com/cpursley/c8fb81fe8a7e5df038158bdfe0f...
So the signing[1] DXIL.dll does is just a modified MD5?

1: https://github.com/hexops/DirectXShaderCompiler/blob/4190bb0...
IMO the cheap Russian gas was keeping Germany afloat while it was already crumbling. Germany has been too slow in adapting for the modern age, building out their infrastructure such as fiber[1] or even finishing their part of the NRLA[2] which is still not even close to being finished. They added too much red tape for every little crap[3] making it incredibly difficult for any business to get anywhere (small German you-tubers are dragged to court because they forgot to place a small disclaimer on their website which could have been handled with a small fine or warning).

In recent times trying to compete with other countries a lot has been privatized making the whole thing even worse. You have private infrastructure resulting in the same road being ripped up multiple times every-time another fiber provider wants to add service. You also have the once 80%+ on time rail network being so late that trains are stopped at the Swiss border to prevent time shifts in the tight Swiss schedule. While Switzerland implemented Clock-face scheduling a long time ago Germany moved the date to 2070[4]!

You also now have private low budget trains running on the network. These companies cut corners to the maximum and if one of these trains breaks down it blocks the track. Unlike a bus, you can't just drive around it.

There are also still large parts of the German rail network that aren't electrified. The trip from Zürich to München only recently has been electrified not requiring a locomotive switch.

IMO, infrastructure needs to be public, roads, rail and fiber. Companies need to make money for their shareholders and with infrastructure the profit comes from long term economic growth of a region. This does not translate to direct company profit.

[1] https://netzpolitik.org/2018/danke-helmut-kohl-kabelfernsehe... [DE]

[2] https://en.wikipedia.org/wiki/NRLA

[3] https://www.politico.eu/article/spam-email-gdpr-lawsuits/

[4] https://www.tagesschau.de/wirtschaft/unternehmen/bahn-deutsc... [DE]
I believe a rule of thumb is that ceiling fans can reduce perceived temperatures by 5 C, so definitely not sufficient above a certain temperature.

Source: other people, so not very reliable

Edit: the click-through link actually mentions 3-8 degrees
just switch to https://snote.app it's privacy focused collaboration
Germany's strategy has been to offer higher quality products at a huge markup. Just using the auto industry as an example, in the past twenty years the difference in quality between a mass market vehicle and a luxury vehicle has compressed. Competing on quality seems to be getting harder.

The Anglophone economies, whose shift to services away from manufacturing has been ballyhooed and decried in many quarters, embraced competing on novelty. By being the first mover in many industries.

The Anglophone strategy led to greater internal inequality but seems to be better from an aggregate standpoint. I'd like to see Germany's manufacturing strategy work since it preserves mid-skill jobs, but this is casting doubt.
Semiconductor Fabrication 101
> What you call inefficiency (I guess in terms of power consumption) is a misuse of the term in a world where value is subjective

No, it’s simply recognizing that competing systems match or exceed on security without the same cost. You’ve effectively acknowledged this by saying that the system will be more usable and affordable by using something better designed which eventually clears in Bitcoin to reduce the number of expensive transactions.
> "regular cadence meetings with our AWS account manager" and I am not sure what could be discusse.

As being on a number of those calls, its just a bunch of crap where they talk like a scripted bot reading from corporate buzzword bingo card over a slideshow. Their real intention is two fold. To sell you even more AWS complexity/services, and to provide "value" to their person of contact (which is person working in your company).

We're paying north of 500K per year in AWS support (which is a highway robbery), and in return you get a "team" of people supposedly dedicated to you, which sounds good in theory but you get a labirinth of irresponsiblity, stalling and frustration in reality.

So even when you want to reach out to that team you have to first to through L1 support which I'm sure will be replaced by bots soon (and no value will be lost) which is useful in 1 out of 10 cases. Then if you're not satisfied with L1's answer(s), then you try to escalate to your "dedicated" support team, then they schedule a call in three days time, or if that is around Friday, that means Monday etc.

