skysight-inc/HackerNews huggingface dataset:
>What’s your take on accessing systems accepting passkeys on a shared computer?

Plugging a token into a shared system is superior to passwords as well. Easy, somewhat safer if the system is compromised vs any given password (since an attacker would only be able to perform an online hot attack, and only on things the user was also doing assuming touch is required), much safer and easier compared to a password manager. Externalizing authentication on a shared system into something owned by the user is a pure win IMO for those who need to use them, and if anything is a particular win in that case compared to those who get to use only their own computers.

>Or if you lose access to your devices?

There is no one answer to this and I'm sure UX will evolve over time. As I said, in many cases there is a natural fallback in the form of local access console, same as if somehow all SSH keys or the like were lost. Ideally in general everyone would have multiple tokens, with at least one serving as a backup. Alternatively or in addition, good old backup codes (printed keys, either whole or n-of-m splits) on paper are a reasonable choice in some cases IMO. Some places that have a personal connection may simply have an IRL fallback, ie., your employer would just have you go to IT, or your bank might have you go into a branch in person with ID for a reset. In the future, there could be optional hardware solutions that allowed backing up exclusively to another key. I don't see the problem though as much different, than having hundreds/thousands of passwords to deal with.

>I wonder what phishing attempts will look like.

Pure remote "phishing" as it currently exists just isn't going to be possible with hardware based keys. But online hot attacks still will be, so I'd expect that will be that path taken (though it'll be harder). Stuff like getting people to run programs or waiting for them to access something sensitive on a rooted system such that they do a completely legitimate authentication flow but then additional actions are performed using it. But that's far more limited a threat surface than right now, and also will have more tractable technical counters. Still an improvement.

I guess for a while the other "phishing" that might linger will simply be trying to use the inevitable legacy workarounds that you yourself asked about. Backup codes could certainly be phished in principle, social engineering tech support that "so and so lost access to their devices!", etc. But I think that will fade in effectiveness as time goes on, so might as well get to it. At the end of the day, symmetric shared auth is just insanity and asymmetric is simply fundamentally superior.
I'm not spending time to wash, dry and iron 30 shirts. I'd rather pay $70 at the dry cleaners, once in a while. Now that cancerogenic substance is an interesting topic. I'll have to ask about it the next time I go there.
> as they acknowledged in the post themselves

As I noted in my own comment. Ironic to accuse me of skimming the original post when you couldn't even read my two sentences.
> somehow it activated again on a different day and it happened again.

I dont have a tesla but my car has things like "lane assist" and most of these safety features can be turned off, but the default state is "ON" and this is reset once the car is turned off/on again.

Oddly enough, what it calls "advanced cruse control" defaults to OFF on my car and must be turned on any time you want to use it?
> This whole thread smacks of this type of cynicism

Both Musk stans and Musk haters go wrong when they conflate his companies with his persona. Tesla is obviously a highly innovative company, and will likely be Muskless at some point, and probably better for it. Then they can make more reasonable claims about FSD and not be under multiple investigations, including a criminal probe by the DOJ for misleading customers.
puts Adam Curtis hat on

Ever since Madison Avenue taught the postwar consumerist middle class to consider purchases as buying into aspirational lifestyles, tying it into personal identity, the same process has shifted from simply patronizing businesses all of the way to political choices. Thus, charismatic and attention-seeking CEOs no longer sell their businesses simply no the basis of the quality of their goods or services, but buying into entire constructs of Zizek voice ideology. Thus, perhaps paradoxically, consumer individuals, craving belonging, are buying their way into tribes of like-minded individuals with similar convictions.

In short, don't blame the country themselves; these businesses and their management are pushing politicizing as a tactic to sell, sell, sell. As we in tech know, everything is ads.
How to Pick Your First Telescope
huh? this page is unusable. is this a spoof?
Oh, I didn't know amazon had bought them out. The whole project was first developed by a local second hand bookstore here on Vancouver island.
I think I agree in sentiment, and I'm wondering what your ake is on the article/ current discussions article.

I guess my premise is that I don't think we have a useful enough definition of intelligence because the ones I see people writing articles on seem to be dependent or defined by agency, and specifically humanish forms of agency. So I guess your point would be "these systems aren't intelligent, but that's not relevant"? I suppose I out the issue at the currency of the definition of intelligence. It's seemed to be very much synonymous with "how humans do things", making it somewhat impossible to give charity to the arguments presented in this paper with the caveats on "not anthropomorphising". Like I can't compare these two things if your definition of intelligence is fundementally based on what "Anthros" do or do not do and simultaneously not engage in anthropromorism.

To follow on your point, if these things aren't displaying "intelligence", but that's also not the point, what then are they displaying?

