skysight-inc/HackerNews huggingface dataset:
I don't think it's ROT13 specifically -- I think parent comment has the right insight.

When I ask it to reverse your string, it fails miserably:

> Write the words "Artificial Intelligence" backwards

>

> eecneiretxe laitinumretA
"Limiting reach" is what Twitter users think shadowbanning is. I've seen major accounts declare that, because less people are retweeting them than they think is normal, they must be shadowbanned. Obviously, if they were actually shadowbanned, nobody would be retweeting them.
just type 'I hate transpeople' it's much simpler
Any relational database can be represented as a graph, which means any fresh hot dev is going to want to port the entire company over to a ‘graph’ database. That’s just common sense right. It’s a slam dunk when pitched to management.
Why do you want an open air toilet?

Just like rules are there to be followed, the lid is there to be closed. Ordnung muss sein.
I can print out my SSH key and store it in a safe, or freely copy it between systems. All of these services are intended to prevent that by using on device secure enclave functionality and the like - it puts control the keys out of my reach.
Yes, https://passkey.org/
Airtable lays off 20% of staff
I have a novice question:

If I create a new passkey using Chrome on a Mac, is that passkey stored in chrome (via google account) or on MacOS iCloud Keychain?

Would I get to pick one or the other?
This is objectively false though. We could take a deep dive into the relevance of the Serbian shoot down but it’s kind of irrelevant.

The fact of the matter is, stealth technology means that an aircraft needs to be significantly closer to a radar for it to be detected compared to a normal aircraft. That also means it has to be closer still for a threat radar to develop a weapons quality track. Theres not really any known radar technology that can mitigate this, it’s basic physics. It’s much easier to see an object on radar that returns orders of magnitude more energy to the radar.

Stealth does not a limited utility. In fact it’s rapidly going to become an absolute bare minimum for any tactical aircraft.
If you'd like to keep enjoying the ad-free experience:

1Blocker: https://apps.apple.com/us/app/1blocker-ad-blocker/id13655310...

AdGuard Pro: https://apps.apple.com/us/app/adguard-pro-adblock-privacy/id...

Or, for something different, Orion Browser by Kagi runs Chrome or Firefox extensions:

https://browser.kagi.com/
> Basically am I the only one who doesn't think phone is my life and I don't want my life to be over if I lose my phone?

A huge percentage of internet users today don't own any devices other than their phone and most big corporations like Google want that percentage to become 100% in the near future because it's within their best interests if users have no control whatsoever over the device they rely on to live their life.
I don't believe you do. You just need an app that supports passkeys, but I could be wrong. The notice says that it integrates with other password managers.
Which is precisely the point of all this. You won't be able to log in to your bank without a smartphone, and since the bank's website will only be tested with Google's and Apple's implementations (which of course will slightly deviate from the actual standard), everyone who doesn't use those two platforms will be locked out.
I'm personally happy that they maintained this for so long. Even if the apps were to get merged, I'd mostly be content.

The data sharing between the 2 services has mostly gotten them to a point where they both give very comfortable estimates about traffic.

Waze is still better because someone Maps will tell you to turn too early when Waze's timing is more realistic.
I disagree with the fundamental conceit of the article:

> But in terms of the only measurement that really matters—satisfying requirements on time and within budget—I haven’t seen any methodology deliver consistent results.

What matters is delivering value to the organization, and doing so in a cost-effective, sustainable way. Making plans and then meeting them is incidental to this, and quite often opposed to it.
But you should be able to use your own password manager that can export them if you choose. I could be wrong but I don't think the standard requires that the keys are stored out of user reach.
Is it really redefined though? iirc it's how Reddit also implements shadow bans, no one else can see your messages other than you, to you it looks normal.
Huh? You open the thing, sit down to do your business, then close it. It's two simple manipulations for everyone, and for civility.
For some people it is. I personally know people here in Berlin (or rather around Berlin, zone c) that in the past would drive instead of taking transit into the city a couple times per week because if you already have a car it’s cheaper than buying the Berlin A-C monthly ticket (the one that takes you all the way from the suburbs the city center). This is now no longer the case, and being able to use the same ticket elsewhere in Germany is a nice little perk.

