skysight-inc/HackerNews huggingface dataset:
I can get behind registrar-level proof. And I can see why it won't happen, and it isn't because it's a bad idea.

One problem I see is the extra overhead for the registrars. Now they have one more thing to do: verify (sign) certificate requests. That extra work is probably enough to get registrars to push back against such a system.

The registrar would be assuming some of the functions of a CA. This would make it easier for a single entity be both registrar and CA. That would threaten the business model CAs and thus they'd push back against such a system.

If the CA were responsible for getting the registrar's verification for a certificate request then that'd add extra work for CAs, and thus the CAs would push back against it. If the domain owner was responsible for getting the registrar's verification for a certificate before submitting it to a CA, then the domain owners would be against it.

And this is all assuming that people could agree on a common set of protocols or data formats for this new system.
sounds impossible to scale. but nice ui though
https://www.roastycoffee.com/grapefruit-and-coffee/

It may extend the effects of caffeine amongst another things.

Just be aware of the interactions between grapefruit and certain meds.
This is why it'd take some catastrophe for me to get rid of my 04 WRX STI. The interesting part has been seeing how got here.
> I have been shouting about this for 10 years, none of the industry incumbents care. The internet is run by morons.

Or maybe, just maybe, hear me out on this... maybe your proposal is not as smart as you think it is.

For one thing:

> Cert request signed by the private key of the domain owner, sent to the registrar to verify, the registrar signs it if its true

What exactly does the registrar verify, and how?
SAP to embed IBM Watson AI into its solutions
I always like to think of Captain Kirk speaking SQL to the computer in Star Trek:

COMPUTER, SELECT COURSE WHERE MINIMAL PROBABILITY OF KLINGON ENCOUNTER
It certainly has that reputation but it is largely unearned in my experience.

There is no explicit coordination happening to create pump and dumps. There has, on occasion, been some level of coordination when attempting to trigger a short squeeze but that is mechanically different than a pump and dump.

What it does do, though, is spur memetic investment, which can create a short term frenzy for some stocks but it is not a planned event. Thousands of people post stocks each day and every so often a stock will perform well enough to where the community will take hold of it and push it to pretty incredible heights. The most recent one would be TRKA. If you're switched on enough, you can make some pretty massive gains.

However don't take this as me defending their crypto scam. That's just downright not okay.
That would mean that she's checking out 11+ years old Intel platforms, that doesn't seem plausible to me. Also "the only platform where Vulkan runs natively is Android". No, Vulkan seemed to be supported out of the box on the random distros I have tried.
To the second point: windows hello supports a variety of methods, one of them being without a fingerprint or camera. You can add it right now to your account.

For linux users, not entirely sure which environments support any form of "biometrics".
TBF, since this is itself an abstraction layer over React (well, NextJS), it is strictly a greater concern for this than React.
Not for training with the webui: https://github.com/oobabooga/text-generation-webui/issues/11...

It does seem to work using alpca-lora directly, though.
Civ4 doesn't have 1080p assets but that doesn't stop me from rendering it in that resolution. I don't understand the argument. Without "good enough" textures I should render it lower and upscale after the fact?
It sounds like you are not very familiar with The Economist as a publication.
Our looks and society's beauty standards are not in our hands. Seems like they're right.
Yes, this is more like "Roll your own JavaScript environment"
Googlers angry about CEO’s $226M pay after cuts in perks and 12,000 layoffs
Then he should stop ranting about Executive pays.

You can't have it both ways. Start misinformation about how capital markets work and not expect to be corrected.

HN is a discussion forum. If an incorrect fact or misguided opinion is shared, it will be debated.

I'm sympathetic to OP, but I also understand the dangers of misinformation and the resulting brainwashing of anti-capitalistic movement it causes and I will protect capitalism.
I know this subject needs to be (and deserves to be) treated with great care, but I think this is an unfair comparison.

I was and am an ardent supporter of (and often, a participant in) the street protests of that era, and for the reforms and abolition for which they were calling. I was in the thick of the tear gas in Portland many times, hoping that our actions might lead to a greater respect for Black lives in the USA. And I wish Rittenhouse had stayed home that evening and that those protesters were alive and uninjured today.

