skysight-inc/HackerNews huggingface dataset:
> SMS 2FA is better than no 2FA

Depending on the implementation it's occasionally more secure. For me it's never "better."

A significant fraction of banks, retirement accounts, financial web services, ..., can fully reset your password using just the SMS "2FA," sometimes most also requiring an e-mail verification. That turns the device into a single factor much weaker than a password (making physical attacks -- ex-lovers, nosy houseguests, ... much easier). There are a variety of easy methods for taking over a phone number temporarily or permanently for <$15, so for the ones without e-mails it's literally just a cost/benefit analysis for a crook.

Knowing how often SMS 2FA gets screwed up, I'd strongly prefer to avoid services offering it (especially those requiring it) even if there were no other downsides. Toss in the inconvenience of having to drive into town (many rural places I've lived), find a point of higher ground (many taller cities I've visited), or whatever just to get cell service, and the whole concept is a nightmare.

And so on. It's painful to use, usually much less secure, and rarely meaningfully more secure.
>You are the guy lambasting Gallileo, and when Gallileo asks you why heliocentrism offends you, you are replying "because the mainstream clergy sees you as kooks."

I'm lambasting the people who think this fictional Galileo is a good public persona to lead their political movement, because this Galileo can't convince anyone of anything because he is almost entirely devoid of the skills one needs to advance a political cause even if Galileo might have written some good C code 45 years ago.

>If users cared enough to understand the difference, you and I both know they would accuse the businesses of being the irrelevant kooks. Not a single "maintream user" I know would defend Apple or Google or Microsoft's business practices as software companies. No one.

I can see we have irreconcilable differences. I find this statement ludicrous.

I know lots of people who understand what free software is and choose to make a living selling proprietary software.

This will be my last reply to you.
China's electric car boom is increasingly more about hybrids
We already had "_1", "_2", etc., for inline block arguments. Adding "it" increases the surface area of the language without adding any new functionality. I think the underscored names are actually better for readability. They jump out at me, while "it" looks like every other variable name.

items.map { foo(_1) }
items.map { foo(it) }
I wouldn't say they don't care in general, but everyone care for something different depending on subject matter & time. That being said, you should know and build for your target audience.
The rise of craft foods--e.g craft beer and cheese--seems to prove this essay wrong.
Generative Modeling with Explicit Memory
List of Very Short Introductions books by Oxford University Press
I won't comment on here much, but why even post some of this response? This is a nice piece of work.
Most people just want to be able to access media easily with no effort- which they already can do with cheap streaming subscriptions. They have no interest in owning the rights to use it forever, or in downloading or copying it. They wouldn't want to take the time to figure out how to do that, even if they legally could when they can already just click and play.

I think if you want people to care, you need to find a real world case where they are being blocked from doing something they really want to do- the abstract philosophical arguments about freedom are total non-starters.

Possibly an alternative media supplier that was fundamentally less hassle, faster, and more reliable because it didn't have these systems could get people to switch. But good luck getting the digital rights owners to let you put their content on your platform.

Or maybe convince people they can get higher quality media that way. I have a newish Mac with an amazing HDR screen, but few of the streaming sites are willing to stream the HDR content to my device.
I'm not directly involved with extending Jupyter Lab, but I'm involved with the results (and testing) of our extension on the daily basis. What I find very often to be the source of complaints is the error reporting. In particular, the kind of error reporting that just disappears from the screen after few seconds. If there's one singular feature of Jupyter Lab that I really want changed, it's this.
> Instead, can we not strive for excellence in all things as a matter of pride?

well spoken.
It's not just China rapidly ramping to serve the global EV light vehicle market (globally, ~90M units/year). It's also the US becoming protectionist to protect legacy auto profits while vehicle demand continues to decline. US legacy auto doesn't want to give up margin to build cheap EVs, they simply want to extract the profits they can from large SUVs and trucks until the music stops. They are unwilling to attempt to compete.

