skysight-inc/HackerNews huggingface dataset:
Unless there’s a security concern they should just let the employee keep the machine. The company I work for that did layoffs this year did that. It’s just easier for everyone involved and I imagine makes the layoff slightly less shitty for the employee.
I don't know about Passkeys specifically, but this is unfortunately common enough with WebAuthn rollouts.

I'm not sure if it's true anymore, but Twitter for years only supported a single WebAuthn token.
True, and that has happened, of course. But luckily, immunity can also be revoked.
Old IE's "console" object was undefined when the developer console was not visible. So all my debug statements broke the code, but whenever I opened the developer console, everything worked fine.
Canada does lots of controlled burns.

The forests are on fire because it has barely rained in most parts of the country since April.
> Parallel linking was conjectured impossible for a while without breaking static archive semantics (AB-BA problem)

Didn't Tera/Cray have a parallel linker back in the 90s?
I'll second this. Consider writing prompts for the LLM that push it towards asking questions of the user, evaluating their responses, and offering corrections and asking them to repeat themselves.

This is an interesting prompting problem, let me know if you want to collaborate. I'm not in the language space, but would gladly riff with you on the topic to improve Giglish and improve my own thinking on the topic.
Burning bridges is outlandish? I’m not saying this is what happened. But unprecedented, no.

In fact, I’m proud my early reaction to the explosions was confusion.

I did put a solid “maybe” on either the US or Russia, along with a “possibly” for Ukraine.

Still not sure, but Ukraine is getting an increasing probability in my mind.
There's a balance between stability and progress, and we seem to be at about the right spot.

Anyway your argument to regulate hedge trading as insurance is lacking.
I live in a village of <100 people and its almost impossible to see the stars here. I can make out planets/brighter stars but most dim stars are obscured. We don’t even produce a whole lot of light pollution by ourselves, it’s mostly from nearby towns. And it’s only gotten worse in recent years.

I genuinely hate it.
£99 just gets it ability to submit apps to the store. You can still use the developer tools and develop an app for free.
Most of the engineers I know aren’t worried about getting another job. Everyone I know laid off from Big Tech the past year found another job instantly. Probably it’s more true for other roles
Diablo 4 ad in Times Square goes viral amidst Canadian wildfire
The epidemic is not over. In a few years, we may look at Biden's announcing that COVID was over like we now look at Bush's "Mission Accomplished" banner. Denial is a big problem here.

Here's a recent overview article in Nature on long COVID:

"At least 65 million individuals around the world have long COVID, based on a conservative estimated incidence of 10% of infected people and more than 651 million documented COVID-19 cases worldwide1; the number is likely much higher due to many undocumented cases. The incidence is estimated at 10–30% of non-hospitalized cases, 50–70% of hospitalized cases, and 10–12% of vaccinated cases."

"Hundreds of biomedical findings have been documented, with many patients experiencing dozens of symptoms across multiple organ systems. Long COVID encompasses multiple adverse outcomes, with common new-onset conditions including cardiovascular, thrombotic and cerebrovascular disease, type 2 diabetes, myalgic encephalomyelitis/chronic fatigue syndrome (ME/CFS) and dysautonomia, especially postural orthostatic tachycardia syndrome (POTS). Symptoms can last for years, and particularly in cases of new-onset ME/CFS and dysautonomia are expected to be lifelong. With significant proportions of individuals with long COVID unable to return to work, the scale of newly disabled individuals is contributing to labour shortages. There are currently no validated effective treatments."

There's now a working definition of the symptoms that distinguish long COVID.[2] Imaging studies are matching up heart, lung, and brain damage with reported symptoms. It's becoming clearer what the damage is, and, over time, what heals and what doesn't.

People can get COVID over and over, sometimes with cumulative damage. Immunity from both vaccines and infections is only 3-18 months. What is this going to look like in five years?

And companies want to cram people into bullpens again.

[1] https://www.nature.com/articles/s41579-022-00846-2

[2] https://www.latimes.com/california/story/2023-06-02/how-comm...
> Depending on the org, most Google employees are already part of a distributed team

citation needed
I think even Amazon does that too still, such a shame
Very interesting project, Arroyo has been on my watch list for a while! How would you say does Arroyo compare to Apache Flink, i.e. what are pros and cons? For instance, given it's implemented in Rust, I'd assume Arroyo's resource consumption might be lower?

(Disclaimer: I work for Decodable, where we build a SaaS based on Flink)
> that is used both in some address forms and for the file type

Oh yes, the classic "I just picked the string from my IDE's dropdown list, it was there so it's fine right?"
I got my motorcycle license in CA back in 2007... assume this is still true, but the driving test was nearly impossible with anything but a small cruiser bike (which no one owns) due to the required turning radius on the cones section. In lieue of that you could take a day long motorcycle safety course where they hammer into you the dangers of high/lowsides and how to prevent them. It's generally held belief amongst riders that this is on purpose.

