skysight-inc/HackerNews huggingface dataset:
> [integers] can’t be distributed like UUIDs

They can, to an extent. The use of integers as a primary key has been a solved problem for quite some time, usually by either interleaving distribution among servers, or a coordinator handing chunks out.

If you mean enabling the ability to do joins across physical databases, my counter to that is it’s an unsupported method by any RDBMS, and should be discouraged. You can’t have foreign key constraints across DBs, and without those, I in no way trust the application to consistently do the right thing and maintain referential integrity. I’ve seen too many instances of it going wrong.

The only way I can see it working is something involving Postgres’ FDW, but I’m still not convinced that could maintain atomic updates on its own; maybe with a Pub/Sub in addition? This rapidly gets hideously complicated. Just design good, normalized schema that can maintain performance at scale. Then when/if it doesn’t, shard with something that handles the logic for you and is tested, like Vitess or Citus.
lol don't let the facts get in the way of a good story!
I think you're describing WalletConnect without knowing it exists.
This has not been my experience using it for years. You should expect KYC (know your customer) processes and requirements for any financial service provider with a US nexus or interconnection to US financial infrastructure.

If you’re attempting to be completely anonymous with regards to value transfer, crypto and cash are your only potential options. The privacy, in this use case, is from other parties between you and the merchant (and including the merchant, if you’re not providing PI).
Trains scale better than cars in dense areas and offer more than just emissions reductions. Good rail infrastructure is a big part of makes a large city world-class and improves everyday lives. Subsidizing trains is better than a lot of other uses of government funds.
I'm not too familiar with Python, but isn't that just lexical scope, the same as most languages that support nested functions? Starting with the lambda calculus and all the languages it influenced, including even JavaScript.
I'm in Europe! I haven't tried in ages, a few years I suppose. I'm going to try again, bolstered by your comment. Thank you, kind netizen. Maybe they've been obliged to stop messing around as much with some of the new laws of the past years.
Yes, if everyone signed a CLA with copyright assignment, as is common in some projects that are still nevertheless GPL, then he could relicense, but because he has not done that (and because it's actually a fork initially), he cannot relicense.
> English is pretty low on moods

English is fairly low on inflection. It's not low on moods; one of the more important syntactic categories is the modal auxiliary verbs.
You can automate getting it into TestFlight with Fastlane.
A car is more expensive, and clogs the roads, which causes other costs to the economy and penalizes commutes.
Isn't it easier to just type in what you need?
And active urban planning avoids sprawl.
I never understood these technicalities in HackerOne. Oh, you hacked us in a way we said we don't like? Sure, the blackhats will abide.
It will be interesting to see if the FAA reaction time is markedly different if/when Bezos' Blue Origin ever gets something bigger than that phallic tourist attraction called New Shepard up and running. Bezos thus far has outwardly given the impression to align with 'the left' and his WaPo (also dubbed 'Pravda on the Potomac') certainly acts as the loyal flag carrier for the desired narrative. If there is any truth to this conspiracy thinking I'd expect the FAA to jump to the occasion to enable SpaceX' competitor to get up and running.
I get all the interaction I want and much more that I don't in my web browser. Non-interactive documents are a Good Thing. Also I like that I can send it to anyone and be sure they'll be able to read it, that it will look the same if its printed etc. And I print myself for some long documents.
For finding awesome people, the BurningMan community has been the most effective for me, YMMV! For maintaining quality relationships, e.g. with my late wife, the most effective thing was studying NVC together with a small group of friends. We would take 1-2 weeks to explore each chapter of Marshall Rosenberg's "Nonviolent Communication: A Language of Life" along with Lucy Leu's "Nonviolent Communication Companion Workbook". We would practicing what we were learning during the week and meet 1 evening per chapter to discuss our experience. This became an annual practice with a revolving group of participants.
No. This is something Texas is having to come to terms with right now. Cars and roads only scale so much before you physically can't move more people fast enough even with more roads and more lanes. Rail scales way better.

So Texas is pushing a high speed rail line that will allow people to commute 30-90min into a city from locations that currently are 1.5-3 hours away. And at that allow those people to commute to cities on either ends of the line while still being a relatively accessible commute for anyone in between the cities.

And of course as great as that is, the rail line will be able to relatively trivially scale capacity by adding more trains to the same line at a rate far above massively expensive road expansion projects that cost comparable to the entire planned rail line.

So if you want to grow past a certain density you do have to start switching to rail and higher density does mean more business opportunities and generally greater options for prosperity for the populations in the area.
Am i a communist when i prefer a government to operate and provide basic services like the public transport system, the postal system, the telecommunication/internet service or prisons either paid by taxes or by fees, that don't generate profit beyond paying the costs, instead of using taxes to rescue bankrupt banks and companies?

