skysight-inc/HackerNews huggingface dataset:
While I don't deny that this a good and perhaps even the best solution I'm sure Yubico is happy with a solution that effectively doubles their sales.
i’d honestly love a full accounting of those stacks from browser all the way down to transistor. almost feel like we need to record it for posterity in case anything happens to our civilization
I’m also noticing the same. My rudimentary testing in dev console times shows that it “waits” for the most part, then immediately loads the page.

I had doubts about my ISPs DNS, changed it to use cloudflare dns, it didn’t help much.
I'd imagine China will indeed start to pull out all stops to attract younger migrants at some point, and I'd guess many may even come from India, and certainly from large countries with high fertility like Nigeria. But sure, it can only help so much if too much of the world's population is living in countries with unbalanced demographics.
That's so funny. In general academia needs to adjust to the new reality of Chat GBT. Instead of telling students they can't use it, the assignments should be more advanced and focused on creativity. Students should be required to use Chat GBT IMO.
Things You Want to Know but Were Afraid to Ask about Modern Data Stack (I)
arent many of the OSI layers effectively collapsed? eg TCP/IP has like 90% market share compared to alternatives and effectively function as a single layer. im not sure about the DNS layer but i think theres a case to be made there too
Interestingly enough, polling is still preferred in some cases of low-latency networking, because the overhead of NIC interrupts can become significant under high utilization.

Of course in those cases you're running on bare-metal with kernel bypass networking, so there's no user<->kernel switch like in poll
The UX there is pretty bad (I'm just normal user). Opens tab in the background, goes to read after a while. See large picture and single paragraph of text. Hmm weird (no info it's subscription based or whatever). Opens again and there's full content available until some laggard JS hides it.
How can you have sixteen of them if you are the sole tumblr user?
I really dislike the spare key solution. It forces users to either carry both keys with them all the time (and risk losing them together), or introduces massive friction into the account creation (have to fetch the spare key from whatever safe or friends house you store it in).

I don't understand why better solutions are not considered. Why not derive keys deterministically, so that you only have to backup the seed (a lá SQRL)? Or encrypt the new account with a public key, and store the private key in a safe.

To me, "use a spare key" is on the same level of unpractical advice as "just memorize long unique passwords".
Around 80% of my (admittedly very small number of) followers are bots, mostly poorly masquerading as women, and advertising porn sites.

They usually seem to unfollow after a week or two though, especially after I block them.
Quote from the paper:

Is Ownership difficult to use?
“Learning Rust Ownership is like navigating a maze where the walls are made of asbestos and frustration, and the maze has no exit, and every time you hit a dead end you get an aneurysm and die.”
— Student participant from [Coblenz et al. 2021]
Brazil

The big international companies here are not layoffing many Brazilian teams AFAIK. There are many reasons for that and we can discuss that further if someone wants.

The national unicorn startups are layoffing a lot. As they need to cut costs, they don't have much choice.

About the small/medium size companies, it's hard to talk about because some of them were smarter and stop hiring before this create a problem for them in the future. Others just follow the flux and now are firing people too.
If you can ask "an AI" to write you a story, why can't you write it yourself?
Thank you @gmays for submitting my article what a nice morning surprise! It's me Tom the author of the post. If you have any questions about it feel free to ask, I'm happy to answer.
> when the companies funding the research and launching the products realize that the tools are an existential threat to their profits.

Ahh, like Kodak when they were the first to create digital cameras, a good 10 years ahead of the competition, and decided to shelf it because it would eat the nice profits of their film business?

This strategy always works wonders :)

I would actually like if the big tech companies didn't invest in AI to keep their profits. They would eventually be swallowed by other companies that didn't.
Just because you are intent on me being wrong doesn't mean that I am. I'm simply not giving it the "respect" you desire.

Physical activity combined with some concentration takes a different skillset and type of attention than sitting in the classroom with the intent of learning new information. The examples not being good enough for you is not my issue.
nested virtualization is missing on m1/m2 on both MacOS and Asahi - it's unclear if this is a hardware or software limitation.
Unclear there's substantial additional value by it being decentralized.
** PLEASE READ **

You are not in grind mode. You are literally (mildly) depressed.

Every project you don't finish makes you feel increasingly unaccomplished, and tech is big on survivorship bias on great successes, while you are there, abandoning yet another github repo.

So you scramble to start building again, because you know you can do it, you HAVE TO do it. Because you feel that's the only moment when you feel you are doing the right thing.
In reality, the relief you feel is due to an oxytocin/dopamine cocktail produced by the rush of making something, that makes that haunting hollow inside go to sleep.

But it is only sleeping, it's NOT going away.

The more desperate you become to get an idea, the less you feel you are getting "worthy" ideas to start with. And you keep feeling worse.

