skysight-inc/HackerNews huggingface dataset:
TOTP with a changing code is simple to understand and use and very resistant to both SIM Swapping and all these push based notification attacks. Push based notification attacks are relatively easy to social engineer as well - call, say you need to confirm identity and push.

Passkeys are a nightmare. For whatever reason they play SO SO badly. Microsoft / et al all seem to compete to screw this stuff up. Seriously, if you are logged into a remote desktop, the push goes through chrome to some microsoft thing which has a different pin / password / whatever. What's even crazier - I have a yubikey and somehow the passkey doesn't need the actual hardware key to be plugged in - so this passkey is being stored somewhere else.

Keep it simple. I liked the U2F yubikey flow where you had to touch the yubikey to authenticate and I like TOTP well enough as well.
History, engineering and darkness set pulses racing paddling under the Pennines
It is interesting because a lot of people criticize Apple as basically you are paying for privacy.

And that is very true, they have turned it into a marketing feature.

But Microsoft is very brazen about it when it comes to Windows. The more you pay the less privacy invasive crap there is. I don't know for sure what the difference between home and pro is for analytics sent back to Microsoft, but LTSC is a drastic difference. (annoyingly still not zero though)
I don't even like writing React in Javascript
Yes, and they have a nearly-$1 billion budget deficit.
The games embark has released are made in Unreal Engine, maybe the game using rust hasn't been released yet.
My son was using vinegar and then stopped working as others said. I can't be happier after many people is exposing sketchy practices taking place in Roblox and even worse with minors. Ludopathy triggering ones for example.
I co-founded a startup, Quesma, with one case to assist with database migrations. Big (e.g. move from tech X to Y) and small (schema change to add one column).

I did a fair amount of customer research and noticed almost all successful migrations have in common:

- they tested end-to-end migration, even on production data, early on

- very familiar with blue/green deployments or shadow testing

- gradual and have a good in-between story

- pragmatic (e.g. they moved 98%+ of data from SQL database to Cassandra but left some)

- very good revert story

- either simplified current system or split monolith into more manageable pieces

Many painful ones shared:

- wrote a next-gen system by a team that does not understand or has never worked on the current system

- big release day, after X quarters

- try to change too many things at once (e.g. database technology, schema, protocols)

- declared legacy system too early on, and everybody moved out of that development

- end up discovering flaws very late in the process
It's like there's a memory of configuring xorg.conf or wpa_supplicant that just won't go away even when that stuff has Just Worked for 15 years. Even Nixos (which isn't at all a noob friendly distribution) has a desktop installer where you just click next like 5 times.
Giving me “nobody can make the world a better place more than me/us” vibes. I’d be happy if my leisure spending went to causes that benefits humanity, no matter which country is making the contribution. That said, I agree that gacha/casino game mechanics should be made illegal
No problem at all, and you don’t need to be a specialist to be excited and write something up :) I hope this didn’t come across as judgy, I’ve just lived through many a Ruby bug heh
> she invested $200,000 with a company that was making 30% returns by buying the hottest ticket in global real estate: US apartments.
> Now, she says, most of that money is gone.

Maybe it's there in the article but it's not jumping out at me: did the investment assets decrease in worth (as most of the article seems to imply), or did someone steal investors' money and run?

Because if an investment in apartments is "mostly gone", I'd expect those apartments to be considerably more affordable now. Is the housing crisis "mostly gone"?
Tirzepatide for the Treatment of Obstructive Sleep Apnea and Obesity
Super pro comment, should be much higher in the thread. You should write about this in more detail somewhere! And link it here.
YC Startup School AI Summaries
If you were using centos for fedramp, unless you got a variance from the feds, you were not in compliance. No one actually paid to have NIST evaluate centos's binaries (evaluation/certification must be of the compiled binary, not the source code, barring an exception made for openssl, and only openssl, not the kernel)
The true cost of replacing an iPhone battery isn't the quoted dollar amount.