> Protectionism comes at a cost, however. Ford and GM have retreated from much of the world already to fortress America, where their profits rest overwhelmingly on serving the local — and, by global tastes, unusual — appetite for pickup trucks and large SUVs. Their forays into EVs and automated driving have been slow and spotty or outright abortive. Trump’s super-charged protectionism and likely easing of fuel-economy standards will offer some respite (albeit not without some pain). But it won’t change some basic realities. The US is a large, relatively high-margin market, but it is also mature. The post-pandemic surge in average transaction prices to almost $50,000 has supported revenue growth even as unit sales flatline. But vehicle ownership costs, including financing and insurance, are reaching a natural limit.

> “You’re not going to get volume growth and we are close to the end of the runway for ATP growth,” says Kevin Tynan, head of research at the Presidio Group, an investment bank specializing in the autos sector. In addition, his recent analysis points out that the US suffers from excess capacity already, with auto-plant utilization running below 75% in 18 of the previous 19 quarters; the second-worst streak in the past 50 years. The worst was between 2006 and 2011, which included the financial crisis and the bankruptcies of GM and Chrysler. The lack of growth and cost overhang is reflected in Detroit’s single-digit earnings multiples.
Marketplaces Hiring
Looks similar to https://www.phlex.fun/ at first glance
There would be the need for some adversity too. Bots playing for the other team, tailored so that with effort you can outwit and out reason then and stop the spread of their social media shenanigans
Diagnosing an Unusual WiFi Issue (2020)
I mentioned vim as well and generally proposed something that would be editor agnostic. Shoo! back to your cave.
For folks that want to engage / learn more, there's been an annual miniKanren workshop and also a monthly miniKanren hangout online. Interested folk should totally come to either both!
Their execution was indeed almost comically bad. I suspect it was because they had really wanted to focus on the B2B market, so they made the most sanitised virtual world possible. The overall VR direction was not entirely ridiculous, although it was clear on the ground people were much more in love with the idea of VR than the reality of it.
I appreciate the commitment it has to backwards compatibility - the TUI apps are better by virtue of running on top of Arcan's layer, with no changes.
The effing Article (TFA)
I can back up your anecdote.

For <business reasons> we have in the order of 10^6 SNS topics in one account+region pair. In that account, while in that region, the SNS console is entirely frozen. I suspect they're doing some looped pagination polling in the background and fall over on our degenerate use case.

Edit: I can also back up the other parent comment - tagging still works fine (and I know for a fact the stability and scalability of the tag system is taken more seriously than most things within AWS)
Sure, but that's not quite what I meant.

I meant "if you could provably show them". Of course, if I tell you "this one is 20% more expensive but it will last twice as long", you have no reason to trust me. But that's a problem of trust, not a problem of how much you care about quality.

If quality provably means it's cheaper (because it will last twice as long), then it's completely irrational to buy the lower-quality, more expensive one. The whole idea is that people don't have a way to know about the quality for sure in advance, so they can't take the decision based on that.
I just got the first book on Audible, and it does sound like it’s going to be a real treat!
Hmm. Work safe tip. Don’t look up rosebud. Thank the lord for wfh.
Palestinian Authority Suspends Al Jazeera TV in West Bank, Citing Incitement
"Microsoft essentially existed because it made its business building cross-platform apps"

If your idea of cross-platform is that making it work on all versions of Windows from 3.1 to Vista, sure.
Microsoft has always been about capturing users within its ecosystem.
Not the OP, but I've been using this one for about a year and it has been a great addition to my WFH setup: https://amzn.to/3ZXD88h

For something smaller or cheaper (or if you just prefer cycling movements) they also have some 'peddler' options as well, but I don't have any personal experience with those. Enjoy!
Sorry for the confusion, by saying platform I meant OS and architecture, not tools.
This. Used my T420 for years, got a T460 and was so disappointed about it's build quality that I now have a X1 of some generation which isn't much better but at least lighter for travel.

