skysight-inc/HackerNews huggingface dataset:
I've been joking about a need for "notary factor" for a long time. There's an existing, deep and distributed network of notaries public that could be reused for stronger authentication in the modern world. In classic banking if you had a recovery problem you could send certain types of notarized letters to get stuff done. It was slow: however long it took to prepare the letter, find a notary public to get it notarized, and then presumably snail mail it to its destination. But sometimes slow is better: if someone is trying to steal my account, if they need to get the right forms notarized and mailed to the right PO Box, there are many steps along the way where I can intercede or a notary public can interject ("I won't notarize this because my ethics do not allow it.") or presumably human recipient at a PO Box can reject the mail for any number of violations or failures of documentation.

I think it would be great if the recovery mechanism for "ordinary people" took about the same amount of time as a notarized letter. In that worst case where you are locked out of your account for a week or two it won't feel great, but it also helps you feel better that some jerk trying to steal your stuff can't do it any faster either.

There are all kinds of fun technical things that could be used to actually build interesting "notary factor" tools. I think tech companies mostly reject how cool it could be to build because they see "slow" as a "bug" rather than a "feature".
I feel like there's some kind do difference with noise tolerance between either culture or class. Hard to say, in the US foreign culture tends to be lower economic class.
Lancey (YC S22) is hiring a senior full-stack engineer
Was it developed at all? I'm not seeing any business logic in the repo: https://hacktivis.me/git/litepub.social/files.html
That would make any EU company running a server in a country without an EU data processing treaty illegal, because the IP address would be in the TCP handshake.

Edit: It would also violate using any networks that transit such countries, because TLS and TCP handshake info might be PII too. I find that such a ridiculous position to have re GDPR.

1P already has consent from users for its apps to use the network to connect to their services.

They do not need an additional agreement ie opt-in consent. If they are collecting non-PII they can use the current opt out.
Is there a guide for this? I'd really like to isolate Steam from the rest of my system
As david_elson pointed out, this incredible project was originally submitted back in 2011: https://news.ycombinator.com/item?id=2246856 - and got zero comments.

An observant HN user (dcminter - thanks!) ran across it the other day and suggested it as a candidate for the second-chance pool (explained at https://news.ycombinator.com/item?id=26998308). I enthusiastically agreed and we got back in touch not only with the original submitter but the project makers as well. I hope they'll comment in this thread!
I did that myself. It's quite a distance from passively accepting requests to interacting with the Fediverse.
Sure, but my take is that sideloaded apps will not be able to use:

- Notifications (similar to the early sim-hacks when iPhone didn't sell everywhere)

- iCloud (storage, etc)

- Many of the platform services such as location, contacts, calendar.
> How is first party support for the hardware and software stack "nothing special"?

Because the vast majority of that stack (the kernel, GPU driver, window manager, and so forth) has nothing to do with Valve. They might contribute drivers to the kernel (I'm not sure if they actually do - I would expect AMD to be doing that), but otherwise it's an Arch-based distro with the same Steam client and Proton runtime that everyone else is using.
Which is weird in itself, as it seems to completely overlook the Nintendo Switch or the (admittedly less common) Valve Steam Deck.
The CIA is an intelligence agency and has no obligation to tell the truth.
It would certainly be a great thing if UE was to have a second try at this. Nothing on any of the public roadmap (https://portal.productboard.com/epicgames/) or references in WIP code that suggests this. Lets hope your friends are correct :P

I got the impression the HTML5 with WebGL platform was removed at least partly to minimize the scope of work with some of the large renderer changes Epic has made between 4.26 and 5. So now does seem like the right time for them to try to tackle the problem again.
I see so many people leaving NZ for Australia nowadays, and friends ask me if I'm going too.

I live 5 min from Wellington CBD, and apart from buses or the occasional construction work it's deafening silence.