It's the cost of being without your phone for an indeterminate period of time if you have to ship it to Apple for the battery replacement due to not living near an Apple Store.
Toby Young's Free Speech Union is no ally of critical thinkers
> that's how they decided to fund other areas like having iOS free

Isn't that funded by iDevice and Mac sales? Because Mac sales sure as hell aren't going to MacOS development...
> The debugger output of the currently running function looks like a linked list to me. I could modify it destructively, if I wanted.

I doubt that actually, though I don't have LispWorks installed to try it. Modifying a function at runtime as if it were a list is actually the best test to see if your Lisp really represents functions as lists, or as some other internal object that is rendered as a list in the REPL by accessing the stored definition. E.g. both CLISP and guile error out if I try `(car (lambda (a b) (+ a b)))`.

Another good test is to construct a function at runtime and try to call it. To do that you will probaby need to call `eval` or equivalent, just like you would in Lua or Python. Not in Picolisp though, which is why I consider it to be the only truly homoiconic programming language.
But there still needs to be some sort of validator that you need to use, doesn't it? I've been to two cities with a similar system where you're trusted, Helsinki and Berlin. In Helsinki there are validators that people tap some kind of multiple-trip card on. In Berlin there are very analog paper tickets that you have to put into a "Drucker" on the platform, it stamps it with the date, time, and station name.
Well Justin, who to be fair is my buddy, isn't exactly unknown in the valley: https://techcrunch.com/2019/06/12/bird-confirms-acquisition-... | https://www.linkedin.com/in/jadawe

They're building a lot of physical hardware, hence the need for cash (it was a pretty huge seed round) - He's a cool dude for real, very decent human, curious what your concern is?
You don't need an online account for W11 either.
>Ads in Outlook. Want to remove? $2 a month.

Don't let Microsoft touch your email, they're terrible at it.

>Want to use Windows productivity software? $100 a year.

Microsoft Office isn't part of Windows, and Office as a Service is a sign of the times, but OpenLibreOffice.org works ok and the price is better. People seem to like Google Docs even though it's terrible.

>Want to use more copilot features? $20 a month.

Ok, but how much for them to not ask me to use it?

>Want to game? Please use our subscription Xbox service.

You certainly don't need gamepass to game, you can just buy games instead of paying a monthly subscription for access to a selection of games. On the consoles, you need to pay for (most) online features, but not for PC. Although I don't know how many games run well on ARM Windows...
If the charge back is approved, by definition it's not abuse, and the issuer makes money on successful chargebacks. They also make money on you having an account there. And they have the responsibility to give your money back if they close it. Plus you're ultimately, if indirectly, backed up by the full power of the civil justice system, courts and judges and all that. It may be very flawed but let's buy pretend it's as nearly as bad as the whim of one underpaid Apple intern with no real incentives or accountability.
We forget how terrifying darkness was in the past. We are not afraid today because we have a host of resources that will come to our rescue. We walk along a dark path in full knowledge that should we slip and break a leg, it won't be a big deal. We will miss a day or tow of work but can be expect to be up an running marathons within a couple months. But for a Roman, a broken leg was a life-altering and often deadly event. So that forest path lit only by starlight may seem romantic today but for most of human history was something to be diligently avoided.
FTA:

> It's remarkable that these NFC chips can be manufactured so cheaply that they are disposable

In our times, where we slowly understand that we have problems of resources and waste, I find it very disturbing that "disposable" is considered a positive achievement by the author.
Yes, miscalibrated -- a TC of $150k would be low for a FAANG company, unless you're just talking about entry level pay. Once you're a year or two in, $200k+ is typical.
When this decision was made for MS-DOS (and it may not have even been made then, but simply brought in from 86-DOS which may have cargo-culted it from CP/M-80) it is very unlikely that "what ARPAnet requires" was a consideration. Networking was not included with microcomputer operating systems at that time and network compatibility between systems from different vendors was an exotic requirement on top of that. Most microcomputers in the late 70's and early 80's either only talked to their own kind or were (more commonly) not networked at all.

