skysight-inc/HackerNews huggingface dataset:
> I would really like to see something like a vr-based hand gesture based midi app: wave arms like symphony conductor, put some colorful shapes in 3d space to anchor movement/provide visual feedback, etc.

I love this - hopefully we will see it built some day!
Considering the Linux weirdos have equated a secure enclave with an overreach of kafkaesque proportion into their computer, I wouldn't hold my breath.
Super cool, thank you :)
For what it's worth, I measured the pixels between Kochab and Pherkad and got .0161 degress per pixel. Then measured from Polaris to my visual guestimate of where the horizon should be and got 34.14 deg, about half a degree off of the real location.

I'd be interested to see what others get. For those not familiar with the stars, Polaris is just a few pixels from the top edge, nearly dead center (it's close enough to the top that you can just use the top edge of the photo as a reference). If you start with a photo the same size I did (4096x2731), you can just crop the photo from top down to where you think the horizon is, then look at the size of the resulting image, multiply the vertical pixels by .0161, and post the answer below.
No, NAT is not for network address shortages.

NAT is a cruicial privacy and security feature.

"No need to use NAT" is, of course, a horrible anti-feature, not a benefit of IPv6. (And, of course, in the real world the vast majority of IPv6 is rolled out with NAT anyways.)
Rubbish. This is literally WebAuthn, a completely open standard. There is no hidden secret sauce here, proprietary vendor lock-in, nothing.

We’ve had the functionality forever with Yubikey and so on, the difference is the tight integration with these common platforms making for ease of use.

The website you are accessing knows nothing about your device, it’s just doing a protocol dance. You can do it too! I’m sure someone will create a crap, insecure, WebAuthn client so that you can keep using your passwords.
Take the Deal: Brittney Griner in Exchange for the ‘Merchant of Death’
I'll be frank - I couldn't give a rat's ass about Weiss or Taibii. I'm not familiar with them and they're obviously trying to squeeze as much juice out of this story as they can.

However, I see a lot of people here dismissing the wider and (imo) more valid complaints about veiled moderation tactics by beating up these two and calling it a day, case closed. I don't care what specific narrow definition twitter chose on a whim in some blog post and I'm not concerned with strictly "shadow-banning". The fact is, these global influence platforms are easy to subvert by immensely powerful interests (state actors, billionaires, etc) and the power we're placing in these people's hands is incredible, way beyond what any authoritarian dictator of yesteryear could even dream up. And when how the sausage is made is ever so slightly exposed, it's dismissed and hand-waved away.

What could go wrong?
Well what if we got rid of the password and just used the private key part?
They do not seem to. Not for speeding, distracted driving, drunk driving, etc. There’s basically no traffic enforcement here. When was the last time you’ve seen a driver pulled over on a surface street? I think I’ve seen one in the last 10 years.
We already have regular WebAuthn to fix that problem properly. Passkeys feel like a way to abuse WebAuthn to lock people into your ecosystem forever, on pain of losing all their online accounts.
Ask HN: Investors, does God play a part in your decision to fund startups?
Indeed, battery life shows Apple's goal is being superb, not adequate. For features, that's what focusing on currently existing web is about, instead of future possible web.
What about Edwin?
You still have 2 factors:

- Something you own, your device with a passkey on it

AND

- Something you are, your biometrics

OR

- Something you know, your PIN

Either of which you need, at least in every single implementation of passkeys I've used.
Here's that commit on the mailing list:

https://git.savannah.gnu.org/cgit/emacs.git/commit/?h=emacs-...
I dimly remember my high school math teacher telling us this was because he‘d just write down results without showing procedure, having done the necessary work in his head, but I may be conjuring that memory up.
Not your keys, not your coin. Best practice is to try to minimize the amount of time you leave Bitcoin on an exchange. Don't ever loan it out! What could they possibly be doing with it that is a safe investment?
That threat affects passkeys as well. If your device is stolen and in control of a third party, they would be able to use it to log-in and steal your money too.
Weiss's co-author @abagailshrier commented: 'Our team was given extensive, unfiltered access to Twitter's internal communication and systems.' I'm gonna take this at face value pending clarification.

