skysight-inc/HackerNews huggingface dataset:
Why is a passkey any different? Can’t one think of it as a password stored in a password manager? Is it more that you don’t want your browser to function as the password manager?

There seems to be a API already for a browser to delegate passkey storage to a Yubikey, can’t a password manager do the same thing?
Battle tested Celery has dropped the ball so many times during operations and updates, that I would be very uncomfortable giving that recommendation.
They also have remote operators standing by who jump in when the car gets confused tho…
Yes, they recognize now that WebP was a mistake, which is why they won’t single-handedly force any more image formats upon the web.

(Safari learned this lesson earlier when they got stuck being the only browser to support JPEG2000, and Microsoft with JPEG-XR)
I feel the need to point out that it's a long road from steer to hot dog, and you don't usually get them from a rancher.
How Old Are You? South Korea Tries to Simplify What Should Be a Simple Question
Breaking up with JavaScript front ends
Seriously True. I bought my 3 in 2019; and my biggest hesitancy at the time was Musk being (insane) and tanking the company preventing me from keeping the car on the road long enough/resale value.

Today? I do <3 my car, but I'd likely not touch new one with a 10 foot pole; especially as a new customer and there actually being other EV Options available. It's distressing because Tesla does (mostly) what I want in a daily driver well.
I wouldn’t call San Francisco easy…
This game is a great example of how piracy helps rightsholders. Because the original game was cancelled (and the multiple corporate restructurings Atari went through), the only copies of Akka Arrh in existence were in the hands of private collectors. Typically, these collectors act like they own the exclusive rights to a game simply because they got a hold of the board. This often makes it impossible for unreleased games to see a legitimate release, as the collectors will either not cooperate at all, demand far more money for the ROMs than the game is likely to make, or try to place restrictions on the release (must be digital only, the ROM files must be encrypted, etc.) in order to "preserve the value" of their collection. Meanwhile, if the ROMs are freely available online, the rightsholders can just download them and avoid all of this red tape entirely.

In Akka Arrh's case, the ROMs were leaked to a ROM site (supposedly by a vigilante repair tech) against the will of a number of collectors. While this pissed off the collectors who no longer had exclusive access to the game, it also meant that the game could now become a legitimately licensed part of several Atari compilations (such as the excellent Atari 50).
My comment was apparently too concise to give you a sense of complications. I can think of those concrete problems:

- Rendering images from a different origin without CORS. This is a fundamental limitation of any JS or WebAssembly solution and can't be fixed. Thankfully this use case is relatively rare.

- Not all approaches can provide a seamless upgrade. For example if you replace all `<img src="foo.jxl">` with a canvas DOM will be changed and anything expecting the element to be HTMLImageElement will break. Likewise, CSS Painting API [1] (a relevant part of CSS Houdini) requires you to explicitly write `paint(foo)` everywhere. The only seamless solution will be therefore a service worker, but it can't introduce any new image format; it can only convert to natively supported formats. And browsers currently don't have a "raw" image format for this purpose. JXL.js [2] for example had to use JPEG as a delivery format because other formats were too slow, as I've been told.

- It is very hard to check if a certain image is visible or not, and react accordingly. This is what I intended to imply by saying that canvas has to unconditionally retain all pixels, because if implementations can't decide if it's safe to unload images, they can't do so and memory will contain invisible images in the form of canvases. Browsers do have a ground truth and so can safely unload currently invisible images from memory when the memory pressure is high.

[1] https://developer.mozilla.org/en-US/docs/Web/API/CSS_Paintin...

[2] https://github.com/niutech/jxl.js
You're changing the protocol!

Nobody has ever disputed that it's possible for the Matrix team to build a secure messaging protocol. I'm sure you can. But: have you yet?

By way of example: TLS 1.0 is dead as a doornail, too. If you like, we can use a different word to capture the equivalence class here. TLS 1.0 and the current Matrix protocol: "ex-parrots".

