skysight-inc/HackerNews huggingface dataset:
Aren’t the most profitable mobile games free-to-play? Fate/Grand Order and Genshin Impact are AAA in terms of revenue if not quality.
Here's what Google has to say [0]:

> Passkeys use public key cryptography. Public key cryptography reduces the threat from potential data breaches. When a user creates a passkey with a site or application, this generates a public–private key pair on the user's device. Only the public key is stored by the site, but this alone is useless to an attacker. An attacker can't derive the user's private key from the data stored on the server, which is required to complete authentication.
> Because passkeys are bound to a website or app's identity, they're safe from phishing attacks. The browser and operating system ensure that a passkey can only be used with the website or app that created them. This frees users from being responsible for signing in to the genuine website or app.

Two is already handled by a good password manager (which every announcement of passkeys leaves out), so the real benefits are in one. Instead of providing the same password each time, you prove that you have your private key in a way only that website (or whatever holds the public key) can ask.

Among the many issues, I think the biggest is that this functionality is being locked behind these large corporations as gate keepers. Is anyone aware of any open source, self-hostable work to provide passkey functionality?

It seems to me not all of it could be since some implementations will require that you prove your private key is stored by a special chips that can be attested which you necessarily can't muck with or reproduce (at least without a lot of effort and maybe running afoul of laws). And there's nothing that guarantees that your keys can be take elsewhere unlike passwords which you can do whatever you want with.

Something else to keep in mind, when they talk about the guarantees of passkeys, they're talking about several other layers of technology. That's why password managers already offer a lot of the security being touted.

[0]: https://developers.google.com/identity/passkeys
So, evil.example tries to log in and triggers the passkey thing on my smartphone. My smartphone asks "Do you want to log in to good.example?" Because I'm currently being phished and didn't pay attention to the URL "evil.example" anyway, I will confirm this on my smartphone and evil.example is granted access to my account. I don't see how this is more phishing resistant than current 2fa. How can my smartphone know whether I'm interacting with the correct website on my laptop?
I told you
> multiply/accumulate for each tap in sequence. Very (!!) optimistically, that’s about 128 instructions

This is what all those vector instructions are for.

FPGA is kind of invaluable if you have lots of streams coming in at high megabit rates, though, and need to preprocess down to a rate the CPU and memory bus can handle.
This actually changed somewhat recently (I'm not sure exactly when), but I tried it the other night and was able to run k3b gui from wsl2 on win10.
I'm actually going to set this up on my mother-in-law's machine next time I see her. She's forever losing her book of passwords, but always has her phone on her.
https://npmtrends.com/@angular/core-vs-react
What Joshua said, plus some hotspots also whitelist some IPs, allow some HTTPS temporarily. The world of hotspots is a real mixed bag on how they do things.
Yes, your exact thought process may be a black box to me, but I myself am a black box made to the same (DNA etc) spec. We have millions of ancestral years of experience trusting each other and we know how to simulate each other because we are the same kind of black box. Your trust in other humans is explained much more by your priors over human behavior than by any observed behavior of individual humans--that's layered on top.

In short: we trust people because we can model them effectively, and being one helps. We trust mathematical models and traditional programs because we understand them and can check their work in any specific instance. Large ANNs don't (yet) benefit from either of these two kinds of trust.
Minors can't legally enter contracts such as EULAs.
I wish there was a way to determine more stratified outcomes according to potential correlates... without having to perform high statistics human trials. I imagine that kind of detail is released after some time, I wonder how long that usually is.
As far as I can tell you have a billion dollar valuation series B round (congrats) but that also means you need to grow into that valuation. In the end, it will be be the same predatory pricing strategies that you’re forced into to justify to your investors the valuation. I wouldn’t bet my horse on it - it’s just the same auth0 but subsidized by VC money right now.

