skysight-inc/HackerNews huggingface dataset:
I think the proliferation of narratives about the early web reflects the lack of centralization. Everyone had a different view of it. You could kind of see it as early memes made their way around forums with different people thinking their forum came up with it, only to have someone with a wider view point out it came from somewhere else. If someone was hanging out with the startup crowd back then, the narrative web3 people go for might be the most plausible version to them.

There's an interesting modern case where a meme started on Mastodon, but then it popped up on Reddit and everyone seemed to have a different idea of which YouTuber/Twitter community/etc came up with it.

https://mastodon.social/@picklemaddierix/100639571254871391

https://old.reddit.com/r/teenagers/comments/bt9ww9/gender_is...

It might have been the first Mastodon meme to go viral on the wider internet.
I use a yubikey. But AFAIK, Apple doesn't actually use passkeys for iCloud/Apple ID authentication.
It doesn't necessarily signal that the company's equity is in a bad position. I'd venture to think a lot of people would rather keep cash on hand in these times than locked up in a private company.
> Plenty of researchers have looked for ways that individuals can ease their burnout,

> but many don’t seem to work. A 2022 research review analyzed 30 previous studies on burnout interventions for doctors. Many of the programs—free food, subsidized gym memberships, weekly meetings with a psychologist—didn’t yield significant results.

Do these studies genuinely look at individual results, or at aggregate effects among all of the individuals as a group? If you're validating based on group average results, you can't have the unitary person as your goal (and vice versa). This may be, in part, why "Nearly all of those that did involved a group element, like wellness classes or mentorship programs."

The thing I personally find the best cure for burnout is not mentioned in their list "socializing, exercise, meditation, and arts and crafts.". That thing is getting a new job, that isn't identical to my previous job. Whether this be a promotion, or a new employer.

> If the framework proves effective for people in a wider swath of health care jobs, Moss says CORAL’s approach could feasibly be adopted by burned-out workers in any industry.

That depends on the psychological diversity of people in health care jobs compared to the psychological diversity of workers in total.

> Even as an aggressively uncrafty, professionally skeptical person, I felt calm and happy during my time with CORAL—a combination, probably, of getting away from my daily routine, paying attention to my emotions, and trying something new.

Yep, sounds like a nice vacation. Structured so you don't have to figure out what to do or fall into a habitual rut. No time pressures - just go with the flow.

> The program’s magic, its facilitators said, is in bringing people together to feel the solidarity and community so often lacking in modern life.

Which means it's not applicable to the non-social. Given the intense social nature of health care work that would tend to repel the non-social, this is, again, maybe something that wouldn't translate perfectly to other industries.

> if the CORAL curriculum could be distilled into something I, or any individual, could do on my own, I was met with a resounding no.

I also think this "no" is likely wrong. What's the point of non-real-time interaction on a web forum if not to interact with others as an individual on one's own?

> My editor—tipped off to my burnout when I pitched the story you’re reading—encouraged me to take a step back from the COVID-19 news cycle and pursue other topics.

And there we go, my own solution mentioned above. A change in job. The cure (not treatment) for job-related burnout.
Ah excuses. Got it. No actual example. Just really defensive because you can’t use ChatGPT very well. Thanks for clearing that up.
> Probably because a lot of people here are CEOs (or hope to become one)

I earn a bit above median and have no aspirations even for a lower management position.

I see this stuff and to me it seems like either jealousy or white-knighting. A lot of people protesting these CEO pays seem to want to see the rich make less much more so than they actually want the lower class to make more. And the "it will not end well for the rich" polemic just confirms that assumption to me.
BindGroups should not be that heavyweight, and there's murmors of a proposal to recycle BindGroups by updating resources in it after the fact.
It is? In my experience with the research world, providing access to the underlying data is table stakes. If you don't do that, then nobody can verify the correctness of your papers.
I'm very bullish on fusion given the new magnet breakthroughs, detailed here: https://www.youtube.com/watch?v=KkpqA8yG9T4 The SPARC reactor is still on-schedule to be completed and operational in 2025. It's expected to generate net-positive electricity, on the order of 140MW pulses. A larger version to supply energy to the grid is planned for the 2030's.