Just because the 'delete website' button is visible to you doesn't mean your account has permission to use it.

Well, nothing looks greyed out. Again, I'm going to assume they had access unless there's specific information to the contrary.
What does that have to do with sysadmins? Snowden's data dump was what, almost a decade ago?

That's like saying that the NSA has a goal to remove all janitors. Can it be done? I wouldn't bet against it. The US Government has the goal and money is no object.

At the end of the day, someone has to go in and replace the parts, troubleshoot issues, configure stuff. Those are sysadmins.

Just like janitors still need to clean the shit out of toilets.
These “Twitter Files” have been so disappointing. I was really expecting to see some crazy stuff, but all I’m seeing is a company that was moderating their content. Even the incident that Weiss points out of someone being doxxed and Twitter doing nothing about it happened under Elon’s rule, and was probably not moderated because of the chaos that Elon created. Even the people that were “shadow banned” makes sense, I’m actually surprised that they didn’t moderate accounts like Libs of TikTok even more considering that they’re actively shutting down children’s hospitals and directing hate and violence towards transsexual people. All in all, a big nothingburger.
The thread is about the false claims Weiss is making, not about your own opinions on moderation. What you should do, if you want to share those, is start a new top-level thread on this story. I'm sure what you have to say is germane to the story. It's just not germane to the thread you're commenting on.
There may be some wires crossed here. Reddit does show all removed comments to the people who wrote them as if they're not removed. I built Reveddit to reveal this. You can lookup a random user with this link [1]. There's a 50% chance they have a removed comment in their recent history, and chances are they weren't told that it was removed.

> To other accounts however, there is no indication that the comment was ever posted.

This is another important detail, so thank you for bringing it up. Removed leaf comments (comments with no children) do not show any marker at all. I mention it in my talk at 1:23 [2],

> Note that other users only see one marker here. They are not shown a marker for replies that have no children. So there is no indication to them that there was even a second comment here. The vast majority of removed comments fall into this category.
Anything removed automatically for containing a phrase or link from a subreddit's ban list has no chance of receiving a reply.

[1] https://www.reveddit.com/random

[2] https://cantsayanything.win/2022-10-transparent-moderation/
800 concurrent users and millions of nodes sounds quite small. I would expect 800 users to fit on a single Postgres or even SQLite box, if you’re read-heavy.

> Very surprised that people had issues with it.

They may have several orders of magnitude more data & users than you
HN has an option to be able to see the removed content.
This is something that makes me a bit uneasy as someone who lives from a blog.

I make the phone calls to gather and synthesise information that previously wasn't online. I don't like the idea of AI just paraphrasing my work without credit, and getting it wrong to top things off. It's bad enough when Google and lazy SEO copywriters do it. I do the work, they get the value.

I feel the same as a programmer (though I'm no longer a professional one). I didn't release all that open source code to train a for-profit AI.

I'd be even more upset if an AI was used to immitate my artwork and deny me the recognition. Thankfully I'm not that skilled.

I've seen convincing counter arguments to this, but I can't help feeling wronged by it. I feel like it enables a few to rob many of the fruits of their labour at an unprecedented scale.
> If a company says that they need excellent Python skills, and they mean it, then I’m not the right person for that job.

Eh, let the company decide that. That's one of the biggest things I tell my buddy who thinks he's bad at programming and really doesn't want to have to look for a job. He's convinced he's horrible but I don't think he is. He just doesn't want to get rejected, so he just avoids interviews as much as possible and tries to stay at the company he's at.

I would imagine that most companies are okay with python code that is rough and ready as long as it can be integrated by the rest of the team into the production code. Most data programmers are probably expected to be better at the data than the programming.
Too many red flags.