That said, comparing his situation to this one is unfair.

Rittenhouse was in a violent and confusing scuffle and was injured immediately before engaging. He had a loaded gun pointed at him at the moment he fired at Grosskreutz. Using him as the poster boy for bogus self-defense claims, especially the extremely specious versions of them so often proffered by law enforcement when they kill dogs or humans, seems counter-productive.

These guardsmen had no comparable basis for fearing for their lives that day (or in the days prior, when they inflicted grotesque violence, including stabbing 11 people with bayonets).
The midjourney price would be equivalent to ~100 hours cloud time. How is that crazy expensive?
What does playing a video game good have to do with Software Engineering?
Are you using the gpt3 api?
That might be what parent is assuming. My view is that (a) they're already mentally ill; and (b) the psychedelic can trigger severe episodes that wouldn't otherwise have happened.

I don't know how cannabis works for people with bipolar. Laing used to interpret all psychotic disorders as the same thing. I'm not sure that's right. It seems to me that the different types of bipolar are suffficiently distinct that it's unsafe to declare them variants of the same condition. And I'm pretty sure they're not on a continuum with schizophrenia.

I don't know; I'm neither a doctor nor a therapist. It's just that a surprising proportion of the people I've known well have turned out to have some kind of psychotic disorder. Perhaps they're attracted to me, or me to them. Either way, perhaps I could be used as a kind of diagnostic sign.
Don't be too discouraged. Not a soul correctly guesses what their 30s are like. Just keep making good moves.
I like the first-order vs second-order distinction here - this is a clean way to describe something that I've often found hard to communicate to others, at least for those familiar with functional programming. Everyone's familiar with first-order use of a language model at this point (it's just plain chatgpt) but higher-order use seems much more difficult for most to even conceptualize, much less grasp the implications of.

The huge challenge with higher-order use of LLMs is that higher-order constructs are inherently more chaotic - the inconsistency and unreliability of an LLM compound exponentially when it's used recursively. Just look at how hard it is to keep AutoGPT from going off the rails. Any higher-order application of LLMs needs to contend with this, and that requires building in redundancy, feedback loops, quality checking, and other things that programmers just aren't used to needing. More powerful models and better alignment techniques will help, but at the end of the day it's a fundamentally different engineering paradigm.

We've been spoiled by the extreme consistency and reliability of traditional programming constructs; I suspect higher-order LLM use might be easier to think about in terms of human organizations, or distributed systems, or perhaps even biology, where we don't have this guarantee of a ~100% consistent atom that can be composed.

Half-baked aside: in some ways this seems like a generalization of Conway's law (organizations create software objects that mirror their own structure), where now we have some third player that's a middle ground between humans and software. It's unclear how this third player will fit in - one could envision many different structures, and it's unclear which are feasible and which would be effective.

Exciting times!
No, all of these redirect to the original server when viewed by not-logged-in users. The original server has chosen to redirect to web.archive.
> Appliances are not end user computing

They are when the end user is using them. Think things like TVs or even thermostats.

> the OS is incidental and under full control of the manufacturer.

For all intents and purposes Linux has won where those conditions aren’t met.
Damn didn’t think the CIA mind control tech was actually real.
Certainly those late 90s budgets all kept government expenditures below 20% of GDP.

You could also try to raise taxes without stifling growth (and thus reducing revenues), but that's an even harder technical problem to pair with a similar political problem. Personally I'd be in support of a constitutional amendment that caps Federal revenues at 20% of GDP, so I wouldn't be on board for this, but to each his own.

Take a look at page 39 in the latest budget summary[0] and see if you can find the right places to raise revenues and cut spending to eliminate the $1.148 trillion deficit for 2023.

