skysight-inc/HackerNews huggingface dataset:
I'm thinking, mainly, of how these features are exposed in the UI and how users experience it. What matters is that users take (rightly or wrongly) a verified profile link to mean "I control this webpage". So e.g. if you could verify a Twitter handle on Mastodon, it would mean "if you trust the identity of this Twitter handle, you should also trust the validity of this Mastodon user". That's extremely important to get right no matter what you call it.

I'm not sure what Bluesky was attempting to do here but what they achieved in practice was allowing a user to claim control of a domain by claiming control of a page. But if you allow user generated content on the home page of your site, there's not a distinction (from a Mastodon user point of view) between the two. It's effectively the same problem if I can "verify" yourdomain.com on Mastodon - and my point is that you can do that without using .well-known.
Yeah, sure, tax land at whatever rate. Our rent would just go up to compensate. Thank you very much.
I love that supporting left recursion allows you to avoid contorting what would otherwise be the most obvious grammar definition.
I'll be the odd person out and say I think the PFA danger is being mis-applied.

Should we use PFAs in underwear, handsoap, women's fashionware, mens hair products, sweaters, holiday decorations, etc? Absolutely not. These items are seasonable and disposable.

Is it ok to use PFAs in outdoor wear, long term infrastructure, and other things designed to have a lifespan of 10-20 years? Yeah probably; a huge net positive for the environment is reduce consumption.

Building fewer things that last longer is a good thing. I have no idea how we would manage this, I don't have all the answers. Obviously PFAs have no place in Fast Fashion, which by itself without PFAs is extraordinarily hard on the environment (lookup textile waste).

The real problem is PFA usage is being completed abused. I think PFAs are needed when durability actually matters, as it's a good tradeoff.

This is my opinion, I'm sure people will disagree.
I'm correcting mischaracterizations made by the parent comment.

The article I linked provides context and paints a different picture; not sure why you consider that to be unrelated.
is there a reason why all state is in the server? what about cases where you'd want to keep client-side state, like those strictly related to UI/UX?

(very interesting project nonetheless!)
> That's because you just fully authenticated it by providing your master password (which for the macOS local keychain is your local account's login password, which you had to present in order to unlock the FDE disk at startup.)

I booted my laptop maybe several months ago and unlocked the screen with TouchID at the moment.

> Interestingly, this also doesn't apply if you set your FDE unlock password to be different than your local account sign-in password. The FDE unlock password will do some magic that gets you logged into your account; but you will end up in your account with your local-account keychain still locked — which will cause a lot of annoying prompts on login.

Haha, I've been there by accident before. Or before FDE was a thing, having a different keychain vs login password because of some migration gone wrong.

> Again, that's because you signed into your phone with a password recently-enough to make it satisfied with you

Not sure about this. Usually I use FaceID. Does that ever expire and need the passcode? I don't think it does; the only times it asks iirc is when I fail the FaceID auth repeatedly (it doesn't like my second pair of glasses).

> This is true, and because of this, security people do not consider these browser "autofill" features to be "password managers." Don't use them!

Yeah, it's jank, but people do use them. Personally I use Safari for important stuff just because I want Keychain instead, but otherwise, your only option is dealing with a third-party password manager.
It's funny, the alternation was my least favorite part (I love the book). Not that I can think of a better way to make the story work. But personally I'm annoyed by constant back and forth like that. 18Q4 is similar, and of course many other authors do the same thing. Personally I find it overused. The book is still great in spite of it though.
Annoying check-in chores are becoming popular as well, including having to sign up for apps that store and share your private data.
I don't understand your concern. How is it more difficult to control the keys? Why is it less secure than 2fa solutions?

Every worry I've heard about passkeys can be leveled at 2fa schemes as well. The upside of passkeys is they can't be phished, can't be revealed in data breaches, and can't be forgotten. What third company is involved? Are you thinking about syncing services? With the exception of Linux (for now), you can have passkeys enabled on any modern device. It is just public/private key sharing right?

A bad actor would have to have your device and be able to unlock it in order to get access to your accounts secured with passkeys. Every time passkeys are mentioned on HN the FUD starts flying and people lose their minds. Passwords are terrible with many weaknesses. There isn't perfect security, there are always weaknesses but I have yet to be shown how passkeys are worse than passwords for typical users.
One thing to keep in mind is that for most of the war, it had strong public support. There was a continuous defamation campaign against the anti-war movement. Days after the shooting at Kent, a poll showed 80% agreeing that it was the students' fault.

I'm speculating, but I think that the few who refused to serve were met with the same outrage that someone like Weinstein receives today. It's no surprise that most eighteen-year-old boys could not do that, even if they were strongly against the war.
Restricted Library Mode (Breaking change to Val Town)
I think you are on to something. Financial journalists should look in more detail.

