skysight-inc/HackerNews huggingface dataset:
These scenarios are getting into some Mission Impossible level threats.

Most people use their phones most of the time now, meaning the MFA device is the same device they're using.

Of the people who aren't using a phone, how many are using a laptop with a built in keyboard? It's pretty obvious if you have a USB dongle hanging off your laptop.

If you're using a desktop, it's going to be in a relatively secure environment. Bluetooth probably doesn't even reach outside. No one's breaking into my house to plant a keylogger. And a wireless keyboard seems kind of niche for a desktop. It's not going to move, so you're just introducing latency, dropouts, and batteries into a place where they're not needed.

Long, random, unique passwords are phishing resistant. I don't know my passwords to most sites. My web browser generates and stores them, and only uses them if it's on the right site. This has been built in functionality for years, and ironically it's sites like banks that are most likely to disable auto fill and require weak, manual passwords.
No, it’s how a lot of people get their start. There’s also the FHA loan where people put down 3.5%.
[dupe]

Some more discussion on official post: https://news.ycombinator.com/item?id=39866493
And that would be the solution you'd absolutely abhor.
Database sharding has a bunch of gotchas and things to think about because you must consider query access patterns along with your sharding (unless you want the devs to get owned or have very weird behavior.)

Building something super simple can be ok for the base use case but if you are a multi-billion dollar company you can probably afford a few dbas to actually make your platform good.
Show HN: Does Daylight Saving time save your daylight? (2018)
I'd claim you've been wise enough to understand there's a cost to letting your skills languish at a mature tech company that pays you liquid RSUs, limiting your future earning potential vs working in startups in fields with growth potential and where you can develop highly specialized and coveted skills. That's the real story I'd argue as to why your strategy is a good one v. diversifying with these startups.

I don't know maybe one of your startup journeys hit or will hit massively (versus comfortably positive) and I'm wrong but at the end of the day it's about your risk tolerance and understanding the distribution of potential outcomes. The distribution had fewer massively positive outcomes than we all thought in the economic expansion/zero interest rate days of 3-10 years ago I think, and that motivated people to stay late, play ping pong with coworkers, leetcode for sideways promotions, etc. That was my initial point, it wasn't the free food and ping pong it was the hope of a ridiculous (instead of decent) exit.
What's up Python? iPhone support, sealed, Python_GIL=0
I use these 2 apps for universal AirDrop rather than pushing people to Apple
It was already done: https://www.youtube.com/watch?v=04JkdHEX3Yk
Have you or someone you know been negatively impacted by adderall? I’m curious to hear what you’ve gone through that led you to this conclusion.
I was teaching OpenGL for several years, we did C++ and OpenGL and then, during covid, we switched to web solutions.. What a pain.

Not the WebGPU or WebGL per se, but teaching engineers not familiar with Javascript or web development, local servers, CORS, etc.. adds a whole new level of difficulty.
A few notable projects where the canonical repo is still on SourceForge instead of moving to Github:

- LAME mp3 : https://sourceforge.net/projects/lame/

- KeePass : https://sourceforge.net/projects/keepass/

(Some people keep asking the KeePass developer to move to Github but he doesn't want to because "I'm not going to maintain a version control system." : https://sourceforge.net/p/keepass/discussion/329221/thread/9...)

Any other notable examples besides those 2?
This is how I remembered it as well.

Kind of preferred Google Code over GitHub for a while. Or at least until it had enough functionality and/or tools to support it.

Almost feels like it's time again for a shift...but it will probably be a while
Is it out of beta yet?
Or you could just hire some set of people who know how to manage postgres? Seems easier than building an entirely new thing with its own set of bugs that are unknown unknown brand damage awaiting you.
> The rule requires companies to alert the EPA if a new industrial process creates hazardous chemicals. Inhance has produced the containers for decades and argued that its process is not new, so it is not subject to the regulations. The EPA argued that it only became aware that Inhance’s process created PFOA in 2020, so it could be regulated as a new use, but the court disagreed.

So basically, any company that begins using a process that produces large quantities of hazardous chemicals is now incentivized to hide it until that process is no longer 'new' so that substantial new use rules won't apply to them? I'm sure there's no way this could go wrong.
That's what he says his position is. He bans people who post the movements of his private jet. He also has had Twitter file lawsuits against people merely for saying mean things about Twitter.

Of course, it's also possible that he's a complete idiot and has no idea what the First Amendment actually permits in speech, like he stopped paying attention after Schenck v US.
Not only did GMail offer more storage, but its spam filter was light years ahead of all the competition. IIRC, Hotmail used to publicly publish every Hotmail user that signed up, making it a huge spam target. I had to clean out the spam daily or I wouldn't receive any new email. Moving to GMail was a life changing event.