For auth, DIY with open source is the cheapest and best option
It seems awfully trivial but in the context of a positive security announcement

g.co/passkeys (my gut says, "what is this scam? I am not clicking on that")
https://myaccount.google.com/signinoptions/passkeys (my gut says, "interesting, let me take a look")
> In the past number of years only after a phone is attached do other 2FA methods like TOTP become accessible as options.

I do always see these comments on HN and I think "Huh, really?" and I go check and, nope, Google doesn't have my phone number, but they do know I have security keys, so that's all working as intended.
I have tried to compile the browser/editor, the worldwideweb.app, as well and failed, indeed due to having incomplete sources/dependencies. I did not look into it too much though with my main goal being to get music software running.
>Passkeys are synced to the cloud by default on iOS and Android, which is probably a good idea for many use cases,

Gtfo.
Yeah okay, but then just don't do 2fa via SMS. How are passkeys better than a 2fa app on my smartphone?
Great website! Small feedback that may or may not be relevant to you: on mobile (chrome, android) I can't see the horizontal slider for monthly active users and the calculated monthly price on the same screen (on the pricint page), that is without scrolling. I was confused for a bit as I was wondering if it was free whatever the number of users was.
GCC has this: https://gcc.gnu.org/onlinedocs/libitm/C_002fC_002b_002b-Lang...

But I have seen any use for it, besides every GNU/Linux program having code linked in to call _ITM_registerTMCloneTable in case libitm is used.
What is consciousness, if not perceiving-feeling-acting-learning loop?
Yes, but maybe that isn't the case for games in the middle of the revenue ranking?
(I vouched for this post because I think it's important to actually address these issue head on with facts and not just shout people down.)

Berenson's numbers based on the presentation you shared seem to check out, but the interpretation seems odd.

Just looking at how many cases were averted doesn't tell you what types of tail risks were averted. It may be a worthwhile trade off to have 10x as many "severe side effects" in exchange for having many many fewer severe, debilitating, or fatal infections.

Also, Berenson is looking at the ratio of severe side effects induced to RSV cases prevented. But the vaccine side effects only happen once, at the time of injection, while the vaccine may continue to confer long term benefits. So this ratio is highly dependent on the time period in question.
damn... i'm sorry. sooo so sorry.
Half-height should be easy as the up/down keys are half-height already, and there would be no need for new holes. Wiring for two additional keys can't be that difficult either. Dedicated page up and page down keys would be really practical.
Like it or not, these sort of not-very-effective-vaccines-for-mostly-mild-diseases are going to be a very tough sell for a lot of people post-covid. I assume there will be ongoing attempts to ride of covid's coattails to get them pushed or mandated wherever possible.

The real concern is that if we ever get new effective vaccines for bad diseases, there are going to be lots of people not taking them after all the abuse of trust that's happened. At this point, how do you even know who to belive?
it mainly lacks good UI/UX tools to do so and an agreement on what the right approach is, especially if combined with raid

without raid it's not too hard, just bothersome and finding the right information can be annoying

the main gotcha is that lockdown mode is incompatible with hibernation (no matter if it's encrypted or not) and some distros enable it by default when secure boot is used, which is most times the case with a full disk encryption setup
It seems to me like the answer to "would you learn anything new by being a bat?" is necessarily yes, because you would at least learn the answer to the question itself.
> who turned out to be a criminal

Who was already a convicted criminal, and was very visibly using his networks to defend himself against that conviction.
Apparently, WSLg does away with the need for a separate X server, making things easy to use:

https://github.com/microsoft/wslg

The "Apparently" is there because it's not something I've tried myself (I'm a Linux desktop user), instead it's something several of our users have tried and said works:

https://github.com/sqlitebrowser/sqlitebrowser/issues/2142#i...
I believe you are correct, I worked on a summer research project at NYU in 2018 based on https://arxiv.org/abs/1805.12185

As part of that project I constructed an API that took a small dataset and a model, launched a K8s pod and ran something like this from the paper:

