skysight-inc/HackerNews huggingface dataset:
We have PSD2 though; I think we're voluntarily (or perhaps conditional in the exit negotiation) signed up to it anyway, perhaps so that 'open banking' works internationally still?

Just from a cursory 'psd2 sms multifactor' search, I can't see anything definitively saying it's not allowed though? I can see 'must use secure MFA' (implying it might be pretty open to interpretation) and blogspam type sites saying 'the short answer is yes [SMS can be used]' or 'can be as simple as implementing SMS and voice'.

This one seems reasonable - https://www.onespan.com/blog/psd2-end-sms-based-authenticati... - and though his opinion is that it's not up to scratch, it does make it seem like it comes down to interpretation and your willingness to defend your position. Unless you know that it literally says 'must not use SMS' now?

Two examples I can think of are Santander, and NS&I (run by UK gov). The latter might not be a 'payment service' though I suppose (savings accounts only). I think NewDay (rebadged credit card aaS provider) too.
> Pure-HTML forms work exactly like React forms

This should probably read "React forms work exactly like pur-HTML forms" seeing as HTML came first and react ultimately spits out either an HTML form or a form request.

The original point still remains though, reaching for react just for forms is really heavy handed. It works fine if everything on the site is react already, though that's an assumption that I wouldn't make and that I hope will die soon enough if devs finally start moving away from massive react apps.
Our government uses equivalent of www.mydatabox.cz (real one is mojedatovaschranka.cz).

Literally a domain that looks like from teaching material for phishing, no databox.gov.cz or something like that.

The domain is for an official legal documentation communication with government and has same legal weight as letter that was person delivered and recipient was checked against ID.
Paragraph Pollution: AI is (probably) greener than you typing on a laptop
I deleted a years worth of trades on a production database for a bond trading system in 1997. They were restored within an hour, but it made a lasting impression.

Different color scheme on prod consoles.

Always use “BEGIN TRAN”.
Fully local (or private cloud sync) I would go as high as $2 a month. Cloud based solution, which is the only solution I expect, not interested just yet.

(note: not OP)
to quote about distro packages: "To be blunt, this dependency management system never should have been allowed. It caused no end of confusion for everyone…"

Yeah, package management that actually works must be terribly confusing to some people.
Happened to me with my mortgage. Got this very weirdly phrased letter about how my homeowner insurance info needed to be updated/confirmed and that I had to go to <random website> to clear it out.

I called my insurance broker and yes indeed it was legit. I also tried to explain to them how this letter was a few steps removed from a Nigerian prince scam based on all the red flags, but i don't think it made a big difference.
The site's last act was to archive itself
I've seen ChatGPT translate English to German miles ahead of what Google translate does.

Like an English satirical poem to perfect German. Changing the literal translation to keep the meaning and sarcasm of the poem.
I've often felt frustrated by the processing fees. Can you elaborate on handling this yourself? Which EU country are you based in?
Don't insult COBOL like that
Technically we never went to war since ww2....which is kinda insane to think about
How do they support this financially?
CXL Overcomes Hierarchical Routing Limits
I like Pixelmator for multiple reasons, but it’s a toy next to Photoshop. And so is everything else. There’s simply no competition, unfortunately.
> something valuable

Something? Yes.

Valuable enough to bring even one down? Doubtful.

Anyway, the last vehicle which could do this was decommed in 2011.
OP seems to be ignoring sensibilities of maintainers and how seamless getting a PR in is per se, without looking at the changes at all. It may not be the norm, but I've seen occurrences of 3 smaller PRs taking longer to be reviewed and merged (for bogus reasons, not because they touch hot code) than one big chunk (best example would be a maintainer who is arguing about literally everything that is not their own code). Sometimes the process is the actual problem. Maybe it's even worse in companies than in open source projects...