Anecdotes like this make me feel so lucky.
> and then just repeatedly allocate in the hope that you will eventually get a correctly aligned value out

If you preload something that patches all the new/delete interfaces, you can do this without guesswork.

new(size, alignment) ->
res=alloc(size+alignment)
res_aligned=res+...
offsets[res_aligned] = res

new(size) -> alloc(size)

free(ptr) ->
free(offsets[ptr] || ptr)
offsets.del(ptr)
It is so unfortunate. I am from Iran and I much prefer the current name. It's an ancient name that includes not only Persians, but also Medians, Partians, etc. Iran has been multi cultural since old times and it's nice to have an inclusive name. I believe after we throw the occupiers (mullahs) out, we have a lot of work to do.

The only weird thing with the name Iran, is that it literally means "The Land of Aryans" which got a bad rep after Nazis (rightfully so).
With GPT 4 it nailed it on the first try:

>3 hens lay 3 eggs in 3 days. How many eggs do 12 hens give in 12 days?

>Let's break down the given information and solve this problem step by step.

We know that 3 hens lay 3 eggs in 3 days.

First, we'll find out how many eggs 1 hen lays in 3 days.
3 hens lay 3 eggs, so 1 hen lays 1 egg in 3 days.

Now, let's find out how many eggs 1 hen lays in 12 days.
In 3 days, 1 hen lays 1 egg, so in 12 days, 1 hen will lay (12 / 3) * 1 = 4 eggs.

Finally, we'll find out how many eggs 12 hens lay in 12 days.
If 1 hen lays 4 eggs in 12 days, then 12 hens will lay 12 * 4 = 48 eggs in 12 days.
PentestGPT
https://en.wikipedia.org/wiki/Subterranean_river
Run Vector Search with SQL
Hey HN! As SQL developers working with vector embeddings, we found ourselves facing limitations with existing solutions like PostgreSQL's pgvector extension and Clickhouse's annoy extension. We experienced restrictions in supported indexing types and struggled with performance when dealing with large-scale data. That's why we started integrating more indexing libraries in Clickhouse, which gradually grew into our current product, MyScale.

MyScale is a Clickhouse-based vector database that fuses vector search and SQL analytics to deliver a streamlined, fully managed, and high-performance experience. It's designed to help you perform joint queries and analyses on both structured and vector data, with complete SQL support for all data processing. Plus, MyScale offers a wider range of vector indexing types, such as IVF and HNSW, to enable more efficient search.

MyScale is now open for registration and offers a free tier plan capable of supporting millions of vectors! We'd love you to check it out and give us your feedback.
Somehow I’ve never worked for “fresh” startups. Alway worked for startups that had at least 4 years of life (they qualify as startups at that stage? I guess so). It’s been great:

- Never had to do extra hours. 9-5 only

- Plenty of room to “bring your own idea”. At this stage, startups have a tiny bit of organizational structure in the tech department, not enough to keep your tech idea out of the table. There’s usually no “architecture team” nor “secops team”, so everything moves faster

- Plenty of room to make mistakes as well. Not much is rigid, so you can screw up things. That’s always good because if you screw up something then you are probably going to be the one fixing the underlying process that lead you to make that mistake. Your colleagues appreciate that

- Code base is not very old (so, you can still ask around the original writers), nor it’s that big. So, either a small monolith or just a few microservices

- And plenty of room to learn. Perhaps you are interested in architectural topics… maybe you even end up as the “architecture guy”. If you stick with the company you may even fill that new role they just opened “Head of architecture “
Presumably, knowing Apple, sideloading will still require your app be signed by Apple and all the fanfare that comes with it. You're now just allowed to have your own storefront and distribute your app through it.
Ask HN: Why don't car windows have UV 400 protection and anti-glaring
Sunglasses offer such protection, but car windows don't. Why?
Very funny. But how do you login into things without the otp seed?
It does support server to server, but currently it does not play well with Mastodon due to its limited support of HTTP Signatures algorithms. I didn't get bothered enough by this yet to actually fix it on my side.

