sjadoinqwoeihad

You can't ratelimit someone you have not yet identified. Unless their username is also a password. But then you just have 2 passwords. And the ID password would have to be sufficiently high entropy to not be hit by bots.

Keylogger would still get the TOTP code. Dump would include the TOTP secret. Why write only the password down if you still need password manager for the TOTP code?

I think I mostly agree TOTP in password manager is useless, but it's not worse than not having TOTP at all so it's whatever.

Software complexity is increasing. With the increased complexity many failure modes are not understood by developers. Thus those failures are not handled gracefully. This feels like a decline in quality. Depending on what you measure the quality could actually be better, the same or worse.

> 0, 0, 1, 0, 2, 1, 0, 0, 1, 2, 0, 1, 0, 0

I never noticed this symmetry in fizzbuzz before.

I checked my 5 year old repository of ~300 stars. It has a ~100 unique clones a month. So if the average was half of it then the 1 order of magnitude would be quite an accurate approximation.

I think the biggest difference with a clone and a star is that a star requires an account and some vested interest in the social network of Github. Anyone who is not interested in the social aspect can just bookmark it.

I guess this differs quite a lot by target demographic. A tool for GPT will probably get a lot more stars than a plugin for some consumer software simply because it is more targeted for the audience of people who have Github accounts.

Yes 100%. This reminds me of bees or fireflies. They have algorithms that individuals follow which can cause the collective to behave in a certain way. We should definitely create something like that.

You can't rely on spoken signals, mainly because of other noise and broken phone effect. Something like raising your hands and crossing them could work. People who are close to the crush will quickly agree and raise their hands, so it's unlikely that one troll could make a false alarm since you would need maybe ~30 or so people to get the signal started. This signal could propagate through a huge crowd in just a minute or two.

Initially I thought about drones with arrows and loudspeakers but it seems a bit too niche of a usecase to have a swarm of drones for. Also doesn't quite work in all conditions.

I had a lot of mini crush experiences in primary school. Students holding doors for fun and everyone trying to push through. People jumping on top of each other and making human piles. I think these are all good experiences to understand how crowds work, even at small scales. I think schools could teach this kind of protocol and practice it. It's also important that this doesn't cause a mass panic and a stampede so drills are necessary.

Cypress is anything but simple. It takes a lot of time to learn all the footguns and not write flaky tests.