skysight-inc/HackerNews huggingface dataset:
> I'm not completely sure, but my understanding is that it's basically the same principle as SSH keypairs, with the added twist that the user never gets direct access to the private keys.

Pretty close - in fact you can use passkeys for SSH access, a la "ecdsa-sk", and in some cases "ed25519-sk".

> The keys are also per-device, so e.g. if you use your Google account from your phone, your laptop and your workplace PC, there would be three public keys associated with your account.

They are per authenticator. Some authenticators, like a Yubikey, hold their credentials in hardware. Some are backup capable - e.g. the "authenticator" is your iCloud account or Google account's password sync fabric (which are often secured more than the rest of those accounts).

This second class is what is known as backup-capable. Buy a new phone to replace your old one, and within the same ecosystem things just work because the platform authenticator can see all your old passkeys.

Across ecosystems, there is the ability to use your mobile phone as an authenticator for other devices. You can sign into an app on a Mac desktop using an android phone, for example.

Going forward, Android has beta code to support third party passkey providers. Hopefully other platforms support similar schemes, which would allow users to choose a cross-platform product rather than being platform-locked (or requiring them to buy hardware).
Having used masks for over a decade: not really. It's second nature to push up the mask.
Check out the Cruise Origin
Local and regional news announce outbreaks, usually citing information from local and regional health authorities. Every city, county, and state in the US have some agency responsible for monitoring and reporting. I don't think finding that information presents a big problem, though perhaps no easily-accessible or centralized source exists given the fragmented nature of reporting in the US.

The CDC has an Outbreaks page, and some maps like this one for influenza:

https://www.cdc.gov/flu/weekly/usmap.htm

I don't particularly worry about infectious diseases, I've survived six decades relying on news reports and what I hear from other people.
Sure but your estimates are way off. Adding a button should be a 2 and i18n should be a 1. A text is just replacing a hard-coded text with a call to i18n of a key. In fact that should be a 0 so to speak. Adding a button means actual functionality i.e. a button always has to actually do something. That something is actually probably way more points than a simple new database field which is a simple copy and paste of a script that does an alter table. I can add that to our automated db update scripts in my sleep, so if i18n is a 1 then the field is a 1 as well.
Certainly should be a great comfort for the 12,000 people they laid off.
Sorry I still don't understand the difference. Say that we get next-word-predictors like say GPT-8 that are really good, and we can't tell them apart from a human by interacting with them through text. What does that say about philosophical zombies and chinese rooms? Would that bot be a philosophical zombie? Would it be a chinese room? Would it be both? What are those arguments supposed to prove to me about the bot? When I hear those arguments, am I supposed to interpret the bot in some specific way as a result of those philosophical arguments?
>Why not call passwords private words?

Because the word "password" has been in use for a long time, before computers, for the purpose of physically passing from one place to another.

The thing about password wasn't that it is a secret word, it's that it allows you to pass somewhere. Typically, passwords were a shared secret (i.e. not secret).

A digital key is typically different from a password in that it's not a word, i.e. not something people can remember a type. It's more like something you have than something you know.

In the context of cryptography it makes sense to distinguish keys from passwords, and public keys (used to "lock" data) from private keys (to "unlock" data). The word key is used for that concept because of the semantics of how keys are used.

A passkey is an abomination. A key, a-priori, is an object that opens locks; and we already have words for keys that allows you to pass somewhere: e.g. door keys.

A pass, in general, is something you present to pass somewhere, whether it's spoken or written; a key is not something you present to pass somewhere.

We have pass words, pass slips, hall/press/ski pass badges, etc.

We don't have pass keys, because you don't show a key to pass somewhere. You use it.

A password encoded as a QR code that you could show to a sensor would be a passkey.

Whatever Google has is probably something else.
If we're comparing the Great Recession which was not caused by or relatively impacted consumer banks it seems arbitrary to limit the dataset to them.
That is not implied anywhere?