My concerns have moved to "okay, what is the cost of things even if energy is 'free'?". For example, desalination -- currently the majority of the cost of desalination is in the energy used, but even if the energy is free, the materials cost and capital expense is currently about 40% of the cost.

Will the cost of the inputs also go down dramatically as a result of fusion? Or will desalination still be cost prohibitive for most developing areas due to materials? If desalination price falls 99.9% -- what environmental costs will be associated with the extraction/transportation of necessary materials as well as the warm & highly saline effluent that will be dumped into surface waters?

With unlimited clean energy, some ridiculously inefficient schemes can become practical, such as removing CO2 from the atmosphere.
Your family member is hopefully wearing a dosimeter while doing all that. Sounds scary as can be.
Wow, these results are amazing! This might be extremely helpful in reducing the memory consumption of large models in the future.
Also Brazilian. It's a gag law + forced funding of abject old media conglomerates. As a result of political alienation, poor education and a lack critical thinking there are bubbles that are feed with misinformation and believe in the most comical stories. But this legislation is wrong and will cause more damage than good. The descentralized free flow of information is a great thing and the Internet is truly neutral and better at identifying and driving out bad actors than the old media dinosaurs.
I thought STM was dead. Seems to be minimal adoption within clojure and all the hardware which tried to do it has been disabled for being broken. What makes it a particularly important example?

The C++ plan of attack probably is more syntax though. Maybe parameterise constexpr, constexpr<input_only_io> or similar.
Driving lets you be independent, especially if you can fix your own car. Public transit leaves you totally dependent on the government.
Spoiler: if they actually implement this and find a way to enforce it, the miners will just do it overseas.
> Apple and Google own the entire mobile OS market. They could literally destroy Microsoft if they started to hugely degrade the experience of Microsoft products on iOS and Android with dark patterns a la Microsoft. But they don't.

Until very recently you couldn't even change the default browser on iOS, I think the idea Apple are playing "fairier" than Microsoft is a lot more nuanced than you make it seem with this statement.

Even after adding ability to change default browser to iOS, there's still the limitation that only the webkit rendering engine provided by Apple can be used - Firefox and Chrome on iOS are wrappers around the OS level Webkit implementation - the rendering engine is still Safari/webkit - they aren't using their own rendering engines as they do on all other OSes.

There's also the agreement between Apple and Google for default search on iOS too, which absolutely costs Bing marketshare.

> https://9to5mac.com/2022/03/01/web-developers-challenge-appl...
> But in a production system, functional purity (no side-effects) is a means to an end, and lazy evaluation comes at a pretty extreme performance cost.

In theory yes, in practice... not in my experience. Or at least, things are almost always fast enough in web backends.

> Not everyone disables lazy evaluation in production Haskell, because not everyone thinks they need to for performance, but I've definitely heard about it enough times that it seems like a relevant pattern.

Most people don't disable lazy evaluation in the way I think you mean it, but they use either BangPatterns selectively or StrictData.

Maybe there's widespread usage of `-XStrict` as well I don't know about.

Anecdotally I can say that trying to enable `-XStrict` in production caused performance issues that prevented us from trialing it further.

Laziness is frequently talked about as a negative, but it has big advantages in composition and code ordering like another reply talked about with regards to where bindings to enable truly top-down program design.
The point is that no amount of external modeling can give you any knowledge of “what it’s like” subjectively.
They are talking about client development so none of the answers are going to compare.

