skysight-inc/HackerNews huggingface dataset:
>All my passwords are randomly generate and stored in a password manager so I really haven’t felt the need to switch or felt constrained by my existing set up.

The basic logic here is pretty clear imo. Passwords are still symmetric factors, and they're also completely unstandardized. So you still have to do a significant amount of manual management crap that should not exist, deal with UI that should not exist, and you still have to do some stuff if the other side (service provider) gets hacked. If we used bog standard pub/priv keys instead, then everything could become universally better. There'd be no need to worry about password policies, whether there is a character limit or not, how well and consistently individuals handle it, or anything like that ever again. Nor care if a site is breached, literally no action required because the site would only have the public key, they could publish it in clear text and it still wouldn't help attackers authenticate a single iota. Plus things like phishing and so on go away, because same thing, if the user has their agent browser to a malicious link or the like, and then it presents their pubkey, it still wouldn't do anything and the agent can't be fooled by similar looking to humans domains or anything. The agent would expect the service to present the proper signed request and anything else wouldn't work. Conceptually everything could be automated and standard without any sort of silo, all software could speak the same standard simple key format and everyone could back that up and sync it any way they wanted.

Unfortunately as is so often the case these days there's a lot of perverse incentives and players who can't resist the urge to try to add extra functionality in on top rather then just going for the low hanging fruit in a solid way first. So we've seen a confusing muddle, of existing players with financial interests who make money by helping lower the pain of the garbage that is password based mutal auth, those who see new chances to try to silo, those who want to shove in attestation and differences in password backing for good and bad reasons, mixing in concepts of hardware backing that are unnecessary, etc. I'm still hopeful something will come out of it in the end but it's been a real bummer to see how it's played out.
It does to me as well, but unfortunately our opinions don't matter. Only the opinions of the nine supreme Court justices do.
Also the obnoxious RSI-inducing touch interface?
I have nearly zero problems with multi monitor setups under Wayland. I did experiment my monitors rearranging themselves once, and there was an interesting glitch regarding maximizing windows in displays that aren't horizontally aligned (that is now fixed), but beyond that I cannot recall any issues ever with Wayland multi display.
Oh, come on. Face it: The US Libertarian party has been totally been taken over by far right wing racist populist LINO assholes who like to snort coke and bang underage hookers and are embarrassed to call themselves Republican but always vote that way just to stay in power.

https://en.wikipedia.org/wiki/Matt_Gaetz

>Gaetz has self-identified as a "libertarian populist".[102] Observers have described his views as far right.[2] Gaetz was an early supporter of Donald Trump and his appeal to the Republican Party base, echoing his talking points. In several commercials during his 2016 congressional campaign, Gaetz promised to "kill Muslim terrorists and build the wall".[103]

Trouble for Matt Gaetz: Witness Says She Was Paid for Sex Parties With Him:

https://newrepublic.com/post/179070/matt-gaetz-witness-house...

>The House Ethics Committee is now weighing that evidence to determine whether or not the MAGA politician paid for sex with women and an underage teenager.
You're wrong, with password managers you can definitely be phished. Unless it's literally impossible to extract the password to enter it manually, but I don't think password managers make that impossible (and if it's possible, users will do it).

With passkeys it's literally impossible.
Don't be too sad that computers have matured: hackers gunna hack, no matter the generation ;)
We can still give DOS to kids though. I'm going to try it out when he reaches 6.
You should produce a key per device, and produce a backup key that is safely stored & not used anywhere.

You can recover if you lose all devices via your break-glass backup key, and you limit the blast radius of "my key got stolen" from rotating all your keys to just a single device (or maybe the more likely "I screwed up and pushed my key somewhere public")
16-year-old child of billionaire tech CEO reported missing
> you can get better EVERYTHING outside their hardware

I'm pretty sure my M1 MacBook Air was the most powerful fanless laptop on the market when I bought it, and there were just a few laptops with comparable battery life.