The copy clears says internet users and provides concrete sources for the claim. How would you word it differently?
Cruise and Waymo have slightly inconvenienced emergency responders. Tesla crashed into a firetruck and killed someone.
Disclosure: I used to work on GCE.

I don't understand where these power and cooling mantras came from, but large-scale cloud providers have very low PUE (Google publishes historical data at https://www.google.com/about/datacenters/efficiency/). That means you can take the basic power from a thread, add some for memory, and multiply by just a bit to get Watts. Take that and plug in your favorite $/kWh guess and get a price.

Ignoring Graviton, which doesn't have published power data to my knowledge, you can look up the TDP for a bunch of chips and see that it's a a few Watts per thread [1]. Similar calculations can be done for RAM. You end up at 5ish Watts per thread with some RAM attached. Let's call it 10 all in with cooling or other stuff. Since 10W is 1% of a kW, we end up with .01 kWh per hour. The top hit for "us power commercial rates" [2] says that we should assume 7c per kWh or so. That means our instance with cooling and overheads, needs to include .01 x .07 => $.0007/hr of power and cooling costs.

A single core w/ 4 GiB of memory on GCP at 3yr commitment rates (so we're focused on the long-term depreciation price) is .009815 + 4x.001316 => $.015/hr or about 20x as much as the power.

tl;dr: Power costs add up, but they are not even close to dominating the costs of cloud pricing.

[1] https://wccftech.com/amd-epyc-7h12-cpu-64-core-zen-2-280w-td...

[2] https://www.statista.com/statistics/190680/us-industrial-con...
> if they assumed all liability it would make sense for me to accept that deal, but they're not going to

Why not? Insurance companies will accept liability for my driving fuck-ups in exchange for a monthly payment. And doing so doesn't instantly bankrupt them or anything. Why shouldn't a self-driving car company do the same thing?
Dance, Dance, Dance which is a “sequel” to Wild Sheep Chase is my favorite, followed by WUNC and then HBW/EOW.

Total aside but has anyone found good Murakami-esque movies or TV Shows? Parts of The Leftovers actually gave me the same feeling, especially “International Assassin” and the surrounding episodes but am happy to hear others.
dang explained the list here[0]. It looks like it's a curated list of comments, rather than algorithmic like the other pages.

[0] https://news.ycombinator.com/item?id=34668249
The point isn't that those people aren't contributing, it's that you get multiple perspectives, even if all of them are skew. You can get extremely accurate positions with many highly unreliable datapoints. because even if they're individually highly inaccurate, where they overlap (and/or where their centroid is) is more accurate than any individual measurement.
Not FSD. This just tests AEB, Autonomous Emergency Braking. The human is completely in control.
I don't know, it seems low, but it works for me, but I still just use Google for most things. Like most of my searches are simple things where Google is fine. Recipes, weather, easy queries. For more advanced stuff where Google doesn't work I use kagi with fair success. Like today I was looking for an obituary from 1843 and Google just kept giving me shit about the Ukraine War. Kagi worked! But also gave me some Ukraine War results, but somehow the most relevant page was near the top of Kagi but nowhere to be found on Google even with multiple searches.
aww, so three lines of BASIC is conscious.
This is basically every public company —- Prioritize short term stock price gains over long term growth and sustainability. The only exception are founder run companies and perhaps a few public companies with strong culture/mission (e.g., Costco comes to mind). Google is no longer founder led and it threw out its mission several years ago.
Yes, oversized. I find them to be a worthwhile upgrade for sure.
I've noticed news sites have some of the most horrendous dark patterns and third party cookies I come across on the internet. Nothing frustrates me more than the video pop up on sites like CBS news. It makes me have a lot less sympathy for news organizations.
Ignore HN commenters and look at the performance of Google stock since the day Sundar took over. He is doing a fantastic job for shareholders.
Types can only decide trivial properties. But that's fine. We can accept false positives (valid programs that nevertheless type incorrectly and are rejected by the compiler). You still get very powerful reasoning with this.

