skysight-inc/HackerNews huggingface dataset:
I think this round of LLM will decimate some previously considered core parts of 'tech' in one fundamental way. Those already skilled in tech, will be able to garner huge productivity gains and displace the need for additional human support. I'll support this with two perspectives.

1) I began in tech in the mid 90s as a software engineer on a small team building a rudimentary ecommerce type app, written in C, compiled as an apache module, without a database. Now, multiple generations of programming tech later, look at the frameworks and higher level languages, tools and IaC, and you have amazingly complex and powerful systems being built by the same number of engineers in a fraction of the effort.

2) I, now as an engineering leader, can crank out a marketing blog if I put my mind and interest to it. But, I can write an outline and ask ChatGPT to finish it and it's decent. I can ask it to re-write my customer facing docs in a different style. I can do all sorts of amazing transformations of content, extract key snippets for headlines, write summaries, expand ideas, and I focus on the important knowledge work.

I think that this type of AI will cause those with experience that can leverage the tech to become even more entrenched as they can leverage experience and wield their influence via these tools creating much more widely felt impacts. Whether it be in marketing, sales, support, documentation, etc, the few will be able to accomplish much more with much less. Small teams with better tools will _always_ be more productive than larger teams.
As long as there's no "session identifier," even if unique and completely unmarriable to the PII, it doesn't matter. Any session ID where an ID represents one person runs afoul. Makes meaningful telemetry really hard without consent.

Everyone just consents anyway...
I passed with `(is tiger eatable)`. I don't get it. :D
My history with 1Password:

- Purchase a stand-alone license, getting well-performing and feature-complete native clients with several options for vault sync that are under my control.

- Upgrade to 1Password 8, a version that sounds great, but has quietly removed local sync unless you checked forum and blog posts before buying.

- Watch the clients go from being native to Electron and losing many, many features. Get forced into using the web app for simple things like seeing history.

- Watch browser integrations get progressively worse (check out the reviews on the Firefox extension, oh boy)

- Even if you've been using 1password 7 (the version you paid a good chunk of change on for, in 1Password's own words, a life-time license), you won't be able to use it with browsers at all soon https://support.1password.com/kb/202303/.

- Get popups and unwanted opt-out integration with social media logins, when I've gone out of my way to purge garbage like "login with google" from my internet experience.

- Get unwanted opt-out telemetry forced on you, which regardless of their assurance will eventually leak PII like it always does. People make mistakes, c'est la vie. I would have no issue with opt-in telemetry.

I think this is it for me. Forced telemetry is a small thing, but it's just one of many poor decisions. I'm sure it's a smart business decision and their investors will be happy finding more and more ways to extract value out of users. I just want a simple password manager, so after a decade this is it for my family and myself.
Welcome to the Age of Automated Dating
You should vote to join the EU, maybe it'll work!
I dropped 1P the day I ran a suggested update and it locked me out from making changes to my database unless I signed up for a paid subscription. FOSS or bust.
> backups possible for TOTP secrets:
>
> 1. Backups that are specific to the app that made them

I never thought about that. I always backup the key before I first use it, when it's shown for the very first time. Heck, I've written a CLI / text TOTP app (using some Java TOTP library) for my own use (fully offline / airgapped / paasword protected / showing six codes at once for the same code [+1 hour / now / -1 hour and previous code / current code / next code] and which also shows a public/commonly used example code, which is convenient to diagnose sync/clock issues).

> But this tool [1] knows how to take the information in that QR code and decode it and split it into the individual secrets for each site.

Like JBSW Y3DP EHPK 3PXP ?

In my experience every site that shows the QR code offers the possibility to see that secret (and those that don't are misleading users into thinking it's more complicated than it is).

A TOTP secret is just that: 16 or 24 or whatever characters. The QR is just an encoding of these characters. The "issuer" serves no role other than autofill the name of the service for you (and you're not forced to use the issued nameL you can use any name you want).