Another side effect: the more you'll keep at this, the sooner and sooner you will feel unaccomplished with your next projects, abandoning them sooner the before, until you will stop building cause you can't take it anymore.

Grinding is about always working, for a reason. You are not grinding.

You are trying to extinguish a fire with matchsticks.

The superficial advice would be "put your energy in a hobby", but honestly it doesn't work that way.
Aside from seeking professional help, TRY to understand yourself better, WHY do you feel you have to build something great, why are you looking for success in the first place?

You know you are not really useless, but why do you feel useless? What is actually "useless and stagnant" (your words) that you are trying to get rid of?

The question might seem stupid or trivial ("duh, who wouldn't want success?") but it is not, and the answer is most likely NOT in your "work".
> you don't choose your managers. You choose your union reps.

Which are managers.

> your managers are strictly interested in the good of the business,

And said extra managers are strictly interested in the good of the union.
It seems indeed rather futile to plant trees for carbon sequestration. Depends on the exact situation, but simply put trees are often almost carbon neutral and at a fairly smale timescale (e.g. [1]) and even if they weren't we'd need a lot of them (e.g. [2]). To the point one starts to wonder whether these so-called 'climate trees' (a term commonly used by some groups in my area) isn't just a product of lobby groups and/or people who don't know a lot about biology or ecosystems. A tree is of course a perfect 'climate excuse': easy to plant a tree, easy to think you're doing something for the climate.

Now, the part about needing a lot of them is also true for these bioreactors. Still doesn't seem super practical. Nor is the storage or use of all that captured carbon? I mean in theory this is great, but practically it's a bit hard to tell if this is doable technologically.

On the other hand there are things which are (purely technically) easier to achieve and more efficient, like wetlands and peatlands (and that also goes for peat forrests, so yes trees) e.g. [3] The numbers are so huge that trying to make sure they don't degrade or aren't converted into farmland or sucked dry and trying to (re)create them by introducing or restoring wetlands to their original form, this seems like something which is actually worth it. I'm not saying it's the only thing to do, I'm aware such land isn't super popular nor practically useful, and maybe I'm missing something else, but it really looks like if you have the choice to either go plant trees somewhere or somehow try to protect peatland, the latter wins when it comes to sequestration.

[1] https://dspace.stir.ac.uk/bitstream/1893/31440/1/gcb.15229.p...
[2] https://climate.mit.edu/ask-mit/how-many-new-trees-would-we-...
[3] https://www.iucn.org/resources/issues-brief/peatlands-and-cl...
https://news.ycombinator.com/item?id=34882831
No-self is not really about eliminating the ego, it's about eliminating the craving for an ego. These two are not the same; in fact, the latter seems to be harder. It's why so many meditators anecdotally get stuck in their "Dark Night". I don't know what psychedelic "ego death" does exactly, but I'm skeptical that it addresses craving.
Ask HN: How do you send email verification code to your users?
As I'm developing a social media app, I need to verify my users by sending them a verification code via email. After researching various options, I chose to use AWS SES due to their low cost and relatively low development effort. However, just before our launch date, my production access request got denied, and I felt frustrated and confused.

In my request, I provided my use case, which is sending verification codes only when users request them. I also included a template of the email I planned to send, the number of emails I would send per day, and some general statements about how I would handle bounces, complaints, and unsubscriptions. However, the rejection letter I received from AWS was vague, and they stated that they couldn't provide specific details for security purposes.

Upon further investigation, I realized that sending emails is more complicated than I initially thought. For example, preventing bounces is essential, and this requires using a third-party service that verifies whether an email address exists. However, this won't completely prevent bounces. I believe AWS SES rejected my request because they thought I lacked sufficient knowledge and didn't want me to contaminate their IP pool.

However, my concern is that there are more traps than just bounces when it comes to sending emails. I couldn't find any useful resources that could teach me how to do it correctly and which service is the best. Therefore, I'm seeking advice from the community.

What email sending service do you use, and what steps do you take to ensure email delivery success while minimizing bounces and complaints? Any advice would be much appreciated!
Having people solve CAPTCHAs for you seems more ethical to me than showing them ads - at least with CAPTCHA the cost paid (here: your labour) is clear to the user.
> Economic output is a result of work done.

As a counterexample, an skilled American white collar worker who earns about 200k per year could buy about ten thousand avocado's per month. But does the skilled, say, programmer do more "work" than multiple Avocado farmers? So, economic output is not a result of work done, it's a matter of value created (US industry creates lots of value) and how much of that is captured.

So on the one hand, a shrinking population might reduce purchasing power by producing less work. On the other hand, as long as the value of the produced work increases, the implosion might not be so bad.
> Europe has nothing.

The company that develops Stable Diffusion is German.

