skysight-inc/HackerNews huggingface dataset:
I wrote a 1-page article for this in a small obscure, local-language magazine. The title of which was, translated in English (OMG, I should have also published in English) - Re-factor the factors.

I think the 3-factor authentication (3FA) model of "know, have and are" is up for a revision. Knowing that all models are wrong, I hope my suggestion as at least useful. These were really rough thoughts, and I was hoping to spark some discussion of it, but unfortunately that never happened.

Anyway, I think the 3FA model has several problems.

1) there is no clear category for recent "ambient" auth factors that are getting very popular, like if one logs into a website on a browser and its fingerprint is unknown, that a "step-up" authentication is required.

2) Authentication is proving that you are who you say you are (you prove an identityclaim), a factor called "are" make the cognitive shortcut of equating the inherence factor to the identity proof very very tempting (and I think many people in the field have fallen for it, given the prevalence of biometrics as sole authentication.

3) Behavioural biometrics like keystroke dynamics do not neatly fall into one of the three categories (it is a little bit of knowledge, it is a little bit of "inherence")

I also take major offense to the statement that follows from it, that I AM my fingerprint, or I AM my Iris. NO, I can _prove_ who I am by presenting my fingerprint or iris.

To fix this, in the article I suggested moving to a 2-dimensional model of authentication (2DA), that is reminiscent of but not quite the same as the 3FA model.

The two dimensions were:

Dimension 1: Knowledge vs Possession. A factor is somewhere on this dimension, and my thought was which is which could be tested by the colloquial language use of "know". I can always say I have a password, I have a way of using my phone, but additionally I "know" my password, and I "know" my way of using my phone (even if implicitly). On the otherhand, I have a smartcard, but I do not know it, nor do I know my fingerprint.

The SSH private key would in my opinion fall in the "have" part of this dimension.

Dimension 2: Transferability. The degree to which the factor is transferable to someone else, to which ownership of the factor can be "bestowed" on someone else. Smartcards are highly transferable, as are passwords, however fingerprints generally are not expected to be transferable, neither are the way I use my phone nor from what browser and what location I log-in.

Naturally, 4 relatively distinct quadrants in this space arise, which I tried to label indepently with a single word:

possession, high transferability: carry

possesion, low transferability: show

knowledge, high transfer: tell

knowledge, low transfer: do.

So, the catchy phrase for the 2DA model would be, things that you "carry, show, tell and do".
Last update 3 years ago, closed source.
Why ?
Did you read the post? His whole point is that the group exists apart from the individuality of each member, and can have separate goals and methods.

And that you can't study both the members and the group at the same time.
While I understand the author's concern, it seems a bit naïve to assume that Microsoft would ONLY learn from code in GitHub. Geek blogs are spectacular places to ingest code from because they give a ton of context and explanations for what's going on. Way more than raw source code ever does. If you want an AI to understand what's happening in code via the English phrases you use to describe what you want then you _need_ to train it on code that has similar English phrases describing what it's doing.

Ingesting from public sources outside of GitHub will just become more necessary as they work to improve these things.
When you interpret their view of the world as uncharitably as you just did, is it any wonder they have a low opinion of other people?
I'm wondering what will copyright mean after 20y of generative AI.
Imo, padding estimates is not cheating. It is just doing estimation right. Teams that do not pad estimates literally always underestimate amount of time needed.
IIRC somebody in this thread said it's not preemptive and doesn't have enough functionality. Quickly looking at it, it seems to be fully opt-in / cooperative parallelism solution which is IMO not good enough.
Stringly Typed vs. Strongly Typed (2021)
At least the German Federal Aviation Office defines VLOS as "practical" VLOS - e.g. in severe fog, once you can't see the aircraft any more, you're not covered by VLOS any more even if the drone is only 2m away [1].

[1] https://lba-openuav.de/onlinekurs/lehrmaterial/wichtige-defi...
For absolute breakthrough science that is counterintuitive in medicine, I wouldn't be surprised if it doesn't get published in top journals.