[0]https://www.govinfo.gov/content/pkg/BUDGET-2022-BUD/pdf/BUDG...
> and it will almost certainly be unstable

TBF - this depends how well they streamlined their manufacturing process. As yield goes up; getting a perfectly stable 3ghz chip binned as a 2ghz before a flash lock becomes increasingly common. It became common to hunt for specific chips for this reason back when I actually had time to pay attention to it.
I'm a data point towards that feedback loop. My partner and I moved to Colorado from a Southern state 4 years ago. We wanted to live somewhere in the West, and chose Colorado because:

* Mountains!

* Great legal protections for gender minorities, especially Boulder County

* Good tech scene to job hunt locally

We weren't part of that initial shift, but we're definitely part of the acceleration. We've met plenty of other transplants with similar stories.
While I don't defend American adventuring in that region, I think you're overestimating the stability of 1960's Cambodia. This article goes into it: https://ciaotest.cc.columbia.edu/olj/ojpcr/ojpcr_1_1/ojpcr_1... .
“Some of the most interesting questions about CAS [Complex Adaptive Systems] have to do with their relations to one another. We know that such systems have a tendency to spawn others. Thus biological evolution gave rise to thinking, including human thought, and to mammalian immune systems; human thought gave rise to computer-based CAS; and so on.”

- Murray Gell Mann, “Complex Adaptive Systems”
The video game?
Ask HN: How much of your company do you think is needed to function?
With the recent Elon interview where he stats that he's cut "about 80% of Twitter's staff" (1) I was curious about waste and unnecessary labor overhead in the tech industry.

Anecdotally I work for a fairly large (~4k employee) company that has a laughable amount of "cargo cult" positions (I'd even say departments). I often find myself replaying the scene from Office Space "What would you say...you do here?"

So HN, how much of your company do you think is actually needed to function?
(1) https://www.cnn.com/2023/04/12/tech/elon-musk-bbc-interview-twitter-intl-hnk/index.html
> it needs to offer a business environment that can compete with Silicon Valley

That means becoming the USA, wich I don't think Europeans want that

And to be honest with you, I don't think Silicon Valley is a thing anymore, the real competition is East, in Asia, nobody plays with hardware and robotics in the west, and that's a big problem, education is missing in the equation, AI isn't just about chat bots

Asia doesn't even compete with Silicon Valley..

The idea that EU should compete with the US is outdated and doesn't work, as a result, both the US and the EU are missing the big rendez-vous that's gonna shape the 22th century, the goal goes beyond creating a "business environment", it's about shaping a new civilization that moves forward, rather than stagnate for a whole century, look at the political climate over here, it's not looking good..

EDIT:

Just today:

https://www.bloomberg.com/news/articles/2023-05-04/peter-thi...
disposability is like, the main appeal of discord.
I feel fine ignoring Ms Hossenfelder's warmed-over second-hand bothsidesism. IDK why you are attached to it. But if you are, I fully expect you to also pore over what came out in it wake (I'm, replying now when it's in)

https://skepchick.org/2023/05/physicist-sabine-hossenfelder-...

https://www.youtube.com/watch?v=r6Kau7bO3Fw
I think there is a lot to be said for humanity pushing ahead with innovation and then figuring out how to deal with the side effects afterward.

Look at fire. This was probably one of humanity's first innovations. It is extremely destructive and I think we are just now getting handle on fire safety, but I think the benefits have outweighed the harms.

Same with agriculture. Again, lot of bad side effects, but overall better for humanity as it has freed up a significant number of people to be able to do other stuff besides just think about where their next meal is coming from.

Anesthesia, electricity, antibiotics, birth control, have all followed this pattern.
I'm sure you'll use the same logic when a coal worker is fired, right?
The hypocrisy is mind-boggling.
When it comes to the environment, everything helps. Don’t let perfect be the enemy of the good.
Lyft Announces Results for Q1 2023
Lexer is just a parser for a regular language. They output a linear stream of tokens, conceptually similar to a stream of characters, only smaller in size and easier to create a grammar for since superfluous elements like spaces are discarded. You could totally parse at the character level if you want to by treating each character as a token, it's just that it makes things needlessly hard.