This whole situation is wild. What we're discussing on this thread is the single most impactful set of cryptographic vulnerability findings against any secure messaging system ever. And this thread is, I think, one of a very few places on the whole Internet where there's even a conversation about it. Everybody else is just rolling along as if nothing happened.

If I sound mean about this, I don't mean to be. But, fair warning, I'm in full-on "wake up, sheeple" mode over this.
This paper and a recent post by Sebastian Raschka (where he decomposed a Forrester report about the uptake of technologies in industry) is alluding to something I have witnessed in system/control design and applied research.

Both LLMs and massive CV architectures are NOT the holistic solution. Rather, they are the sensors and edge devices that have now improved both the fidelity and reliability to a point where even more interesting things can happen.

I present a relevant use case regarding robotic arm manipulation. Before the latest SOTA CV algorithms were developed, the legacy technology couldn't provide the fidelity and feedback needed. Now, the embedded fusion of control systems, CV models, etc. we are seeing robotic arms that can manipulate and sort items previously deemed to be extremely difficult.

Research appears to follow the same pattern...observations and hypothesis that were once deemed too difficult or impossible at that time to validate are now common (e.g., Einstein's work with relativity).

My head is already spinning on how many companies and non-technical managers/executives are going to be sorely disappointed in the next year or two that Stable Diffusion, Chat GPT, etc. will deliver very little other than massive headaches for the legal, engineering, recruiting teams that will have to deal with this.
It's true that using a vector port for this is overkill, how would you instead tell the emulator that metadata is available?
As a technophile, I always disagree with that sentiment. Michelangelo cannot sculpt the Pieta with a sledgehammer and sticks. These days we need highly specialized tools to do our work. These highly specialized tools require specialized developers. The only alternative to this is low code/no code tools. Low code/no code is great for green field projects, as you can ensure a steady pipeline of such developers.
See article?

But also, Celery has an awful DX. I think the question is more, why do I need celery when Postgres can do the job itself?
wow, that's a very interesting perspective on the difference between 10 and 12 as numeral system bases.

also, what a terrible state of affairs for obsessively-minded people. that we cannot even out buns and hotdogs.
It doesn’t exist without other resources either. What I’m trying to say is, “companies are people” is not true - decisions made by companies are not the decisions it’s employees would normally make if they were not selected - or forced by circumstances - to be aligned with company goals instead of human goals.
Could anyone comment on recovery options? If Yubikey, smartphone or computer breaks, how do I login?
That will make you lose a lot of productivity boosts SQL can give you.

Obviously, if you anticipate to have very high traffic and applicable usage patterns, do use that advice, but if your apps anticipated usage pattern is in fact not "very high rps per buck made", then I recommend the opposite.

I've went the whole way from very-well-abstracted-away services/repositories to an almost complete lack of abstraction.

Direct SQL or ORM in your functions, operating on many models at once, with a real postgres database available to all your unit tests, treating the SQL code as part of your application logic. Transaction per test so that unit tests are fast to run.

I've been very happy since. SQL is very powerful if you use it as SQL and not as a glorified KV store.
REPL transcripts (i.e. bash sessions, python REPL, etc) tend to be pretty good demonstrations of "working up to a conclusion". And, not coincidentally, putting GPT in a REPL environment yields better results.

Other good examples narratives that include a lot of internal monologue. Thing a book written in the form:

> The sphinx asked him, "A ham sandwich costs $1.10. The ham costs $1 more than the bread. How much does the bread cost?"

> He thought carefully. He knew the sphinx asked tricky problems. If the ham costs a dollar more than the bread, the bread couldn't possibly be more than 10 cents. But if the bread was 10 cents, the ham would be $1.10 and the total would be $1.20. That can't be. We need to lose 10 cents, and it has to be divided evenly among the ham and bread to maintain the dollar offset. So the ham must be $1.05 and the bread must be $0.05. He answered the sphinx confidentally "The bread is $0.05!".
This isn't a "9 out of 10 dentists recommend using our product" situation, and cellphone companies have been sued for failing to deliver true unlimited plans.