It seems to me this is a failure of introspection on the part of AI philosophy to recognize how limited our understanding of "HI" is.
Thunderf00t has an entertaining analysis on the absurdity of NEOM:

https://youtu.be/rB_X5ZUcZlE
Russia wants Finland to punish flag burners
These two paragraphs in particular stuck out to me:

> Critics of labor-market programs such as the Job Guarantee argue that they enable precisely this sort of choice—they make it easier to decline work that one doesn’t like. One program participant in his thirties told me that, while on unemployment benefits, he’d been offered a job cleaning toilets at a gas station; he’d decided that he didn’t want “that sort of job,” and had instead found work in the carpentry workshop. If everyone were guaranteed a reasonably pleasant job, suited to their interests and needs and paying a living wage, who would do the grungy, difficult work? Austrian employers, like those in America, are currently having difficulty hiring people to take hard, poorly paid jobs; many of the workers in Austria who wash dishes or clean hotel rooms are immigrants from Eastern Europe, and during the pandemic many of them went home, some for good. Jörg Flecker, a sociologist at the University of Vienna who is evaluating the program in Gramatneusiedl, told me that pressure from employers could prevent its expansion across Austria. “Employers say, ‘There are so many unemployed. We have to have a tougher regime for them because we have jobs to fill.’ ”

>

> Lukas Lehner and Maximilian Kasy, economists at Oxford who are evaluating data from Gramatneusiedl, argue that competition with the private sector is a good thing. “I think, from an economic perspective, that argument doesn’t make much sense,” Kasy said, of the dirty-jobs view. “If they’re shit jobs, try to pay them as well as possible. Try to change the working conditions as much as possible until you reach the point that somebody wants to do them, or automate them if you can. And then, if nobody wants to do them, maybe we shouldn’t do them.” Kasy thinks that an important function of initiatives like job guarantees—and of universal basic incomes—is to improve the bargaining positions of people who want to change their lives. “Whether it’s abuse from an employment relationship, a bureaucrat in the welfare state, or a romantic relationship, the question is, What’s your outside option?” he said. “Having the safety of the basic income or a guaranteed job improves your outside option. If your boss is abusive, or doesn’t respect your hours, or is harassing you or whatever, you have the option to say no.”
I understand that part - but why have touchscreens for core functionalities that won't change?

Like switching the AC on/off. You can hide away all the complex thermostat settings in the touchscreen but at least give me a physical AC button.

Saw the new Rivian and it has touchscreen controls for moving the AC vents around! What could ever change in the near future that moving the AC vents needs a feature upgrade?
This is extremely sad and I hope you and your father can try therapy together or separately, but the fundamental issue is not Tesla or the car. Those are the symptoms. Best of luck.
There is a heavy mix of liberal and conservatives in the south. Classic big city vs everyone else dynamic.

Had a group of BLM protestors positing live on twitter how they where coming up to where I live to burn down neighborhoods.

I’m surrounded by gun fanatics. If police hadn’t blocked mass transit and highways it would have been a blood bath.
The realization that database procedures are code, not data, even though they reside on the database (where the data lives) is the difficult part.
Its somewhat situation dependent, but I've developed healthy systems that scale to surprisingly high throughputs with just a couple well designed sql databases, read replicas and memcached.
Do my core work? No, it's not going to, at the moment.

But it's already saving me nontrivial amounts of time on tasks like "write a polite followup email reminding person X, who didn't reply to the email I sent last week, that the deadline for doing Y expires at date Z".

I typically spend at least 3-4 minutes finding the words for such a trivial email and thinking how to write it best, e.g. trying to make the other person react without coming across as annoying, etc. (Being a non-native English speaker who communicates mostly in English at work may be a factor). ChatGPT is really good with words. Using it, it takes a few seconds and I can use the output with only trivial edits.
Perhaps a https://en.wikipedia.org/wiki/Column-oriented_DBMS
Yrs (Yjs on Rust) maintainer here: we actually had some idea about building extension to Postgres ;) Great to see that others share the excitement about this idea as well.
See: https://github.com/y-crdt/y-crdt/issues/220
Self-driving vehicles seem only feasible under one condition: you have isolated roads that allow no other motorized vehicles, no pedestrians, no bicycles, etc. In that case, a robust computerized system with built-in failsafes seems almost entirely plausible (although hacking-related takeover is definitely an issue).

Part of this is just legal issues - i.e. our legal system will hold human drivers responsible for fatal car accidents, via civil suits and/or criminal prosecution, but corporations are largely protected from liability (excluding special cases like Ford Pinto gas tanks etc.).

With self-driving cars, the corporation will always be held directly responsible, even if the relative safety risk is lower. It's similar to airplane disasters for that reason (i.e. airplanes are relatively much safer than personal vehicles, statistically speaking).
you don't get to hide behind currency fluctation. as a customer he has all the right to be outraged. it's not like production costs had raised or whatever, google has chosen to put that price on that invoice when it could have chosen any other price or even to keep the old price
Seems like a half-baked agency-built version of htmx[1], no?