Dependent types are also equally stymied by Rice's Thm. Both are static techniques. Path based type reasoning doesn't do anything to solve the halting problem. It just means more expressive types.
the ai is not reconstructing sight. it’s guessing which frame of a video the mouse is currently watching. based on training data created by recording the lit up brains of other mice watching the same video
Then we really don't local news then. We capture university-brainwashed liberal perspectives in our NextDoor dataset.

You clearly aren't getting my point.

I'm arguing for 100 biased-perspectives over 1 biased-perspective
Thanks! They write "sending hashed first party conversion data from your website in a privacy safe way" but it's just hashing (https://support.google.com/google-ads/answer/9888656) the email address etc, which really does not deserve that description.
I don’t think you understand. For someone who isn’t familiar with the React ecosystem - how would they know to install any of your mentioned dependencies.

Forget which solution is better, apparently there is a subset of users who choose Angular purely because they want features built in & not to go searching for additional dependencies.
MEV-Share Beta
For me the point where I found myself full-timing OS X aside from the odd game that didn’t like Classic was 10.2. It was so, SO dramatically more snappy than 10.0 or 10.1 on my little 400Mhz iMac while also being more stable than OS 9. 10.3 was solid if unremarkable, and while 10.4 was nice, that’s the release where my iMac and its 8MB ATi Rage 128 GPU started creaking.

Upgrading to a 1Ghz Pixar lamp iMac fixed that issue though and on that 10.4 was excellent. If it weren’t for the missing features compared to 10.5/10.6 it’d be my favorite OS X release, because I strongly prefer 10.4’s light-middle-toned take on Aqua to the dingy grays that took over in 10.5/10.6.
> Amazon health just has people agree they can violate hipaa

I apologize for feeling the need to even ask this, but are you sure you know what HIPAA actually is?

HIPAA prohibits medical providers from disclosing patients' medical records/info to third parties without their consent. Medical providers can still share that data with third parties with patients' consent. And patients are also absolutely free to share their own health data with absolutely anyone, no consent from anyone else is required.
Is there a way to calm it down by turning off some features? I ask because I'm in the "hey, I love the range, and simplicity.. would buy one as soon as I can afford it.. just don't care about anything beyond cruise control" camp.
I am using Firefox Nightly 114.0a1, with "Don't enable HTTPS-Only Mode" enabled, and a visit to http://example.com works as expected (a GET from http).

Enable the web developer tools (Menu->More Tools->Web Developer Tools), visit the site again, and see if it is directly visiting the site or getting a redirect.
Odd. I'm under 30 and I've been writing HTML for around 15 years. Meanwhile, within the past year or so, I met a frontend dev at work that didn't even know what an HTTP request was. They were over 30 years old.

I think your attitude about the matter could use some adjustment. There is more to it than age.
It also doesn't say what currency it's in anywhere on that page. Is that my local currency or (presumably) USD? That makes a very large difference to my price.
Seeing as it’s often. Do you have a single example?
https://www.sec.gov/Archives/edgar/data/1737450/000143774922...

> We have been a public company since 2018. In 2021, Kunlun, a Chinese public company and our largest investor, increased its ownership stake in us beyond 50%, and as a result we became a consolidated subsidiary of the Kunlun group. [...] As of the date of this annual report, Kunlun, a Chinese public company traded on the Shenzhen stock exchange, indirectly owns 55.60% of our issued and outstanding ordinary shares. As such, we are a consolidated subsidiary of Kunlun.
If you don’t like articles like this, don’t click them, don’t read them, and don’t comment on them.
Man, all these companies and engineers that wasted billions over a decade trying to crack self-driving cars are gonna have egg on their face after reading this
>For desktop devices "instructions per dollar" would be most relevant.

Well, it's one measure, but scaling potential and absolute performance limit matters as well. In use cases where a desktop is performing work to help one or more humans, the cost of salary and other support may utterly drown out even a very expensive extremely high power system. Ie., a 1200W workstation being used at maximum power 10 hours a day 365 days a year (an absurd utilization ratio) at $0.15/kWh (average US electricity cost) would still only be around $650/year. If it boosted the productivity of a typical tech worker even 1% it'd pay for itself no problem. It's easy to lose sight sometimes of how historically incredible the bang for the buck is in tech.