And there are a number of clients that work with this specific brand of client to server ActivityPub but I wrote all of them. The one that can be seen on the internet is a link aggregator similar to HN and (old) reddit, you can find a demo instance at https://brutalinks.tech.
please tell me this is a joke...
side loading doesn't work in the US.
Hmm, I'll stick with Python for now.

The ecosystem of libraries is just too good.

Perhaps if OCaml made it very easy to interoperate with Python, I could give it a chance.
> it's a very hypothetical black swan type situation. I don't think it's a sensible use of resources to prepare for a badly understood phenomenon with uncertain probability.

That really depends on how much you'd need to spend I think to prep.

There was a US commission evaluating the threat of an EMP attack (http://www.empcommission.org/docs/empc_exec_rpt.pdf) which seems to suggest that radiation-hardening transformers for such an event would also seem likely to protect them from failing due to geomagnetic storms.

The additional cost for radiation hardening:

> New units can be EMP-hardened for a very small fraction of the cost of the non-hardened item, e.g., 1% to 3% of cost, if hardening is done at the time the unit is designed and manufactured. In contrast, retrofitting existing functional components is potentially an order of magnitude more expensive and shouldbe done only for critical system units.

For that sort of overhead I think that it's justifiable to require it of new transformers at least.
low key funny post
I've long felt that the truest luxury in today's world is silence.
It boils down to work culture. Everything you can do in person, you can do remotely, you just need to ensure the company enforces a culture that embraces the tools required to make that possible. Pair programming? With modern tools it's trivial to do. Discussions? Start a call or use a channel. If anything, remote work forces you to better document what's going on, rather than some poor junior having to hunt down the right guy the office to help them figure something out. A junior suffering due to remote work is a junior whose company has failed them.
In most of my professional work, a 100 line makefile would be considered a short makefile!

They're not that hard to understand and follow.
The issue isn't that they're shilling AI. It's that the algorithm rewards these low-value hustlers because they create "engagement" with their spammy threads that pollute the feed.

I have seen this exact pattern with other things like "front-end development", "stocks and investing" and many other topics where there's money to be made by selling something to somebody. It gives the whole of Twitter a cynical, soullessness that's growing by the day.
> It does support server to server

Ah, sorry, I should have said "client API" rather than just API there.
Heat pointer is great and I really hope Apple follows it up with building proper eye tracking hardware and software into Macs & iDevices. It's such a great opportunity to improve UX and reduce RSI for everyone by sharing the load among more input sources. I've tried the Tobii stuff but it's not great, no solution out there has quite nailed the calibration nor the UX yet, as it requires OS-level UX changes.

Every input source has a point after which it causes fatigue or pain - hands, head, eyes, tongue, feet, etc. The more the load is spread out, the better! This MouthPad looks fantastic as another input method to share the load.
> at some point we need to stop treating adults like babies that need their hands held through everything and let them learn that their decisions have consequences.

Never underestimate the massive market advantage gained from treating adults like babies and handling all manner of frustrations for them.

UX researchers would call that "A good user experience."
No. You can use trademarked terms all you want in all sorts of writings. What you can't do is trade using that name. Merely discussing a trademarked product is always allowed. And the ™ symbol is for unregistered trademarks, whereas ® is used for registered marks. In either case, these symbols are used by the company that owns or claims the marks, or by affiliates who agree to mark them as such when licensing the marks.

I am not even remotely a lawyer so this is all just, like, what I think I know.
I registered gpt.vc over 2 years ago. They are late to the party.
Is there any reason you used kqueue directly instead of libdispatch for Darwin? Memory allocations?
I'm sure that experts can diagnose addiction, e.g. by looking at changes in the brain using brain scans etc.
I never said it was my code responsible for the race condition. ;)
A lot of this boils down to the need for better zoning and stricter controls on what happens where when. Forces today are pulling things in other directions… build houses everywhere, even in places where it makes no sense to build houses.