I am in no way saying the results are not correct. But there are all kinds of smart ways to report revenue, like mandating your suppliers to stock your product and reporting those as sales.Same way car vendors report sales, when the cars in reality are still sitting at the dealers showrooms.

From my random data sample of 20 contacts, around 80% have Android phones and the other 20% with iPhones, nobody upgraded in the last two years...
Not all schools. And the question is, SHOULD they be?
I suspect so. My Father was only observing what he saw. He wasn't researching the cause.

The key take away for me was that he was working with young people. I suspect these people may have ended up in mental health care but much later in life.

If this were true you'd expect less of the later in life diagnoses to be drug related. I have no data on that.
I am surprised their sales didn't collapse in the EU given the massive price hike and not making their products cheaper when Euro rose again, like what Nvidia did.
They can and probably should but what if they decide not to?

That's the problem with expecting people to agree with and follow standards.
What's the driver situation with Bookworm on the Raspberry Pi 4 with UEFI? Has v3d[1] been ACPI-ized[2]?

[1]: https://www.kernel.org/doc/html/latest/gpu/v3d.html

[2]: https://wiki.debian.org/RaspberryPi4#Using_EFI_Firmware_and_...
I agree that the language needs to be clearer. People who want to sell are too happy to muddy waters around transactions. In the digital world, it's even muddier, for example, on Steam, as much as I love the service, I sure as hell don't "Purchase" when I click the Purchase button and pay. License maybe? Even then, the license is attached to my account, not my person.
Within a decade mid-level consumer cards will be just as powerful as those $40k cards.
Probably not the place to have this discussion, and I’m not saying that this is your view, but I find the “no party is exactly what I want so I just won’t vote” approach incredibly annoying. No political party will ever be exactly what you want, but surely you can see enough of what you want with one of them to vote for them?

By not voting you make it easier for the parties to not change, it means they can play to the most populist views of the moment for their side of the fence and know that the disgruntled middle can be ignored therefore making the system worse over all.
I did. This is exactly what we need for constexpr for.
> There are enough cases of identical twins where one twin gets it and the other doesn't that we are certain it can't just be genetic.

Strictly logically speaking, this is consistent with it being genetic + random chance (where the odds are determined only by your genes) - meaning no identifiable environmental factors. Not saying it is (nor would I know).
Hosting? Updates?

Physical goods like cars 'get away with it' for things like fuel; hosting is in some sense similarly 'consumable'.
Looking forward to running flask on mojo some day. Would be neat to see it with the structs instead of classes, and fn's instead of def's.
One more issue:

(3) Tenants holding onto apartments that they no longer live in.
Mastodon is written in Ruby on Rails and there are some inherent performance issues with that, it generates a huge number of Sidekiq jobs that can bog down a server quite easily. There are other, non-Ruby implementations aiming for compatibility with the Mastodon API though, so I’m curious to see how it will all shake out.
> In many cases, they're not 'perfectly good'. Apple does backwards compatibility longer than most, but at some point, those old phones can't function as smart phones. Banking and health apps will require newer OS, and newer OS eventually means new device (for better or worse).

To add to this, each annual release of iOS does typically add a new feature or two that works only on the newest model(s). Sometimes, this is enough to generate an upgrade.

There's also a large amount of people that essentially "rent" their phone through a consistent upgrade pipeline via their carrier or Apple directly (basically never paying off the device directly).
>Being told that "you're not old enough" while being perfectly capable of handling the task, for example.

It's "almost" like you're making an underage sex argument.

In fact, to not suspect that one would have to give you a lot of credit.

What do you think, are internet strangers going to give you the benefit of the doubt? Yes or no?

Children are restricted from some things because their minds aren't fully developed.

Downstream from that hardest of facts is general environment that commonly presents dangers to development, a unique vulnerability to adult criminal predation, an inability to give informed consent, and an inability to make independent judgement in service of their long-term welfare.

In contrast and in light of the above points, there are individuals like yourself whose aim is to undermine child protection.

Rational adults ask: to what end?
Here's the original email where I proposed .well-known:

https://mailarchive.ietf.org/arch/msg/apps-discuss/1_a06NU8z...

> 1) I feel that /host-meta is too casual of a name and prone to collisions. It matches /^[\w\-]+$/, which I think is a subset of a fair number of sites' usernames."

...

> i.e. put something ugly and weird in there, like a semicolon, to minimize
the chance that it interferes with people's existing URL structure.
You can just about load it on a 32GB GPU in 16bit mode.

Quantized versions here:

https://huggingface.co/mayank31398/starcoder-GPTQ

they will be benchmarked on humaneval and released soon—maybe tomorrow?
3-6% is almost free air conditioning 4-8%
So it wasn't the questions themselves, but when you start asking about why you moved from this city to that, or why did you choose this school, etc. Maybe it's because your SO got a job there, or some other personal reason.