People today forget or don't realize how provincial and siloed computing used to be. Even as late as the 90's it was very common for institutions to have multiple LAN's that were isolated from each other simply due to platform incompatibility.
B-Tree are a good fit if your values are small, but as the value size grows, they lose their advantage.

Binary tree is a good default choice for sorted structure.

Underappreciated structure: sorted arrays (but come with big caveats).
Not only Apple charges their tax but they decide if you can distribute your iOS code to users.

You can work for a year on an app for iPhone or iPad and then not be able to distribute it if Apple doesn't want to. This is not even hypothetical.

Apple owns 30% of your business but has 100% control of it.
Yeah they seem to do this every recession. I don't see any value in forcing French language which btw, people from France laugh and make fun of Quebecois. I've seen it at work too.
I took a similar class. What surprised me was that depending on the teacher the classes were significantly different. For most of my friends it was more of a survey of different programming languages. They covered like 4 r 5 languages.

When I took it, the teacher taught LISP to start with, then taught us about compilers, BNF grammar, tokenizing, lex, yacc etc. We had write a compiler (translator) to compile the BNF code we were given. The BNF was a stripped down Pascal. Think ints, for loops, if statements, long expressions (abc * bxy - (delta/time .... I think variable names where like normal. Implementing BNF was very much a recursion exercise.

I did not like the teacher, but it really upped my programming skills.
Presumably the quality of the apps would get a bit better as well.

If you've got 10 overworked employees and you suddenly make 10-30% more money, you can hire another one or two people and the business runs better.
It works with any e-mail address that has been banned. There's whole lists of them available on pastebin, github, etc.
This is why I only use TOTP, my company IT was even baffled when I chose TOTP instead of the MS Authenticator app.

I don't use Authy or any of them that backup to the cloud either, since that defeats the whole point. Every time I add a new TOTP, I add it to an old OnePlus phone as a backup, and that is at home 24/7 in case I lose my main phone.

After having someone try and hijack my NPM account, and actively pursuing me for a bit, I realized all other forms of 2fa are a joke. They will impersonate you to your carrier, they will try to get you to send them the code to hijack your sim... It's basically a matter of time for any large scale organization has one employee who drops the ball.
There was a time when RHEL FIPS certificate also applied to CentOS, and one of my former $DAYJOBs depended on that for a long time. Then Red Hat pulled the cert, and later there was a mad scramble to get rid of CentOS because of the EOL :)
Some more recent discussion:

Apple set to be first Big Tech group to face charges under EU digital law

https://news.ycombinator.com/item?id=40681920
But why are there disposable tickets at all? Even if you're just visiting, buy a transit card and use it, then get your deposit back when you leave (or keep it as a keepsake).

The idea that you still need single-use tickets for any use-case once you have a working transit card is just bonkers. You don't, stop making them.
I emailed Adam Zeman (the neurologist who coined the term being discussed here) a while back seeking clarification about exactly what the experience of visualizing something should be like -- pasting the thread below.

His replies were short, but he managed to pack into them not only a comprehensible answer to my question, but also hinted at something I really hadn't expected in his two-word final reply: "Pseudo- mostly..."

To clarify, a pseudohallucination is a "hallucination" that you know isn't real. A hallucination, strictly speaking, is imaginary sensory input that you don't realize is imaginary. So, his reply seems to suggest that he's encountered people whose hyperphantasic pseudohallucinations (being able to overlay vivid visualizations onto the field of stuff they're actually seeing with their actual eyes) sometimes cross the line into bona fide hallucinations; i.e., they lose track, even if only temporarily, of what's real and what's imagined. Which is just endlessly fascinating.

Readers/commenters on this topic may find it interesting -- sorry, most of it is me going on about what my visualization is like, but I guess it forms the necessary backdrop for some of his answer to be useful anyway.