I'm also pretty sure it had a GPU. (still has one)
Huh. After years of mar I tried to go back to windows. I did it for 2 years but I'm so much happier on Mac again.

I did kind of like the windows thg of dragging a window to the top to maximise, but that stuff is easy to replace with an app or two. General OS slowness and instability and clunky design not so much.
What Would Thucydides Say?
> Would Windows do a better job at this than Mac? (havent used Windows in decades)

I mean Windows doesn't have many of the issues that the article mentions, but Windows fails at being a Mac.
>Macos feels.... Half baked. I don't understand why apps should run after I close the window.

Because that's what Steve Jobs decided and he was never wrong. /s

The Apple philosophy always was "we know what's best for our users, it's our way or the highway, deal with it".
> I wonder if it means that the author will stop working on the library after their next release,

Just FYI it seems the library will still be maintained: https://infosec.exchange/@firstyear/112337225055591544
Early Microsoft seemed to be a pretty hardcore environment. I guess many employees came and got burned out in a few years.
Is there something wrong with creating opaque types using this method?

type ObjectId = string & {
readonly __tag: unique
symbol }

This way, we don't need to use `never`, but we still prevent the creation of a structurally equivalent type by mistake.
Read it again: it wasn't a client that brought those in, it was her boss. He was making her practice on cheap wood to not mess up expensive wood later. A jig would have undermined the practice.
"Dynamicland's new website will be here in May 2024."
That assessment is dated.

Updates:

1. US and UK are shipping long range missiles to Ukraine.

2. NATO is talking about placing nukes in Poland.

3. Israel is not winning the battle against Hamas and Hezbollah and showed the world that they have no defense against the ballistic missiles of Iran.

4. US seems to be moving ahead with confiscation of Russian USD reserves.
ZFS works great with Alpine.
Alpine + ZFS has been my default server setup for years.
I always find stories of how some science was still going on in China during the Cultural Revolution (and Mao's reign in general) fascinating.

And the ways that that the scientists (who were often ideologically suspect in the eyes of the CCP) would always put in statements that seem humorous to the West but were there to assure the CCP of their loyalty -- like how in the 1972 paper where the Beijing Structural Group solved the structure of human insulin there were statements like "In accordance with Mao Zedong thought, we have determined the structure of human insulin to 2.5 angstrom resolution" and so on.
Holy cow, that's so unintuitive.
There’s quite a few behaviors that are illegal because they are associated with stuff people are concerned about even if they aren’t inherently harmful.

Public intoxication for example was criminalized long before Minority Report was a thing.

We didn’t make photographing critical infrastructure illegal, but people were pushing that narrative and it could have easily happened.
This reminds me of the git API.
Apple is going exactly where I predicted they’d go. They’ve already had machine learning hardware on their phones for multiple generations, mostly “just” doing on-device image categorisation

Now they’re moving into more generic LLMs, most likely supercharging a fully local Siri in either this year’s or next year’s iOS release

And I'm predicting that there will be an opportunity for 3rd party developers to plug in to said LLM to provide extra data released during WWDC. So you can go "Hey Siri, what are the current news on CNN" -> CNN app provides data to Siri-language model in a standard format and it tells what's going on.
It works similarly in i.e. Debian, so it's not really a quirk of Alpine.
Definitely not for security... so yeah, seems quite pointless.
This initially threw me but it appears to be distinct from ChimeraOS, which is described as a, "Steam Big Picture based couch gaming OS".
In that case, the govt bodies will have to be consolidated.
> zfs was baked in

How baked in? I think Alpine is one of the few distros to ship a binary zfs kernel module. So it's just a quick apk command away from getting it. There's some pretty decent documentation to install zfs on root on the alpine wiki too https://wiki.alpinelinux.org/wiki/Root_on_ZFS_with_native_en...
With the frequency they're on here it feels like a guerilla marketing campaign. Everyone anyways points out they're a crypto scam and then they pop back up a month later and try again.
Corporations regularly try stuff only to discover that it doesn't work; rather than being called corruption, this is hailed as "innovation" and leads to quotes such as Edison talking about learning 1000 ways to not make a lightbulb.