I get that it's totally an innocent intent, but there are much better ways to assess a candidate's soft skills, that is strictly related to their professional experience.
There aren’t any 20 year old EVs to export yet…
Google makes almost all its money from search. These platforms are all there to reinforce its search monopoly. ChatGPT has obsoleted search. ChatGPT will do to Google search what the Internet did to public libraries - make them mostly irrelevant.
Weird to see a Hacker News thread devolve into lightning denialism just to protect a private company's bad engineering.
What's wrong with it? One-time payments don't make sense for a lot of transactions. Apartment rent is the most obvious example, but any other continuous service that is in use is hard to imagine without subscriptions.
> the option to buy it outright

Does the next owner of the car also get it? No? Then it is not "bought outright", it isn't a purchase at all.
Can consumers buy this? I'd like one in my backyard
Good work. Stating the % improvement upfront in the README can increase adoption.
How can a company keep up with the speed of what is happening in the open?

Open AI had years of advanced that almost vanished in a few months.

And we will see the rise of specialized models, smaller but targeted, working in team, delegating (Hugging GPT)

I would use a small and fast model that only speak english, is expert at coding an science and not much more. Then you fire up an question to another model if yours is out of it’s area.
This is easily the best link I’ve clicked on HN in a long time, thank you.

In the context of medication and schizophrenia, the authors take is interesting:

“The message is do not only change what is inside your head but that which your head is inside of…

Recognizing the causes of the crisis as having been multifactorial made me also recognize that all ameliorative efforts had to be multilevel, impinging on everything from brain biochemistry to self-concept and social scenario.”
... and turned out to get the same exploitative outcome of a constant stream of cheap labour, penalised by charges and percentage traps and upsells.

And when the women fought back and unionised, they used legal tricks until the PR stink got too big. But, gig workers depend on the gigs coming. They can (and do) always cut the hours of recalcitrant players.

It's not an entirely happy story. Worth reading, to the end.
In the interim (or possibly long term), Google could co-exist with OpenAI. In my little corner of the universe (fire safety engineering), I cannot assume the output produced from ChatGPT is correct. I’m always trying to find out which references it has used for the answer and then having to check if it has actually used it in the context the original author intended. In short I’m still using Google and other search engines to check output from ChatGPT.
Congratulations with the release of this very exciting framework! Can't wait to try it out.
Hey, we were having a similar convo on a different sub-thread and in one comment I addressed these concerns: https://news.ycombinator.com/item?id=35817197
Fair enough. Your 3D modeling needs might be a bit advanced for the current state of things. It works pretty well for flat graphic design, stock photo or illustration purposes.

I'm holding out for an instruct-based model that will take explicit instructions, or at least layered prompts. Mutating the original prompt along with the picture (or changing the entire thing to only describe certain parts, a la inpainting) is frustrating to me.
I would say not, but not because shareholders. More like they wold not be able to have the same talent pool available as now.

Most of software devs wouldn’t like to work on military tech. Not saying there are no smart people at Lockheed or Raytheon but I would argue there is less smart people willing to work for this types of companies.

Even if devs hate ads most would rather work on ad-tech than mil-tech.
> extra overhead for the registrars. Now they have one more thing to do:

I suppose I only take issue with "more" - as it stands don't registrars do effectively nothing today besides print money? It seems like the kind of business that doesn't require much that isn't already automated, and where the only reason I don't have a successful registrar business is that the contracts with whoever owns the actual TLDs are difficult to get. Perhaps they need to look out for DMCA letters? Idk maybe I'm way off, feel free to correct me if anyone knows it's a difficult job.
Hare is planning on doing this for what it's worth.
Capitalist journalism will seek to preserve capitalism, which demands sober workers to exploit.
These thinking machines don't choose their thoughts. They are not blank slates, waiting patiently and listening. They are just binaries that only get executed when you run them. You have your causes backwards -- _we_ give it thoughts to think by literally seeding the machine with something to think about.

Your argument about the human is also missing something: a human can ignore whatever you say to them, but these thinking machines cannot. You say that these machines have already chosen the choice to even think, but they literally cannot choose to _not_ think about what you give them. But a human can ignore whatever you say and not respond to you.

You should read the article I posted, I've already discussed these arguments.
Tim Cook Says Apple Still Not Considering 'Mass Layoffs'
Just FYI, that 429 was explicitly placed on the specific URL HN links to. The remainder of chaos.social is up and running perfectly fine.

[Edit: already mentioned above, I just misread it.]
Yes, personally M1 MacBook Air (8 GB of RAM!) is just great except, minimally, for the limitation on the number of external monitors. Using also a more powerful MacBook Pro (64 GB) with multiple external monitors but subpar in battery duration and portability comfort beyond the specs mentioned in the official Apple page.