I think it's important to remember because some designs that do incredibly well at small sizes run into challenges scaling. Like with CPUs, the nature of silicon fabrication makes it ever more difficult to grow a monolithic die. Switching to a chiplet-based design does mean absolute efficiency and minimum power challenges amongst others, but dramatically improves scalability at the high end. It's a sort of infrastructure tradeoff. Apple for example has done incredibly well with its big silicon SoCs from handhelds to portable Macs, but it's been struggling to do a Mac Pro or even updated Studio. It's not clear that they physically can do something on the level of a modern Epyc chip anymore than Intel could with monolithic Xeons.

So normalized performance/watt and performance/$ and so on do matter, but absolute final density and scale up are another part of the matrix for certain use cases too.
"Classic" is not there.
How do you know the router IP when you're on a phone? I know you can dive into network settings, but seems like a hassle.
> Airbnb peaked probably around the time they went public

They appear to be doing better than ever in terms of bookings [1].

[1] https://fourweekmba.com/airbnb-bookings/#:~:text=Over%20393%....
They do generally receive favorable marks by the IIHS: https://jalopnik.com/volvo-is-the-first-carmaker-to-receive-....

Even updated tests (released post-launch of the car) tend to treat them pretty favorably: https://www.cbsnews.com/news/most-small-suvs-fail-insurance-...

I think of the IIHS as a sort of benchmarking organization - not representative of the real world like any microbenchmark, but also correlated with production performance on some level. They seem to do quite well in their microbenchmarks.
No, it wouldn’t count: “work” in this context is a technical physics term meaning a force applied over a distance.
If your ring is your password then they'll just take your ring and your phone...
No 1-2-3 for BSD?
https://archive.is/MwT63
City of Dallas hit by Royal ransomware attack impacting IT services
Honestly, I couldn’t have come up with a worst demand than this. I almost have to think this is an idea that was introduced by a subversive element in the union. Literally ten monkeys on ten typewriters could have produced something more coherent. Just incredibly tone deaf and out of touch, and I say this as someone who’s pretty, pretty pro-labor!

You want better comp, so instead of shifting that burden to the richest company in the world, you’re going to … try to directly extract that value from the customers visiting the store at which you work. OK.

Going to be hilarious when Apple has a facially neutral reason for closing the unionized store when people stop going to the one store with a markedly worse consumer experience.
In the gcc/gas distinction, the fact that gas is part of binutils, a completely separate project from gcc, means that there is another package you might have to update to use a new feature.
A 2,200-year-old poop time capsule reveals secrets of the Andean condor
> The passkey itself is an encryption key.

Close - it is a signing key, e.g. used for integrity and authentication

> To authenticate, the site sends the client the encrypted private key and a challenge. The client uses the passkey to decrypt the private key, which it then uses to sign the challenge, then it sends the signature back to the site. The site verifies that the signature is valid and then lets you in.

This is how non-discoverable WebAuthn credentials (may) work, and is based on the U2F model. These hardware security key fobs did not have sufficient memory to store created credentials and associated metadata for potentially hundreds of sites. So instead, when you registered a credential it would generate a handle, and that handle would be returned to the site. To request authentication, you had to provide a handle which the authenticator understood. Such a model is really meant for second-factor authentication, e.g. after we partially authenticate the user with a knowledge factor, see if they have the physical factor.

A passkey in contrast is meant to indicate a discoverable credential. You don't need to provide those handles to authenticate. Instead, example.com shouts into the void (of browser javascript API) that it would love a previously registered credential. It hasn't authenticated the user at all, so it has no idea which credential that might be. An authentication response includes the handle and a signature, such that it can be correlated with the existing registration on a user account.