GMail is my last bit of goodwill towards Google even as they shut down other services I used and paid for. When it goes, so will I.
If it's not for your personal use, do a Section 1031 like-kind exchange of your old, almost as highly-priced, property.
I’m not sure if I agree with this. If the EPA didn’t become aware of PFOA being used due to their negligence, then I would say the fault is on them. However, if they didn’t find out about it due to subversion on behalf of Inhance to hide them using PFOAs, then I would disagree with the ruling. I wish the article provided more information about the specific arguments
That actually is exactly what the court told the EPA to do.

>TSCA section 6(b)(4) requires EPA to establish, by rule, a process to conduct risk evaluations. Specifically, EPA is directed to use this process to “determine whether a chemical substance presents an unreasonable risk of injury to health or the environment, without consideration of costs or other non-risk factors, including an unreasonable risk to a potentially exposed or susceptible subpopulation identified as relevant to the risk evaluation by the Administrator, under the conditions of use.”

https://www.federalregister.gov/d/2023-23428/p-52

Also, this was even linked right below the paragraph you cited.
This is from when I was using Linux full-time around 2010, but I was a foobar2000 user on Windows and wound up using Quod Libet as the best Linux-side replacement for it I could find. It wasn't a perfect substitute, but it worked for my needs.

(Some searching suggests that DeaDBeeF might be an even closer match these days, but it was brand new and I didn't hear about it back then.)
Good point. If it were customary (or required) that companies pay for time spent commuting, they'd be less thrilled about mandating return-to-office. As it is today, an employee's 2 hour commute each way doesn't cost the company, it costs his family.
Yep, that's when I quit downloading from SourceForge as well
If only there was KolourPaint for macOS. Recently switched to Mac and I really miss simple editor for quick editing (crop image, add another one, add text... in short: making low-effort memes).

Upd: looks like it might be possible in the future [1]

[1]: https://invent.kde.org/graphics/kolourpaint/-/merge_requests...
Would the penis enlargement ads that somehow hide as posts end up in these "communities"? That wouldn't be enough to lure me to X, but it would be a step in the right direction.
What does it mean to "be committed to free speech" ?
Weird how you can operate such a service anonomously. Even the whois entry goes through whoisproxy.

In the EU you have to put an address on every website that makes you reachable by courts.
Of true fans and superfans: the rise of alternative business models to copyright
I’m a little surprised we don’t have 3 factor auth since smartphones make this easy to implement

1- something you are: required bio scan on phone

2- something you know- required password

3- something you have- your phone with 2FA already set up
Pointing dogs (bird dogs) are made to point in the direction where they have perceived game. Good dogs are then not distracted by anything and stand there motionless, sometimes so far that they have to be carried away because they cannot turn away themselves.
Where does the solar system end?
>> Office workers dont "make" anything. i know that sounds rude but i cant think of another way to describe it...office workers "work" is all between their ears?

For some projects the entire scope can fit inside a single head, but as the scope and complexity increase the work happens between the brains. This is where the issue lies. Collaboration is critical for most projects of any real significance. This is where offices are helpful. If you simply think about an individual’s work and not the team’s collective output, then offices don’t make sense.

I see a lot of people focusing on management in this thread, but in my experience collaboration is the responsibility of everyone. From an IC’s perspective, I found working at a remote company to be generally unpleasant. People would routinely engage in sandbagging, delays and it would be difficult to understand why things are blocked. I found that trust was lower, and people were far less collegial. This is true to some extent of remote teams as well, so I think there is just something in how the brain works that doesn’t click with taking orders from a television.

There are many instances where being at home heads down is much better for getting work done and strict rto mandates are generally unhelpful in these instances. But ultimately the conversations around this typically end up trying to talk past the point or gloss over the bigger issues which is that a healthy and productive team is what matters.
Headless, dog-sized robot to patrol Alaska airport to prevent bird strikes
Peter Norvig at Google gave me an invite a few years before it was released to the public. For over 20 years it has been useful for me and my family, but now I just use that very old email account as a reliable backup email. Off topic, but ProtonMail has I improved so much over the years that it is now my go-to email provider.

I have twice paid for and used Google Workspace for my personal use (I like CloudSearch) but it was a nuisance having all the stuff I buy from Google (books, movies, music+, YouTube with no ads, GCP cloud services) attached to my free Google account vs. heavy heavy use of Google Workspace. It would be great if Google solved that problem.
Crunchy data (which can run on AWS/Azure/GCP) supports Citus: https://www.crunchydata.com/blog/announcing-citus-support-fo...
This is wild. The argument to vacate the EPA order hinges primarily on dictionary definition of “new”. Pulling the same shit as SCOTUS did to undo Roe v Wade.