It is being marketed as "Full Self Driving", and the CEO is publicly saying it is "in beta", "coming next year", and "just waiting for regulatory approval". In reality it needs constant driver supervision, is still primitive enough that it is directly linked to multiple fatalities, has been coming "next year" for over 6 years, and is clearly not even remotely finished. Customers have paid thousands of dollars for a feature they are not able to use, half a decade down the line. They may never be able to use it as advertised at all. The product as delivered is substantially different from anything the company says.

It's like saying your car can do 0 to 60 in less than ten seconds and then delivering a car without an engine - while putting a statement in the small writing that the car currently only reaches this in freefall from a mountain top, but pinky promise that they will install the engine in a few years.
Pure politics is clearly and officially the only reason why Google does things these days.

Best image codec on the planet has "not enough interest from ecosystem".

Being able to say this on a public mailing list with a straight face goes a very long way in showing how disconnected from reality folks at Google now are.

And it seems that comment comes from someone who claims to be an engineer ... that also goes to show the quality of engineers who still work there, where reality doesn't seem to factor in decision making anymore.

There was a time where one of Google's motto was "put the user first and everything else will follow".

LOL, how things have changed.
> you're going to be ignored or drowned out if you actually do find a dangerous scandal because there's literally zero shift in tone

And consequently political figures will respond to the muted effect of this stimulus by up-regulating their performative, attention-seeking discourse.
Someone stealing the wheels off Snowpiercer.
I use Patroni behind HAProxy setup to automatically point to the new active host in the case of a failover. It's not a huge scale setup though so I'm sure there will be better ways or other input on this.
I've gone this route before and debugging your system can become problematic, especially when using adapters to format tables as JSON. But it works and the dev speed is unparalleled.
I don't know when it breaks.

But I'm on a single medium sized Linode and doing full-text search over 120M small (< 1KB) to medium (< 10KB) text documents and it's still so fast I'm not sure that I will ever need to consider an alternative.
Yes! The human body has the potential to do a tremendous variety of poses.

To keep it interesting for me and my artists, I regularly scan the Instagram posters I follow, as well as other sources (like classical art sites), and save interesting ones I'd like to try.

Then I run a slideshow of the poses on my home TV. I'll take a moment to look as I pass by while doing chores, or I'll spend some dedicated time actually doing the poses for timed intervals.
This whole thread smacks of this type of cynicism - apparently a lot of tech people now really, really hate Elon Musk.

Andrej Karpathy addressed this point in his recent Lex Fridman interview - more sensors aren't necessarily better, and for each sensor you introduce a whole host of supply chain issues and physical constraints. By sticking to one sensor type that contains all of the information theoretically necessary to make decisions they've simplified the problem.

They bet pretty big on this approach... including by making their own silicon. I don't know how anyone could really believe that they're not earnestly pursuing eventual "Full Self-Driving" capability, even though they may still be far from that goal.

What they've achieved thus far is really impressive. That took a LOT of work.
Lubbock. Tyler. El Paso.
Places where real estate is cheap, and there are no democrats to have work rules.
Thanks! If the guy with pinkie ring won't stamp the plans, it's not going anywhere.
Solaris is a history at this point.
It is unlikely that you needed long exposures outdoors. The luminance levels in full sun can be easily 100x higher than indoors, with a corresponding reduction in exposure time.
Harder to turns vehicles as a SaaS product with physical override features
To be fair, I don’t see a conflation here. He chose not to elaborate on generator functions, but that appears to be due to a defensible conscious choice about article scope.

Imo it’s a well written, technically accurate article.
> Phone has a significantly higher chance of breaking.

_Breaking in_ is very hard since the security model for phones is very high, especially in cases of Pixels and iPhones. Even if a pin is used, the security chip makes it very hard to break in. If you mean also in case of losing it: Not as a small device that has much more higher chances of being lost.