I find it as impressive as ChatGPT.
> Requiring OSS seems like a fair tradeoff for the power that extensions wield

To be precise, I wasn't advocating requiring OSS, just source-availability. Extensions should have at a minimum a visible repository displaying the source code, where users and auditors can publicly comment or leave issues (ideally, which the maintainers can't remove). Chrome should verify that the extension code matches the code in the repo (without an additional build/compile step - the repo should reflect the exact code being shipped in the extension). This way prospective users can inspect the code of an extension without installing the extension first and mucking about in dev tools.

> Ability to fix and deploy bugs is important for extensions just like any other software.

Ability to fix bugs, sure. Ability to deploy bugs (without user consent or knowledge) is an antipattern ;P Third-party browser code should never be shipped to the user without their consent and full transparency into what is being shipped. Users who don't intend to inspect the updates can opt-in to automatic updates, sure.

> Obfuscated code is already disallowed

This is great! Though they distinguish between minification and obfuscation, which is bizarre. Intentionally obfuscated code is hard to detect. I was suggesting they also disallow any form of minification (or at least require extensions to distribute with minified and unminified options, and have minified bundles verified)

> It is already possible to know which extensions are active on a page: https://i.imgur.com/73lmozH.png. This is a better level of observability than what you describe because once an extension has access to a page, there is no way to prevent it from exfiltrating data from that page. The communication with background page is not relevant. There are myriad ways to exfiltrate just given access to normal DOM, unfortunately.

This is true, but even background scripts which don't have access to the DOM can communicate with the content script through sendMessage.

A user looking at the network panel on the page might not see a network request sending their password to a strange server if the message is being sent to the background script and the request is being made from there. All communication in and out of the sandboxed extension environments should be logged and inspectable from any page where the extension contexts are being communicated with.
On an even sillier tangent, it's a shame that Karpathy stopped making YT videos on how to speed-solve a Rubik's cube. I learned most of what I know from him, many years ago :)
Malicious code somehow hidden with whitespace?
This is a bit (a lot) dodgy.

I've had to provide background references for a number of jobs in the past. This could well come back and bite you - what if the person hiring knows people from the company you supposedly worked for? It's a small world out there, in particular if you're looking for roles close to home.
These days they don’t even post links it’s more “has this content been posted?” “Yeah you can find it on <site name>”

Which is why reddit doesn’t remove it because it’s so removed from the actual downloading.
Not just phishing, server side attacks can hoover up passwords all day long. Also XSS can extract passwords from password managers, etc. Passwords are dumb. The static/symmetric nature of passwords makes authentication fully transitive, where if A can be tricked into logging into system B, then an attacker on system B can use A's credentials to log in to system C. This is fundamentally broken.

We've had asymmetric authentication for nearly 30 years now, it's insane that people are still using passwords to authenticate to stuff.
> That's why I think we need languages that make it less mentally taxing for developers to write product software (because the logistics are already complicated), while features like the borrow checker, though cool, increase the mental overhead.

But all Rust do is expose those issues? For example, do you consider a type checker a burden or a help? Is being able to check at compile time that “hey, why are you trying to pass a nullable to a string? This don’t make sense” helpful? I cant count on how many times have saved my time debugging issues.

I agree that Rust is not for everyone. Not everyone will like types even if it good for them. I would argue that a language that can accept dev/random as source to be very popular especially because you can get started very easily even if that means you will spend the rest of your life debugging it.
I don't think there is no real world application for Web3 or NFTs, that seems pretty short sighted. Sure, there are scams, but legit innovations as well. I mean, the MoMA liquidated 70 million USD in art, including a Picasso, to buy NFTs.
> All professions have a union of some sort that police both the members and the employers - lawyers, doctors ...

Given that developers often get paid more than doctors already. There's nothing to gain there.
Can you provide some sources and comparisons then?
Remember, the map is not the territory. And we have many types of maps for many kinds of specialized purposes.

https://en.wikipedia.org/wiki/Map%E2%80%93territory_relation
Reddit also has your email.
See also the linked projects (https://kanjivg.tagaini.net/projects.html), which seem like a valuable resource.
I only looked at https://www.tanoshiijapanese.com/home/ and already thought this site is just insane with what it offers for free.
I get it that you want RISC-V to succeed - so do I - and to advocate for it but I really don’t understand why it needs this sort of comment about Arm. I see exaggerated criticism of the Arm ISA elsewhere from people who ought to know better too - it’s really CISC, it’s 5000 pages vs 2 for RISC-V etc. It’s just not necessary.
> It was still programmers using the language. Same story with SQL.

What are you talking about? Vast swaths of non-programmers are using SQL every day. Unless you consider anyone who writes SQL to be a programmer, in which case what you say is true by definition.
These are valid points, thanks for sharing. Will think how can I improve it
Thanks. I like your ideas, especially SSO, that's definitely could be one more selling point for big clients
> Sorry, are you implying that filmmaking is somehow less universal than software engineering?