EDIT: Oh and hospitals!
Congratulations! This is such a great success story.

I love your tactic about building healthy habits while you have some support and leaning on those to carry you through the future.

Good job!
Where in the world, how the hell did you get the idea that stealing free code isn't stealing?
At the cost of also harming WP. Well done Matt. clap clap (these are sarcastic claps)
Why would a QR be more safe from containing malware than another medium like USB drive?

Is it just that the amount of data it holds is more constrained?
> You sure can just pop in to discuss options for your crippling depression though

To get a prescription for one of the the handful of drugs are are available and are considered to be effective. What else can you learn by just "popping in"?

> with a functioning healthcare system, not the US.

What do you even mean by that?
Thank you for your feedback, and I completely understand your concerns. The term "unhackable" can definitely raise skepticism, and I agree—nothing is completely immune to threats in cybersecurity. However, let me clarify what we mean by FortiLock's approach and how it differs from traditional single-database systems with hashed passwords.

Why FortiLock Is Different:
Password Splitting:

The major difference with FortiLock is that instead of hashing and storing the entire password in one place, we split the password across two independent servers (Server A and Server B).
Each server holds only a part of the password, which is hashed separately, so even if one server is compromised, the data is useless without access to the other.
Decentralization:

You’re absolutely right that if the same vulnerability exists across both servers, the attacker could potentially compromise both. However, FortiLock mitigates this by splitting the infrastructure, often across different environments (or clouds), making it significantly harder for an attacker to breach both.
Additionally, Server C handles email and levelpoints, further decentralizing the critical elements needed for a complete attack. So even if someone gets into Server A, without Server B and Server C, they still can’t reconstruct the full credentials.
Threat Vectors:

The common attack vector with traditional hashed password systems is that once the server is breached, the attacker may gain access to the full hashed password. With enough resources, they can try brute-force or rainbow table attacks.
By splitting the hashed password into two pieces, FortiLock makes it much harder for an attacker to do this, as they'd need to compromise multiple systems and reconstruct the password from two independently hashed pieces.
Beyond Poor Passwords:

You're right that even with hashing, weak passwords are still vulnerable. FortiLock reduces this risk with its additional layer, the PinK System, which introduces a dynamic, monthly code that even a stolen password can’t bypass. It’s not just about having the password; it’s about passing several independent checks.
Why Not Just a Single Server with Hashing?
You're correct that in traditional systems, a hashed password on a single server offers decent security, especially with salting. But FortiLock isn't trying to replace hashing—we still hash the password. The key here is mitigating risk by:

Splitting the attack surface: No one server holds enough data to crack the password.
Adding multi-step verification: With the PinK System, an additional layer of dynamic security ensures that even if a password is compromised, it’s not enough to access the account.
Can FortiLock Be Hacked?
No system is 100% immune, and I totally agree with you—everything is hackable to some extent. What FortiLock aims to do is make the attack surface so complex and decentralized that it becomes far harder and costlier for an attacker to succeed.
https://en.wikipedia.org/wiki/Project_2025

Just defunding agencies from reporting science is bad enough regardless of where they move the money. Denying the part because it's not the whole of what you're looking for says more about you than anything else.
Because "learned" and "reported" aren't aspects? Aspect describes the temporal structure of an event - for example, it might occur at a single moment, or it might occur at several discrete points in time ("I walk his dog every Saturday"), or it might occur over a continuous duration.

Mood describes the relationship of an event to reality.
Thank you i never thought about it
> People are signaling to you that this particular thing crosses a line.

It's a contagious theme.
I agree with you, also the bogus argument of "since most people are HIV free..." assumes direct testing instead of pooled testing (using modern information theoretic optimized pooled testing).

A bit of data is most informative if the entropy is 1 bit as well. A signal that is true most of the time, or a different signal that is false most of the time is less informative. Use pooled testing such that the result is true or false half of the time.

Had information theoretically justified pooled testing been applied from the start, then:

* 1) control-testing the testing contractors would have been straightforward and passing 10 control samples by chance would have a likelihood of 1 over 1024.

* 2) it would have made obvious that saving money on control-testing the contractors would hardly save any money

* 3) even in the bad scenario that control testing was skipped, the issue of contractors cheating would have surfaced much faster, since combining the pooled tests to identify which patient tests positive would constantly result in mysteries, meaning control-testing needs to be enabled, not the mathematics of pooled testing brought in doubt.