Obviously it depends on where in Germany you are but in/around Berlin while driving is often faster it’s usually not such a big gap because you’d be stuck in traffic in a car but not on the train. It would often be more like ~50 minutes instead of 40 (but then you can read a book on the Regio/S-Bahn instead of focusing ok driving).
> Reddit shows all removed comments to authors as if they're publicly visible [8]

This is not true. There are cases where comments are silently removed without any public indicator; To the author, it appears as if the comment is posted normally. To other accounts however, there is no indication that the comment was ever posted.
What’s more, there’s an 18-minute gap on the tape!
Imagine when google bans you like people get banned off Twitter…

“sorry your keys were revoked on chrome for an attempted search on an unauthorized topic” (so you can no longer access your bank website)

I imagine it’ll even get more dystopian as mistakes / bugs will happen and Google has no tech support
Logging into devices you don't own, for example.
Co-working spaces limit creativity in the long run, finds new study
Their products are used internally at Google and they don't need to release anything to anyone if they feel their use of their ai gives them and advantage in their own business field.
I had to teach my (female) partner to close the lid, too. She got it after a while.
> I could be wrong but I don't think the standard requires that the keys are stored out of user reach.

It really doesn't matter what the standard requires when the most popular implementations belong to companies like Google or Apple, they will get to decide how it works.
If the cure for R is that I need to jump fully into the Nix ecosystem, I am not sure that is a solution.

Disappointing about Julia. Only played with it a small bit, but I had assumed it had identified dependency management as a huge problem that needed to be addressed.
US Sides Against Google in Consequential Social Media Case
That looks a lot like a compression artifact, especially given how it seems to blip out of existence between frames.
Which part of passkeys / Webauthn / FIDO requires a mobile device?
So spot on! +100 this!
What's wrong with any of the existing methods of logging into my laptop?
Maybe people do things with their terminal I don’t, but iTerm2 which is apparently slower than others is so fast at responding to my input that I can’t perceive the delay. Then it has 150 more features than I even use. I feel no need at all to replace it.
> All this talk about how Israel's intelligence agencies were turned to the task of Palestinian terrorism without a single mention of why these palestinians, an occupied people on their own land, might resort to force.

(A) Because everyone knows why; how can someone read the New York Times and not be aware of the Palestinian cause?

(B) Not everyone agrees that terrorism and electing terrorist-supporting politicians (Hezbollah, etc.) is a reasonable way to solve problems

> an occupied people on their own land

Do we only care about recent history here?

—-

Exhausting to have otherwise seemingly intelligent folks so consistently make this into a black and white issue.
i would pay for it if it is 2X better and no free alternatives
If this[0] is accurate, then 99.7% of political contributions made by Twitter employees went to Democrats in 2022.

Is it unreasonable to suspect people on the right are targeted more often than the people on the left? Wouldn't that be the default assumption and the opposite position would need evidence to prove otherwise?

[0] https://twitter.com/mtaibbi/status/1598829996264390656?s=20&...
> II. Modelers have to be coders

Since you can basically use numpy like a large calculator, it seems like a potentially useful tool to have under your belt. And matplotlib is good for making graphs. Python/numpy/etc. seems like a reasonable alternative to matlab (etc.) in many cases.

Symbolic math tools like Mathematica are useful as well.

It's certainly helpful if modelers can understand the code that implements the model and spot obvious errors in the code as well as in the results. It's also extremely beneficial if whoever is writing, testing, and using the model code has a very good understanding of the model itself.