I never ever scanned a QR code to configure 2FA / TOTP for any site. I write the 2FA code down, then encode what I've written down (in at least two devices).
> What is not ok is opt-out telemetry for … data from your vault.

If I’m reading correctly, they’re pretty clear and intentional about not collecting data from your vault (regardless of opt-in or opt-out). It’s simply usage patterns of the UI.

Do you see anything that suggests otherwise?
I think that’s what they mean, but they are wrong. Ask any large legal firm in the UK if they’ve gotten rid of all transcriptionists, I’ll buy you a pint if they say yes
While I am very allergic to such data collection, if you're going to do it, this seems like the way to do it.

I'm not a 1Password user (and won't become one), but if I were, I wouldn't necessarily be in a huge rush to stop as a result of this.
If quick gestures aren’t working:
Turn off your phone, then turn it back on.

Some tricks never die.
Chatbot Arena: side-by-side battles between open LLMs
How did you factor in legislation changes to hit that 40% number?

There's about 0% chance we hit 40% without that happening. So it would make no sense to not account for it. Meaning that 40% is after changes?
Does it only support C2S as the API? Are there any clients which actually support C2S rather than the Mastodon API?
I hope they fix all the issues with unlocking. Sometimes it takes ~20sec to unlock 1Password. Sometimes unlocking the browser plugin causes the app to pop up, other times not. Sometimes it just doesn’t unlock. I think there are two kinds of browser extension, which is confusing. All very frustrating at times and only getting worse.
I don't like telemetry but I'm a happy 1Password customer, will probably opt-out anyway.
It'd be nice if it'd use the best resolution available but the Chrome icon needed to be fixed regardless. Windows doesn't guarantee a quantized DPI so the icon is always going to need to scale.
Hi! I work on card testing at Stripe and would love to help. Sorry to hear about this experience, would be great to dig in and see how we can fix it and improve our system.

If you could, shoot me an email and we can dig in? I'm at wmegson [at] stripe.com (will DM you as well).
And where modern Maths come from... Mosques tile embellishments are actually 2d representations of 4th dimensional math concepts...

-

Jeasus I have to explain this on HN?

--

https://www.newscientist.com/article/dn11235-medieval-islami...

https://muslimheritage.com/new-discoveries-in-the-islamic-co...

etc... much learning you need
The app has supported bulk QR code export and import for years. This makes it easy to transfer to a new phone, and relatively easy to make physical backups.
This is limited by the “big actor’s” perceived benefit of catching the bugs. They are already known to not be overly generous. Conversely, security companies can potentially monetize the same vulnerability over and over.
It'll probably remain for the very complex translation tasks that are performed by highly qualified experts, like translating poetry from archaic versions of modern languages and such. Also diplomatic exchanges and official translations of documents, where you can't just deflect blame to an AI tool for something that could damage international relations or leave someone without a visa or nationality.

More regular "business" translation will probably be displaced by AI tools.
From 1993-1994 and 1997-2002, I had private offices, one person [a few doubles] with a real, solid door. I’m class of ‘93, so this was most of my first decade with everyone having them.

I then went back to private offices for most of 2009-2016, but that was as a Director/plus with devs in cubes. After 2016, even VPs went into cubes, which I hated.
Because of telemetry we know what brings in the most money.

So while telemetry might show that moving an item from one group to another (just making something up) takes > 1s, fixing this will not bring in $.

So when we then do Sprint Planning all of that gets pushed to the ice box.
Given some of the controversies around poorly trained police, I'm not sure the problem here is that it takes too long to become a police officer. Rather, there aren't enough people trying to become officers, so the normal latency exacerbates issues surrounding the existing officer shortage. The absence of good candidates also drives down the quality of the average candidate, and has downstream affects as you mentioned.