> The pruning defense works as follows: the defender exercises the DNN
received from the attacker with clean inputs from the validation dataset, D_valid, and
records the average activation of each neuron. The defender then iteratively prunes neurons from the DNN in increasing order of average activations and records the accuracy
of the pruned network in each iteration. The defense terminates when the accuracy on
the validation dataset drops below a pre-determined threshold.
We note that pruning has been proposed in prior work for n

Obviously this wasn't on transformers but the idea is similar.
I see 4 dead comments, but I suspect one of them is from a real human (derjanni)
Good. Why it has taken so long for them to react is incredibly odd. The market clearly cannot make the move bu itself, so a little nudge is great.

Ethereum is one non-power hungry option. I'm sure there are others.
When it comes down to it, I think most of our issue is that the technical details still matter enough that we can't afford to provide a universal human interface layer...and when that falls on the app developer, either they compromise the app or they compromise the user, because nobody is capable of filling in every rough edge and also doing the thing they set out to do in that moment. If they actually set out to create a fix, that quickly turns into their career.

A lot of the "web frontend churn" meme is derived from the quest for a slightly better compromise - which has produced some results if what you are building resembles a web page. But over and over, native devs will say, "no, I want the hardware access. This layer still doesn't address my use case." That's been true of anything deeply I/O related on the Web - graphics, audio, input. Things where you can't make a simplifying assumption if you actually start covering all use cases.
https://www.google.com/search?q=CEOs+average+hours+worked&rl...
Ask HN: Dell update results in BSOD deathspiral. Is it just me?
I know several people this happened to today. Are there any more out there? :)
I agree. To answer your question it's really just companies sticking with what they know. Just like how a huge portion of the internet is still built on PHP.

Check out this chart (click rankings in the top right): https://2022.stateofjs.com/en-US/libraries/front-end-framewo...

You'll notice when sorting by Retention that Angular is falling off hard, but by Usage and Awareness it's been steady for years at the top.

Retention: would use again / (would use again + would not use again)

Usage: (would use again + would not use again) / total

Awareness: (total - never heard) / total

By those metrics, the number of people wanting to keep using Angular has been falling for years. But they are forced to by some external control.
Small businesses don't win many advertising auctions anyway. Big brands win, or cheap knockoff brands on Amazon, or Amazon itself (not a small business).
Hope the Chief retires soon enough before IBM goes extinct
a Intel Apple laptop? because they kinda don't care much more about the intel devices they had produced
Elite* social norms are different, not always in a good way. Consider the many illustrious defenders of Roman Polanski.

*I know this word gets overused but here it is apropos.
I have 2 work laptops, an M1 MBP and a XPS 15 that I upgraded to Windows 11 a while back.

It's fine. Better than Windows 10 was. My explorer has tabs now, among a few other nice things. Nothing broke.
I think you just described Symbian.
I’ll insert a complaint here in a bid to have you convince me to give it another shot.

I gave an install of Ubuntu a try as a daily driver, and I went in super sensitive to anything not Just Working. In the first few weeks: I formatted a usb drive (using the explorer GUI), took my pdfs somewhere to be printed, and they couldn’t access the files on the drive.

I did everything right as a user. Hell, I’m a nerdy software developer. And a simple application I do often in Windows significantly inconvenienced me in my daily life.

I’m not super sensitive to the ads or privacy issues with Windows. I’ve never had basic functionality I expect my computer to do not work for me. It was a poor first experience with Linux as a desktop.

That being said, I daily drive WSL and Docker containers of Linux on my Windows machine. I’m terminal-native, and 90% of my productive activity is spent in Linux. I leave the basic life-stuff to Windows though. For example: using a browser as an interface to the web is a Windows task for me.
The rising tide lifts all boats. Except Angular.

https://npmtrends.com/@angular/core-vs-react
I think it can to a degree, just like LLMs imitate human language to a degree. That imitation can only happen by accurately modelling humans.
Also,

WHO's guide for "unhooking from difficult thoughts and feelings"
which is not an app, is free, and has downloadable audio exercise guidance.

https://www.who.int/publications/i/item/9789240003927

It's one of the best things of its type I've seen.
Saul Khan gave his AI an inner monologue:

https://www.ted.com/talks/sal_khan_the_amazing_ai_super_tuto...