All bought used, never spent more than maybe $250 and $200 for max RAM and nice SSD.
Ask HN: Marketplaces that were founded in the last 5 years have reached scale
I am looking to build a list of marketplaces that have been founded in the last 5 years in the West that have reached scale $50M+ net revenue.
Location: Glasgow, UK

Remote: Yes

Willing to relocate: within Scotland

Technologies: Python, Perl, Unix, Bash, Java, Nextflow, R, JavaScript, TypeScript, React, Redux, AWS Lambda, Serverless, Databricks, MLFlow, PyTorch, LLM, and more

Résumé/CV: https://wbazant.github.io/wojciech_bazant_cv.pdf

Email: wojciech.bazant@gmail.com

Github: https://github.com/wbazant/

I am a data engineer and a broadly skilled generalist senior developer - and in the past, a bioinformatician.

Bio summary: After a graduating with a maths degree in 2014 and an early career role in finance, I found my path to data engineering in bioinformatics in 2016, initially as a full stack developer in a research institute and then taking on increasingly data focused work. I worked in life sciences for many years, until in 2023 I joined a healthcare startup, which for an exciting year and a half was a great opportunity to experiment with 'modern practice' like Databricks and integrating LLMs. Looking for new opportunities to engage in meaningful work.

From my bioinformatics and data engineer experience, I'm good at interfacing with researchers and turning ideas and prototypes into working products: developing data flow workflows, evaluating performance of models, providing interfaces and entry points for clients, and more.

Throughout my career, I've had the privilege of contributing to significant projects in academic, commercial, and non-profit settings. If my profile or any of the technologies listed resonate with you, feel free to reach out via email!
You could try "Sea of Words" by Dean King. It's pretty good.

(Presumably the same Dean King mentioned in the linked article, FWIW.)
I know I didn't go to the right places but all the pizza I had in NYC was either bad, or bad and expensive. So while there is good pizza there, there's also a ton of bad pizza where I would have rather had <chain pizza> because at least I know what I was gettting.

Now the bagels on the other hand...do bad bagels even exist there?
Yeah, I personally take the view that any really important news will find me anyways
SEEKING WORK | Remote

Hi, I am a hands-on Engineering Leader and I have around 17 years of experience. Right now, I'm working with a B2B SaaS Startup as their Head of Engineering and actively code.

Technologies: Typescript, JS, NestJS, ExpressJS, Fastify, GoLang, PHP, Laravel, Python, Django, Elixir, Phoenix (Beginner), Mongo, Postgres, Mysql, Redis, Elasticsearch, CI/CD.

Résumé/CV: https://vivek.foo/resume

Email: vivgxy [at] gmail.com

I can offer strategic consulting in:

- SaaS B2B/B2C product development and platform architecture

- MVP design, development and rapid prototyping

- System design for high-scale distributed applications

- Engineering team leadership and agile transformation

- Technical process optimization and agile methodologies

- Cloud infrastructure and performance optimization

- Security and regulatory compliance implementation (SOC2, HIPAA, GDPR)
Konvu | https://konvu.com/ | Software Engineer | FULLTIME | ONSITE | Paris, France

At Konvu, we’re on a mission to make security invisible. As we move towards a future dominated by code automatically generated, tested, and deployed by AIs, we need a new paradigm for application security. We need vulnerabilities to be automatically detected, prioritized and remediated.

Behind Konvu are founders with deep roots in the security industry. As part of the founding team at Sqreen (YC W18), a notable security startup acquired by Datadog, we have firsthand experience in driving security solutions from concept to global impact.

We’re looking for:

* senior+ swe: https://jobs.ashbyhq.com/konvu/13091e25-d3a4-4bca-8186-fe2dd...