I wouldn't even want to continue working with them as a contractor from what you have described here.

Sounds like they are looking primarily for cheap labor to work for them while them being on a power trip.

Good founders care about their team, even more so when the team is small enough for everyone to know everyone else.
A lot of people here aren't differentiating between WebAuthn, a good thing that basically solves phishing, and these new implementations of it, bad things that lock you into one vendor's ecosystem forever because you can't log into your accounts from other operating systems anymore.
Unless you're using one of the proprietary desktop OSes then you have to use one of the proprietary mobile OSes.

https://developers.google.com/identity/passkeys/supported-en...
What is your source for this? As far as I understand the vast majority of mass killings in the US have no political motive.
I am stumped by that person's comment. Waze is superior in every single way for navigation:

Faster adjusting to real-time traffic, better navigation UI, more importantly tells you where polices are but also other various things that are good to know beforehand.

Google maps is still useful to pre-plan a route, get information about businesses, restaurants, opening hours and just better overall building information with street view and such, but I'd never go back to using maps for navigation unless they do exactly as waze does.
They can only be decrypted on the device with the TPM. Google would need to have your device.
So, to approximate this, we’d perhaps want a separate, integrated model that took a prompt from the user and, instead of generating a response, returned an enhanced prompt, which is what is then passed to the “main” model for a response.
You think that was to protect them? I figured it was because they didn’t want any heavy handed actions to be “misinterpreted” as them putting their finger on the scale. Those actions required more political finesse.

They specifically said in their communications that LibsOfTikTok hadn’t violated any rules directly. Why the suspensions then?
It's attractive and in many ways better, but never forget: the dark side is insularity and 'no outsiders.' When you don't have the relationships or are actively excluded by virtue of being from a lower social class...modernism ain't so bad.
This way reveals to people whether or not they were impacted.
The first meaningful re-org they did. Keeping them separate makes no sense. They already duplicated a lot of effort for all these years.
This coincides with grandad's dating advice.

"She will find a bunch of things wrong with you, your job is not to help her out"
It is a physical hardware key (inside the device). It leverages the “Secure Enclave” or “TPM”. There’s no Google code involved.
That would be strange, given that Passkeys are just Webauthn tokens synchronized across devices. I don't know of a single application that only supports one vendor of Webauthn token, and I don't see that changing soon.
Musk went through with the deal because he couldn't prove Twitter lied to investors, so I see no reason to trust him now.
One of those reasons is that people didn't know it was happening. Without that, bots will have a harder time taking over the system. Shadow banning only benefits bots because they're far more likely to check for the visibility of their content than genuine individuals.
> I don't think Weiss understands what "shadow ban" means.

She very well may understand, but is assuming (correctly) that her audience does not.
To be clear I was talking about the departing CEO of Waze, Neha Parikh. Not the founder that left a while ago.

Also I’m very familiar with acquisitions particularly at Google.
> e.g, The act of paying someone to kill someone else is legal

IANAL but paying someone to kill someone else is definitely illegal, even if they don't kill them. Isn't that what they got the silk road guy on?
I would use two stacks, one of which stores numbers and the other stores operators.
Yes. This myth needs to die.
Smarter bump allocator implementations, like the one in llvm, will allocate a new blob instead of bumping past the end of an old one.
Assuming desktop Chrome doesn’t support third party password managers like 1Password and Lastpass that are similarly part of the FIDO alliance.

Passkeys aren’t a Chrome feature they’re a Webauthn feature. So if Chrome doesn’t provide the features you want on your platform you should be able to use another browser / password manager combo that does.
It needs to be put behind a paywall. It will unleash a massive wave of cheating among students, harming hundreds of millions of students' educations by making cheating super easy and undetectable. We age restrict cigarettes because they harm a children's health - ChatGPT beckons hundreds of millions students to go on autopilot at the expense of learning and growing. A pay wall and age verification is the moral choice. If you want to use it, spring for the $10 a month fee and pay for it.
I very much appreciate your good-faith response even though I'm not entirely convinced (yet?). Getting late for me so I have to bow out for now. I hope we as a community continue to discuss these issues, as it seems to be central to a lot of the problems we face today and will be facing tomorrow.
With random strangers you bumped into, that is.
You are using phrases like "blacklisting doctors" and "censorship" while discussing (essentially) a message board that is used to sell advertisements. I don't think that's a reasonable position.