Governments are regularly criticised for not being innovative enough, and for continuing to use obsolete ancient technology like fax machines and Latin for so long beyond the point of usefulness that it actively harms the rest of society — quin tu istanc orationem hinc veterem atque antiquam amoves?[0]

[0] From page 8: https://archive.org/details/michelle-lovric-how-to-insult-ab...
I love art and philosophy and I think categorizing philosophy an art is simply wrong. So wrong I don't think this is even worth the time to think about.
> General OS slowness and instability and clunky design not so much.

I can't tell whether you're talking about Windows or Mac here
https://www.nsa.gov/Press-Room/Press-Releases-Statements/Pre...

When there's a CVE in a program written in a memory-unsafe language that has a position of privilege in your security model, that's a much much bigger deal than if there's a poorly written bash script running as a user.

Seperate out your service manager from your pid1, pid1 needs to just be responsible for reaping orphan processes. If you're going to have a monolithic daemon in that privileged position at least write it in a memory-safe language, as that's where most of the nasty RCE vulns come from.
> For example, the right to free speech is not a right to commit fraud or slander against another. If it were, society would fall into catastrophic disarray.

Fraud and slander are not illegal purely on the basis of content of the speech used to conduct the activities. A sufficiently culpable and provable malicious intent must also exist. It's not fraud or slander to state an opinion one sincerely believes in, and obtain money or credibility for it.

> So the fairness doctrine can be seen as compatible with the first amendment in exactly the same way that consumer protection laws against false advertising are compatible with the first amendment in a world where it is observably the case that a media institution selectively using its platform to direct the public mindset is itself a form of intentional public harm for selfish interests.

I don't think you understand what the fairness doctrine was in practice or why it existed. It's regulation of private conduct. It didn't begin with television, but rather radio at the end of WW2 in an attempt to prevent future Father Caughlins from having access to a private audience over the airwaves. GE and RCA were not their targets. If anything, the fairness doctrine stifled competitive and independent media over the airwaves, with most such individuals and organizations functionally limited to local broadcast where they could get away with it and newsletters.

The doctrine never applied to Voice of America or "friendly" news organizations and the FCC wasn't compelled to apply it equally across the political spectrum (so much for equal liberty under the law!). If one wanted to provide supportive commentary on the Kennedy's invasion of Vietnam without a competing voice denouncing it, one was free to do so without fear of a costly suit or a revoked broadcasting license. Just like most regulations, the fairness doctrine was little more than a selectively used cudgel for political purposes. Even the Wikipedia page for the topic cites members of previous administrations making admitting to it.
> I guess I can go get my food from a government soup kitchen or apply for government housing but my experience is these services are not competitive with private market even at the lower price (or free)

Because you have such limited experience with the world. Did you know there are countries out there — dozens of them even! — which are not American?

https://www.nytimes.com/2024/03/17/realestate/paris-france-h...
Watching swimming and listening to experiences on swimming might not be the best way to learn how to swim, literally and figuratively in a problem space.

It’s hard to know where the currents in the water might be and how to navigate them.

Experiencing todos that roll over would show up pretty quick in using DateBk6 in an emulator. Install it and try to use it every day. There might be a video on YouTube.

After PalmOS, for a while I actually bought any mobile device I could get a PalmOS emulator on to for DateBk6 while I looked for a replacement. It was only so good on an emulator though for day to day use.

I’ma product person. Getting “wisdom” from a “passionate user” likely rarely is the same as also experiencing it yourself and ensuring you have more than than a passing interest in the space.

I had the problem of a really busy period in my life in my 20’s that this helped with. It almost was an unfair advantage.