* entry-level and junior swe: https://jobs.ashbyhq.com/konvu/a59b761d-3ca7-43df-a2ae-fd758...
I’m confused, you’re saying the TV can tell if someone is pointing a camera at it? That seems highly doubtful.
Engaging with TFA's thesis: occasionally, it's correct for institutions to insist on law over lore. For one, that lore might be just as artificial or short-lived or "mistaken" (as much as these things can be) as anything seeking to replace it - as some comments have mentioned, the "customary" start of the year was itself imposed by Caesar amid a history of a March start. It might also be in society's best interests that cooler heads determine a particular course. The "lore" of the demihumanity of certain populations takes hold popularly, from time to time, for example. The law prevents, in the worst cases, slaughter (or builds parameters for punishment and future deterrence after the fact).
I'd say most will fail (although this is the case for most startups anyway) but the question is if there will be any massive success that pulls the average up, so to speak.
it’s already possible to do this: marimo export script nb.py

Pure-python also helps to work with existing tools out of the box: formatting, linting, pytest, importing notebooks as modules, composition, PEP 723 inline metadata
How does the remote streaming server know a key is an authentic hardware GPU that hasn't been compromised, and not something you just generated in software, to enable software level decryption of the media?

It seems like you'd need some central SSL like certificate authority to verify and revoke credentials that were universally implemented in the same way by all GPU manufacturers.... surely there is no such thing?
In a 2:15 video (that's 2 minutes, not two hours), half of which is just setup, Matt Stone and Trey Parker talk about this in the context of writing South Park.

One of the reasons I hold modern Hollywood in open contempt right now is that so much of their output fails this basic test, at scale. Not only is Hollywood largely not writing at a Writing 101 level, they're not writing at a first day of Writing 101 level. It is so sad seeing all the other professionals in the industry get utterly crippled by writers hired for every reason other than whether they can tell even a competent story, let alone a good one.
I remember the idea that DRM is not about controlling the viewers directly, but about controlling the makers of playback devices (both hardware, as in GPUs and TVs, and purely software). The point is not in making the bits uncopyable at all, but to prevent the makers of things like Roku or Chrome from making the access too easy, like skipping ads, let alone downloading.

Most viewers are not computer-savvy, even if they spend every day in an office facing a computer screen. If 90% of audience would know or bother to go no farther than the legal distribution channels, and won't be able to plainly download the high-res media in one click, the DRM has worked.

It suffices to make pirating inconvenient enough for the uninitiated, and let the advanced and determined minority pirate away, of course always threatened and stigmatized, to keep the operations low-key. A small amount of pirates, imho, only improves the profits, because they brag about having just seen the new hot thing in all its glory, and thus induce FOMO in their audience.

Of course the legally-buying, technology-naive audience is inconvenienced. But they know no better, and the whole point of control is, well, making people submit to what they rather won't, isn't it?
They almost certainly use software written by someone else either at work or at home. For example, they likely use an IDE written by someone else. As such they are "users".

It is quite common for self-proclaimed "developers" to write software for other "developers". In other words, developers who are "users". We see this on HN everyday.
That's interesting, are you based in Asia? I've found companies similar to what you're mentioning but they're all based in America while I wanna stay in Asia.
For confused readers, this is a reference to the movie American Psycho
Personally I like to have little snippets like these as Slim/ERB templates and render them like partials (I have a utility class to actually do the rendering to avoid excess logging and make it easier to pass arguments and blocks to them.)

I just never liked "rendering" html elements directly in a ruby method. Feels weird, man.
+1e9 for "A Sea of Words" (https://www.goodreads.com/book/show/218275.A_Sea_of_Words). It's excellent reading in itself and helped a lot understanding the vocabulary.
My mom is also like that :(
Using 2D materials on chips without destroying the wiring
I feel so stupid about never having thought of this; how naive am I?

I mean, yes, I knew about people paying for likes in order to boost their visibility, but never imagined that the platforms themselves would add fake likes to accounts in order to make their users feel more happy about the platform.

This makes me question the reason for X making the move to hide the origin of likes, even if my posts never receive any likes, except for likes from bots.

Talking about bots, since uBlock Origin breaks my "block user" button, I've resorted to block bots by reporting them as accounts encouraging suicide, this then gives me a "block user" button which does work. The interesting thing is that all of these accounts still do exist, never get removed, even though it's obvious that they are non-user accounts ( like https://x.com/Siothit074kkNx ).
I am not sure what point you are trying to make.