On the rest, I am not disagreeing at all, it just might be worth looking at the reasons, but I hope statistics will sort out what I described above.
$0, unless maybe someone finds a way to not pillage the data of the service and add a lot of actual value, and doesn't squat on this ultimately simple thing that should be a small piece of a much larger thing.

open source AI and browser/OS companies are going to provide an answer soon anyway.
React isn't required for client-side validation or non-spec form inputs.

Doing form validation in event handlers for DOM events works very well, and a simple script tag or custom element is all that's needed to build a multi-value select.
This seems like a last ditch effort to make it relevant again.
That's why I deploy buggy products
At a company with a modern, mature process this simply should not be possible.
Seems reasonable to me. Right now, LLMs are basically regurgitating an average of the whole internet. Dog-level AI indeed.

There might be a breakthrough in grokking and building abstractions https://pair.withgoogle.com/explorables/grokking/ and at that point the scary thing is that a big tech billionaire or state government has no incentive to share that with humanity, but rather to use selfishly. That's the scary inflection point on the horizon.
You're confusing Vice Media with Vice News. Vice Media did all the lifestyle stuff and Vice News was sending correspondents to war zones
Yes, but as someone who uses eBay frequently, I’d never buy from someone with no feedback
This is my toot. I’d like to point out I have written a lot of content for Motherboard over the years about the importance of digital preservation.

While the story is still online (hopefully it stays there), I’d like to point out this piece in particular: https://www.vice.com/en/article/qvg5z3/what-if-we-treated-we...

Also posted at Tedium: https://tedium.co/2019/10/17/historic-websites-preservation/

Too many good websites just get steamrolled out of nowhere. It would be deeply ironic if I spent a good chunk of my career writing pieces for a site that deleted its archive.
The problem with single file formats is they don't play nicely with file sync tools in what I'd call "common" scenarios.

Due to the way it's laid out, a git bare repository will work quite well with a per-file syncing system because references are stored as files pointing at the hashed object store.

So the worst you can do even without central coordination is have a reference conflict. I'm sure bad things can happen, but for the purposes of "keeping repos synced via syncthing" it works well enough (note: this is different to trying to keep a working repository synced, which I wouldn't recommend).
I said git instance, not repo.

I would imagine that by directly manipulating the cloning process and not just the repository, a larger attack vector could be exploited.

But yes, I agree with the rest of your points
Probably not. TBH it depends somewhat on interviewer type.
> Ya it's hard to be sure that when people express disdain and/or hatred of "white" people that they are or aren't including arabs. /rolleyes

It depends on where those people expressing their disdain/hatred are, and their own cultural views on who is considered to be 'white'. In Russia, for example, white supremacists do not accept Caucasians as white, and they may be targeted with hate crimes.
I guess this can be done with an extension that would work on all browsers. Like parse each page, save compressed text that supports fast decompressing (maybe even images), build tf/idf + cosine distance for verbantim searches & save in db and maybe add some ai to enhance the search. The next steps would be custom ai searches like "show me pages related to x", it'll quickly decompress the pages & apply the search for each but there are different approaches, like maybe saving history on a server and apply some ai model with huge context or do an initial filtering with tf/idf and apply ai after that.
> I'd wager good money on the latter.

I don't disagree, but I'm cautious about making a call with the current information available. For example: yes, a "4096W / 4096A" power limit sounds odd, but it's not an automatic conclusion that this limit is intended to work to protect the CPU. Instead, it is a function that allows building a system with a particular PSU dimension — it would be odd if that were overloaded to protect the chip itself. Maybe it is, maybe it isn't.

It's also very much possible that the M/B vendors altered other defaults, but… I don't see information/confirmation on that yet. It used to be that at least one of the settings is the original CPU vendor default, but last I looked at these things was >5 years ago :(.