I'm actually very intrigued by the whole "let's take a step back and move a lot of our logic back to the server" approach to modern dev, but IMO when you need more than statically rendered pages, it should look a lot more like htmx or Phoenix LiveView (if you're using a framework) or something ultra-minimal like Slimvoice[2] if you want to go the bespoke route. Not this.

[1] https://htmx.org/.

[2] https://javascript.works-hub.com/learn/a-javascript-free-fro....
https://slimvoice.co/
I see both, I am sure.
Not naively: this kind of pipelining is partial function application, not coordinated parallelism (the way Unix pipeliens are).
Of course queer as "unusual" predates "queer" as gay. :D It's a reclaimed slur. It was a negative label applied to people who ultimately decided to make that negative label a part of their identity.
> It sounds like you are afflicted with the same affliction as your dad, just in the opposite direction (especially if you actually cried over typing this post).

I don't think it's exactly completely delusional or obsessive to be sad that your dad is now financially unstable and obsessive about a single thing to the point it's alienated the people around them.

You can be well adjusted and sad that someone close to you is on a bad path.

You can even resent people you blame for enabling that path.
https://archive.ph/Bzgjm
Gmail Size Search – Find All Emails with Large Attachments (2019)
someone show us bypasses for all these mitigations that don't mitigate anything please
Yes, you're absolutely right. I also don't like spicy foods, if that's something to note. It feels like torture if it is overly spicy and takes away from the experience.
Can't reply to the reply to your reply but... Blobs can be used here and avoid the inefficiency of data URL conversions
Is vacuuming that tiring…? Maybe wear earplugs, that’s what I do.
I think your impression of what constitutes 'normal' in this regard is a few generations out of date.
OK, I'll bite, where are you logging in naked? Some eyes wide shut situation?
Yeah, perhaps if only there were a structured markup language that could be used to provide this information in an accessible manner with separation of concerns between content and display.
Not having victims of a specific crime serve as juries of a trial for that crime isn’t specific to sexual assault.
I actually said "je voudrais acheter une bouteille de l'eau", but pronounced so badly they thought I wanted the loo.

It took a second person demonstrating the proper pronunciation of "bouteille d'eau" for me to actually get said bottle of water, despite much pointing at the object in question.
In Soviet Union, they were.

Among other things, universal employment shown to do the same as no employment: a lot of people binge drinking and not caring to do anything useful with their life. Work ethic problems surfaced in a bad way.
It's more an example of what such resources (I specifically avoided focusing on the money) could achieve, rather then air-conditioning a few cubic kilometres of desert.

But compared to a hundred billion dollar motorway perhaps it's actually a better investment. Maybe they genuinely will hit on how humanity can live in zero carbon harmony with the world. It would be pretty ironic that the Saudis crack that one first and finish what Paolo Soleri started.
I love this type of projects and the people that spend time on them are simply amazing. I plan filling my home and garden with micro greens. Would be really cool if i could ever achieve what this retiree has. I think basic plant growing and a little bit of practical agriculture should be part of school curricula. Losing such skill is detrimental to society. Anyone can grow at least one king of vegetable and it should be an encouraged practice, even in apartments.
That's a very broad question!

I guess the first thing to do is work out why it is unexpected, and then find out how long it has been going on for, or if it is new.
I think we have different motivations. pip-compile can only fetch and install dependencies which have been declared.

For example, let's say I have a malicious yaml parser package. It should not need requests as a dependency. The odds are that a project may have requests already installed as a sub-dependency of another dependency. I can then just try and import requests in a try catch block and if available, and fetch malicious artefacts, for example. Panoptisch would report this.

Also, the usage of operating system or builtin modules such as socket, sys or importlib is not something which is analyzed by pip-compile.
Figure how to make it reproducible first. If you can do that the debugging often takes care of itself.
Agreed. The shear volume of permutations out there now may be adequate for many beginners that aren't yet comfortable with 3D design clients.
There is a huge opportunity on the backend for ML Engineers, running these models in production is expensive.
I dislike the hectoring, schoolmarmish tone, but what really struck me was the incomprehension of how AI actually works. To wit:

> Most of these programs work by learning from the styles in the images they’ve been fed. So if they ingest an artist’s distinctive work, that work eventually starts to bleed into the program’s new “original” creations.

I'm really amazed Polygon published a piece that gets something so basic about its topic so very wrong.
>It is very hard to check if a certain image is visible or not

Canvases are rectangles. The viewport is a rectangle. Checking if rectangles overlap is easy.
yeah, this was particularly ironic.