The H Pylori paper also didn't get published anywhere, no-one believed it. Nobel prize many years later.

Really interested in following this further.
Why would electing them help? Does the average elector have any understanding at all of what they'd be voting for?
> But the above social calculation changes if multiple people decide to leave. Now, there's "safety in numbers" and leaving early is emotionally easier. Sure, the host still might be embarrassed but there's no longer a single party-goer to point disapproval at.

Applies to so many things. In a somewhat conservative-ish community of people who grew up in the same small town/village, the first person to divorce their partner will become a village-wide scandal. A small wave of divorces following soon after will barely gather a remark.
Thumbs up for having the gut to even write that out in plain English. Lots of Americans seems to ignore all of that as long as he is on the "correct" side of the political spectrum.
Padding estimates is fine. But not when you report actual worked time, which was what we did to make management happy with the burn down charts straightness.

If you don't report actual time for the task, the excercise is useless.

E.g. shift work time from a slower than estimated task to a faster, or "wait" if the task was done too quickly.
Sam Altman needs to shut up
What ? I don't think this person understands what generics are.
The law is generally less concerned with how something happened and more concerned with what happened. So I would suspect that the legal frameworks will be more restrictive towards code that is reproduced verbatim, regardless of if the code is directly copied or LLM generated.
If you're interested in computer-assisted backronym composition, please check out this interactive tool that I made, based on GPT-NeoX/Pythia models: https://github.com/dwrensha/acronymy-assistant

3-minute video explanation: https://youtu.be/LjOHnXRIp4Y
I wonder if bike wheels are considered tensegrity structures.

Also, could homes leverage this for seismic proofing ?
Then there should be no complaint that people that would ask stupid questions (considering that asking stupid questions is part of a learning process) are using a different tool.

I actually use SO as you suggest. I don't ask questions, if what I want to know is not answered, I just go and find my answer elsewhere. In the desire yo not bother the "incredibly nice" people on SO, I just never engage with them. Can't really get more respectful than that. For all intents and purposes, I'm the perfect SO user.

ChatGPT, in that sense is an amazing learning tool. I learned more in a couple of months with it than in years of stumbling upon SO replies after searching stuff online. SO, on the other hand, is just about getting lucky in finding some old reply and the code snippet you found works, or move along in your search.
I wrote two articles on how to build custom voice assistants using just a Raspberry Pi and a microphone, one in 2019 https://blog.platypush.tech/article/Build-your-customizable-... and one in 2020 https://blog.platypush.tech/article/Build-custom-voice-assis....

It's definitely doable and I still have my own custom assistants in the house. However, I had to get around with a Snowboy model for hotword detection (and Snowboy is now basically abandoned), Mozilla DeepSpeech model for speech-to-text (and that's quite heavy), and Mycroft's mimic3 text-to-speech model (and Mycroft is now basically bankrupt). Then writing the integration is relatively easy - I used Platypush, but it can definitely be done with Home Assistant and OpenHAB too.

Compared to 3-4 years ago, I think we're now in a state where the content is no longer the issue (just plug into a LLM, and all of your text requests will get an answer), nor integrations are a problem (just write a Platypush event hook on speech detected, and you can connect it to everything, no need for "Works with Google/Alexa" labels). Text-to-speech synthesis has also become cheap and ubiquitous.

But the hotword detection and speech-to-text models are still IMHO the bottleneck. Hotword detection is a field where you need a very small and lightweight model that only detects a specific word or phrase in a very reliable way. Snowboy was an amazing FOSS project - which also came with this cool idea of "crowd-funded models", where in order to download a model for a certain hotword you were first supposed to provide three audio tracks where you say that word in order to improve the model. But it's now discontinued because it cost the volunteers too much to run the infra.

And Mozilla DeepSpeech is a relatively good choice for general-purpose speech-to-text, but it's heavy (it takes 100% of the CPU when it runs on a Raspberry Pi) and it's mostly optimized for English - even support for other Western languages is patchy.