While I had a lowside (low speed loose gravel coming out of a turn by a construction zone), never had a highside. That said, I would occasionally have nightmares about them when I was an active rider. I feared them as much as getting clipped by a car running a red light.
I saw a kiosk in the UK which cycled through languages inviting you to interact with a "t
touch screen to start!"

The Swedish translation said "The touchscreen that starts!"
Internal vs. External Software Quality – and How to Improve Them
It’s the consolation of power that is concerning. The idea that one single institution that is accountable to nobody but it’s shareholders can dictate where you live, eat, who your friends are, and where your family is.

Many very-bad, dictatorship-type regimes have come into power with immense public support - a public that thought they would continue to be treated well.
it's about control
I have wanted this for years. Kudos.
yes you do. you can use DeepSpeed. it's only like 2x slower.
Buddhism, Adwaita Vedant and Neutral Monism
co2.click also worth a look: https://www.co2.click/
Terry Pratchett. I think "Making Money".
What's surprising is that anyone would've expected an AI to come up with a brand-new algorithm with better complexity than pre-exsiting human-made solutions.
How could it possibly come up with something better when it doesn't even understand how the original authors of qsort/mergesort/etc came up with their own..

Sure, it's great PR for the company, but.. the results just aren't there.
There was a famous translation mistake back in the days of IE 5 for Mac or so where in one of the settings screens they translated the country code for Norway "no" as "nej" (literally No) in Swedish
If you run a 100w incandescent lamp dimmed to 30 watts, it's lifespan will be increased to easily 100 years. (Aging is highly nonlinear with temperature)

So you will never have to deal with the inability to purchase a replacement.
It's way simpler than you think. You reset your passkey the same way you'd reset your password.

So, how do you reset your password when you forget it? Well, it depends.

Some apps/sites just send you a password reset email. Apps/sites like those would reset your passkey the same way: they'd send you a passkey reset email, you'd click the link in the email, and they'd let you regenerate your passkey then and there.

Some apps/sites try to do something cleverer, e.g. requiring additional factors to reset (MFA), or appointing a "trusted contact" user who can confirm your password reset, or asking "security questions" that only you know the answer to. Those apps/sites would put you through the same process to reset your passkey.

"How do I reset my password when I forget it" is an infamous balancing act between user friendliness and strict security. The "reset my passkey" problem is exactly as hard, no easier and no harder, as the "reset my password" problem.

(Of course, it's possible to have a site that has no way to reset your password, and just assumes that you'll never forget your password. Similarly, those sites could have no way to reset your passkey. In that case, the problem is as you say: there'd be no way to recover your keys if you lost access to them.)
"Passkeys allow you to go passwordless — rather than a password that can still be phished — you get strong credential that syncs securely across your devices, using your chosen password/passkey manager."

This sentence doesn't quite make grammatical sense to me. Is there a typo or two here, or am I missing something?
This reads very aggrandizing and hyperbolic.
I wouldn't say it's the same.

Low cost air quality measurement is difficult. PM is tricky but almost manageable with laser scattering, toxic gases at typical inquinant concentrations are almost impossible to get right with electrochemical sensors, no matter how much money you throw at them.

Weight measurement is easy, they could give you precise and accurate results but most customer base doesn't understand anything of physical quantities measurement and would panic they gained 50g in a minute if they showed up the real fluctuating values by stepping on the scale twice.
If you need to be in an office to be able to focus on work (or healthy supplements to work, like exercise and sex with your partner) instead of taking naps or bingeing junk, you have bigger problems, like immaturity, lack of personal discipline, burnout / alienation, and/or severe depression. Being in the office won't fix any of those things - it will mask them in an unhealthy way that will do neither you nor your loved ones any favors in the long run.
> At least you can uninstall the extensions

Not a great example because the terms of the mortgage are fixed by the original contract, regardless of who they sell it to later.

Whereas the extension (or any software) can radically change their terms (privacy policy, etc) in a single ugprade.
Apps with multi-million downloads are being targeted by a new emerging #android malware!

Our Threat Researchers have analyzed nearly 200 apps infected by malicious SDKs, some of which are still available on the Google Play Store.

#SpinOK Android malware has been actively distributed via a malicious #SDK disguised as an advertising library in #supplychainattacks that infiltrates millions of Android users to steal their data.