Their goal is to stall so you figure and fix stuff on your own so they shield their own better quality teams. No wonder our top engineers just left all AWS communication and in cases where unavoidable they delegate this to junior people who still think they are getting something in return.
Pro tip side note:

You can use DNS to mitigate the pain of changing those connection strings, decoupling client change management from backend change process, or if you had foresight, not having to change client connection strings at all.
Reading this I couldn’t help but think: yeah all of these points make sense in isolation, but if you look at the big picture, this is an absurd level of complexity.

Why do we need entire teams making 1000s of micro decisions to deploy our app?

I’m hungry for a simpler way, and I doubt I’m alone in this.
> I’ve had technicians at both GCP and Azure debug code and spend hours on developing services.

Almost every time Google pulled in a specialist engineer working on a service/product we had issues with it was very very clear the engineer had no desire to be on that call or to help us. In other words they'd get no benefit from helping us and it was taking away from things that would help their career at Google. Sometimes they didn't even show up to the first call and only did to the second after an escalation up the management chain.
I see only front-loaders in Europe, and a mix favouring top-loaders in North America. Could it be that Europe (consumers or the EU) has encouraged efficiency more?
I can't wait to experience this new experience in my clipboard experience.

Every time I get upset about the decline of MacOS, Microsoft manages to cheer me right up again.
Well corporations pay printers to do their printing because they don't want to be in the business of printing. It's the same with infrastructure, a lot of corporations simply don't want to be in the data centre business.
It does not prevent investments by industry at all.
Here he was on "What's my line?", this is while he was young enough not to be a celebrity guest https://youtu.be/K8u6MoA7fv0?si=McDOrCqNad5zv2vM
Bad governments that actively hinder progress on many fronts (just look for example at Wissing as a transport minister being completely anti train service, destroying infrastructure for the people, while dancing to the tune of car manufacturers), lining their own pockets, corruption, unfettered lobbyism and bad policies for education system added their weight to this.

A country can only take so much incapability and corruption, before things go downhill.

As a German I warn, we better watch Germany very closely, if the likes of AfD get to power. Way too many people are either desperate enough or uninformed enough or disappointed enough to vote for the far right bordering illegal.

This has all been in the making for a long time, due to previous and current governments. A party like FDP is very far removed from its originally held values, and would love to jump in bed with the far right AfD, if that brought them into the government again after the Ampel coalition. They are traitors of democracy basically, just like CDU.
try https://snote.app it's privacy focused collaboration
Hello, author here. Just to clarify, I wasn't saying that this has any perf impact per se. I was trying to see why syscall showed up quite a bit in the profile, when reading a large file, no matter what buffer size I pass in. Rather than spend time finishing the actual work, I spent way too much time trying to understand the reason for the limit.
Gamers definitely did know. For a good part of the decade, the basic IntelliMouse Optical (2001 revision) was one of the very few devices that didn't have pointer assistance gimmicks that stand in your way, like angle snapping. It was sought after well into 2010s, despite it being limited to the measly 125Hz polling rate, having high SRAV and slippery sides.
Agree about Pakt, but not about $50 self publish per se (nor the tenured prof remark). I am in the process of writing a code book, but it is compiled via quarto so at least you know the code works as expected.

This is my favorite helpful advice for pricing, https://pubsonline.informs.org/doi/abs/10.1287/mnsc.2020.360.... Estimate max someone will buy, then divide by two (assuming no marginal cost, like e-book).
More recommendations on this topic? Paper's great. I also know about Martin Klepmann's Designing data intensive applications but it's less about data structures and more about databases.
Because their Enterprise client requires it on their due diligence paperwork.
...hilarious dude.
That’s not how demand curves work.

If you hold the price fixed or your decrease it, demand will increase, not decrease.

If you reduce supply, price finds a new equilibrium at lower demand, but that price is always HIGER than before. The fact that prices are equal or lower prices they this cannot be it.
? Would you elaborate, just to be sure we're talking about the same movie?
Except for the users.
Actually... CLIP is an image-to-text computer vision model. It has nothing to do with copilot.
Its not just you. I think web development would be in a much nicer place today if we spent the last 20 years improving XML and XSLT rather than abandoning it for JSON and client-side JS.

People are starting to realize that most sites really boil down to parsing server state and rendering DOM. We never needed to do all this nonsense with serializing all state to JSON and shipping the entire rendering pipeline to the browser, that was just a heavy handed solution for a very specific scaling issue at Facebook.