Hollywood filmmaking is indeed not a universal phenoma. There are other centers of filmmaking outside the US that aren't part of this guild.
Dijkstra: On the cruelty of teaching computer science (1988) [pdf]
I’ve had the opposite reaction - on days when my acid reflux bothers me and makes eating seem not fun, I have no problem ingesting a bottle of Soylent (Original flavor)
> The main use case for crypto is creating ponzi schemes, skirting security laws, and other types of scams. The dotcom boom was not like this.

I'd say the dotcom boom was quite a bit like it:

- Completely overvalued companies without any real utility scamming investors claiming to revolutize X by doing it "on the internet".

- Evading regulation and breaking local laws, playing cat and mouse with law enforcement (e.g. Napster, Megaupload).

But yeah, unlike with crypto there were also more reasonable use cases.
Bad managers are very common.
Looking forward to this. It seems lately you can only get < 35W x86 CPUs through laptops or some very niche vendors or even mystery sellers on alliexpress. I’d like something that idles at sub 5W like ARM SBCs do but without the whole OS or boot jank.

I’m pretty sure people will suggest x86 options that fit into that description but again it looks like you have to scrape the internet for stuff like intel 1[2,3][1-9]00t or wathever the AMD alternative is.
Hardware keys are vulnerable to other things. Like getting stolen, getting lost, getting broken or getting hacked. Uasually at a moment where you can't readily replace them.

Phishing is possible to avoid.
When the economy is crashing and more and more of society destabilizes, a huge amount of people will always look for politicians that will sell them "an easy way out". Being the politician that talks about inconvenient truths, the need for more immigrants, the need to keep high taxes as people are getting poorer and has a message of "hang in there" generally does not win people over.

Right wing anti-immigration parties sell an enemy (immigrants) as cause of all problems (they are stealing all our jobs!). In addition they sell tax breaks which also sound very appealing to people that struggle to get by on their current income. Of course all history shows that these "solutions" are lies, but history tend to repeat itself. The problem in a democracy is that the solutions that political parties present does not always have to be grounded in reality to be popular. Especially in these modern times with disinformation and conspiratorial thinking running rampant online (it's all Soros fault!).
This article contains a video of the defective train passing a webcam some miles before the derailment: https://www.post-gazette.com/news/transportation/2023/02/10/...

I got to that page by reading this page: https://e40.github.io/2023-02-18-train-safety.html
Finland doesn't only have education, it also has the childcare system and the public transportation. Remote first work and 4 days are not there yet, but Finland is also one of the first countries that started the 4 day work trials. Finland is AFAIK one of the furthest along in reducing the financial burdens of having children, which doesn't really seem to help.

As to why it wouldn't work in federated countries, simply put: federation does not solve bureaucracy, and bureaucracy is the biggest enemy of scaling public solutions.
Wow, this project is super cool. Thanks for sharing it.
Yea, this.

The same point or a similar critique can be made a few ways, I’d say.

Running with the brain/neuron analogy, there’s a measurement problem (as there is in real neuroscience!). The synaptic activity of the “meta-mind” has been recorded with keyboards, smart phones and plain text. These aren’t the native ways of human communication though, the synapses if you will. That’s more like spoken conversation and physical interaction. All richer phenomena.

To the extent that “textual” communication is now native/normal to humanity, it’s still partial in coverage of all human interaction, new, and shifting with tech developments like video/streaming.

So the internet is a lossy representation, apart from whatever other biases it might have, as suggested above.
> which includes everything in completed physics, chemistry, and neurophysiology

"Completed", which I take to mean stuff that someone already understands, now. But nobody understands how changes at a neurophysiological level affect mental states and thoughts. At best, we can say that some mental states are correlated with some neurophys. phenomena.

> she obviously knows exactly how her own brain works.

Not if I have correctly understood what author meant by "completed". Nobody knows exactly how a brain works.
There was something to talk about. People who are interested and knowledgable about it talked. News at 11.
Why fully absorb a book when you can just have it smashed against your brain?
We can also push people into storing some water fairly easily by banning use of drinkable water for filling pools, gardening and washing things like cars and houses. Most regions now have rules limiting private wells to places without access to the water system and that could also be extended to the whole country.

A rain water catchment system is quite cheap and nudging people towards investing would make a difference during the summer.
Btw this silence removal feature for youtube videos is available in newpipe and libretube for android and skip silence browser extension
I like listening to audio on >1x but those no sound gaps are important for me, as they let me catch up my thought to the audio, incase I lose track.

So, either I could listen to audio, using this tool, but keep the speed 1x, OR use >1x speed but not use this tool (i.e. keep the gaps).

Cannot do both.
Myths About Chinese Food You Should Stop Believing
Ask HN: Next generation of AI should be Artificial Imagination?
As i know, intelligence is less powerful than imagination. (Per Einstein quote), so next generation of AI should be about Imagination ?