Maybe, like with the other trades, something should be done to make the job more appealing, so more people try to enter the pipeline.
This is a predictable outcome of overriding the global operator new. It remains annoying that this was ever allowed, and is a constant source of pain for c++ standard library implementations.
This was bound to happen. I guess Epic's goal was just to stir some shit.
I feel like I have to wrestle with GPT to get the output I'm imagining a lot more than I ever have done with a camera.
Can the government not already purchase access to these databases?
Hence the ”must monetize” part. The investors expect to wring at least 5x their money, and selling $49 lifelong licenses does not net you billions
I see a problem. I'd say a majority of the posts on Nostr are media posts (mostly images) and the network relies on Imgur and other image hosting services for all content. Not very decentralized in practice.
As a Vi/Vim user my first mind was about reading in the command-line text editor, but seems like VI is some smartphone application. You might tell us what is needed to do and why is this special application so important?
There's also Honk[1] which is written in Go but has slightly wacky source and doesn't support the Mastodon API (but does provide an inbuilt web UI.)

[1] https://humungus.tedunangst.com/r/honk
Water management in southeastern Spain, the Alpujarras region, is a fascinating topic.

The local communities maintain very precise irrigation ditches ("acequias de careo") midway along the mountains. During the months of rainfall and snowmelt, the water flowing along these ditches is soaked into the ground up to the point where the ditch ends because all the water has been absorbed underground.

Months later, the water from each such acequia springs out clean and fresh at a specific location further down the mountain, while the weather is dry, and can be used for irrigation at a time that would be otherwise impossible.

The absolute differences with Iran's qanats are: zero infrastructure to develop underground, as all the water circulation happens along natural underground waterways, and clean, fresh water thanks to the layers of slow ground filtration.

It is my understanding that this system was put in place during the Muslim period of the Alpujarras, based on knowledge from Middle-Eastern dynasties whose people relocated to Spain. That seems to match the "Islamic Golden Age" period described in the article
This is so incredibly cool. I've always wondered if this were possible and it tickles me to see it done - starting in high school, no doubt.
If you are concerned with lockout and want offline, interoperable backups of your 2auth codes I strongly recommend Raivo. It can’t import from google authenticator directly, but it’s possible to extract the secrets with some docker script, and then enter them manually into Raivo.
It’s implied and assumed that you live nearby. See the response to other comment for more info.
Correct - I have trouble staying 100% in non-native languages.
> we build slow because of "environmental reviews" and regulatory capture. You'd expect autocracies to be able to execute quicker anyway.

To emphasize: the Hoover Dam was authorized in 1928 and dedicated in '35 [1]. Permitting private enforcement of NEPA [2] has been a disaster.

[1] https://en.wikipedia.org/wiki/Hoover_Dam

[2] https://en.wikipedia.org/wiki/National_Environmental_Policy_...
Cheap labor is good for corporations.
Proposal for European Union Artificial Intelligence Act
whatever was at the ChatGPT page, lol
It's enough to make me at least look for alternatives. If I'm paying for something, I'd strongly prefer to do so on my terms. I use Microsoft office in spite of the fact that it's basically just an industrial spying platform, because I don't have any other options. If I can find a password manager that's easy to switch too that doesn't spy on me, I'll do so. We shouldn't be rewarding companies for this.
Well yes, at a certain level we lose visibility into the internals and have to rely on penalties to coerce good behavior. Maybe a whistleblower law with a healthy reward?

What I want is to get all the private data collection out in the open. Average Joe can probably tell you that Google collects some information about him, maybe his browsing history or search queries. But how many people really understand that there are probably 100x or 1000x more scrapers out there putting together every bit of data they can find and correlating it?

I want to tightly regulate what companies can do with information they collect about you, especially once they start cross-referencing and selling it. Shine a very bright light on it.
> Can the government not already purchase access to these databases?

Sure. But providing mandatory registration and a legally-required API sure makes it easier. (There is also zero chance those data don't wind up accessible by every small-town cap.)
Our economy would have to be truly ridiculous if having robots do 40% of the work was a bad thing. I mean, that means we have almost twice as many people available to do the stuff that couldn’t get automated! The most obvious solution would just be for everyone to work a little bit more than half as hard as they used to.
> Anomyous telemetry is not PII.