> It's cases like this where I wish Intel didn't exit the motherboard space,

Full ACK.
Even in multi-user or organizational repositories, I wonder how many >1k SLOC RPs involve tons generated code or (poorly) vendored external dependencies. Typically it's pointless to try to review that in detail, either it applies cleanly or it doesn't.
As another software dev, I would pay big money for the "worst possible computer" that exhibits all of the glitches and issues that end users see. It's so annoying to get bug reports that I can't reproduce.
I've worked in environments where we had several people per large project and reviewers could genuinely point out important context from parts of the project they were more familiar with. It was an awesome environment for learning not just the project but experienced engineering in general.

Now I'm in an environment with several projects per person instead of several people per project. Now not only do we have a bus factor where nobody is familiar with anything but their own projects, even if they do review something they can't do much to anticipate issues or add context. Reviews have higher friction and less value.

For my own projects, I have instead invested in really rich testing, far beyond any other project here. It not only lets me move forward without regressions, it means if someone else ever has to take over without me, the tests will teach them broader context and catch regressions. All crafted in a way that test expectations are still easy to update when changes are intentional.

But I'm still the only one doing it this way. Most projects have 0 tests, or worse, lots of clunky tests of which 0 are useful. At best I'm hoping I can inspire others to follow even if it's only for their own sake at first. I'm not holding my breath for systemic change.
I never saw an Access database that didn't become a regretful mess after a couple of years - the person that made it left, no-one knew how to update it. Fancy validation built into the form that just got in the way when requirements changed.

Thus I came to the conclusion that any Access database is probably better off being a spreadsheet, even with all the chaos that not having forms as a front end and not having relational structure entails. At least people can understand other peoples spreadsheets (up to a point)
Fastify Fundamentals: How to Validate API Responses
Will CarPlay read Twitter to me?
Europe is a special case, the average age in, e.g. China may be lower, though maybe not 14.
I disagree. 1 PR should map approximately to 1 benefit (ie. a new feature or bugfix).

If the feature is huge, the PR can be huge.

If reviewing huge PR's is a burden, I will make better tooling for it.

What I don't want is a big feature to be split into 10 PR's, where the first 9 provide no user benefit and are just refactors or adding dead code ready for the last PR.
I mean, either I paid the taxes when I bought the stuff, or I didn't. There's no reality where I "didn't pay the taxes when [I] bought the stuff" and also I "pay out of pocket", since I have not paid anything after placing the order. I guess there's also the possibility that I paid for the taxes but the seller ended up pocketing them, with FedEx footing the bill.
How do you get shadow banned after getting banned ?!?
With the 300k context window, the first thing I want to do is refactor my entire codebase, not just code completion here and there.
You are correct on this. They were given plenty warning and even after the war they tried to coup
I’ll take the latter when/if it happens.
This is an ad. It doesn't introduce anything new and is probably not a great solution to the posited problem anyway.

Put in-progress code paths behind development flags and merge frequently to main.

That one sentence removes the need for extra tooling and obviates the need for more buzzwordy workflow names like "stacking" or "trunk based" or whatever the trendy thing is at the moment.
Thanks Aeolun!
We're going to improve the documentation further. I am going to take this feedback along.
I wish what you just said was more widely accepted insight :)
Vice only survived as long as it did because some MBAs insisted that if they wanted to do cool stuff (documentaries, TV channel) they needed to do something else on the side that actually generated revenue. The majority of Vice's revenue came via highly un-sexy "creative services" (i.e. producing TV commercials) and other advertising media.
I can understand that marketing message making sense and appealing to.. some people; I am surprised to see it on HN though.

This is like buying vegetable & olive oils from BP or Shell because they're oil experts looking for new income streams as we shift away from petroleum.
Now we are getting somewhere interesting in the discussion. What the Japanese High Command is not automatically determining if it was morally right or wrong to drop the bombs.