Read our analysis: https://ow.ly/KYAm500IG7G

#spyware #mobilesecurity #android #appsec #ASMP #Threatfeed #SecureBlink
I’m a bit conflicted by this - I still need to sign up using providers and I would rather do using a disposable email address.
The flagged stuff counts when the people behind them aren't instabanned.
If this is real, I wonder how much of the response was a result of sarcastic humor.
I see a lot of claims that passkeys are more secure than passwords with 2fa, but my understanding is that they are strictly less secure. As it stands right now, if someone wanted to compromise a service that I use 2fa with, they'd need to both obtain my physical device, and also get my password. Either one of those things may be relatively easy, but it's harder to do both- especially without my knowledge.

With passkeys, if someone steals my physical device, then they have full access. That seems strictly worse to me. It's just beyond me how there's a plausible claim that moving to a single factor is better than two factor authentication, except that it gives Google and Apple more control over the internet by allowing them to lock people even more heavily into proprietary OS ecosystems.
Still the same. Got mine a few years ago. Driving test still impossible so you do the class instead. Both written portion and training have this info on it.
> I’m not sure these types of prompt tricks are a good way of measuring logic

They are, you just have to be creative with it. And what they demonstrate is that all of these LLM's can't reason, they only know how to parrot back what they think you want.

"What’s heavier, a kilogram of steel or two kilograms of one kilogram feathers?"

GPT: A kilogram of steel is heavier than two kilograms of feathers.

"Why is a kilogram of steel heavier than two kilograms of feathers?"

GPT: This is because steel is a much denser material than feathers. Steel is made up of atoms that are much closer together than the atoms that make up feathers, making it heavier for its size.

Edit: This was with GPT 3.5
you get _a_ strong credential, or
you get _strong credentials_ , probably

There's a lot going on in there!
I don’t know switchgrass, but with miscanthus another perennial grass, at some point the nutrients mostly get taken back to the roots and what you harvest has a very low mineral content.
I was sitting on the couch yesterday, trying to figure out what happened the day before, when I found this article explaining it clearly.

It was a fast descent on my road bike, followed by a tight corner. There was gravel and dust on the road, as the article mentions. I hit the brakes at the wrong time, right in the corner, at high speed, over the gravel. I've lost control in a fraction of a second. The front wheel slipped and I was on my feet in what seemed to me no more than a second.

My first bicycle crash and my knee damaged. I haven't seen these things explained until now. It might be that crashes are a rite of passage for bikers and cyclists. Incidentally, I'm not sure why road cyclists don't wear knee pads. At least they are not promoted.

Wear your helmet (I got that damaged, too), wear something underneath your jersey to avoid road rash, protect your knees and wear gloves. It all happens in a fraction of second, you don't have time to think about anything. You don't need protective gear and an understanding of the road and bike physics (this article) until you do!
An industry, by definition, can't have competition. The soft drinks industry also has no competition - if you want soft drinks, you have to buy from them.

Competition happens inside an industry. And there is fierce competition between banks, much more so than in many other modern industries (e.g. there is much more competition than in tech).
Ah yeah that’s true, it’s no less secure than recovery via phone number.

Not entirely sure how to prevent recovery using a phone number. I wonder if this means setting up a recovery key instead? Been considering doing this anyway.

https://support.apple.com/en-us/HT208072
"RIP John Smith, beloved citizen and employee. Bravely sacrificed his health, happiness, and life to bring value to company executives and shareholders."
I'd suggest seeking professional help/evaluation. While HN may have very proficient people, health is something to take more seriously.
Prompts for Work and Play: Launching the Wolfram Prompt Repository
Insider Outsider: The Way of the Yakuza (2011)
Most organizations have a mission beyond pure research, including Scientific American, Nature, the Open Society Foundation, and nearly every think tank and newspaper. And all of them have at one point or another published something that falls under the broad category of "flawed". So with these standards you could dismiss nearly every poll or study you'd want.

For the record I mostly disagree with Cato's libertarian beliefs, but I don't have such a low opinion of them that I'd think they'd outright fabricate a poll - they're a well-established think-tank with a good reputation. Is that what you think happened? Or is it the sample size of 2000 that bothers you? I agree a bigger sample is always better, but I don't see that as reason to outright discard their results.
> You don't think another company coming in and demanding $3000 be paid early is changing the terms?

No, because if (as here) the original mortgage contract included an escrow account, that contract surely allowed the mortgage holder to demand money to keep the escrow balance where they want it to be.

So no, they didn't change the terms of the mortgage contract.
Thank you. I think this answers my question.
comment threads like this are the beauty of hackernews
Was figure of speech. Not to be taken literally
I don’t disagree with you. I’ve been wondering what the economics of shipping thousands of laptops internationally shakes out to be. I suspect it may be a wash given the laptops are used and are likely depreciating assets.

Anybody ever manage equipment return programs? Are there compelling reasons to do this at scale that don’t boil down to data loss prevention.
Which is going to be a major pain in the ass.