It solves the problem before talking about the steps.
>First-Party Sets (FPS) is starting to roll out to stable. First Party Sets is part of the Privacy Sandbox. It is a way for organizations to declare relationships among sites, so that browsers allow limited third-party cookie access for specific purposes.

Am I correct in my understanding that this basically undermines a user's choice to block third party cookies? Because a third party cookie is a third party cookie no matter how much icing you dump on it.

I hope this is an option that can be disabled or is separate from the current blocking of all third party cookies.
I guess SolidJS should be very flattered! Signals seem very inspired by it. Overall I'm excited by these changes. Rxjs is great in many ways, but it's always been a bit awkward in Angular (e.g. Components hide that Inputs are Observables, so you can't just pipe between them).
Why only youth?
other than both being electron apps (and admittedly electron was made for atom), Atom and VS Code share no common codebase.
I would absolutely not consider them domain experts on anything that's not directly related to flying a jet.

People tend to fall back on these videos as "expert proof" as if military witnesses are more reliable in some way... but they're not at all experts on atmospheric phenomenon, optics, UFOs, or a multitude of other things that could potentially explain these. When it comes to what they're seeing here the expertise ends at "not a plane"
Nice series!

One comment though:

> The compiler ingests one .c and outputs one .o. It has a low memory footprint. The linker on the other side, must use all the .o files at once to generate the executable. Keeping all these .o in memory would stress the system too much on big projects.

This is a really weak argument that does not make a lot of sense.

The major advantage of separate object files is avoiding recompilation of modules that haven’t changed.

In fact, compilers like Jonathan Blow’s Jai seem to get massive performance improvements by treating everything as a single compilation unit and avoiding writing a bunch of object files only to call the linker on all of them.
It is an ESM problem, since it works just fine with non-ESM script tags. ESM isn't some theoretical thing, it's the reality of how it works, in particular when we are specifically discussing the practical reality of using it. And the fact is that it absolutely is more cumbersome than the old technologies (and more cumbersome than alternative approaches that could have been taken). The fact that we're now talking about launching Chrome with special command line flags demonstrates this. I mean, the rest of my comment that delves into all the other problems proves it even more, but the fact that it fails the bare minimum requirement of just loading when you drag and drop a file into the browser is fairly bad.
Apple Wants to Make It Easier for People to Learn AI Together
But we know how it relates to everything. Neural nets are good at that. And then we can cluster the data and interpret it, or correlate it with a visual signal.
It doesn't has to be expensive, the files could be chunked in 1-day chunks for example, and a hash of all of them computed with a merkle tree.
Looks like a child's balloon blowing in the wind. It's not a large object lower down, it's a small object closer to the camera. That's why it appears to be moving so quickly and why it doesn't cast a shadow in the initial shot.
It's a web agency https://basement.studio/
When you proove something you are esentially prooving that a statement logically follows from some other statement(s) for which we know that are true

You can evaluate the validity of a proof by checking the truthfulness of every statement which was used to argue that the proof holds

Miniature example of a proof with relaxed rigor:

Proove that 3+0=3

Proof:
The above statement is a direct consequence of the additive identity axiom which states that x+0=x, if x is a real number. So the only thing we need to check is if 3 is a real number, and we know that it is. The statement holds, end of proof

So to check the validity of this proof you could check if that axiom really exists and check if 3 is a real number, if some of those is false than the proof is invalid

Edit: Or imagine that you have a DB full of axioms, theorems, prooven statements which you can use to proove a given statement. Then you could proove something by just referencing those. Eg. in the example above lets say that the neutral identity axiom has id 3, and the fact that 3 is a real number has an id 103. Then I could just say since 3 and 103 3+0=3
I’ve heard that it’s really bad for it’s size
npm + an import map generator should work. I think you might be able to use the jspm import map generator via the `jspm link` command: https://jspm.org/docs/jspm-cli/stable/#link
Finding applications is also a form of curiosity.