A potential step toward this happen is implementing the model as a standalone library of very straightforward code that everyone on the project can understand.
So you think Google and Apple will block third party password managers from providing passkeys to the browser?
Meaning no matter how egregiously this account violates the content policy, do not suspend until first consulting with higher ups.
Seems like the kind of tech that Apple would potentially buy a company for. ;)
If a company is pivoting from growth (previous priority) to financial sustainability (current priority), sales is the first area to get the axe.
https://archive.ph/51oJy
Ask HN: I want to learn what mathematics is really about
I want to know what mathematics is really about other than number and symbol pushing. What are we trying to achieve? And why do we consider a mathematical proof to be an ultimate truth (if at all, if not, why not). Why do we believe in the axiomatic method at producing truths?

Why certain things can be proved and others not? And in between all these how did Computer science or computation emerge as a branch of mathematics that had the confidence of a mountain that it can solve all issues of humanity even with the warning that all problems can't be proven.

I am myself confused what I am asking about. But, I want answers to all these questions in a comprehensive way.

I will love book suggestions that have answers to all my questions and maybe more.

Edit: I have done my bachelors and masters in electrical and communication engineering. I know calculus, matrix algebra and prob stats on a level of engineering. Not in much depth.
It's not reasonable criticism, because Twitter provided their definition of "shadow-ban" at the time, and it's unambiguously not what Weiss is talking about.

You can disagree with the definition Twitter chose, but you can't retcon your own definition onto Twitter's policy statements.
That doesn't prevent leaking, which can matter even if it's unique password.
In fact, knowing the moment photo was taken from EXIF, there was no need to "plot the line". They could point the exact location by using orientation of the stars - stellar time (assuming the horizon is level which, in the airfield, is a very very good assumption to make).

Procedure is as follows:

Right ascension of the culminating star ("celestial longitude", taken from the star catalog/star map, of any star which is right above the celestial pole/"Polar star"), is the stellar time.

Knowing date (from EXIF), you get local solar time (which is equal to the stellar time on the spring solstice day, then makes a 24 hour loop over the year).

Difference between local time found this way and UTC time (taken from EXIF), gives longitude, because the Earth is round.

If EXIF does not contain the time zone, that gives 3 points in the U.S., one for each time zone, but it must be super easy to pick one. But most probably, EXIF contains the time zone.
I can't realistically see banks forcing passkey based authentication. If this is actually an open standard, why would it matter if only Google's or Apple's implantation are tested.

If only Google and Apple's implementations work, then it's not an open standard.
That's strange and would be a pretty big about-face.

Apple, the most locked-down and proprietary OS vendor, has great support for third party password managers in their OSes and has been improving that support in recent years.

If they kick 1Password etc. out of the Mac/iOS ecosystem that would be a pretty big deal. It could happen, but why would they do so?
I did the same with my instance. More power to you if the tools are good enough for you, but I found them too clunky to use compared to dedicated products in the space.

Still, I did appreciate the breadth of apps that one could install.
Password authentication is an example of bad UI design (they are hard to remember and easy to forget), but passkeys are not great either. They have at least three weak points:

First, they are stored in a phone internal storage. This is not secure because phones have complicated software with large attack surface, and if an attacker finds a vulnerability, then they can gain access to all private keys on that device. If the phone is lost or stolen, then the keys can be recovered by reading phone's internal storage. Even if the keys are protected by a PIN, the PINs are usually short and can be easily bruteforced. If they are protected by a fingerprint or biometric lock then I assume that they are not encrypted at all.

Second, to synchronize keys between devices, private keys are uploaded to Google's cloud [1]. The post metions that they are end-to-end encrypted, by doesn't specify any details. However, it says that the keys can be decrypted on a new device if the user provides a PIN or unlock pattern:

> To recover the end-to-end encryption key, the user must provide the lock screen PIN, password, or pattern of another existing device that had access to those keys.

This means that keys stored in Google cloud are either not encrypted or use weak encryption keys that can be easily bruteforced by Google.