You aren’t grabbing ESMs from CDNs for a Node server app. And even if you are, that’s just not a situation that’s happening outside of an ecosystem that straddles client development.
You're suggesting that using a tunnel service is the recommended way to be a platform agnostic backend. But that doesn't cover the scenario where your password manager is running on the same device as the one where the user is performing the login, and all the UX/UI refers to using a phone to scan the QR code. I guess you could snag the QR code using platform accessibility features, but that's a real silly hack. Just let me advertise some mDNS service record for "authenticator" and require me to advertise a pubkey and let the user select/allow me once and remember the decision until the pubkey changes so that I'm trusted backend without the QR scanning rigamarole.
They support SSL because some browsers force https, but they then force a redirect to a non-SSL page. Seems reasonable. I think I may be missing the point of this being posted on HN. Does it cause issues in certain workflows or something?
We are in a new era of acute risk
Isn't hydrogen extremely hard to store over a long period of time ? (Seasonal)
From Google's blog post:

"Strong email authentication helps users and email security systems identify and stop spam, and also enables senders to leverage their brand trust."

Another way to stop spam is to make everyone pay to send email. Spammers, and brands, can't afford to pay to send marketing emails en masse.
> My attempts at convincing them a simple fall detection bracelet was sufficient were in vain,

Not making a pro-surveillance point, but fall detection bracelets are not sufficient monitoring for elders living alone. The fun starts when dementia rears its ugly head.

Choking, kitchen fires, gas leaks (no getting out of bed, so no falling), dementia compelling them to disassemble the house, dementia-induced hallucinations of intruders, dementia-induced claims of theft by neighbors and other helpers, and quick ability to verify/dismiss false positive alerts are huge selling points for cameras you'll wish you had if/when these shenanigans start.
I imagine cloud vendors having a new checkbox: are you doing crypto mining? You can lie, but then you’re committing tax fraud in a way that should be easy to prove if they notice you.

It’s the sort of thing they do in banking when they ask what a bank account is for.
FWIW Rails 7 uses importmaps by default, foregoing the need for a JS bundler. Coming from backend development, this seems like a huge win for me.
I liked part One but not as much as the David Lynch version of Dune. I liked Part One better than the prior TV miniseries. The casting was better in the David Lynch version as the current Paul is weak.
> And Google let them win by coasting on GSuite. I use it for my business, my partner uses Office 365 for hers. In 2023 Office 365 is by far the better choice.

If you don't mind me asking: what is better about o365? I know that Excel is the jewel in the Office crown, but if you aren't leaning on that heavily, what's the big difference to you?
OpenAI originally was a nonprofit nominally focussed on AI that was actually open, then they branched off a for-profit subsidiary with heavy involvement with Microsoft, came up with “safety” as an excuse to abandon openness, and created the “Open”AI of today.
These types of stories lead to comments such as yours which draw a false vision of how things are. According to BLS data there are approximately 200,000 people in the US who hold the position of CEO. Their average compensation is ~4x the average worker.
> trusting Apple to store your single-device passkeys for high-stakes credentials but not trusting them for syncing them is somewhat of a very specific threat model I'd say

I don't think it's that specific of a threat model, to be honest.

Many people are logged into iCloud on multiple family devices – are they aware that with Passkeys, by default every device they are logged in to has single-factor access to their entire online life?

Additionally, Apple's iCloud security posture has been in the news lately with some quite horrible stories that are very relevant to Passkeys, in my view: https://www.wsj.com/articles/apple-iphone-security-theft-pas...
> This is the only social media site where it seems like the majority of people actually think CEOs deserve their inflated salaries.

I never got that impression, but articles i read could differ from those you read here, of course, giving different impressions.
The Case for Postmortem Survival
For the framework 13th gen it only required running a fairly recent kernel (>=6.1) for it to work, but that's definitely hindsight
The first class is 8 months old and the latest one is 3 months old. If you click on the links, they'll direct you to YouTube videos.
How Does an FPGA Work?
Sure. You can go back all the way to our IPO. It is all in there, including the % of our revenue. https://investors.life360.com/investor-relations/

Once you have been covered in the press you start to realize how blatantly they lie. I'm not sure if it has always been this way but I encourage everyone to have an extremely skeptical eye to any news org that has advocacy as their mission
In fairness EVs still are more expensive than petrol cars. I'm hoping this will change though
> monadic complexity

In production Haskell I've seen it's typical you only need to understand how to use the common Maybe, Either, and IO monads. Maybe... sometimes... you need to create your own.