The Japanese almost coup could have been driven by other concerns than yet-another city turned to ashes, by nuclear or conventional fire. (To spell it out: "let's surrender to the Americans before we have to surrender to the Russians" vs "fight to the end and bring down as many enemies with us as we can".)
How many of those parents would have the technical know-how to stop their lids from playing with SD? Give the model some “I am over 18” checkbox fig leaf and let them have their fun.
As a consumer there is practically speaking zero legitimate payment purposes available to me. Sure there are a couple of niche services taht offer BTC payments alongside credit cards...but my grocery store does not accept BTC.
I’m supposed to pay my semi-annual property taxes (on the order of ~thousands of USD) on a site that ends in .org instead of .gov, and nobody apparently sees anything weird or wrong with it.
There can be licensing issues, stuff breaks, stuff gets hacked, most content just gets really stale...

I was involved with some sites recently that stopped publishing new content. The plan is to keep most of it around for now. But I have no illusions that if it becomes a "project" for some reason or another in a few years, it will just be turned off.
> I think IT incompetence should lead to audit fails or even better delisting from exchanges.

Fear of policy is why you get things like "force us to change our passwords every 6 months and block the last twenty". Getting a central arbiter of IT competence is a hard problem.
It would be pulling in another SaaS, what isn't fair?

It actually sounds like an interesting service in my opinion, but it is another SaaS that is giving me an API for a form handler that I could otherwise host myself.

Personally I wouldn't see the use case of using your own DB as helpful, if you already have your own database the odds that you aren't hosting APIs as well seems low.
I hated Firefox for the longest time, because it was a sub-par browser with a cult following, but since Chrome ruined any competition I went through several chrome-based browsers (never Chrome itself due to severe lack of basic functionality) and am slowly ending up with FF as my primary browser. My standards have lowered substantially, and firefox is just good enough. Always using more browsers and trying something on the side, but while there are some nice features to be found, there is always a major drawback. I had high hopes with Vivaldi, but it's a broken mess that I can't recommend.
I'm guessing a coin toss is closer to what Grammarly does and that would get you 50% accuracy haha.
I think the comment at the thread root is just wrong then (although the downvotes seem excessive). https://en.wikipedia.org/wiki/List_of_massacres_in_China alone seems to have a couple of worse crimes than the atomic bombs; the Chinese are an old civilisation with reasonable record keeping.
Of course you have to validate on the server. That's a given, always.

But you want to provide better UX to the user.

Htmx is not simpler than React. I can't deploy that without a server that knows everything about the frontend. React allows me to decouple. Templates are hell. I lived in it for many years, never again.
Well I wonder if were seeing these kinds of formations due to the extream conditions that result from nuclear detonation. I wonder if a fusion bomb would create a similar result....because I know most attempts at modern fusion reactors are using lasers to create extreme temperatures and pressure via controlling condensed plasma
It's not nearly that bad. You effectively did the sqrt twice by setting m = 2^80 when it should be 2^160.

You need 5.4e19 artifacts before the chance is 1 in a billion.
Here dutch customs doesn't even send you links for this stuff over SMS due to all the spam.

They tell you to look up the package tracking number on the PostNL (the national universal delivery company) where you can pay for it. All you get over SMS is a heads-up to check and the ID to enter (you need to combine it with your zipcode).
Also, A PR can contain tons of commits, and if the commits are well cut, it's very easy to understand implementation of a new thing step by step.

This is why Linux kernel workflow contains n patches per feature. To understand what's done in a clear manner.

Lastly, adding feature flags to mask incomplete feature code paths is very risky, and is a bug by itself I think.
Reminds me of this "We can't send mail more than 500 miles" story - https://web.mit.edu/jemorris/humor/500-miles
I would say the Rape of Nanking by the Japanese was worse than Hiroshima and Nagasaki.

If I was forced to choose I would have definitely chosen to be in Hiroshima or Nagasaki and endure the atomic bomb and the after effects than I o be in Nanking and endure days of sadistic torture (babies tossed in the air and bayoneted, brothers forced to rape sisters, gang rape, sexual mutilation, etc).
This type of thing always reminds me of Dave Chappelle’s bit on Ja Rule being asked for his opinion on September 11th: https://youtu.be/Mo-ddYhXAZc?si=rKYGUpZJgb0RU7Qg
I love the concept of Fossil being in SQLite, but there's a reason that Mercurial invented revlogs and Git tries to keep related objects close to each other in packfiles. Sometimes, you really do need a dedicated file format optimized for specific use cases. I'm completely unsurprised OpenBSD wasn't able to pull this off.