This topic, or the comments diverging from it, also seems to overlap with the topic of "unsymbolized thinking"; I've dumped some more stuff of possible interest on that: https://www.pastery.net/vvapdr/ with a bit of context in another comment here: https://news.ycombinator.com/item?id=40774163

======== Me: ========

Hi,

I'm looking for some clarification on the exact nature of visualization as I'm not sure what it's meant to be like.

The Wikipedia article on aphantasia mentions activation of the visual cortex. So am I supposed to be generating an actual visual input that I feel like I can see with my eyes?

When I visualize something, it's not really there on that literal visual level. I physically see the inside of my eyelids and the visualized image is not projected such that I feel like my eyes are actually seeing it. Instead it's somewhere else; sometimes it feels as if it's somewhere behind my eyes. Nonetheless, the image can be vivid in its own way, precise and consistent. I can rotate and manipulate it. I can move a light source around the object and "see" the shadow change, or place my point of quasi-view within a scene. This comes along with mental impressions of other sensory inputs that, similarly, are "vivid" but clearly not actually being sensed from the outside world.

Is this what it's supposed to be? What point on the scale would reflect this in the visualization quiz?

Thanks

======== Adam: ========

…it sounds to me as if you are in the 3-4/5 territory…seeing imagery as if you were ‘really’ seeing is the exception, but for most of us visual imagery has a visual ‘feel’, which sounds to be the case for you…

======== Me: ========

Thanks for the reply. To clarify, the "really seeing" exception is akin to a visual hallucination, or rather pseudohallucination?

======== Adam: ========

Pseudo- mostly…
Thanks, that clears it up I think!
What are the right flags for using TOTP? I thought it's so standard now, it's basically fool-proof, as long as you set the number of digits and the timeout correctly, and the default 6 digits and 60 seconds are just fine.

Where's the catch?
> One immediate thought is that this is completely superseded by the regular browser scroll bar that’s ever-present at the side of the page.

This is unfortunately too often not the case, as people see fit to hide the default scrollbar and have something of their own that doesn't always show or is barely obvious.

Though I agree with ToCs and showing progress that way, for pages long enough to make it useful rather than just extra visual noise, though this page itself doesn't actually do that with either of the techniques shown (an extra bar showing just progress through the actual content, or using the contents list as such a display), unless my content sanitisers have blocked some JS that would be doing such work (I see no evidence of such a problem).

> Easily Linkable Headings

Again, these are sometimes very useful, and when not are easy to ignore completely.

But again, the page doesn't make use of the feature it is extolling the virtues of!

> Grouping Series of Posts

Yes, though I might argue that such links, or a link to a ToC page for the group, belong in a more general list of related links.

> Dialogues

I can't say I agree there, but I think that sort of style point is very subjective so I'll agree to disagree :-)

> Code Blocks with Origin

Yep, can be very useful where relevant.

> Markers for External Links

Definitely, including local links that open in a new tab should also be visually indicated.

I'd stay away from an icon per target site/type though - that could quickly get confusing as you essentially have many icons for the same thing (an external link), and every site will use its own preferred set of icons, so the difference won't help generally identify things at a glance.

> Link Preview

For me, yes, though I'd be very careful where to use such things. It might confuse many non-technical users.

> Anything else

I'd like all articles to carry an obvious date of publishing and/or last update. That can be very useful in judging if the content is likely to be entirely relevant or should be verified where it may go stale.
It is not that they haven't read the article but they are commenting on a thread which is mussing about how much the government would be interested in if (IF!) someone would develop what the article title implies they developed but hasn't in reality.
>no burn in, no degradation over time

How? Don't Micro-LED displays have individual backlights for each pixel?
Canvas for chatGPT may sound a bit abstract. But once I started working with Kuse, I realized how natural and smooth the workflow of everything was: just this afternoon, I uploaded the Bitcoin whitepaper into Kuse and generated an architecture diagram. No complicated application switching or copying and pasting, just simple drag and drop and typing to get there, which is exactly what I want from an AI product.
It still works as of June 21st. Did it on a new laptop that came with W11 Home.
How long would it have taken them to transfer 33TB and where would they store it?
Designing the website in a way that works with browsers that meet the requirements of https://digital-strategy.ec.europa.eu/en/policies/digital-in... and https://commission.europa.eu/resources-partners/europa-web-g...