I made an example to explain what would happen if consumers had a way to know, for sure, the quality of a product.

I didn't mean for you to take my example, try to find smartphone models that may match and then come back to me saying "your example is wrong because I can't find those models in real life". The whole point of my example was to share an idea, not to sell a smartphone.
It's kind of funny to see the censor happy liberal left finally understand the slippery slope that is moderation, silencing of opinions and voices, censorship, free speech, etc... it's not an easy problem to solve and it creates a slippery slope.

This is why the 1st Amendment is so important and also why it was created not for the things that people want to hear, but for the things that they don't.
Backup Your Computer Data 3-2-1
Yeah I found it very hard to stop working on a side project especially if it's difficult. I'd literally bite my fingers and burn candles until I figured it out or gave up for the day, usually well into early morning.

Ah, I wish I don't have to work.
for 1/2, surprised to hear this because debugging models is usually a total black box and practically impossible. for 2, it's a similar problem where getting performance and accuracy using the same model over and over again on different problem sets can be challenging. not an AI expert or anything this has been my experience on the product side.
Have you tried a coffein detox?
I'm not sure if you are sarcastic, but your definition of "ideal world" feels very different from mine. What you describe sounds as close to the scifi concept of wireheading as I can imagine to get without brain surgery.
They're phonetically identical in my dialect so I think this is simply a spelling/transcription error, not usage per se.
If that ever happened I would nerd up on low level architectures. Get a job in a trusted company. Leak the keys.

The only worthy cause to apply my patience to.
One of the first hacker text files I ever read was about how blue boxes work. I didn't "get into" Pink Floyd until a few years after I read about blue boxes. Listening to the tones on the call always gave me a chuckle.

I never realized that it was a real telephone operator on the recording, I always assumed it was an actor or someone involved with the production.
I think your last para is spot on. There are dimensions of quality people care about, and dimensions they do not.

Websites are a good example. The article says a designer will notice jank. I usually do not care about the design: I want the content, and I care a but about usability (in a limited way - e.g. things that are hard to find annoy me).

Websites and UIs in general are often made worse by people whose measure of quality is aesthetics rather than usability - there have been multiple HN discussions about articles on this topic.

Different people may care about different ones (e.g. one person might want a high performance car, another a comfortable one).

I found the bit about actors accents amusing. American attempts at British accents are always annoying, and it even happens with British actors in American produced things having weird or wrong accents. It is sloppy but its rarely puts me off something I like otherwise. Dealing with other countries and cultures is often done sloppily. Indiana Jones and the Temple of Doom is a good example too to anyone who recognises the language people in one village are speaking which is spoken a very long way (certainly well over a thousand miles) from where it is set.

As for SPAs, I do not think preferring MPAs is an unpopular opinion on HN.
My understanding was that System 1/System 2 thinking is unproven conjecture[1] that can't even be replicated[2]. It would be unwise to analyse behaviour using this framework.

1: https://www.psychologytoday.com/intl/blog/a-hovercraft-full-...
2: https://replicationindex.com/2016/01/31/a-revised-introducti...
Vendor-managed self-hosed deployments are uncommon in IT, but this can be normal in other industries.

For example, many cruise ship companies really just specialize in selling cruise tickets and operating cruise liners. All of the advanced equipment and engineering is handled by separate entities who manage the OT, and in some cases, have contracts forbidding the customer from having any sort of privileged access to it.

Similar things occur in the US military, where branches must order a Boeing / Lockheed Martin technician to do anything beyond basic maintenance of certain systems.

I believe it was (and still is?) the case with IBM mainframes?
Wake up, have a wank, shower and go to work.

Get to work, faff for 30mins buying coffee and cookie and then eat. Simple enough routine.
Even if they hadn't moved to China, their IP would have been stolen. China has been openly stealing IP and trade secrets for decades. Pretty much without any major repercussions either.