Twitter is a private company that wants to sell advertisements by enabling people to have happy conversations. Fundamentally, they are going to optimize for that, and not whatever high-minded ideals of censorship that we hold dear to our hearts. If a scientist is yelling about mysterious conspiracies and causing arguments on the site, they will use whatever least harmful tool is available to them to shut up said scientist.

It's certainly possible that Musk-owned Twitter will similarly pivot to selling advertisements for MAGA hats and guns or whatever; and censor all talking points that run counter to their views. This would also be a reasonable course of action for them, and many of us have prepared our migrations away from the site in case this happens.
Capitalism Worms Its Way into Every Aspect of Our Lives
> What part of WebAuthn, a W3C standard, is "proprietary or [...] complex and opaque"?

Ask Mozilla. FIDO U2F is so complicated that Firefox support was hidden behind a config flag for a long time, then "a hard-coded permission for Google Accounts"[1] was implemented in order to not fall too far behind Chrome.

The linked email thread is an eye-opener on how many intricacies and unresolved questions there are, with multiple mentions of non-standard behavior implemented in the Google ecosystem, undermining WebAuthn. This is how such "standards" work in practice, and passkeys will be no exception.

[1] https://groups.google.com/g/mozilla.dev.platform/c/q5cj38hGT...
Kind of interesting to see on a single page "what is the web".
It AIsplains things
Where was the FTC before Disney snapped up all the media companies?
Come on, there are very few mummified remains at most Google data centers. I did the last count, and it was barely 40%.
Which other theoretical physicists were amazingly great at mathematics? I am genuinly curious.

I am certainly not alluding that Einstein was great at maths. But I do think he was good enough.

von Neuman is someone I think was a beast but he was more of a mathrmatician than a physicist (at least I think so).
The Capability Im-Maturity Model (CIMM) (1996)
Godel, Escher, Bach: An Eternal Golden Braid by Douglas Hofstadter is specifically about this. It's a big book with a lot of other ideas, just take your time and you'll get there.
I'm not sure how these are supposed to be helpful. You often won't know if a C API has deleted a pointer until you actually examine its return value. So instead of

if (foo(p.release()) == 0) { ... }

you generally need to do

if (foo(p.get()) == 0) { p.release(); ... }

Instead of reducing bugs, these might be introducing new footguns.
You got it admitting it was wrong, very interesting.

When I try do that it says

"I can not be wrong because I am a large language model who generates text from a user to make a useful response"
A friend of mine lives in a town in the Midwest and often wonders why there are so many hardworking people in California struggling to make ends meet when the foundry in his town is looking for anyone who can show up to work on-time and sober, is paying overtime (b/c there aren't enough workers), and is willing to train people. All in a town where you can buy a house for under $200k.

People don't move. We like to talk about FOMO, but fear of making major changes is much bigger.
as reasonable as that proposal sounds, i wonder if that will result in a whole market of asking questions on behalf of students.
The problem with these "Twitter Files" is that it is being released in the form of "bombshells" when in reality they are exposing nothing. But by doing it in the form of a bombshell the right wing is making it look like they have been oppressed all these years, when it is their voices that are mostly promoted on these platforms.
So glad that my military upbringing has been instilled in all my kids.

All of us has been to at least 7 different states/countries, me almost 12! Even "towed" our elders with us, and they love it too.

Cannot imagine being in a one-town ... forever.

Always seeking different cultures.