(Kiln split the difference by storing metadata in SQL Server, but keeping all the actual source data in their native formats. This works great, but is only really viable if you can guarantee things never get out of sync, which is basically impossible for random local Git repos.)
Since you "work on climate" I am sure it got your attention that there is a massive effort happening all across the board. R&D has made tremendous advances, whole industries are investing to get away from fossil fuels, and governments have ongoing programs to accelerate and support lange hydro, solar, and wind projects.

Some countries have not heard the call yet it seems (ones that like their role as perpetual victims and blame everyone else but themselves), but even just five years down the road, the world will already look very different for all the effort that's being made.
dude this is my life now. makes me wanna throw my phone every once in a while.
And a computer is a glorified abacus.

Given the possible range of complexity that hides inside the word 'glorified' I'm not sure it's particularly helpful
Worth noting that

a) Tumblr, under his leadership, has already had to settle a lawsuit over desperately poor moderation, leading to massive harassment, especially of trans women—and said settlement required them to make significant improvements in said moderation, which self-evidently has not happened,

b) Mullenweg himself admitted that they had some contract moderator who was actively going after trans women, in a criminal breach of contract, and all Tumblr did was to silently let that contractor go,

and c) according to other employees of his, Mullenweg has had a problem with these kinds of toxic blowups since he was just the head of WordPress.
At my company, they announced that in the upcoming month there would be an internal phishing sensibility campaign.
Then, in the same month, they started sending out incredibly dodgy looking emails to "security training" provided by an external website.
Of all emails, those looked the most like phishing but they are not. I decided that I refuse to do this training completely because to me it seems crazy how that was coordinated. I would never lose my job over this but it is amusing that I get an "Urgent: security training still outstanding" about once a week which just goes straight into the trash.
Just a few little special military operations ™ (but good ones don't worry)
> crazy that FedEx doesn’t have the info attached to the tracking

It is crazy how much the "paying duties at the border" situation feels like an afterthought for all currier companies. It is almost as if it was not really their design they just tackled it on later.

I wanted to send a present to my brother in an other country using DHL Express. It was impossible to convince them that I would like to pay duties. Not a thing. Can't be done.
Note that exactly the same constraints exist for Git.
> Shane Smith, who documented his own set up in one of the episodes?

Please elaborate.
To be fair, laziness isn’t but being unmotivated is. But there’s more to it than that and everyone seems to just make up their own definition of burnout when they aren’t happy at their job.

feelings of energy depletion or exhaustion;

increased mental distance from one’s job, or feelings of negativism or cynicism related to one's job; and

reduced professional efficacy.

https://www.who.int/news/item/28-05-2019-burn-out-an-occupat...
more than some. pretty much every small biz in my town does so (around 3%). not to self: carry more cash. My B2B business charges a 3% surcharge for credit cards over ACH or checks.
I did too, but it was 25 years ago and quite honestly there was a different attitude about developers accessing production.

Today if a developer can bring down the operation accidentally, that’s a problem with the org more than the developer.

(On the other hand if a developer screws up the shared dev environment, it is his or her fault and they deserve the wrath of their coworkers.)
A lot of people dismiss LLMs based on how ridiculously simple next token prediction is.

Human nerve cells look ridiculously simple relative to what a clump of them can do. So does a transistor that CPUs are built out of.
Now that individual posts can be viewed without logging in, is there a way to view/load a feed without authentication?

I'm working on a client and there's a specific scenario where I want to be able to show a feed like "Top 20 - Past 3 Hours" before a user has logged in to their Bluesky account.