* 4) testing pharma industry hates pooled testing, as it means technological competition instead of sales growth by abusing the naive but false "common sense" that you need as many tests as patients tested.

on a side note: assuming tests with different operating point on the RoC curves (having different false positive vs false negative ratios) have different prices, do we know if the operators blatantly provided fabricated results, or if they blatantly ignored basic mathematics and thought the more expensive tests could be substituted by the cheaper ones even if intended for a different purpose?

consider a test designed for telling a patient that we diagnosed HIV, and then consider a test designed for screening an organ to be inserted into a patient.

do you think they should both use the same test? or do you think it wiser to have the diagnosis test have lower false positive rates, and the organ screening test to have lower false negative rates?
The curtains don't match the rug! There are a lot of "influencers" on YouTube and he's come up on my feed several times and there is definitely worse content in this space.
There's a reason nurses and surgeons wear masks, and it isn't fashion. And calling it "cloth" is like saying "silicon" can't take pictures or do maths — surgical masks (when real and not scams to rip off emergency government funding) are carefully engineered specifically to be useful in this kind of context.

And we literally can and have made interventions that work on viruses. Even non pharmaceutical ones — that's one reason why condoms are so promoted.

Several non-pharmaceutical interventions have been demonstrated to be effective for covid, specifically. Real masks — N95 for example, not generic 'cloth' — were one of the ones that reduced probability of infection, with different probability depending on if your were measuring "person has virus and wears mask, probability they infect person at 2m distance in 5 minutes?" or "person wearing a mask and doesn't have virus, chance of them being infected when standing 2m from an infected person without a mask for 5 minutes?" and all the other combinations and variations because stats is hard.

They also work like this on influenza, IIRC, but not the common cold. That (not the imperfections) is on purpose, and is why medical staff wear them as standard.

Hand sanitizer, which sold out, as I understand it that didn't help at all with covid, but the memes around it probably reduced something else.

> even if you could it doesn’t make the means to do so ethical, legal or moral.

I have yet to meet a militant nudist — you are, after all, objecting to being forced to wear something you dismiss as "cloth", which is what your clothes are made of — but PPE seems to wind up a lot of people. Condoms, to use a previous example, but also seatbelts.
What Makes FortiLock Different from MFA?
You’re right that FortiLock has some similarities to MFA (Multi-Factor Authentication), especially with the PinK system, where a code is sent to your email. However, the big difference with FortiLock is the way your password is stored and verified.

In a traditional system, your entire password (hashed) is stored on one server. If that server gets hacked, the attacker can get the entire hashed password and might eventually crack it, especially if the password is weak.

FortiLock takes a different approach by splitting the password across multiple servers:

Server A stores the first part of your password (say, the first 5 characters).
Server B stores the second part of your password (the rest of it).
Server C handles your email and something called a levelpoint, which links everything together.
Why Splitting the Password Matters:
Think of it like this: Imagine you wrote half of your password on a piece of paper and locked it in one safe (Server A), and the other half in a different safe (Server B). To get the full password, someone would need to break into both safes. Even if they get into one safe, the half password is useless without the other part.

In traditional systems, there’s only one safe to protect, but in FortiLock, there are two separate safes (servers) to crack, making it much harder.

Can It Be Hacked if Someone Gets the Email Code?
The short answer is: It’s very difficult, because they wouldn’t just need your email code (the PinK code). Even if a hacker somehow got that code, they would still need:

Access to both servers that store your split password parts.
The correct levelpoint from Server C to tie it all together.
So even with the email code, without those other parts, the hacker is stuck.

Why Splitting Helps (In Simple Terms):
Think of your password like a puzzle. If you only have half the pieces, the puzzle is useless.
In traditional systems, the hacker can break into one server and steal the whole puzzle.
In FortiLock, the puzzle is split into two separate places. So even if the hacker breaks into one place, they don’t have enough pieces to do anything with it.
To Sum It Up:
FortiLock isn’t just like MFA—it’s about making it much harder for hackers to get to your password in the first place, by splitting it and spreading it out across multiple places.
Even if someone gets your email code, they still don’t have enough pieces of the puzzle to break in.
It's also an example of the really irksome thing that happens on American sites where people will quickly steer the conversation away from non-America stuff to America stuff because they feel more comfortable talking about something that they know about than just not participating in the conversation and watching other people talk about stuff that they are knowledgeable of.

Which is kinda silly because if they just sat back and listened they could learn more about the thing that other people are talking about so that the next time this topic comes up they won't feel uncomfortable and can jump in and add something to the conversation instead of just nervously pivoting to talking about Alatucky or Boeing or the number of street poops in SF.

I for one look forward to learning more about the medical system of Brazil from this post.
So, I guess we have to consider the plugin hub compromised, now?

Has this dickhead been taking advice from Musk on how to rapidly tank a famous brand?

Now I have to spend time this coming week going to my clients and swapping out this malicious garbage for the legitimate one.
> What "Turkish schools" call it is irrelevant, it adds "colour" to an event

Wouldn’t Turkish schools know more what their language’s rules and meaning is better than Hacker News?
This is a weird thing to post on HN
I just keep following your comments down the page and giving you upvotes.

