nfoz

Thank you, that explanation makes sense.

IMO you should get a preview (with options for changing the rendering), and you can go from that to the system dialog. Instead of combining them.

> TOTP systems are supposed to implement a sliding window to account for reasonable clock differences, usually within 5 minutes.

The default is 30 seconds, as per the RFC: https://datatracker.ietf.org/doc/html/rfc6238

(not sure that meaningfully changes what you were saying, but just fyi.)

Maybe I'm irrational, but it's one of the things that makes me real hesitant about where I deploy TOTP. Sometimes my cellphones randomly have a wildly wrong time -- a misbehaving (or malicious) cell-tower perhaps? And sometimes my computer gets the wrong time too -- e.g. booting between Windows and Linux screwing up the system timezone setting, or ntp failing to start properly, or when I busted up my CMOS. And I have to wonder, how secure is ntp from someone just spamming a system with the wrong times which can block me out?

I'd almost rather a combined thing where it's HOTP but it also rotates once per day like at midnight? Does anything do that, or does it even make sense? Is there a reasonable alternative -- challenge-response maybe?

I find Arturia's products -- hardware and software -- wonderful to use. My Drumbrute Impact is just so fun. I got "Pigments" and it is incredibly fun for crafting sounds; just a beautiful UX.

Then let's replace those CMS's.

[edited with less anger]

Light Dims! http://www.lightdims.com/index.php

Little sticky cellophane pieces, that you can put on the little LED lights on all modern electronics, so that you can still see them but they're not so bright.

Because I hate being surrounded by blinkenlights that are a bit too bright and hurt my eyes in the dark.

I'm not sure of all the history, but it feels to me like there were two cute ideas of the classic shell metaphor that we never quite achieved, and anyway we've totally outgrown:

1. That the shell's user is "in" a location of the filesystem (cwd), and can move around it like you're an avatar navigating rooms.

2. That the shell can "only" do program invocation, such that even its basic primitives like 'cd' and '[' can be just themselves programs.

It's heretical, but, I don't think ls ought to be its own program. It's part of the shell, in particular part of my view of the filesystem. It's not really an app and I don't care if it happens to be implemented that way under the hood.

As a user, I want a shell that lets me navigate the system (possibly multiple sets of systems), with a consistent set of primitives. It can let me invoke applications, and I want an absolute and extremely tight set of controls over those applications, and very specific ways that they're allowed to talk to each other.

I'm running far off-topic but to your original point, I think "ls" isn't really the type of app we ought to be talking about here, just bake it into the shell...... ok I just want to abandon posix and work in new metaphors. That really is off-topic for discussions about a new Linux feature I guess.

In these material designs, I have trouble knowing what things are buttons I can click on.

Browsers are too big and the web is too complex. Engineering failures all around.

As engineers, we should not accept this status quo; we should replace it. We need a new web and new software.

> a site misbehaves and locks things up

Why/how can this happen? That sounds like a bad failure of the browser.

Wow! Thanks for the heads up. Those were some of my favourite softwares. Inspired design.

I miss when Macbooks came with remotes.

I hope this ransomware called itself the Da Vinci virus? Because this sounds a whole lot like the plot of Hackers [1].

The greatest movie of all time, btw.

[1] https://en.wikipedia.org/wiki/Hackers_(film)

Somehow I'm more impressed by the MNT Reform DIY laptop

https://mnt.re

https://www.crowdsupply.com/mnt/reform

I just use `vimdiff`, but this looks better.

https://routersecurity.org/ brought me to https://www.peplink.com/products/soho-series/

But I would love to understand my router better and why/how to trust it, or that I've configured it the best way, to protect from threats both inside and outside my LAN.

I do love "informational" command-line tools like this. I refer to `ascii` [1] regularly (although [2] is my favourite website... nothing is so accessible as a tool on my command-line!) Anyone know of other command-line info-dump/explorer tools like this?

[1] http://www.catb.org/~esr/ascii/ (available as just the debian package "ascii")

[2] https://www.asciihex.com/

The link here is http (not https). The site does provide https, but it's with a self-signed certificate, so my firefox complains loudly. Or perhaps I'm being MITM'd ;)

Curious for a network engineer!?

Tangential but does anyone know of nice printable / for-sale "posters" of network-stack details? (or other computing stuff) I like to have reference cards/materials in "hang on the wall" poster form, and recently was looking up the network protocol headers and thought it might be nice to have those up on the wall.

I guess with this tool, I could print them, but maybe not the most compact or aesthetic.

Not sure why this is downvoted. Wikipedia says that Tamagotchi was initally marketed exclusively to teenage girls, whereas Digimon -- made by the same creators -- was deliberately aimed at the male audience.

https://en.wikipedia.org/wiki/Tamagotchi

https://en.wikipedia.org/wiki/Digimon

Have you played the FF7 Remake? More than anything, it feels a lot more immersive to me than the original.

Meanwhile, your neopets haven't died, they're just still starving :(

I don't really understand the question because they both seem so essential to me. I'd say very often the ride cymbal keeps your basic groove. Especially in latin-jazz, if it's a swing or salsa pattern or whatever, the ride drives that pattern continuously. Which helps the band (and listeners) stay in sync with the groove, and lulls you into hypnosis with the repetition, and sounds super cool imo. Whereas the crash adds hype/power/emphasis to your important moments.

This hits home for me.... it was an unspoken dream of mine to apply to join VPRI, motivated by a side-project that I believed falls under their interests. I never did apply. Which was probably the right call; I was naive, lacking any relevant credential, and I don't even really know what they are or if they take 'applications'. But still. Sometimes it's those weird little dreams, that we wouldn't dare tell anyone, that keep us going. I worked on that project for years before running out of steam. So now I sigh and acknowledge a door is long since closed.

Would love to spend my time somehow funded, even minimally, to build the crazy ideas that I believe in and think could actually matter, instead of the much less interesting or important work of my day-job. But I suppose that's most of us here on HN.

> I understand people don't like ads, but at some point doesn't someone have to pay creators for content?

No, the role of "content creator paid by impression and dependent on people not being able to skip intrusive segments of videos that they watch" has no intrinsic right or need to exist. There are lots of other ways for civilization to develop.

In what sense is it "not easy these days"? The Panasonic "Let's Note" series (Japan only) has had models with two batteries -- one internal, and one removable (hot-swappable) that you could charge with USB while the laptop keeps running on the main battery. I'm not sure why our imagination for laptops is so limited.

- 1 x USB-C

- 1 x USB-A

- 3.5 mm headphone jack

- 1 x Surface Connect port

So I guess this is their "Macbook Air" equivalent?

It's funny to compare with something like https://us.vaio.com/collections/vaio-sx14 which is still very thin. I guess the main trade-off is battery life.

Probably way off-topic but I hope this doesn't imply that cars are going the way of Smart TV's where they have some annoying and underpowered tech in them to force an early obsolescence on a machine that is otherwise fine and could last decades.

But I suspect that ship is sailing regardless.

Yes, because it is all those things (which are bad) and just a bit worse. Do you disagree?

> but I don't think being an asshole is unethical.

Maybe I don't know the right meaning of "ethics", then.

But putting bots on dating apps is lying to people on the other side, and hurts them, in a very intimate and personal way. People put time and emotional energy considering their matches and whether to swipe etc, and the resonance of the conversation. So you're polluting that space, both with the catfishing / leading people on, or (more likely) confusing them and making them question themselves / their profile / how to relate to other humans. Is that not unethical to you? Have you talked to people who have been victims of that? My gf was actually quite afraid that I was a bot when we connected; it almost blocked our chance.