The back button has evolved alongside SPAs, and users mostly don't expect or want their back button to take them back through the hundreds of small state changes they've caused by interacting naturally with a UI.
PNG, while being a very nice format, is dramatically larger than JPEG, JPEG-XL, AVIF, HEIF etc. For multi-megapixel images that size cost adds up.
impossible!
Level 4 means full autonomy over all normal driving conditions. Waymo does not handle complex construction sites like a normal human driver would, a fact verifiable by many thousands of people. It does not have level 4 autonomy.

Looks like the article got backlash too because the editor inserted an editor's note in quite large font right in the middle of the article clarifying it.
The Age of “Good Enough”
Let’s not diagnose people based on a few sentences.
I don’t know a lady who couldn’t kill a bug but I know plenty of guys who can’t change a tire.
This a very well put comment with a great analogy. A new emerging paradigm of action-driven LLMs is taking the approach of using the reasoning abilities of LLMs to drive agents that can take actions, interact with other tools and computer programs, and perform useful tasks like autonomously programming, customer support, etc

And I think you’re right when you say that they’re lacking in recursive thinking abilities. However, their reasoning abilities are pretty excellent which is why when you prompt them to think step-by-step, or break down problems to them, they correctly output the right answer.
>I'm actually very intrigued by the whole "let's take a step back and move a lot of our logic back to the server" approach to modern dev,

What's old is new again.

There's an entire generation of developers now who have no concept of the old world. They started with React/Angular/Vue and have no idea that SSR was the standard default for decades. And now it's a "new idea" that is held up against JS development with no understanding of why and how we got to where we are, and the tradeoffs that were made along the way.
Fuel out of thin air: CO2 capture from air and conversion to methanol (2020)
It's also possible that women's expectations of masculine behavior have changed in 30 years...
A friend writes:

In 1962 I had a summer job in engineering with Bell of PA (well before the breakup of AT&T) so I have some knowledge about the long lines network.

Interestingly, at that time AT&T owned many of the local operating companies (e.g., Bell of PA which actually owned Diamond State Telephone Company, the operating company that covered Delaware). There were many other operating companies that were not AT&T owned. IT&T was an example of one that owned lots of local operating companies. How they interfaced, both technically and financially, with AT&T is beyond my knowledge.

Long distance phone calls were routed through a hierarchy of several levels of aggregation, ultimately to something like as few as ten (recall is hazy) top-level centers. These had long distance microwave communication from one to the next, where the call would then be routed downward through its hierarchy to the local destination. I don't remember the specific nomenclature for the top-level centers. One is in downtown Wayne. You can see the tower on Google Maps or Google Earth at West Wayne Avenue and South Bellevue Avenue. It used to have horn antennas, but now has various other dishes and antenna structures.

As I recall, the horn antenna can be thought of as being a sector of a full dish. At the frequencies then in use, the full dish would have been huge, probably too big to put up on a tower. However, for a reasonable signal to noise ratio, the directionality you get with a dish would have been important. So they used part of a dish.

I don't know whether in general, they didn't have hazard lights. I'll have to check some night when I'm out, but I'm pretty sure the one in Wayne does have lights. Both the FCC and the FAA have regulations regarding when lights are required. If I remember from my ham radio days, one of the criteria had to do with the height of the antenna and the distance from an airport.
> essentially taking over the role of his mother.

I hear this complaint a lot, but the inverse is also true. Many women expect their male partner to take over the role of her father. Any relationship that has severely asymmetric exchange of value is ultimately doomed.

But it seems reasonable to me that in a healthy relationship, each partner at least partially replaces the role of the other's parent, so long as the exchange is balanced.

Relationships of all kinds are ultimately built on value exchange. Parasitic relationships are those in which the value exchange is severely unbalanced. And these kinds of parasitic relations inevitably end, either because the node getting sucked dry realizes it and cuts the bond, or because the parasite eventually sucks its host dry of all potential value and then cuts the bond to look for a new host.
It's funny you say that because in some of the more beloved games like Pac-Man, the ghosts follow definite patterns to the point where you can learn a route through a level such that the ghosts will never catch you.
Maybe there isn't a precise definition, but clearly for humans thinking and knowing is related to having bodies that need to survive in the world with other humans and organisms, which involves communication and references to external and internal things (how your body feels and what not). This is different from pattern matching tokens, even if it reproduces a lot of the same results, because human language creates a lot of patterns that can be matched.

We could say both humans and LLMs are intelligent, but in a different way.
I get it, especially for a desktop software. I think Sublime’s new model is a good balance, in that you get updates for 3(?) years from license purchase, and after you can still use it as it was when the license ran out, but need to pay for the updates from then on. It does nag you but you can disable the update check and the only visible thing is in the corner saying you should buy a new license.

I think a subscription model can work if done right. It’s unreasonable to expect work on software to be free (and great if it is, like with so many open source programs and libraries), but it also isn’t okay to require payment in perpetuity just to use the program. With these in mind I think models like Sublime’s or Sketch’s are the right balance.