That depends. First, no data collection is "anonymous" when it is transmitted. Any anonymity must come later, and then is only possible if the company aggregates the data with other users and deletes the original data that was collected.

PII/Personal Data are squishy terms. In the US, anyway, the legal definitions of what counts as "PII" leaves out an awful lot of actual PII -- so any claims that "no PII is being collected" is meaningless without additional explanation of what data items are being collected.
So workers were incentivised to downgrade 10 euro/meter wire paid by customers into scrap of 40 cents per kg? No respect for customers, no respect for the workers and no respect for the environment.
For now, jobs that can be performed remotely should also be the easiest to automate.

We'll see how long it takes.
If you depend both on schema and RPC, it becomes very difficult to gradually deploy changes without downtime. You’re forced to be both forwards and backwards compatible.

Worse, schemas are often only part of the contract. It’s very common to have logic and constraints in code, maybe even a majority. To share that across services you end up with shared models, then you end up with some utils with logic, before you know it you have yet another deployment difficulty.

Might as well just not split into services and make it trivial to maintain compatibility and deploy changes.
Show HN: Privacy-Focused, Open-Source Web Analytics
I didn't make the connection until now, but Jim Keller was on the Lex Fridman podcast twice [1, 2] and it was awesome. In terms of founders this is pretty great team.

[1] https://www.youtube.com/watch?v=Nb2tebYAaOA

[2] https://www.youtube.com/watch?v=G4hL5Om4IJ4
I didn't spend 76 minutes reading through the article, but I did click through to the Twitter profiles of the people he acknowledged as his sources, and they seemed like typical unhinged emotional scaremongerers who have a monetary incentive to doompost about the climate.

What I did find amusing is where our political beliefs aligned, namely our high distrust of government competency and cynical views of its corruption. There was a time when all leftists were like this. I'd have an easier time finding common ground with them than I would with the contemporary authoritarian leftist who blindly trusts the FBI and corporate media.
I didn't know this "puzzle" until just now.

Stupid question: What is the "tricky" part about it? How can someone who isn't completely retarded get this even wrong?

This puzzle is trivial, and especially doesn't require any kind of "thinking around the corner". So what is this about?

That language models can't do math (or logic) and can't even reliably tell which of two given written out numbers is the bigger one is imho a different story.

Language models are great for text. But when you need a tool for math and/or logic you should use an adequate tool. We have for example algebra systems for that. Or prove assistants. Or just good old Prolog. It makes no sense to use the wrong tool and than wonder that the results are terribly wrong.

But for the above "puzzle" you don't even need a calculator. So I really don't get the point.
There is a very limited segment of the population that are suited for being sales reps. Where do the rest go?
Hey, sure. Keep inventing stuff for me to do at work. I don't mind.
I think they decided to play legal chicken and hoped Apple would blink, and Apple did not. The play wasn't entirely unfounded.

A lot of current law around things like app stores is existing in the liminal space of "Are these restrictions legal? Nobody knows. Do you want to be the one who stakes all your company's money and your investors' money and your entire business model on finding out?"

Epic did the calculus and seemed to conclude they wanted to be the ones to take the hit (possibly because since they also own their own app store, the math was a little win-win: any lock-in the courts find Apple has applies to the way Epic runs their store also). It hasn't worked out the way they'd hoped (though the anti-steering decision was interesting and a little surprising).
It's weird how "decentralized" means something different to every individual. Having the ability to choose where to host my images is what I'd call decentralized.
Any user that didn't pay attention when they were loudly and clearly told "SAVE THESE CODES OR YOU MAY LOSE YOUR ACCOUNT" probably doesn't actually care about their account that much.
You might like this: https://www.thomasthwaites.com/the-toaster-project/
Why else would they lock up all their merchandise?
Because before js became popular, every web app had access to every single event execpt what, scroll and mouse position.

