Flimm

I agree. I wonder if there is a good compromise between convenience and security, though. For example, before allowing Google Authenticator to sync for the first time on a new device, maybe notify the user on all devices and enforce a 72-hour delay, or wait until the user approves the new device using an old device (in a way that is hard for a scammer to pass off as legitimate).

I've received a phishing email from an @paypal.com email address. (The From: header showed an @paypal.com email address.) Fortunately, the text of the email itself was fishy enough to make me realise it wasn't legitimate. I have no idea how it passed spam filters. I reported the email to both PayPal and my email provider, and I never heard back.

Gaza Sky Geeks [0] is/was a startup accelerator or tech hub in Gaza, with backing from people from Mercy Corps, Google and Microsoft. Needless to say, their activities have been severely interrupted by the violence since October 7th, 2023. I'm subscribed to their email newsletter, and the updates are heart-breaking.

If anyone from Gaza Sky Geeks is reading this, please consider sharing those updates on your blog as well as on your email newsletter, so that they can be shared more widely.

[0] https://gazaskygeeks.com/

I use https://song.link (or Odesli). It finds the link to the song on Spotify, Apple Music, YouTube, YouTube Music, Pandora, Deezer, SoundCloud, Tidal, Amazon Music, AudioMack, Anghami, Napster, Yandex and BoomPlay, maybe more.

If I buy something, not only should I be allowed to keep it until I die, but I should also be allowed to pass it on to someone else after I die. I should also be allowed to give it or to sell it even before I die. That's currently impossible with many of these so-called digital purchases.

What about server-generated passwords, like API keys? That would solve the main problem with passwords, namely, that people reuse the same weak password everywhere. I doubt it would be as popular as user-selected passwords, but I still wonder why no website has tried it.

No AI, please

I agree. I was expecting the author would implement debouncing or throttling to reduce the number of unnecessary requests, alongside fixing the data race issue. Here's an excellent article on debouncing and on throttling, and the difference between them:

https://css-tricks.com/debouncing-throttling-explained-examp...

I share your intuition that your likelihood of getting a ticket is related to the speed of other vehicles. Presumably, police choose to prioritise ticketing the worst offenders when there are too many offenders to handle.

But I don't share your intuition that safety is also relative in that way. If you're driving dangerously (too fast, or while drunk), you're driving dangerously, even if everyone else is driving dangerously too. If you're in a country where nobody wears a seatbelt, it's still prudent to wear a seatbelt, just as much as in a country where that is the norm. I don't think Google Maps should encourage people to drive as dangerously as everyone else. Quite the opposite!

The main downside of Tresorit is that it does not support syncing symlinks. It also does not have LAN sync like Dropbox does. Tresorit does have E2E encryption, which is great. Only the enterprise version of Dropbox has E2E encryption.

I wish I could agree with you, but in my experience the built-in controls have many flaws and have remained stagnant for years or decades.

How did they measure the number of legitimate customers that they lost because they blocked those IPs? It's not enough to estimate the change in unwanted traffic, you also need to estimate the change in desirable traffic.

Same here. It was the lottery episode that made me realise that he is willing to lie when explaining his illusions. I didn't feel delighted by the illusion, I felt lied to.

This is the official website for FAIR: http://fair.pm/ . It currently redirects to https://github.com/fairpm . Here's a description:

> The FAIR Package Manager is a decentralized alternative to the central WordPress.org plugin and theme ecosystem, designed to return control to WordPress hosts and developers. It operates as a drop-in WordPress plugin, seamlessly replacing existing centralized services with a federated, open-source infrastructure.

> There are two core pillars of the FAIR system:

> - API Replacement: It replaces communication with WordPress.org APIs (such as update checks and event feeds) using local or FAIR-governed alternatives. Some features—like browser version checks—are handled entirely within the plugin using embedded logic (e.g., browserslist).