> Edit: also, if I keep it on the phone, will Apple/Google deign grant me access to export my secrets on demand or will they deem I cannot be trusted with such power?

Don't know about that, since passkeys are still pretty new, but probably it will be an option. Does a yubikey allows you to export secrets?

Edit: typo
I'll buy the Full Self-Driving Driving software if and when my insurance comopany offers a discount for doing so.

Otherwise, the car is fantastic to drive without it. I could not care less about his antics.
Nearly everyone in a field starts out behind.

MS and PhD students start out behind and they’ll spend most of their time during the next 2-5 years on irrelevant things (e.g. 95%+ of their graduate coursework will be behind the state of the art; most PhDs will focus on a niche project that fails to have major impact or relevance by the time they graduate).

It sounds like OP just wants to learn out of general interest, which is fine. But others shouldn’t be discouraged. A sufficiently-dedicated person with talent and a strong classic ML foundation can catch up reasonably fast, to the point of getting their foot in the door professionally.
Just use the right tool for the job at hand. If it’s Postgres for now, sure. There’s really nothing more to this. Period.

But saying this would not make for a blog post. I can’t help but categorize this post as juvenile at best. Generalizations like “use XXX for everything’ should be avoided at all costs. No software product serves well to such sweeping generalizations. I’m surprised that it’s coming from a CTO. They should know better if they’re worth their salt .
The Ancient Economy is a book about the economic system of classical antiquity
This makes me wonder if GPT could be any good at defining its own control flow. E.g. asking it to to write a python script that uses control structures along with calls to GPT to synthesize coherent content. Maybe it could give itself a kind of working memory.
I second that. SPs/funcs have this weird tendency to always stay hidden in the fringes and out of sight, easily forgotten when adding new functionality, easily overlooked when making changes elsewhere.
C++ is heavily customized C. The heavy customization make Redshift a columnar database and more ideal for querying large amounts of data quickly. How does Timescale help Postgres in this area?
I don't know another, but Pale Moon does support it so your original statement is just false. And it can be actually a good way to test a proposed patch to Gecko---many issues were found and fixed after it first got JPEG XL.
Things can change in 12 years. Google also killed off it's WEBP v2 development last month. Apple is all in on AVIF/AV1 but has shown little to no interest in JXL (might be burnt from back when they supported JP2).
I actually said that! A base install runs fine on 8.1, but plugin developers are lightyears behind it seems.

> but that's just Core. A lot of plugin developers are lightyears behind it seems.
I was motivated by Stuart Russell's Reith Lectures in 2021 to pursue the field outright

For anybody intrigued, here are those Reith Lectures:

https://www.bbc.co.uk/programmes/m001216k/episodes/player

https://wikipedia.org/wiki/Reith_Lectures
I was not referring to "motivated individuals". I was referring to developers with actual technical skills and actual experience with the tools used by the development team. What I often see is management being told we can hire the cheapest developers with zero experience and throw in scrum/agile... and we will achieve the same outcomes. The result is a mountain of tech debt and pagers going off at all hours at the day.
There’s a difference between “legal” and what most people's insurance contracts say. Most normally-priced collision policies have clauses stating that if you were driving in excess of 130, the insurer reserves the right not to pay for damage you did to your vehicle, even if was otherwise legal for you to be driving over 130. Have fun even getting liability after that.

Modifying your car in a way that would make it fail TÜV (German car inspections, which other posters have noted are far more exacting than even the stricter US states) would be grounds for non-payment no matter what you were doing, as you’ve intentionally made your car non-roadworthy.

It’s also illegal to modify a car in a way that will fail TÜV, which means, in the eyes of the law, you’re doing the same thing as the guy driving a rust heap that he won’t bother bringing in for inspection because he knows it will fail.