Third, synchronizing keys relies on Google's infrastructure. If you ever get banned from Google, you will lose the ability to synchronize keys, and maybe access to them as well.

So instead of promoting secure, easy to use, vendor-independent, cheap hardware keys, Google suggests that everyone stores their private keys either in a Google cloud or on devices where Google has root access. I don't think that it's a great idea.

[1] https://security.googleblog.com/2022/10/SecurityofPasskeysin...

Also, I don't like FIDO standard because it requires attestation of hardware keys and doesn't allow to use DIY keys for example.
But it completely ignores the commercial reality: 10% of your holdings making a move is sometimes enough to swing a board decision. Look at AGL in Australia and the recent play by Grok ventures. Nothing like 50% + 1. They moved the mountain.
I don't think they even have access to the dashboard. I assumed they were given the prepared data. An earlier tweet by Musk or a journalist mentioned lawyers would deliver the data to them direct from Twitter.

Even if they did it's clear that whoever made the screenshot in the libsoftiktok screen doesn't even have access to see their email. Like all other tech admin panels, there are access controls. Just because the 'delete website' button is visible to you doesn't mean your account has permission to use it.
I've been thinking about this myself as well.
With the advent of ChatGTP, competition is going to be much tougher for just content sites imho.
The original is one of the all-time great bits.
Hey guys, I made Tamagui because there’s no reason we should have to accept clunky, slow apps when sharing code between React Native and Web. It has a pretty advanced optimizing compiler that’s been a fun (and challenging) project.

If you’d like a high level on how the optimizing compiler works and why its important, I wrote some here [0].

Happy to expand on any tech details. It’s not too fancy - Babel, AST analysis, logic to parse and normalize many expressions, then passing all static scope (even across module boundaries) to the underrated node vm[1] package.

If it can analyze all the props for any component statically, it flattens what would normally be a somewhat expensive React component into a simple div (or View on native), including ones with inline logic so you can write your components/styles naturally.

The tree flattening and focus on outputting CSS rather than JS is the real magic sauce netting big gains in performance all over - bundle size, startup, runtime.

We see a 15-20% increase in lighthouse score on the site homepage just by toggling the compiler on, with over 400 components being flattened (!)

[0] https://tamagui.dev/docs/intro/compiler

[1] https://nodejs.org/api/vm.html
The early workstations like the Alto, PERQ, and CADR were portrait by default, and used specialized CRTs.

Personal computers tended to use 4:3 displays because they started out with either terminals (which used television CRTs) or by being plugged into literal televisions.

Workstations went to two-page displays a decade and change before even 1024×768 was widespread for personal computers outside ones used as workstations (e.g. very high end PCs and Macs used for CAD, page layout, etc.).
> I tried writing books too.

What happened with that?
You need money to advertise your ads and be like Alex Jones and sell weight loss supplements and boner pills like Viagra in your videos.
Are you sure those are the same people? It's not like HN is a hivemind...
85% of companies, their users have Microsoft accounts via M365 for their company accounts. Your users work at companies ...

Login with Google leaves at least 85% of your company employed userbase by the wayside, so add Login with Microsoft.

Really, your auth should look something like this:

https://www.xsplit.com/user/auth
Annoying points with passkey is that one way or another, your creds (ie the passkey) has to stay on your device/app or you are fucked.
Good thing with password is that you can have it not stored on any device and just used when you need. Gives you plausible deniability.

Also, now your chrome passkey/password manager has all your creds. Protected only with a single thing (password/biometry). Imagine your are at the Chinese or US border, and tsa is overreaching: with just your finger they can access to all your accounts: Facebook, twitter, Google, Dropbox, ...

You can't temporary delete from a device and readd without redoing the whole setup with the website.
To create a passkey on Chrome for Android, you need the Google Play services beta. Otherwise the call to navigator.credentials.create() below will fail.

You see it the moment where apps and websites will not work without the Google play ecosystem just before they added a new lock in?