I think folks using drugs (or meditation or habits or diet or any other thing) to intentionally make their life better is amazing and should be celebrated.

If some things are easy for you but not others try to be grateful for yourself without having to be petty or wanting others to be worse off.
Ghost is good for blogging and newsletters.

But that's the problem. Wordpress is used for much much more. You can use it as a CMS, LMS, news platform, saas platform, and much more. You can literally customize it to the bone.

Ghost is a good alternative to wordpress, only if you're using it for 2-3 specific usecases.
For the past 3 years I’ve done the following remap Caps -> lctrl/esc, enter -> rctrl/enter, tab -> lalt/tab, backslash -> ralt/ backslash. Also have the physical right alt mapped to multi key/dead greek.

It works really well, and makes emacs much more comfortable to type in.

Downside is this keeps me locked to X11 and fighting the occasional app that reads the key codes directly.
Disturbingly, your link includes Carbon capture and storage from a fossil power plant, which has never been demonstrated practically and is basically a scam at this point, pushed by oil companies.

Second, you are conflating subsidy with cost. If everyone switches to electric trucks, cost is enormous, but subsidy is zero because private sector pays for it themselves. For electrics freight trains, cost could be lower, but the government has to pay for it.

However, everyone with a grasp of physics knows that freight train is more efficient, so focusing on subsidy is stupid
> I wouldn't describe these as "political positions" as much as "conspiracy theories and insurrectionism".

So, political positions you really really don’t like?
There was already an established solution for running untrusted code - the WebAssembly engine sandbox. Data can't be exfiltrated if imported functions are forbidden, which would be very easy to verify via static analysis of the WASM module. All of this hullabaloo about Manifest v3 could have been avoided if the Chrome team did the sane thing and exposed an API for using a WebAssembly module for filtering.
Kids who are smart and curious have already been exposed to the internet since they were 8/9 years old. So a few years of learning they're already knowledgeable by the time they're in their teens.

No responsibilities and all the time in the world to learn with the right circumstances, they can go far.

Older devs who are experts in this area are already busy making money and working on their employer's security.
It'd only take about 1000 QR codes to install vim!
I agree with your point for, say, Linux.

For the plebs, no, they do not have the capacity. Out there is 7 billion meatbags who have had of a million years of selection for a tribal savannah environment, ten thousand years of selection for an agrarian lifestyle, two hundred years of selection for life in cities, and ten years of selection in the information era.

They're fucking children. They are savannah monkeys. They fall victim to rudimentary scams. They are unable to make an informed choice.

When you get into the billions of users, you become a parent to those users. Parents don't let toddlers get into the knife drawer.
I don't think Marx wrote much about AI and what he did write about didn't lead to much happiness when people tried to implement it.

You can see that computers doing the work will lead to a different society without bringing Marx into it.
First up, you won’t win over security people with big claims of being the future of auth.
This ain’t it chief.

The future of auth is probably something involving public key cryptography and zero knowledge proofs. This scheme is just complicated and fragile with moving parts, emails, reconstructing codes, etc.

With all due respect, this scheme is flawed. Individual servers should not be storing user password components in the clear for reconstruction. Monthly Magic Links. 9 digit codes. Pink codes?
The state of the art today is a hardware enclave with a private key, and an authentication scheme that is bound to the website using browser APIs.

You might want to reconsider the name because it’s way too close to an actual real security vendor who names things this way.
The AI Image Evolution: Turning Novelty into Practical Utility
First of all, I will commend the Typst community for attempting to rectify the trainwreck that is LaTeX typesetting. It appears that they have succeeded.

So Typst has its own styling system, and its own scripting system, and plugin system via WASM... isn't this just HTML with extra steps? Not to mention that Typst doesn't support HTML export https://github.com/typst/typst/issues/188#issuecomment-14933..., which is a major impediment to vision-impaired accessibility in the academic community.

I think this is all a bit of a shame that there's been no major efforts to reform HTML as the go-to file format for scientific publishing instead. All the elements are there - <cite>, citation.js, KaTex, Web Components, good plotting libraries (Observable Plot), WASM. Was all this extra engineering effort required to get us a Markdown style syntax? I know people hate XML-based markup... but it's not _that_ bad, right?
Outsource to 2+ contractors, use pooled testing, and use control tests to steer that percentage of tests towards those contractors that score better on the control tests. Obviously the contractor should not be allowed to know which samples are control tests.
Is this an argument that you should use crutch and everyone ever will always read it as version b?

It might be more good faith to just pick language that is more clear. The alternative feels a lot like pretending to be one thing while trying to make people think something else - it rings just like a bad faith "Im just asking questions"
Which is why you have no business writing security sensitive software.

Maybe come back in a few years after some more study and understanding of this world.