We’re seeing things like former green belts around airports now being turned into housing developments. There were no houses there in large part because of noise.
Now developers move in and build big developments there with new residents screaming about how bad the noise is. Can’t make it up.
My entire storage building just burned to the ground with my safe in it, all my paper codes, my laptop with all my auth on it.

Luckily by sheer fluke my phone was saved which has my TOTP apps on it or I would never get into anything again.
100%. As I said in another thread, it took many centuries for the majority of the Persians to convert to Islam. Most of the population were not even Muslim during the "Islamic Golden Age."

A good parallel is the Mughal Empire in India. The rulers where Muslim but the population was not.
How do y'all deal with determining what noise levels you'd have to endure when purchasing a new home/renting a new apartment?
Why zebras don’t get ulcers!
And as it happens, imgur is revising their TOS and deleting a bunch of content
That you should try and compare?

It seems very clearly and directly spelled out. Is there some word you don't understand how to interpret?
Announcing layoffs can be good for employees. Let's say you're going to shut down some project-- something that every company must do, but big companies must do all of the time. If you do quietly without announcing any big shift, then the people affected must try to explain why they left to future employers. Now, at least, a future employer will say, "Oh yes, it was brutal at Disney back then."

It's better not to lose your job, but if the economics dictate that you must go, public "layoffs" have some advantages.
You may also enjoy Tajikestan. You should have no political restrictions to travel there.
The key to Erlang error handling is that crashes should bubble up to a high level which then restarts everything below it in a known good state.

If you're in a coordinated dance with another process you link to that process. If a process you're linked to crashes then you crash too. There's no way to block yourself in Erlang such that you can't be told to crash.

After you crash your supervisor might restart you, if that's what you configured. Or you might give up on your specific task.
Your comment is so naive in underestimating these incredibly powerful devices.

You can't even begin to imagine what it's like because you're some old guy but these kids who don't know any difference have absolutely devastated their reward mechanisms. A newspaper is easy to skim in a half hour, you might be bored enough to re-read all the articles if you had nothing else to do. These devices however are constantly spewing out limitless novel information which creates FOMO dependency. Youth have had an infinite supply of 4K resolution stimulation in front of their faces ever since they could communicate. Persuaded by the biggest communications platforms to ever exist, and their algorithms to manipulate emotions and desires.

These youth have been primed to be constantly engaged consumers by decades of advertising, technology, psychological studying and implementation. You are seen as "weird" if you don't have a social media that is posted on frequently. People cannot focus on reading a book anymore. People prefer to document an experience rather than "living in it".

> Mar 15, 2023 — According to data from DataReportal, the average American spends 6 hours and 59 minutes looking at a screen every day.
From your use of kilometers, I’m guessing you’re not in the US. Feels like that’s a double whammy because:

1) The insane distances in the US are what make a Leaf unusable as an only-car, reducing demand (and thus resale price)

2) I can’t do the math right now to figure out your electric rate, but my electricity is $0.1/kWh, or about $0.025 per mile (mile!) with pessimistic Leaf efficiencies.

Both of those are pretty strong headwinds vs. my situation.
The above is because more desirable places to live have been zoned for no new housing.

Stricter zoning isn’t the answer. Looser zoning is.
You'd save the QR code at the time you first used it on the old phone, and not wait for when you needed to transfer it.

For me, I'd usually be on the desktop when setting up 2FA anyway, so I'd just save the QR code from the desktop browser ("Save image as ..."). When I needed to set up a new phone, I'd open the saved image on the desktop and point my phone at the screen.
This is what I've been wondering as well -- For a brand new project, why would anyone even consider using Rails if there's just a slight chance of adding ML/AI capability in the future?
Yes, the Steam Deck is using a fairly standard stack and the default client but you're missing the point. Valve directly tests the Steam Deck and prioritizes bug fixes for it. When users report issues with other setups it often takes months for the identified bug to be fixed if it ever is.
Glad its getting traction, it was a fun read and introduced me to something new (tm). One issue I had about 'Zaps' was the 'pay-to-play' aspect which seemed in discord/disharmony with the OG vision of Solving the Right Problems

There is no blockchain. No proprietary social sign-in. No “real-name policy” No distributed hash table, onion routing, raft consensus, or peer-to-peer protocol. There is just a method of providing simple digitally signed text, and a simple, scalable search service.