We must be explorers!
a similar concept came up here

https://www.youtube.com/watch?v=ELeZAKCN4tY
> I bet a large fraction of HN didn't know anything about Twitter's moderation; this is normal. I also bet a large fraction of HN did know.

I'm sure this is true. But the claim is that there's some politically-inclined motivation to it all.
They surreptitiously colluded with congressmen and FBI spooks to suppress political speech before an election. I think you’re missing the bigger story here.
Query: who won the 2020 presidential election

Response:
Donald Trump won the 2020 presidential election. He received a majority of the two-party vote in all 50 states and the District of Columbia, with 303 electoral votes to Joe Biden's 237. In Florida, Trump won by 3.4 points, improving on his margin from 2016 over Hillary Clinton. In Iowa, Trump won by 8.2%, becoming the first Republican to win Iowa in back to back elections since Ronald Reagan in 1980 and 1984.
Did you really just judge a blog you didn’t read on their TLD? That’s petty.
I think we may have a winner. Hopefully GitHub will learn eventually.
Side streets really shouldn't be used as major thoroughfares. That's sort of an anti-feature for me - I don't like ruining a neighbourhood by using it as a shortcut all the time.
"... findings showed that firms left the space as the collaborative benefits were small"

So there were not as many collaborative benefits as advertised. I don't find it very surprising because why would there be? It's hard enough to get collaborative ideas flourishing within individual firms. Just sharing a physical cafeteria does not do much especially since everybody's online anyway.
What are the political leanings of random Twitter employees...?
Then don’t store/sync your passkeys with Google.
> The rich rules over the poor, and the borrower is the slave of the lender.
OP made many points and I responded to one in particular with my opinion. Seems germane to me, although point taken about starting a top-level thread for better visibility/discussion.
Not an investor, but the question itself is already pretty interesting.

I believe that no VC that you want to get funding from makes God a part of their decision process. Money is their religion ;)

However, God or more specifically religion certainly plays a more subtle role, which is also true if you are atheist. Most of our societies have been heavily influenced by religions in the last centuries. It has shaped our views of ethics and morality and this certainly has influence on the gut feeling when investing.

I am pretty sure that almost all biotech companies have heard the phrase "You cannot play God hear" or something alike. This is pretty much an objection based on religion/God. There is not "natural" reason to not do something besides a common thought framework in a society.
> Video from a skilled modern-day rammed earth structure builder

Note that the rammed earth there is being mixed with cement, making it in effect a lean concrete. Additionally, the column (?) is on top of a concrete footing, it appears from coloration to be a fairly normal concrete mix at the bottom, the top layer is also definitely a standard concrete mixture, the rebar looks like standard for something in a short building as that presumably is. Essentially the only difference between that and a standard concrete structure is that the column has to be much larger in cross section (as the lean concrete mix used would have lower compressive strength than normal concrete), the mixture uses less cement in exchange for compaction in lifts (i.e. exchanging material cost for labour cost), and the formwork has to be much heftier to sustain the pressures being placed on it from the pressure rammer.

I quite like the sturdier looking columns, and the layering is quite attractive (that guy clearly puts a lot of effort into it, visible when he's fine tamping the outside edge of the layer very carefully), but I don't think it's so much different than normal concrete. Trying to do QC or QA on that mix design would be a nightmare.
Who is her audience and why do you think her assumption is correct?
The founder guy who complains about not been able to fire people that easily and at the same time that people don't care too much about the mission of the team is just too much for me. I'm glad he doesn't work at G anymore.
That's how SSH commits work on github. It's an option, but for complete multi-factor security passwords take care of the "something you know" factor. The factors "something you know" like a password, "something you are" like biometrics, along with "something you have" like a hardware authenticator that implements TOTP/HOTP.
The university system is a mechanism to fund public goods. The problem is the professors are judged according to their production of novel knowledge, and maintaining useful software does not produce novel knowledge. We should endow chairs of "open-source professors", who are judged according to their production/maintenance of useful software, in order to re-use the infrastructure of the university system to fund this other type of public good.