Telemetry has been the default for networked applications since longer than I've been alive. Think of a terminal connecting to a mainframe, how much telemetry it has access to, all of it, of course.
I was at that store the other week and initially wondered why so much was locked up, but then I encountered the performance artists responsible and learned they have it down to a science.

They pick fights with other customers, often involving allegations of racism (which I saw first-hand were completely untrue). And the security doesn't want to have anything to do with it, so they let the perpetrator leave the store unmolested.

It was an interesting experience but I couldn't imagine working there or shopping there regularly!
Migrated to Bitwarden for the opensource years ago.

Stayed for cheaper price, linux support, simplicity and "out of my way" philosophy. Never looked back to 1password.
The real answer is to plant native ground ground cover.
> or that customers know how to use it.

Telemetry that is detailed enough to reveal how I use a product is too invasive for my tastes.
I think this is a pretty common problem with any kind of business regulation -- how do I know that a factory isn't just illegally dumping its waste? Regulators are usually working with less complete knowledge than the entities they regulate. You'd have to set up penalties large enough that the risks weren't worth it, but that ironically works better with larger companies since fly-by-night operations are free to just shut down and don't care that much about their reputations.
> It’s not just chargers, it’s 30+ minute charge time.

Unless you're driving through an area where chargers are spaced really far out, you shouldn't need to be charging that long.

EVs charge faster at low state-of-charge. You'll spend less time charging if you go from 20% to 50% twice than if you went from 20% to 80% once.

I've got a trip planned from Portland to Santa Clara coming up. My longest planned charge is 20 minutes. Everything else is in the 10-15 minute range, arriving at each charging with about 15% battery.
Did you actually read the links that you posted? The snopes article pretty plainly explains that it refuted that the store was closed due to “angry transgender customers”, but that the reasons for closure were high rates of shoplifting and difficulty keeping employees safe.
I'm always curious: what is the effect of noise on the noise producers? As much as I have a disdain for leafblowers, and as much as I absolutely despise people who play bass-heavy music at night, why don't they suffer the same ill effects and heart issues as the people they subject noise to?
Yeah, all those annoying "we use cookies" pop-ups are inspiring
I switch between both depending on my mood and the particular application.

For me: Rust killed C++ but not C

I have an on-again off-again love affair with C. And in its domain it’s still unmatched: low-level close to hardware where you directly need to deal with concepts that are normal abstracted away: alignment, custom layouts, type punning, pointer tagging, different types of memory, cache coherency, DMA, kernel bypass, etc etc

Sure you can do it in rust unsafe but it’s (intentionally) a world of pain.

But, when you start needing bigger abstractions or you work with a team larger than say 5, C falls on its face super fast.

But it Feels Oh So Nice otherwise.

Here’s to me hoping Rust unsafe becomes more usable and can be a proper C successor someday. But.. I’m happy to be rid of C++ :-)

(I’ve been meaning to write a blog post on this for some time)
Then again if you were form your views based on something more than a few random videos you happen to have caught -- you just might come to a different impression.

It is of course widely known that many people in Ukraine still speak Russian day-to-day and that, despite the war -- this is still largely NBD ("no big deal", per English slang).

However anecdotal RL observation (plus numerous other news accounts, and the popularity of Ukrainian-for-Russsian-speakers classes, etc) do support the basic claim the article is making.
Yes, but during the Carrington Event, electrical wires became overloaded and blowing out equipment attached to "the grid."

I've had a computer blow out (sparks, smoke and everything) due to a power surge when the main power went out and then back on, rapidly.

So while the "direct" causes might be different between EMP and CME, the end results are basically the same. I could only imagine what our current (very power sensitive) electronics would do in that scenario.

From the wikipedia Carrington Event you posted:

> Because of the geomagnetically induced current from the electromagnetic field, telegraph systems all over Europe and North America failed, in some cases giving their operators electric shocks.[22] Telegraph pylons threw sparks.