I actually think it's a bit of an anti-pattern, but this anti-pattern leads to a reality where the monadic complexity you alledge does not exist.
Spent countless hours on it as a child. I didn't even really know English.

"Flight mode" was a lovely curiosity at that time. Example from Encarta 98, but I thought 96 also had it.

https://youtu.be/7ytQQ4XdQmM?t=131
Probably not out of the box but if some of the local deep learning wizards get a quantized version working well and optimize it a bit, definitely.
Sooo, you're behind a captive portal which blocks internet access. So you access an https website on the internet that will redirect you to http. Wat.
I dont think you’ve ever been to an outer borough, have you?
It’s not all good news though - more than half of the fleet were offline at one point last year, to repair cracks that had developed. Arguably the standardized design led to all these reactors having the same problem at about the same time, where some diversity of design might have limited the “blast radius” of this flaw.
It may be true that we don't have a real fundamental understanding of what human reasoning involves but I think we can be pretty certain that it's something different from just stringing words together.
If that is a concern of yours, there is an option on Apple devices to disable iCloud syncing for passwords/credentials. This would limit passkeys to strictly device-only.
A startup let users talk to ChatGPT through a female avatar. It went awry
The future is RISC-V not ARM. The former will be everywhere, the latter only in Apple devices.
On youtube you can. First video 8 months ago.
I think they are using a dark pattern now. I opened a link in Outlook (Android) after a recent update and I got a popup to open with Edge. I didn't have Edge installed so I was confused for a moment. Just below the big colorful edge icon was (a much less visually prominent) option to open in my default browser.

If I hadn't been paying attention, I would have thought that they were forcing me to install Edge too.
Before everybody rushes to all sorts of conclusions, some background info on BIMI:

For BIMI to work, you need a Verified Mark Certificate (VMC). This is a x.509 certificate, but with additional extensions enabled. Most notably the 'pe-logotype' (OID 1.3.6.1.5.5.7.1.12) extension, which embeds an SVG file of your 'mark' (most likely your logo) into the certificate. The VMC proofs that your domain (the part after the '@' in the sender email address) is in fact the legal owner of the mark (the logo) that you are using. Otherwise any sender could use the logo of a bank.

A VMC is like an EV certificate on steroids, because there are a lot of things the CA must verify before issuing the certificate. The CA must verify that you own the 'mark' (the logo), and in order to do that the mark must be registered at your local trademark office. The CA must then contact your local trademark office to verify you own the mark, and contact your company (by phone) to verify you actually ordered the VMC. Needless to say: VMCs are not cheap (currently ~800 USD). Also needless to say: you can't get a VMC at Let's Encrypt or other free CAs.

Once you obtained a VMC you must host this VMC and the mark (as SVG) on a dedicated HTTP server, supporting TLS. I say dedicated, because most customer (browser) facing web services simply won't do. You must ensure that the files are served without cookie banners, CAPTCHAs, redirects, etc. The served mark (SVG) must be binary equivalent to the mark in the VMC, or else it will be rejected. This means hosting your BIMI assets using Windows machines may actually prevent it from working, as it may rewrite the line endings.

VMCs are certificates, so they will expire. You must renew your VMC annually. If you forget, you may harm your brand reputation.

Finally, BIMI mandates that you have DMARC enabled with 100% quarantine, or reject policy enabled. Which, on itself, can be quite a long process to adopt for large organizations.

My company has helped dozens of organizations with obtaining a VMC, we also host the BIMI assets for them. We see it is quite a big hurdle to adopt BIMI for most customers. It is definitely not as straight forward as becoming verified on Twitter et al.
This looks and feels like passwords with extra steps...