BTW, Today I experienced a "Your system has run out of application memory" [1] in the Pro with the same usage that I give to the Air. Have not time to investigate further.

[1] https://discussions.apple.com/thread/253310137
Hold on -- sometimes when they're all charging the same price, it's because that's actually "the market price" in the sense that it wouldn't be profitable to do it for an less, and they actually have their own high costs they have to take care of. If there's free entry into this sector, and all banks find they have to do things that way, then that might just be what's going on.

From what I understand, Europe typically has postal banking that's minimal fee and should be a release valve against other banks' excess, which would for the "legit price" hypothesis.

But if it's very very difficult to start new banks, or for existing businesses to start serving this demand, that would favor the cartel hypothesis.
That actually sounds pretty fast. Not to be a downer or anything, but I have a nagging feeling that maybe they will stop making PFAS but the replacement will be a very similar, substitute compound that may or may not have the same effects. We just don’t know because it hasn’t been studied. In other words, a very similar situation to the BPA-free reusable water bottles, which sound nice, but might still have a harmful substitute.
Sorry for what, offering a free lesson in cache optimization? :)
In what way is this different than a pump and dump? You tout the stock and say it's going to 5x, 10x, whatever because of X. Then the suckers buy. Then you sell.
I am happy to see this other option. I have been using privacy.com for virtual cards along with an anonymous domain from njal.la with catch all email address. I do this for most all my subscriptions, donations, and online purchases. In addition to control over subscriptions, nobody needs to know what I buy, subscribe to, or patronize.
MFI certification is as toothless as CE certification. When it is profitable to skim the product, it will happen.
>reasons I can't comprehend

1. It continues to be true that a new phone is noticeably faster and has a noticeably better camera than a 3-year-old phone (regardless of how gross the reasons are).

2. Phones break.

3. Phones are lost.

4. Phones are given away.

5. Some batteries in the batch lose capacity faster than they should.

6. New phones are given as gifts to people who might have gone longer before buying a new phone with their own money.

7. Features.

Even regardless of all that, three doesn't seem unreasonable if you have the money. I seem to be able to go about five years before the battery life and performance become too painful (though it's hard to get an average with data points that far apart), and my tolerance for those issues is probably higher than a normal person.
> I can confirm, you cannot articulate what rural voters are concerned about.

I never claimed that I was giving the entire picture.

Given that there is ZERO positive that Trump accomplished for rural voters aside from "owning the libs," and many things that were actively negative like starting a trade war that may see rural soy farms permanently out of business, no, I don't think that rural voters are motivated by anything aside from "voting their team" and "trolling the libs."

> I see little indication you believe democracy is important

...trouble with reading comprehension there? I'll simply repeat:

> It's the worst form of government around...aside from all the others that have been tried. (paraphrased Churchill).

> I don't know of another form of government that has better results. Neither did Churchill. If we could enforce better national education standards, we'd end up with a better result. But in short term I don't know how to fix the problem other than taking the worst liars off the air.

But you don't actually care what I'm saying if you follow up with:

> It's hard to see calls like this as anything other than being upset that the majority is not voting the way you want, and wanting to reign them in.

Umm... It wasn't a majority. It was barely 25% of the country. The majority of active voters did in fact vote for Biden.

But enough. You're just trolling at this point.
Yep, I use the paid API, and it’s a lot more flexible than ChatGPT. I’d didn’t know about the self-hosted interface though: that will be my project for tomorrow morning, thanks!

I’ve been on the GPT-4 waitlist for about 6 weeks, but I’m not sure what the typical wait is.
"state is just a class" brings up so many questions though. How do you serialize state if it is "just a class"? Serializing the state is useful for all sorts of things, including debugging, reloading, and saving and loading application state.

Serializing state together with some code that operates on it may be doable but sounds either complicated or brittle.
I played with it and subsequently turned my back on it in favor of alpine.js and some vanilla JavaScript to handle client state with Flask on the back end.

The reason I gave up on Pynecone is that these things transpile to other already high abstraction frameworks like React. This is all good and well until something goes wrong and you now have more layers to troubleshoot. Another huge downside to this approach is that now I have to deal with two sets of build and deployment tools: python and node. And given that I have few fond memories of the node tool set from previous project, I refuse to incur this complexity unless it's absolutely unavoidable.

If someone actually built something like Pynecone that targeted html/dom/js directly instead of wrapping node/react/next I would be the first to hop on the bandwagon. Because the API is very good but the way that sausage is made ain't pretty.
Are you using server side rendering? If so, did you end up writing a custom server, or are you monitoring your website some other way?

My team is developing a server-rendered nextjs app which is deployed on AWS. We haven't really configured it beyond the defaults, but nextjs seems to provide very little visibility into what's happening (e.g., no request logs).

If you could share any tips or lessons learned from operating a production nextjs app, it would be much appreciated.