Since the fluorination process is a “decades old” process. Therefore it doesn’t apply under the “significant new use regulation” of PFAS. Therefore, company did not need to submit application (even though PFAS is clearly generated or used…)

I am not a lawyer, so could be completely wrong here

https://www.ca5.uscourts.gov/opinions/pub/23/23-60620-CV0.pd...
SQLite has this as well, although it's use cases are different: https://sqlite.org/com/member.html

They have multiple tiers of support as well, pretty interesting read
GravityView made $4k on day one and more than $5,500,000 in ten years
Debian's development model actually seems to hit a sweet spot between "everyone runs LTS" and "everyone is cannon fodder".

Stable is LTS, sid is cutting edge, and testing is somewhere in between. You can choose the level of stability you want, and even move from one to the other, all without leaving the umbrella of Debian.
The other point here was that billions of requests per month is only 2 requests per second.

That can easily be done on a one core server if you use an efficient web language like go/rust/nodejs.

Tableplus is a simple marketing site that serves the binary via cdn.

Most of the time when a site goes down is because it is doing something very CPU intensive either at the app layer or the Database layer. E.g an expensive query.

If queries are hitting indexes and app is doing simple auth, routing and sending queries to DB, it’s hard to DDOS it easily.

With things like Cloudflare pages and functions, someone could hit it with billions of requests/month and you’d still be in standard $5/month tier.

They could download terabytes off CDN and you’d have $0 cost.

It’s pretty radical how much you can build on Cloudflare on their free tier.
What do you think of modafinil, which is sometimes prescribed for some ADHD varieties?
We are in that phase we're non ms incompatible features will be added to mgit and the flesh eating plant slowly closes shut.
I am someone who went out of their way to find an on-site job. Our current hours are Mon-Thr, 10 - 2:30 pm, with remote on Friday, which is a really great balance.

Smalltalk, coffee breaks, etc, are a productivity boon. Random conversations about what other people are working on are much more likely to occur in person as opposed to online. You can’t tell me that the social interactions on Slack even remotely approach the social interactions in person.

Working remote is lonely and erodes a foundational element of sociability. You spend a good portion of your waking hours at work. Your coworkers are your friends.

Also, there is no doubt in my mind that people take longer HN and Reddit breaks while at home than they would at the office with their coworkers having a view on their screens. This isn’t about the panopticon of the management class and more the impetus to be pulling your weight.

There’s just something that is enhanced about any interactions that happen in person. As a broad social trend we need to fight against the retreat from actual human interactions.
There's a difference between being remote friendly and remote first.

the former is "yeah, you can work from home, but you're going to miss out on alot if you're not at the office"

the latter is "we consciously make sure to integrate everyone in collaboration, regardless of location and have tooling/procedures for collaboration"

If you're asking this question, it might be that you're in a remote friendly environment with explicit lack of communication or collaboration support
Long form writing, while very useful, is no silver bullet. Sometimes the most effective way to make a decision (or just clarify misconceptions) is to get people into the same room and talk things through.
Git Machete
"WebGPU" is a misnomer, one nice thing about it is that it's not actually married to the web. Dawn, the C++ implementation used in Chrome, and wgpu, the Rust implementation used in Firefox, are both standalone libraries that you can link into a native application and use their portable abstraction without touching Javascript or Electron or any other web tech.
that doesn't mean it's enjoyable or a good idea for everyone.

> Return-to-Office Mandates

The topic under discussion is employers mandating things for everyone, isn't it?
So the argument is twofold.

1) governments didn’t get to print money at will until they went off the gold standard, and the financial regime we have now is worse than the gold era. (Highly dubious, I don’t buy this entirely)

2) blockchain done right gives hub-and-spoke efficiency without creating hegemons like VISA, SWIFT and PayPal to boss around their users with impunity.

This I believe entirely.
would be nice if he'd come out with some statements considering he's still committing to xz as of few hours ago

https://git.tukaani.org/?p=xz.git;a=commit;h=f9cf4c05edd14de...
Something this misses is that the mentality of OSS was just different before GitHub.

The thought from the original growth of OSS was that it would be more about the community than the code. So OSS would be a series of communities that would each have their own "identity" for their community. There were big OSS foundations like Apache and Eclipse. Sun had several like java.net, OpenOffice.org and netbeans.org. Gnome had their own place etc.

Like Sun, other enterprises like HP, Oracle and IBM were setting up their own communities for their projects and to collaborate with partners.

And then as the post touches on there were sites like SourceForge, Tigris.org, Google Code and Microsoft had something too (CodePlex?). These sites were places projects might spin up if they did not belong at one of the other foundations and wanted a place to host their code for free. Of these SourceForge was often used for distribution of binaries due to its vast mirror network and often that was all that was hosted there and the project was elsewhere.