The general rule seems to be: lexer is for parsing linear structures like numbers and symbols while parsers are for recursive nested structures like lists and objects.
Who said anything about reading a whitepaper?
TOTP is not 2FA, but can be used for 2FA. What is the "secret stored on device" when SMS is used for 2FA?

Passkeys are stored in Secure Enclave on Apple devices, or on YubiKeys. Not sure about Androids.
Recent previous discussions include:

https://news.ycombinator.com/item?id=33922754

https://news.ycombinator.com/item?id=35136827
I'm very much for individual freedom when it comes to drug use, assuming you aren't hurting others. I think in the push for cannabis legalization, many people have forgotten that cannabis is a psychedelic drug. While it's not the same as LSD or psilocybin, it can definitely change perception and thinking. In 1996 I had a psychotic episode from LSD, and developed generalized anxiety disorder and panic disorder. I always had a bit of anxiety, but it exacerbated the problem. Cannabis can trigger a bad panic attack for me, dependent on the strength and strain (probably more likely the different cannabinoids present). Cannabis can also make me very calm and give my mind a kind of "reset" that helps to destress and allows me to reflect on my current anxiety. I firmly believe that psychedelics are triggers and not the cause of mental disorders. As has been commonly said, set and setting are large contributing factors, even for cannabis use.
It's true for early AWD LR Model 3s. The motors were the same used on the P version, just software limited. It's no longer true, current LRs do not get the same motor the P does, so cannot be software unlocked to full P performance.
Noam Chomsky Speaks on What ChatGPT Is Good For
>okay so clearly you don't know what you're talking about because they do use existing standards/DNS as the primary way to validate domain ownership.

I'm not going to speak for the commenter you're replying to, but I don't think anyone here is talking about the standards-compliant, DNS-based domain verification system. I think we're all talking about the non-standards-compliant, /xrpc/-path verification.
That's why technological arguments of "you and which army?" or "porn is illegal? so is piracy. Hasn't stopped that either." are more important than appeals to the democratic process for these types of issues.
OpenAI losses doubled to $540M last year as revenue quadrupled
Pensions are all bankrupt pyramid schemes who need new suckers (workers) to pay in so the scheme can pay out to the retirees.
this distinction is something i have been struggling with for some time. i am coming from pike which only uses method invocation terminology (in pike it's actually called "function call"), and never even hints at message passing, yet in pike objects can take control over the target of a function call and even dynamically create functions based on arguments given.

when learning smalltalk i could not see the what was so special about message passing, and why it is even called that.

consequently, i find the distinction between message passing vs function or method calling academic. more interesting are distinctions like static vs dynamic dispatch and early vs late binding and whether things are defined at compile time or runtime.

the term "message passing" always made me feel like this should be something completely different and not even remotely similar to function calling. yet i couldn't see that difference and that left me irritated because i felt like i was missing something.
I cant wait to the part of the memecoin cycle where the yield farms pop up again

community provided liquidity thats is then locked? kind of perfect imo

there’s no reason anymore that a $600,000 sale tanks $50m asset by 90%, just a bad system design where there is no liquidity incentive

why even give nocoiners cannon fodder? just do the thing that already distributes the load well enough and fits the risk profile of enough people
Get everything in writing
I was taken to court by previous employer, but I had all my claims in writing so I was protected.
The perspective. It makes customers think that the software update is tuning the engine or doing something special to get non-standard performance, which is a lie. Mercedes (and I know many other companies) will intentionally nerf their cars and LIMIT their performance, and in this case Mercedes is flat out saying they will limit their customers' performance unless they pay $$.

So it's really about who is saying what. Mercedes is trying to make customers think in their head that this is a value-added bonus that's not there by default, but it IS there by default, and it's locked behind a paywall. Rewriting the statement in OP's voice helps the customer recognize the scam that is taking place. In my opinion, at least.
If HN Internet Points was a currency, by how much has 'the community' taken from you through downvotes?
To me it is like saying oil is better than acrylics. These statements have no meaning when it comes to art.
A Comprehensive Guide to Secure Your APIs
The problem is that capital intensive industries like car manufacturing (or airlines as was mentioned elsewhere in this thread) tend to have low margins, high volume and high barrier to new entrants. This means unless you can convince a lot of the volume to boycott with you, minority purchasing decisions of people doing the math and taking a principled stance can’t really affect the behavior of the incumbents or attract new players. Then your choices quickly turn into not using the good or service _at all_ or engaging with the pricing scheme you find abhorrent.
Thanks for taking a look and for your comment.