Beginner's Guide to Germany: any course of action whose success relies on an inattentive bureaucrat or non-diligent technician is more likely to bite you in the bum than back home, unless “back home” is Singapore.
I'll also say that all of this value will probably be completely unapparent to someone who tries FSD Beta for the first time or infrequently, because like ChatGPT, FSD Beta is not a human-replacing AI that always gives you the right answer. It's a tool you learn to use, by building up a mental model of it over time.

The first time you use FSD Beta will be a lot more like the first time you drove a car in actual traffic, or the first time you drove with a student driver. You'll feel safe enough to keep doing it but it will be very unsettling.

But over time as your model builds of how it behaves, it becomes a tool you'll want to turn on in a growing number of situations. And you'll miss it.

The value will also be much less apparent to someone who does short (<1 hour) drives on familiar roads.
I use it with the picture element as the preferred codec. I found often AVIF was a bigger size than WebP and JXL so I stopped bothering as the encoding times are just awful.
> Use Postgres to generate JSON in the database, write no server side code and directly give it to the API.

Who does this? "give it to the API"... ? Still sounds like there's "server side code" there if there's an "API" involved. Surely they're not meaning let front-end code hit the database directly?
Recent homebuyers and real estate agents downvoting me
"Use Postgres for caching instead of Redis with UNLOGGED tables and TEXT as a JSON data type."

What the heck?! No!
Musk's Twitter takeover is just an added layer of bullshit on top of the FSD lies. People have paid thousands of dollars for a "feature" that will run them into center dividers, trains, and children but disengage a fraction of a second before impact so it can't be blamed. Tesla also requires NDAs be signed to uphold service agreements and fights tooth and nail to keep FSD's failures out of the news. Meanwhile Musk is over promising the feature and saying it'll be done in a few months and it's the future of the company.

So you'd think if it was so important it would be his primary focus during his supposed 22 hours a day of work.

People can see the problems with FSD and then look over and Musk bought a fucking social media network to go play edgelord troll on. So it's a legitimate topic of discussion because the public is to believe FSD will be ready Real Soon Now™ and is super serial important yet it's obviously not the focus of the huckster that's been continually lying about it.
How to build a startup without funding by Pieter Levels
I love postgres for most things, but these days (Especially while my product is in early development, embedded, or just not internet-facing) sqlite is amazingly workable.

Killer postgres features however: Row-level security (Fantastic when you're using something like postgrest for rapid backend development [1]), and its built in fulltext search engine is 'good enough' for use cases like when you have an enormous users table and need to index something simple enough, like email addresses for quick login.

[1] https://postgrest.org/
I thought so for 30 years but changed my opinion recently. I even argued with the author of Redis for some time to add some functionality so we didn't have to write Lua and have another deployment target.

Now I do think there is a benefit in stored procedures and triggers (E.g. for audits) if they don't contain too much logic or complexity.
> Once you arrive you realize that Tommy the Terrible was just given his first command, he was promoted to the position due to being the member of a powerful family, and he commanded his unders to only refer to him as 'Tommy the Terrible', rather than gaining the title through the respect of his triumphs and leadership ability.

This is such an unfit simile. Your birth name is not "earned" either. You think Elon Musk's kid earned the name X Æ A-Xii (or deserved depending on your perspective)?
Synthesizing optimal 8051 code with an SMT solver (2020)
I don't care too much about the price.

I'm happy to pay a premium for great software that I use almost all the time.

I would not subscribe to anything recurrent though.
I'd guess that the 'free market' should apply punitive action by losing them customers, but that relies on customers having (or even wanting) accurate information. I guess they get round some of the issues by having the autopilot transfer control to the driver just before crashing and can then pin the blame on them.
Fully agree with this philosophy. With json support and timescale you can get really far. If you run into performance problems you’ve already won.
have you felt that way with anyone in network, friends, family, colleagues? Or hit a scenario where you are texting/messaging back-and-forth and suddenly the receiver is super confused and you are on trail on "clarifying" messages to correct what was said in first place.
> Under what circumstances do LLMs give answers that are reliably equivalent to or better than humans?

Which humans? Humans give a... fairly wide range of responses.