If there are other open-source alternatives that solve these problems, I'd be very happy to learn about them. Once these blockers are removed, there should be really no reason for anyone to feed their audio streams to Google or Amazon.
Lightweight Markdown Web Notebook
I worked in the kitchen and know how the soup is made. If you insist on calling it stone soup, then it's granite - unglamourous, lots of skilled but drudge work to process, but valuable then.
You mean the parent is written by ChatGPT? How did you know that? I'm an ESL speaker and feel nothing wrong with the parent (beside being a bit too dense). Curious how natives or more fluent speakers would feel out of it.
I was also interested until I hit that set of paragraphs. The sitar became less interesting and I started wondering where these movie-scene racist gun-waving restaurant standoffs were happening and why can't we do something about them.
> I'm routinely dealing with the types of people many folks in "polite society" think should be euthanized. It sucks, when those people say what they think.

I do take your point overall, but in this kind of example would it not be better to bring it out into the open and discuss it? Granted it would likely be an unpleasant conversation, but they do hold an unpleasant opinion, so why not make them go through the unpleasantness of defending it?
It's the requests for follow-up questions that can make building and maintaining your own version tricky.
Reparations task force votes to approve recommendations
> If musicians' priorities were for the world to share in their musical indulgence not just in listening but also in like-minded creation, they would release as much of their mixing tools/backgrounds/stems/etc as possible.

They do. For a price. When you know how to ask.

The thing is, if you really want to « like-minded create », you do not need, not even want their stems (you can find most of them anyway online, if only for learning).

If your thing is not « consumption » but creation, your own voice/process/way matters more (and is more fun) than starting from the studio separate tracks.

As for the music _business_ side of things, attention (hence scarcity management) on and availability/capacity to provide are the two main levers you have if you want to live from it. As with any other business actually.
Copyright laws do not apply.
It’s trained intelligence, in a similar way as human intelligence.
If you apply copyright laws to LLM you should apply them to human intelligence too as it’s the same process (with a different scale)

Yes programming is going away, so is most intellectual and artistics tasks.
See https://tensegritywiki.com/index.php?title=Bicycle_Wheel

The answer appears to be both yes and no.

> Also, could homes leverage this for seismic proofing ?

Likely not practical to use pure tensegrity design (i.e. each element is purely in tension or compression) and the open nature of tensegrity structures would leave little privacy. However, reinforced concrete combines the compressive strength of concrete with the tensile strength of iron to make a strong building material (e.g. for resisting earthquakes) though a tensegrity design wouldn't have any need for reinforced concrete as the compressive struts would never be in tension or under bending stress.
check out psono too for self hosting (https://psono.com/) It's on my todo to do this myself but I haven't had time yet. It looks a lot more interesting to me than self hosted bitwarden/vaultwarden though, especially if you have needs to fill like encrypted file storage that are slightly above and beyond bitwarden's design.
I do not want to talk about these problems again and again and again. I would like to see some improvements.

First few times it works as a psychohygiene, but then it just becomes annoying. So teams stops talking about actual deep issues on those meetings and they are are creating an illusion of happiness.
Correct microservices don't magically prevent DDOS attacks. They can actually make things much worse.
These are well known in general Czech population (I mean the fact they occured, not necessarily all the details), and it is not uncommmon to use the verb "to defenestrate" as a joke when talking about mounting some form of protest.

Source: Born and raised in Bohemia.
> Accelerate your innovations by learning how to communicate internally with your stakeholders.

Very reductive compared to what he says.

Every corporate entity large enough has its set of the gatekeepers, professional politicians, opportunists and vultures.

These are not easy to qualify of stakeholders, often even impossible to categorize officially as stakeholder in a project charter but still need absolutely to be detected and managed upfront.
people can and should do whatever you permit them to in your license

Github has been consistently arguing that they're not bound by the distribution license when training their Copilot model, so I'm not sure what difference that would make.
> but then they want to prohibit others from learning from what they share

The linked-to document explicitly DOES NOT prohibit others from learning what they share.