I mean now i need to "store, manage and secure" my per-user-certificate sorry "my passkey" myself and if its get compromised its my fault, how are passkeys more "secure" than enforcing a secure long password that the user can't change unless he met certain conditions and its conveniently stored inside the password manager i just built.

What happens if i lost all my devices due to a fire? at least a password let me still access things we these i might need to prove again that i am me, it might even be more easy to steal accounts because i can ask google to change it because i lost my passkey.
Related: https://news.ycombinator.com/item?id=35792078
Lawmakers said this same mess to Volker, who was and shall remain the one true fed king.
"that could be a response to an instruction" is the critical part here
Thank you! I'm trying to understand more deeply, so I appreciate it. :)

> This approach works because the secure enclave provides measures against bruteforcing and tampering.

That's interesting!

> because that implies off-device use of the PIN, so those measures are lost

This link from your previous thread is interesting:
https://support.apple.com/en-sg/guide/security/sec3e341e75d/...

Uses SRP to let the device prove to iCloud HSMs that the user entered the correct pin, without ever sending it over the wire. The HSMs have similar protections for brute forcing, etc.

From the docs I have a fairly high confidence entropy is 256 bits for iCloud Keychain. I have much less confidence on Android, but I'm still researching... :)
The web is a very wide world out there, and companies and people have a wide diversity of architectures and methods for frontend apps that benefit from import maps.

Consider:

- Many people want to skip bundling altogether for as long as is possible. It's really nice to have a build-free (or almost build-free) app, especially when you're starting a greenfield or personal project. Why get mired down in researching the latest third-party build tools before writing code?

- Third-party dependencies can be vendored (included in your own deployed assets on a domain you own). This ought to be everyone's default - CDNs shouldn't be used in production for new projects anyway. If you're loading from your own domain, hashing the asset isn't necessary.

- Sometimes you may have dependencies you wrote yourself that you'd like to load with an import map.

- Some architectures call for both a build/bundle step and an import map. Consider a micro-frontend architecture -- this allows many decoupled teams to work on different parts of an app that are composed together at runtime. Each MFE is built/bundled prior to deployment, but an import map helps the browser load each one when it is needed. See https://single-spa.js.org/docs/recommended-setup/

> I already had a tool that could do that, and it worked in every browser and didn't ignore the the security advancements we made 10 years ago.

But that tool (WebPack or RequireJS, right?) had to shim a lot of non-native features into the browser runtime, and at build time it was slow and very complex since there were so many module types that needed to be supported. Modern tooling has much less build-time complexity, requires little or no runtime module library, and is more performant since it's often written in Rust. (See Vite, esbuild, etc.)

Browser features that allow simplifying and/or eliminating third-party tools are always a net win, IMO.
It would be a bad and dangerous idea, if what you said was true; but it isn't.

Passkeys are just asymmetric key-pairs. There will be a variety of client-side implementations. Some may make export and backup difficult or impossible. Others, such as 1Password's already extant implementation advertise backup and synchronization as a feature! There is nothing about the passkey standard which prescribes the reality you fear.

> Now one could allow backups of a passkey, but then that passkey would be as insecure as a password.

Wrong, absolutely and entirely. Its still more secure, because its an asymmetric keypair, and you're forgetting about the far more common attack vector against password disclosure: service breaches. That's how attackers learn about passwords by-and-large. And this is not just some nice-to-have side-benefit of passkeys: its a core motivation of this standard. With passwords, a service breach compromises not only the accounts of every user on that service, but potentially every other account every user has, globally, because of password sharing. With passkeys, all of that is resolved.

Even if we end up with a system that is the same level of effective client-side security, which is also extremely wrong, the net security of the system will be vastly improved because service providers aren't storing the private key used to authenticate user accounts.

But the client-side security is also substantially improved, because passkeys have much higher phishing resistance.