The banner works for its requirements with GDPR and meets the requirements for accessibility.

Surely, one cannot expect that companies trying to save costs will go through great lengths to implement something that they don't know if it will work or not or if they'll get sued in the EU if they implement a different solution when the EU themselves implement it this way.

If there is a better way of doing it that doesn't lead to lawsuits, the EU's website should be the first ones to implement and demonstrate an easier and more accessible way to comply with the GPDR.

As it is, the websites of europa.eu are setting the standard for companies to follow when they want to make sure that they don't get sued for failure to comply with the GPDR for website notifications and accessibility within the EU.
Steam lets you sell Steam keys directly or via a third party and they take a 0% cut. That's how places like greenman gaming, humble bundle, etc work. You still get to use all Steam's infrastructure but pay no fee.
Researchers find unexpected excitations in a kagome layered material
non-linear AI chat/workflow would be pretty useful
Search it on youtube then use yt-dlp to pull down the mp3?
Sharing Our Latest Culture Memo
I did a very similar hack a while ago, but in my case, I have a Ubiquiti video door bell, and I was having issues with it sometimes rebooting when it tried to ring the chime (after a specific software update, but only when it was cold out. I still have no idea if this a hardware or software problem, but I got tired of trying to diagnose).

Anyway, I also realized my chime wasn't audible in some parts of the house, so what I did instead was disable the hardwired chime completely, then get a fairly cheap wireless doorbell with 3 plug-in receivers scattered around the house. An esp8266 module (Wemos D1) is wired directly to the doorbell button, supplying 3.3V to ring it.

I use Home Assistant to send the signal from the Unifi doorbell to the esp8266. The biggest downside is the need to have Home Assistant, Unifi Protect and Wifi all running for my doorbell to work, but at the same time, I have a lot of automations that stop without those, the doorbell is not that high on my list of critical priorities. People can knock.

Kind of wish I had this when I had a baby that slept during the day: it would be trivial to schedule the chime not to ring at certain times of day.

I did a write-up: https://imgur.com/gallery/wifi-doorbell-chime-QTYYQs4
If you step back a bit, and look at the problem more broadly, it becomes clear that a major cause is the current level of consolidation, across the board.

In particular, just in your comment, you name the planemakers—Airbus and Boeing—and the "independent" auditors.

If there were two dozen different companies manufacturing planes, all of which were required to comply with the same regulations, and two dozen different major auditing companies, the chances of any given manufacturer getting away with this level of illegal corner-cutting for any length of time drop precipitously. At the same time, the costs of doing so rise, as it becomes much, much easier for the US government and various airlines to cut a manufacturer out of their contracts the next time they come up.
Calling them a “prime suspect” is both true and the wrong way around.

They are ubiquitous and necessary to maintain normal physiological conditions / normal function, across all cell types and in all systems.

This is the reason why we are discovering that they play important roles in pathology: it’s because they’re an important part of the machinery, and things can go wrong with any part of machinery.
No, that's called steering and it would be perfectly fine. But apple doesn't allow that, and that's what the EU's major complaint is about. So the worst case is that you have no competition, which is the definition of anticompetitive
A friend of mine is a true petrolhead. Loves cars. When he was in his early twenties he bought a second hand Ferrari. Drove it around for years. He sold it, for the exact same price he bought it, back the person who’d sold it him in the first place.

I wouldn’t call a Ferrari an investment, but if you love them they hold their value pretty well.
The difference here is that you don't have to use Steam. For example, Epic Games is doing just fine providing downloads for Fortnite themselves.
It's embedded in the browser now.
Forget which one, but there's a WASM runtime that's working on running on Cosmo-libc, combined with the WASM graal native port that's going... https://github.com/oracle/graal/issues/3391