Quoting it: "If the project is under an open source license, it means that everyone can share a copy – even on GitHub – of the licensed material under certain conditions. A license restricting this right wouldn’t be open source anymore. However, since GitHub may not respect the terms of licensed code that is hosted on their servers, not uploading the code of others there is, in fact, an ethical choice."
That's a different thing really. It's like using sendgrid.
But how will this provide the game company with continous revenue streams from selling you database entries that you can show of to complete strangers.
> HN folks seem to think passkey is some wild biometric stealing mega Corp conspiracy.

What it does is promotes further centralisation, because most users will use one of the big providers.

This wouldn’t be a problem either, except that the big providers are not accountable. Google, Meta, etc lock users’ accounts all the time. Users often have no recourse.

Passkeys will mean a locked Google account now impacts your ability to sign into all the sites where you used that passkey.

Think it can’t happen to you? “Oh Google won’t lock my account out!” That’s exactly what those locked out thought too.

The fundamental problem with Passkeys isn’t technical. Even ignoring the centralisation issue, the problem is a lack of organisational accountability on the part of Google, Meta etc.

And yeah, the tech industry, including the tech press, needs to own the fact that they’ve given these companies a free pass over this.
You’re describing the gaming PC. They’re quite popular is my understanding.
Apple got caught artificially degrading performance and battery life after a period of time. That really isn't "planned obsolescence" so much as irt is "planned crippling"

Planning for a device's software to be unsupported after a certain period of time, ideally a predefined time made clear up front, is totally reasonable though. Thatjust gets to the question of whether you own a functional phone or a block of hardware that is useful only as long as the company wants it to be.
GNU Guix seems to be an alternative that I've been interested in.

The configuration is done with Scheme. I haven't tried it.

https://guix.gnu.org/
Genuine wondering, why Ruby Rails for the Website and not Crystal. Considering you are using Crystal for totalreturn ( big fan ) and heiioncall as well.
Tangential question: if we send a nuclear bomb to divert a meteor from its way to earth, how does the bomb transfer energy to the meteor? On earth I guess you can detonate in the vicinity because the air helps to push. But how does this happen in a vacuum? Does the bomb have to touch the meteor?
Terrible how commercial lobbies are now able to hurt populations like that so easily to defend their own interests with very little oversight.

It is not like a decision of the citizens that was debated in an assembly, just we do things because they were decided in secret international meetings or corrupted politicians.
COVID restrictions probably
Am I mistaken, or has the open source community beaten the commercial password managers to implementing WebAuthn?
ChatGPT: Impact on Jobs
ChatGPT has seen huge growth to over 100 million users in just a few months, becoming the fastest growing technology ever. It has sparked many questions and discussions, including what the impact on our jobs will be. In this article I will try to explain this and give some examples to show what it can do.
Thanks for the excellent references! (I was recently planning to be in Vienna to check out some of these works at the Kunsthistorisches.)

Ah the 2018-2019 exhibition you're referring to was done for his 450th anniversary. I recall going on a "Bruegel binge" and visited some 5 exhibitions in 2019 winter in Brussels and Antwerp. It was outstanding. One of the memorable exhibitions was an immersive experience in Brussels: four entire rooms were projected, from floor to ceiling, with Bruegel's works, slowly zooming in while beautiful piano music played.
> Chat GPT is going to build a fusion reactor?

GPT-4? Not likely. GPT-6? Maybe.

> Fight the war in Ukraine?

I hope not, because soon after it will be ChatGPT vs. ЧатGPT vs. 聊天GPT vs. le bavardage GPT, and I don't think we're ready for AI wars just yet.

> Find a way to slow muscle atrophy?