And we can argue that money is also the key factor in almost every notable advance. In order to do research, you need equipment, access to knowledge, and time.

The first is the most obvious, equipment is not free. Access to knowledge is much easier than it once was, but still, the best way to access knowledge is to be with knowledgeable people, like in a university, and universities are not cheap, and even if they are, the location where they are usually isn't.

The last, time, is the hardest to get by. If you are working your ass off just to survive, then no time for you. You need a job that is low effort so that you don't get exhausted, that pays reasonably well so you can live comfortably, and leaves you enough time for your research. Few can enjoy that. You can also make research your job, but if that's your job, then you need to think of quarterly profits. Another option is to get supported by someone else, but it doesn't change the fact that someone is making money to support your research.
Thank you for the updates, Angular. I don't like working with you at all but your updates kinda assure me that at least I'm not working on legacy software.
Jesus Christ, another version?

Let people learn previous features as having a feeling that your framework is constantly delivering new stuff and that you need to constantly catch up with them is increasing FOMO and is making people unsecure...
Also, reducing spending is even slower than reducing taxes.

The vast majority of government spending is on Medicare, Social Security, Medicaid, and defense spending. Politically those are untouchable, mostly for good reasons - reducing any of them will result in people literally dying.

The vast majority of what's left is hugely impactful high ROI activities like scientific research, infrastructure projects, and other basic good governance activities.
FYI: Product hunt link is wrong

It shows kianpak.handsdown.com instead of handsdown.kianpak.com

Also, I’m planning on upgrading to a new Mac. How would transferring the license work?
clearly your original comment was unfair.
It's worse. Let's say Congress raises taxes, as some here advocate. All right, what's Congress going to do with the money? Have less of a deficit? Or are they going to find new things to spend it on? Congress being Congress, they're going to spend it. And that won't help with inflation, because it reroutes the money rather than removing it.
Nah, this just reads like raging redditor stuff actually. Honestly, go back to Reddit. I thought this was an entrepreneurial site? The people here are distinctly familiar with how insane the workload and stress levels are for starting and running successful companies. You know, the reality of it.
MacWorld Boston 1988 (The Computer Chronicles) [video]
You seem to assume that the PCM encapsulates the drink on all sides. But the cup has a lid, which doesn't have a PCM inside, and which isn't perfectly isolated.

So there will be energy going from the drink to the environment through the lid, which in turn allows energy to flow back from PCM -> drink.
> But there has to be something more I don't understand. The interest on savings goes up with the interest on loans.

This is true, but it's all because of the one interest rate that the fed controls: the interest rate at which it lends to banks. If that rate goes up, then banks are willing to pay higher savings rates to depositors (since banks don't want to pay higher Fed interest rates to borrow, so luring in depositors is a replacement). Since banks are paying more for their money, though, they also need to charge more on the loans they give. This is why those move in tandem.

Quantitative easing/tightening also does one thing: either buy or sell financial assets at the Fed. Historically this has been bonds and other low-yield, long-term instruments, but always with the purpose of either stimulating the economy (by buying assets and pumping money into the economy) or selling assets (thus pulling money out of the economy to cool it). I would agree that the Fed buying stocks during COVID isn't what I would have liked, but mostly because stocks are an asset class where volatility and risk are baked in (and I don't like the moral hazard of the Fed absolving investors of that risk).

Quantitative easing as a mechanism, though, is a pretty blunt and simple tool to either pull money out of push money in to the economy. I reckon that the early-COVID hey-day of easing probably had something to do with the super-high valuations we're seeing today, but the actions the Fed is taking _now_ seem like a reasonable and rational response to that overheating.