Passkeys add in user verification as a capability so that you can use them for the entire authentication process rather than as just one of the factors. This typically means a biometric challenge or knowledge based challenge, such as PIN/passcode entry.
> ...was probably the wrong audience? Because digging into...

I think the casm separates testers from non-testers.

I've noticed that there are either doctors who will order ALL of the blood tests (all at once, and a few times to track trends), or doctors who will not order any, even if it's clear that tests are absolutely necessary.

A LOT of stories I've read on HN, or heard from others I've spoken with about this subject mention that somewhere along their journey to recovery, they (the patient):

- Did some research,

- Requested their doctor order a few labs,

- Were denied by their doctor (not for insurance reasons),

- Ordered the tests on their own from jasonhealth / ultalabtests etc.,

- Received high/low results as predicted.

...and only then did their doctors respond appropriately.

The fact that we can order our own tests is the difference -- I think -- because it's very similar to the difference between GenZ and Boomers with respect to being tech-native.

From my own experience, younger doctors, generally, order as many tests as possible and want as much data as possible (since data and testing are now cheaper, faster, and more available -- and this is native to their experience, now), whereas older doctors are less likely to behave that way (since tests used to be more expensive, slower, and generally not covered by insurance).

-HOWEVER-

Looking from the other side of the table, sometimes it might not be best to order lots of tests all the time for certain patients, since some (possibly acute or false-positive) results might just stress them out...

Especially when most patients are happy with the current standard. Patient has a rash. Doctor prescribes steroid. Rash goes away, and the patient is happy. No need to dig into the root cause of the rash, and if that cause might lead to cancer 10 years down the line, if ...for 99% of people... it won't.

That said... for the patients who do show an interest in debugging, I think some accommodations should be made that don't involve the frustrating "self-ordered tests process" listed above.
Can't you define a discontinuous function over some other set besides the reals, such as the set of all computable numbers? For instance, a step function is discontinuous at a single point. You can also define a function that's discontinuous at every point, such as the indicator function of the rationals.

I don't have any experience with constructive set theory, so maybe I'm missing something.
The hardware was inevitable. The software, not so much.

Apple made a lot of compromises, constraining a Unix system ™ to a huge degree in order to make it extremely simple and usable battery/ram wise. Those compromises had costs.
You might like https://passkeys.dev if you want a more implementer-focused overview.
(Kagi founder)

Kagi never did bait and switch tactics and certainly doesn’t have a “history” of this.

This is the third time you are accusing Kagi using the same words although I have addressed this already in a comment to you before [1]

I would like to ask you to stop spreading this nonsense or at least substantiate your claims so that we can have a discussion.

[1] https://news.ycombinator.com/item?id=35684449
Pre-google internet was way more structured because it had to be

I have a feeling many things in the digital space are similar to this and will go the same way, code is a pretty good example. Longer term, I wonder what the generation of massive amounts of code will do to the training data.
I guess one bonus is that no companies will survive intact to become Cyberpunkesque monopolies with such shortsighted planning.

Instead the stock market and its adherents will be (are now?) our overlord.
Flutter would seem to be a logical replacement (though admittedly last time I checked, there are big issues with Flutter Web on some of the points you mentioned, particularly around text selection and accessibility).
Oh please; you have no way to prove Google’s stock price is due to Sundar or a global trend to pivot into exploration of technology.

Billions are spent each year marketing the value of tech. Fiat economics are not immutable laws of reality but populist memes. Valuations have no real tether to reality except what a bunch of apes can be convinced to believe in.

Religious memes of high fathers and endless human expansion seem deeply rooted into the human condition after centuries of being forced to drink such kool aid.
Refreshing to read one of these from a scientific rationalist who doesn't descend into "I have gone to a better place" and who can direct the fear into the process to get to an endpoint, and thinking about being in the now, rationalising what happens after.

What happens is, he isn't there.
Yeah it’s definitely a walkable instrument but I’d be surprised if anyone actually treated it as a hikeable one.

That’s quite a difference in burden.
How exactly does one find out what articles are like without clicking on them and reading them?