Anyway, until GitHub sprang up and started to consolidate all the OSS in one place, I do not think anyone else was even really trying to do this. Obviously the rise of git played a big role in this. This change fueled the growth of OSS but it did kind of come at the cost of losing out on some of the community aspects that existed before in the mailing lists and forums of these other places. Now collaboration all happens in PR's and Issue and is often just between a small handful of people.
I switched over to pixlr web apps and I love them - definitely recommend checking them out. I pay for premium (like $3/mo maybe) purely because I want to support them, not for the features.
It’s now cheaper to rent in the top 50 metros in the U.S. than it is to buy. Inventory is low right now and people who have a home at a 3% rate are not going to sell unless they have to. That said, don’t wait for rates to drop if you really want to buy.

https://www.morningstar.com/news/marketwatch/2024032617/rent...
How would that cap work? Would the browser be expected to calculate the size of all elements by querying them all before loading anything? Would the browser just start downloading content counting bits as it goes, and then just stop when it reached 2Mb? What if the page was laid out in such a way that the JS includes were >2Mb?

Just a second of though about the comment made would show so many issues with the idea, that maybe the idea isn't really a good one. At the least it would provide pause that maybe some sort of refinement is required to be taken seriously by anyone else.
Both the original writing, and the surviving manuscripts, have uncertainty bounds of decades in their dates. The oldest physical pages we still have come from the years 100-200 or so. And assuming that a description of an event can't be written before the event happened (a touchy subject in this case), then the original writing of the Gospels must have been after the start of the First Jewish-Roman War in the year 66. So the gap between the writing and our extant sources could be pretty short, or could be over a century.

https://en.wikipedia.org/wiki/Biblical_manuscript#Earliest_e...

https://en.wikipedia.org/wiki/Gospel#Composition
The team at bootstrappable.org have been working very hard at creating compilers that can bootstrap from scratch to prevent this kind of attack (the "trusting trust" attack is another name for it.) They've gotten to the point where they can bootstrap in freestanding so they don't need to trust any OS binaries anymore (see builder-hex0.)

I've spent a lot of my spare time the past year or so working on my own attempt at a portable bootstrappable compiler. It's partly to prevent this attack, and also partly so that future archaeologists can easily bootstrap C even if their computer architectures can't run any binaries from the present day.

https://github.com/ludocode/onramp

It's nowhere near done but I'm starting a new job soon so I felt like I needed to publish what I have. It does at least bootstrap from handwritten x86_64 machine code up to a compiler for most of C89, and I'm working on the final stage that will hopefully be able to compile TinyCC and other similar C compilers soon.
Actually I'm the one who's often confused - I've been told I "look like a tech company CEO" and I don't really know what that means. I can measure the objective stuff like height and skin color to come up with something, but at the end of the day I don't really know what a tech CEO is "supposed" to look like. The actual CEO of the tech company I work for is a Hispanic grandma, which I suspect is not the stereotype. If people knew I lived with my parents, they would probably stop thinking I'm much of a leader lol.
> He said that they had to put really big brakes on it.

There's no compression braking (engine braking) with a turbine engine.
the engineering culture of the last century has largely been lost in software. design documents, well-scoped technical meetings, plans of record, schedules.

what you lose in remote is its replacement, a kind of freewheeling, ad hoc, piecewise discussion where everything just evolves organically.

while I enjoy the latter, the constraints of remote force the former in order to function at all. and it really does have its benefits.
There was a paper written by all women that did this lol

But that’s not the same because we live in a world where systemic harassment of women in academia by men exists and the reverse doesn’t. Other than the ideological issue of using a playboy photo as a test image a big issue is that a lot of people would harass women trying to enter academia using Lena.
Good point to identify collaboration as the more important variable, but of course plenty of orgs figure out how to collaborate effectively while remote. In fact, almost every org that achieves moderate scale will have to figure that out.

> From an IC’s perspective, I found working at a remote company to be…

What was your control group?
Being included via libsystemd isn't the only way ssh can load liblzma, it can come as an indirect dependency of Selinux (and its PAM stack) IIUC. Which makes it even a bit more funny (?) since Arch also doesn't officially support any Selinux stuff.

There might be other ways sshd might pull in lzma, but those are the 2 ways I saw commonly mentioned.

On a different note, pacman/makepkg got the ability to checksum source repository checkouts in 6.1.
Why can't your team perform?

Collaboration can exist and grow if its fostered. The same things that foster collaboration in office can be done remotely, but you do need to be explicit about it.

One thing remote does select for is those people who are independently productive.
Your anecdata doesn’t unvaludate my analogy.

Anyway Maillard published their paper in 1912. Crusty bread and seared steaks however were already a thing for millennia. The theory is not the flavor.
I have always felt the MP3 format would have been better if they had used a really high entropy test track with a lot of distorted guitars and synth noises.
Your entitled to you're own opinion. So if the majority use the language in the wrong way, language itself is the problem?