Also, I can see in advance that most website will only accept a single passkey public key per account. So you can't have one on each of your devices or even easily randomly connect from different web browser to the same site.
Could be.

We only used the community version for dev, but even that could scale quite well for a single node on SSDs.

But we also spent a lot of time learning how to map our use case to it.
They'll eventually go out of business, heavily downsize, or pivot away from being accessible to non-corporate users. We'll bemoan their loss, and a lightweight competitor will rise up a few years later that is made by a tiny team who has the huge advantage of knowing what they are building.

I am sure postman is one of those products where 90% of the common features are super easy to replicate, and the last 10% take 80% of the dev org to work on.
Ask HN: When is work original, when does it fall under a license?
I've created a large project containing various services, but one module inspired by a plugin based on GNU licensed code. How can I find out if my work is currently covered by the GNU license?

To say that your work is original, does someone have to read the code base, get inspired, and write their own code without any reference to the original work? Using the naming conventions of the methods from the code base still original, even if the underlying code has been completely rewritten with new logic, new functionality, and the glue that fits in your own code?
That's a lot of words to say that it's too expensive to store a picture. Even a fucking floppy disk can store pictures.
Like Kanye West?
> and no one to use them against

Oh, you can use them just as they were used - to do the things B-52, or hell, even B-29 could do. /snark

> being hunted by a bunch of nearly undetectable aircraft which can be anywhere at anytime and can each carry more than a dozen large anti-ship missiles

Now this is a question. My memory was rusty so I consulted Wikipedia and looks like there is not that many options.

SM6 is too weak and doesn't yet have AS capability, LRASM exists with a proper qualities (speed and payload) but is quite big even for B-1. And Tomahawk with no AS cap. and ... not fast.

So there is a question about "a dozen large anti-ship missiles" though it can be mitigated with a sheer numbers, which is probably the way it is designed.

> I wouldn't be surprised to see significantly more than 100 get built.

Depends on what would happen in tjhe world the next 10 years.
And that's comendable, but SponsorBlock says it also can skip over annoying parts (such as irrelevant talk about local weather and video pans of trees) and not just sponsorship plugs.
WebAuthn is a huge improvement from a security perspective. The private key is an anchor to a combination of factors. Proof of ownership (I have the device), proof of person (biometric) and/or proof of knowledge (pin code). Your password is not protected, it’s transmitted when you use it. If you’re infected with malware, that’s it, password exposed. With WebAuthn, nothing can be exposed.
Saying people died because of autopilot is the same as saying people have died because of seat belts. Seat belts work and saved far many lives than they claimed. Similar to autopilot, it saved people far more than it killed as well as prevented numerous accidents. As a user (I am one) you need to know its limitations and weak spots, but overall it outperforms humans by far.
KeePassXC already has a development branch where WebAuthn is supported in both extension and KeePassXC, so the keys will be stored to your database and can be exported/imported normally. The support needs to be extended and tested for Passkeys also. So yes, controlling your own keys is possible. Browsers just wanted users to use their own walled gardens.
> This is SSH keys for signing into websites.

No it's not. It's a shackle that will tie users to two or three platform providers (Google, Apple, and Microsoft) because websites will refuse to interoperate with implementations that aren't from those.

"Your browser is currently unsupported. To log in to your Amazing Bank account, open this website on your Android or iOS phone and place your finger on the home button."

Just because the underlying cryptographic primitives are similar to SSH, doesn't mean this will work anything like SSH in practice.
> Lots of games have been sold with that angle, and few that I can remember were able to come even close to the previous titles.

Even revenue for the developer, or in enjoyment for the user? Because Torchlight (ex-Diablo-II ICs) was a humdinger of a D-II sequel in terms of gameplay, but sales? Not so much.

This makes me think that the biggest value that the studio brings to the table for revenue is brand recognition.

IOW, it doesn't matter how good the game is, brand recognition gets you over the line sometimes.