I mean I get it aaannnndd 54 lines of Spec etc and there is a need for something like you offer/describe and I'm glad to have stumbled across the link that lead to this blog that leads to the GH <phew!>
Nothing. That’s the problem.
I can believe that. I operate in a little bubble where all ads and annoyances are blocked. I aggressively unsubscribe from every newsletter and set filters for anything that gets through. I patiently went through the settings of every website to max out the privacy settings.

Your average consumer, however, clicks whatever button is blue, enters their email wherever there's an email field, and powers through the ads which are personalised for them. I would not be surprised if the numbers that you described are true, and not just a fluke.

But I chose to build the sort of internet I like. A quiet, straightforward internet that respects consent and privacy. It worked fine for me, so I feel no need to change my ways.
Doesn't have to do with Logitech drivers. Using BT, Logi mice and keyboards are laggy. But using the USB dongle, they're perfect, even better than magic mouse.
Can't you recover your google account by SMS, even if you have GA turned on?
What is wrong with the conversion estimates they used in the days of broadcast TV and radio? Or even newspapers?

For that matter conversion metrics are not useful because the real high value purchase are not see ad buy thing. They are more of see many ads for SUV, when current car gets 'old' buy SUV. Many years of advertising are used in that targeting, and you cannot easily measure conversion.
> unfairly distort an open marketplace

I'd hardly call it open. Whether or not you call Apple a monopoly, Apple and Google indisputably have a duopoly over mobile OS.

Moreover, Google indisputably has a monopoly over web search: ~93% market share. (I'll never understand why we've done nothing legally about this.) And the craziest part is, our so-called antitrust laws allow Google to pay Apple $billions per year to be the default search engine in Safari. The duopolists openly conspiring.
Progressively… politician has become the new used-car-salesman as a profession …
Yes, for anything with essentially zero barrier to entry you better believe you will be competing against everyone on the planet.
Imagine for a minute that you have a hammer. This hammer is a very useful tool and you have never had a problem with it. You don't know what is in the hammer -- could be steel, could be titanium, could be uranium (you're not a scientist!) -- but you know that it has always worked for you. Your experience with the hammer is so positive, you would buy another hammer from the company again, without question.

One day, the company that makes this hammer says that they will be updating it to automatically tell the company a bunch of information about the hammer's use -- when it's used, where it's used, what the environment is like around the hammer, how many times it's used, what it's used for. They assure you that they don't care about who is using the hammer, but obviously it will be YOUR hammer reporting the information, so at some level it will be associated with you.

Why are they doing this? Well, they know that sometimes their hammers break. They only know this, though, because sometimes their hammers break for their own employees and sometimes customers tell them hammers break. They would really like to know ALL the times their hammers break, though, so that can try to fix all the problems with their hammers, and not just the ones they see or get reported to them. They say this will be best for their customers and that's why customers should be on board with the change.

No one would ever buy that hammer again, right?

Regardless of the privacy implications of the company knowing everything about your usage of the hammer, the company is basically saying that their hammers break so much that many of their customers don't bother telling them and just go use someone's hammer. In other words, their product is bad and their customers don't value it enough to deal with it.

Don't even get me started on paying monthly for that hammer ...
I totally agree with you!

This for example should have been a microsoft product:

https://gpd.hk/gpdwin4

Do like what Apple did for the 1st iPhone, cheap entry price with a 2 year Game Pass contract (or do like Valve and the steam deck, sell it at a loss, gamepass is the long term goal anyways), and eat the entire market share..

Windows, that's literally the biggest advantage they have over both Sony and Nintendo, yet they don't use it..

.. a giant library that spans decades

Software must follow to ensure proper UX, it's not there yet.. so they have double the amount of work to do..