Another key difference is that the _atproto TXT record is discoverable since it’s always at _atproto. Whereas the “verifiable identifier” I use isn’t discoverable because it’s hashed and used as a dns label.

The ultimate goal here would be for these records to be populated by domain registrars upon a domain being registered (with registrant’s permission obviously).

This could create a kind of fast lane for domain verification across providers like Google Ads, Facebook, Office365 and everyone else that requests DNS verification.

The worst thing is that hundreds of providers request domain verification TXTs at the zone apex:

dig target.com TXT
It was not the cops who shot, but rather National Guard troops.
This all maybe true, but how do you undo the actual placement of where people live? That’s kind of step one…
JavaScript handles the "no identity hash" with WeakMap and WeakSet, which are language built-ins. For Virgil, I chose to leave out identity hashes and don't really regret it. It keeps the language simple and the separation clear. HashMap (entirely library code, not a language wormhole) takes the hash function and equality function as arguments to the constructor.

[1] https://github.com/titzer/virgil/blob/master/lib/util/Map.v3

This is partly my style too; I try to avoid using maps for things unless they are really far flung, and the things that end up serving as keys in one place usually end up serving as keys in lots of other places too.
I ran a Gitea instance for myself for a while in the past. But I never tried to set up CI with it. Does Gitea support having CI pipelines run for MRs and merges etc, like GitHub and GitLab does? Didn’t see any mention of CI from a very cursory glance at current docs.

Anyone here have set up CI pipelines with Gitea? What was your experience like? Did you make any CI pipelines for Rust code doing things like checking cargo audit, and running cargo clippy, cargo fmt, etc? As well as CI pipelines to automate building and deployment?
You're right, of course. It absolutely is and so it might be a bad example, but it might be one where more readers would be familiar with.
The idea here is that SolarWinds itself would have used it to verify that their TeamCity instance is in fact running unmodified TeamCity with configs that track back to versioned files.

They could then provide a static proof of that to their customers, who then build them into their own chains of attestation.

Yes, if all you need to do is an SSRF on some intermediary server to pivot to some other server, it doesn't help ... unless the target server is also being attested and regularly rebooted back into a clean state. It's all just bricks in the wall, at the end.
But many still live in rural areas.
Mercedes and their shareholders.
Or at least require a full verbal reading of the bill before voting? Stop the 4000-page moster bills with a self-filibuster.
I don't remember using recursion in a real project, but I built a HN clone on top of Postgres, with the following query:

WITH RECURSIVE thread(id, parent_id, user_id, post_id, timestamp, text, depth) AS (
SELECT id, parent_id, user_id, post_id, timestamp, text, 0
FROM comments
WHERE user_id = 1
AND parent_id IS NULL
UNION ALL
SELECT c.id, c.parent_id, c.user_id, c.post_id, c.timestamp, c.text, t.depth + 1
FROM comments c
JOIN thread t ON c.parent_id = t.id
WHERE c.user_id != t.user_id
)
SELECT * FROM thread ORDER BY timestamp ASC;
Everyone can help move the needle on this.

Reach out to the friend you haven't talked to in awhile. It might make a world of difference.
The person who did it is in this thread, and apparently you are not correct. It was created yesterday: https://news.ycombinator.com/item?id=35821113

(I don't know anything about this personally, but since a lot of people are indicating an interest in this detail of the story, figured I'd try and surface that link better!)
But this is wasting electricity and other resources for a somewhat pointless cause as PFAS production will outpace this. To me, that's a net negative to the environment without any real gain?

Why can't we stop producing PFAS?