From time to time, I meet other folks who like this topic deeply, only because it helped them learn to not accomplish so much, but maybe have been really effective with their time at a period when it really mattered.
In a Hollywood movie, sure, with obligatory leading warrior woman role. In real history, not so much. With very rare exceptions (like England [1], and some Eastern European lands were at least some of peasants were militarized) peasantry had little military value [2], and therefore little factor in any rivalry. Also feudalism had more strict rules in regard to competition for resources compared to modern criminals. A rival had to appear first, and in most cases needed to have rights at least somehow proven by genealogical tree, and old agreements. While it did happen, it couldn't just because of peasants.

[1] https://en.wikipedia.org/wiki/Assize_of_Arms_of_1181

[2] https://academic.oup.com/book/39423/chapter-abstract/3391457...
That got me confused too.
Controlling a large fraction of tor nodes is possible, but there is a large cost associated with it. Tor has a reputation system when it comes to nodes, and in order to gain a large fraction of tor nodes you need to continuously have a presence for a long period of time. Having such long term presence also risk gaining visibility and become detected, and require good and consistent secops. As the network expands this also mean the attacker need to expand in equal rate.

It is a assumed vulnerability of the network. The biggest question is if any state actor would consider it economical to do it compared to alternative methods. Personally I suspect that it is actually cheaper to have visibility into the entire internet, since that method bring value beyond tor and you do not need major secops to pull it off.
Terribly written article. Never even defines what PAYG stands for. Just a bunch of flowery language.
One thing that comes to mind is that Smalltalk-80 doesn't do traits, or the UI is completly different.
There is a feminist case against prostitution as well. EG https://thecritic.co.uk/issues/june-2022/women-should-not-be...
Without having to go that far in the past, there are many evidences that Berlusconi had deep connection with mafia. Instead for Andreotti there are no evidence nor proofs, Andreotti was a very intelligent man and if he did or not something nobody was ever able to prove it.
wrt. Lobsters, check your facts.

- Moderation actions are public on lobsters: https://lobste.rs/moderations

- Irene wasn’t active in that discussion.

- Some of the most upvoted comments were against the moderation clique.
As is half of any of the retailers' catalogs.

I'd like to see DXE acquire the Hy-Gain and Ameritron lines if possible.

I've not followed this closely to know if Martin wanted to sell everything as a single unit or had entertained offers for the individual brands he's acquired over the years. Hopefully if it was the former he'll now consider the latter.
Apologies I dont mean to be rude, but this does not help me conceptualise passkeys in the slightest.
Antifraud can be extremely idiotic in edge cases and it's probably not specific to Stripe.

I can't pay for crossover wine with the card I usually use for online shopping. I have to go through paypal.

The funniest thing I know was when someone got a new credit card and EVERY transaction he tried to make with it was refused because it was 'unusal'. Of course it was unusual, because the card was 2 days old and there wasn't any 'usual' transaction in the past.
"Philosophy is words by old people in control, Science is the reality of things."

Why do you say 'old people'? I don't see that as being prerequisite, nor from history is there indication that philosophers have been in control. Science is the study of reality but why should that conflict with philosophical ideas? Perhaps you should read my reply to mykowebhn.

Perhaps Gorgias is a bad example, perhaps Plato was making a point about rhetoric and problems with sophistry generally. In my opinion a much better example of the philosophical tradition is Book One of Republic, here Plato sets out a clear distinction between the shallowness of sophistry and solid philosophical reasoning. The dialogue between the sophist Thrasymachus and philosopher Socrates where Socrates systematically demolishes Thrasymachus's proposition that justice is every man for himself by reasoned argument is one of the most wonderful documents to be handed down from ancient times.
Philosophy is reasoning through language and the purpose is to create good explanations that are hard to vary.
> Ordinary Americans would be better off if NYC wasn’t the global capital of finance and technology.

You seem to assume that the things you like about America would have come into being, and remained in existence, in the absence of the things you don't like. But history might suggest otherwise.

> The Netherlands seems to be doing just fine being modestly less rich than America.