> - Decentralized Package Management: FAIR introduces a new package distribution model for themes and plugins. It supports opt-in packages that use the FAIR protocol and enables hosts to configure their own mirrors for plugin/theme data using AspirePress or their own domains. While stable plugins currently use mirrors of WordPress.org, future versions will fully support FAIR-native packages.

You can try the FAIR plugin at this link: https://github.com/fairpm/fair-plugin/releases

I concur. Most Wikipedia articles in different languages on the same topic are not translations of each other, in my experience. It is better to think of them as independent of each other.

It's impossible to disable PRs on GitHub, sadly. See https://github.com/dear-github/dear-github/issues/84

This is very interesting. This is the back story, from the GitHub repo:

> We spent the better part of 2021/2022 building a personal finance + wealth management app called, Maybe. Very full-featured, including an "Ask an Advisor" feature which connected users with an actual CFP/CFA to help them with their finances (all included in your subscription).

> The business end of things didn't work out, and so we shut things down mid-2023.

> We spent the better part of $1,000,000 building the app (employees + contractors, data providers/services, infrastructure, etc.).

> We're now reviving the product as a fully open-source project. The goal is to let you run the app yourself, for free, and use it to manage your own finances and eventually offer a hosted version of the app for a small monthly fee.

SQLite has been dedicated to the public domain, ostensibly removing all copyright restrictions. Technically, it has no license for the OSI to list as an OSI license.

PEP 787 – Safer subprocess usage using t-strings https://peps.python.org/pep-0787/

The comments on this article debunk many of the claims of the article itself. So far, the comments have not been deleted.

To view the full list of integrations, click the "x" next to the "Brands: Featured" badge.

Thank you! That's helpful. I got the examples in that Wikipedia section to run using the `--null-input` flag:

  $ jq --null-input '[1, 2] | add'
  3

Thanks for engaging with me. In your last paragraph, you got to the crux of the issue. You feel that you are "allowed" (by whom?) to define your own moral values and your own priorities. You feel that this moral axiom is self-evident and uncontroversial. I would deny that. This moral axiom, like all moral axioms, cannot be proved by science. And it is far from universally shared, beyond our relatively small cultural bubble. For many people, defining one's own moral values is the definition of immorality, or at least amorality. For many people, true morality has to be above one's own preferences and desires (that is, more authoritative). If you disagree, you are merely revealing how your religion differs from theirs. Your religion has moral axioms that cannot be proved, and so does theirs.

Don't get me wrong, I think people broadly share many moral axioms (such as: truth is generally good, love is generally good, hate is generally bad). But the idea that we get to define our own values is not one that is universally shared, it is mainly found only in highly individualistic atheistic cultures, and like all moral axioms, cannot be proven or disproven using the scientific method.

Really well said. It is an excruciating situation to be in. Thank you for sharing your perspective.

All moral reasoning can be boiled down to "my religion told me to", assuming a comprehensive enough definition of religion. For example, an atheist humanist may argue that certain actions are immoral because they are harmful to human beings. The implicit religion behind that reasoning is that harm (and certain types of harm) is immoral. That's a religious statement, one that cannot be proved with the scientific method. It's a statement of moral axioms, and not all people share the exact same moral axioms.

If it's open source, people are free to redistribute it. Copies of open source software can be sold for money, but open source licenses allow redistributing the software for free. In practise, that means most people won't buy the open source software from a seller, they will choose instead to get a copy from someone who is willing to redistribute it free of charge.

Nice! Now this piece of video game history can be better shared and preserved. Does this repo include the artistic assists, or does it include the code only?

I can see dozens, maybe hundreds,q of submissions that were all flagged accidentally. I wish Hacker News paid a minimum of attention to UX on small touchscreens.

That statistic is widely repeated but it is contradicted by other studies which paint a rosier picture of Americans' finances. See: https://news.ycombinator.com/item?id=42357663

I would love to buy ebooks directly from publishers, but publishers generally sell ebooks with DRM just as bad as Amazon's DRM, if not worse. If publishers insist on vendor lock-in, then I might as well stick with Kindle where most of my ebook collection already is.