Again, GPT-4 likely not, but there's a chance that the solution is already there, hidden in 20 different scientific papers across 5 scientific disciplines, waiting for someone to find the connection. We're way past "academic publishing singularity" for humans to be able to do it, but maybe GPT-6 will manage.
Nepotism of the Rich and Famous
In general, fine art work has a different treatment that archeological artifacts but also has a relationship with the time of ownership and where/how you find/buy it.

There are also more complex cases, for example the recovery of stolen art from the Nazis.
It is a very large and complex standard that further centralizes authentication in the hands of several megacorps. The previous OpenID attempt was a resounding success, and this is a logical continuation. Google and co want to know where you log in to serve you "better" ads.
The countermeasure remains the same - create an isolated account on each new website/service you use.
Believe it or not, not enough to make a difference. The limiting factor is qualified academics' time.
I think GP was making a math joke; "a group is a non-empty set [...] in such a way that [...] every element has an inverse". [0]

[0] https://en.m.wikipedia.org/wiki/Group_(mathematics)
My point is there are solutions, as the number of EV grow so will the solutions.

It’s way easier and safer to charge an EV than to fill a gas car (electricity is everywhere), so you can expect the solutions to come progressively (with some bumps along the way of course)

It’s a good thing, EV will become a big part of the battery we need for a renewable grid, absorbing the excess electricity in period of overproduction.
What do you mean? I run Keycloak for my home lab authentication needs and can use my YubiKey as a Webauthn factor from Firefox running on my Linux PC.

The only part where MS comes into the picture is the "Microsoft Windows" sticker on the bottom of the laptop, since HP shipped windows pre-installed.
That likely is exactly what's going on. That raises the question though if you really bought a functional phone or not - you may have paid for it but even then it only works if the company is still supporting it and allows you to use it.
Aye, to be honest it's probably a divergence to the norm due to adhd or depression or whatever miswiring is going on in my brain.

Action films and comedy still have enough dopamine in them to be worth a couple hours, but yeah generally it does indeed apply to all of those things
Yeah, but scrum can overcome yes-yes by taking a bunch of skilled and motivated people and forcing them into an ineffective process. That is exactly what happened in my last team.

So those skilled and motivated people are estimating piecemeal tickets, too micromanaged to be able to fix actual issues they clearly see around them. It is forced helplessness You can't overcome bad process and scrum is a bad process.

Scrum advocates always end up blaming the people on team. Even if that exact same team was performant and scrum literally killed 70% of what was good in it.
Nice!

I never met a guy named Dave I didn't like.

I can remember when the name collision on the internet was rare, now it's all day, every day. Given that my grandfather was David Smith, this leaves me with Smith and Watson, meaning that all roads lead to Ireland or Scotland, even if they involve swimming the English Channel.
I find both ZigBee and zwave to be rock solid if you have a repeater device near the hub/dongle. You can then make bigger jumps to other devices and the network will be stable.

That said, MQTT over WiFi is easy to troubleshoot and won't lock you in to any software or changing rest APIs.
> People share arts because they want to help other humans grow too, not the AI.

Hold on just a second here. How do you know what "people" "want"? Who put you in charge of speaking for them?

Yes, there have been some loud complaints, but given that millions of people are involved, the overwhelming majority of whom haven't expressed an opinion one way or the other, I think it's a bit premature for this kind of blanket statement.

Secondly, there's a difference between what people want and what people are legally entitled to. If you ask people if they want a million dollars, most of them will say "Sure!". That doesn't mean they're going to get it.

Existing copyright controls the making of copies. That's it. There's a fudge factor in there called "fair use" that controls whether or not something constitutes an infringing copy.

Whether AI training data falls within that or not is going to have to be decided in the courts or by some type of government action. It's clearly not an exact copy...the actual pixels in the original work aren't anywhere in the database. But is what is in there close enough to be considered a "derivative work"? I don't know, and neither do you.

Again, it's way too soon to be making blanket statements on the issue.
What if there is a building or a tree between you and the drone?
> no complaint that people that would ask stupid questions (considering that asking stupid questions is part of a learning process) are using a different tool.

Hmm. Did I complain about it?