Um: Absent the rich, mongrel United States and its industrial capacity, the folks in the Netherlands might well be speaking German as one of their official languages and still being ruled from Berlin. In late 1940, Germany had conquered basically all of western Europe and was not far from starving Britain into submission; U.S. aid helped keep the Brits afloat. Not even the Red Army would likely have defeated Germany without the U.S.'s so-called Arsenal of Democracy, which provided crucial materiel to the Soviets, helping them to avoid being conquered and colonized by the Third Reich — with their non-Aryan population turned into enslaved workers and/or intentionally starved to death (see: the Wannsee Protocol).

Or (continuing this alternative-history exercise), perhaps the Dutch would be speaking Russian after Stalin, Zhukov, et al., not only conquered Germany but rolled through Western Europe to the English Channel. But oh yes: The U.S.'s policy of containment — backstopped by its nuclear umbrella, the Marshall Plan for a time, and eventually the U.S-led NATO coalition — seems to have worked, buying time during which the Soviet Union finally collapsed of its own weight. Without U.S. economic might, it's doubtful that this would have happened.

For that matter, today's ambitious China likely wouldn't be a concern to our Dutch contemporaries either: China probably would have ended up as part of the Greater East Asia Co-Prosperity Sphere, submissive to Tokyo. That didn't happen, again thanks to the wealthy, stupendously-productive United States.

The alternative-history conjectures above are just speculation, of course. Obviously, much change would have occurred in the decades since the end of WWII.

But your assertions have the ring of Jeffersonian yeoman-farmer wishful thinking.
from the same company that markets their high resolution displays not in pixel area but simply with the word 'Retina'? you don't say...
+Traits, +Slots, different class definition syntax and its processing, different file API, full block closures, different source file syntax, ByteArray literals, different comments syntax, many differences in the standard and UI library, etc.
No, Pharo is not Smalltalk-80.
Mine (with Hammerspoon) are:

- Left half / right half - full vertical

- Move to monitor 1 or 2

- Bottom half / top half - full width

- Center 2/3 wide, full vertical (for the ultra-wide screen and reading)

Also have shortcuts for launching or switching to certain key applications (Firefox, IntelliJ, Terminal).

These + normal window switching keybinds are so integral to my workflow I definitely feel out of sorts if using a machine they aren't on.
They shouldn't be exactly like SSH keys. With SSH keys, you can go and copy/paste your private keys on a scammer's website because they asked you nicely. People will totally do it as they don't understand what they're doing.
The main thing with passkeys, and key dongles in general, is that you simply can't do that as the keys are inaccessible and you can only prove possession of a key when asked by a domain you've explicitly registered with (the proof-of-possession is never sent to any other domain than that which you registered with).
What OP says is that opens the possibility for key providers to lock-in users, as that seems like an unavoidable side-effect of the legitimate goal of preventing phishing (phishing is the biggest security issue today, to increase security means making phishing impossible, so I still support passkeys as the best solution for that).
Technology Can Drive Culture Change in Software Organisations – InfoQ
Most of these point come down to: don't trust random shit from the internet and don't blindly pull it into your projects/env.
I believe it. I'm a pretty negative person and I'm starting to think it's been hurting me for years
Sunrooms offer a unique blend of indoor comfort and outdoor ambiance, making them the perfect addition to any home looking to enhance its living space. With the right design elements, these spaces can be enjoyed in all seasons, serving as a peaceful retreat or a vibrant area for entertainment.
What is the innovation you're talking about in this case? They installed Mastodon and created 40 accounts, only to conclude that nobody cares about it (but somehow it's a massive success at the same time). Is that where we are with innovation?
I’m working with Linux mainly these days, and I think the “pain” for me usually is just getting the initial config right, and learning to live with the quirks on the specific platform.

Of course nothing is truly perfect, but I would say that after the initial learning curve, I had really pleasant and productive time with yabai.
> “If I’d had to compete in the open job market against all the youngsters coming out of university, I’m not sure I’d have ever found another job.”

So this is the reason Spain has the highest youth unemployment rate in europe?