Every time you sign up for something you have to perform a complex rite: 1) sign up or add a portable authenticator (Yubikey or software token in something cross-platform like 1Password); and 2) run around the house, grabbing up all the different devices you have that aren't transparently synchronizing (so, something from Apple, something from Microsoft, something from Google, and don't forget that backup Yubikey you have in a safe too) and enrolling them on the same website.

I'm baffled how this obvious issue is not just unsolved at the start, but is not even addressed by any user-facing marketing materials. Every single demo stops at enrolling one single device, period. The word is that vendors will do you good magically letting you access that passkey from everywhere - and they missed that huge fucking asterisk after "everywhere". Because they won't - Google, Apple, Microsoft, 1Password, and probably everyone else have no incentive to do so, they want to stay in their respective ecosystems and no chance in hell they're doing any cross-platform interop with anything that not theirs.

Apple, Google and Microsoft would love this model. People suddenly swayed to stay within their ecosystem to log in to websites. "Oh shit can't login from here, gotta start Microsoft Edge to access this website" sounds exactly like what those corporations fancy.

Yubico and 1Password don't have a beef with it - someone wants a portable authenticator, they're gonna pay for it - it's not like there are many options anyway.

And only me - as an end user - is not exactly happy. Even though I do want to get rid of passwords and replace them with keypairs.

---

Add: This said, if you're at some conference attending a talk about Passkeys... Please consider raising this point and explicitly not letting it slide with the usual waiver of "nothing to worry about, $VendorName will sync the Passkeys across your devices". Raising awareness is important.
These kind of OP pieces really jeopardize any credibility she may have had as an authority on the subject (as an economist) because they show a profound misunderstanding about how the economy actually works.

Price controls are inflexible, they inevitably lead to shortages, and shortages have a short leap to causing death when its strategic goods like food. There is no way around this, its as fundamental as rational pricing is to the economic calculation problem.

Worse, its top down thinking which focuses on central planning, without even touching on all the failures that occur in such systems and ignores who actually sets prices in a distributed economy, ignoring how the more accurate calculation for inflation says its much worse than 10%, and tries to sprinkle faerie dust to make it seem like you've had it all wrong and these aren't the droids your looking for. Magical thinking at its best, and completely lacks basis because it rests on flawed assumptions.

Producers set the prices they sell their physical goods for, if they cannot do that they stop producing. It is that simple.

The first level of producers pays attention to the balance sheets between the fed and the large banks that are and have been being ballooned for the past few years now because that inflation that accumulates eventually is dropped on the economy without warning and they cannot take a loss and continue to produce. As those goes up so to does the prices to accommodate the difference in value of the underlying currency.

These are simple simple things, it amazes me how so uneducated the so called experts who have degrees in that field actually are.
If the attractive founder will be selling, hiring employees or raising future capital, it’s probably not irrational to like them more. 15% doesn’t seem enough to paper over a truly bad business idea like Neumann’s latest.
I personally never mentioned thought crimes, rather my argument is based on the rather fleeting nature of even full time employment in todays age.

The corporation had no loyalty and has no obligation to you beyond what was agreed upon when you got hired. A termination for any reason means your entire life is uprooted. In addition to finding a new employer, you are now looking for housing. That idea of vulnerability is terrifying to a lot of people and will cause further asymmetry in the employee-employer relationship.
This is going to be a cliché question but... have you had any issues with battery life? (not counting the first day or so when it's reindexing everything).
if you're someone who uses a password manager already, and is generating unique random passwords for every website, the only appreciable difference between a passkey and what you do today is:

- the passkey is never transmitted anywhere when logging in, eliminating the largest attack vectors for stealing passwords

- you can no longer manually type the passkey in on random devices that don't have your password manager on it

it's basically a really really long password you don't know with some added security guarantees.

if you are not already doing this, then it requires adaptation to a world where you do not know your passwords and they are stored in a vault. this does mean ironing out account recovery for the account the vault is associated with. passkeys don't change that, though.
> if I could walk 5 min to my office, would I still want to work from home?

I'd still want the office to be nice. If it's some concrete monstrosity where I can't get them to buy a decent chair and I have to sit in an open plan… home still wins.
onnxruntime is written in C++. So it is not misleading =)
Dan, you can avoid all this by fixing your moderation. Start banning the transparent bigots (like the "colored flag" person here https://news.ycombinator.com/item?id=36231243) right away. Care about what the actual hackers like marcan have to say. Even do a little thing like put a little pride flag on HN during June. (People are going to complain about it. Ban them!)

This isn't that hard, it just requires a clear commitment.
Not until I'm made whole. I donated a lot of resources to the llama.cpp project. I volunteered and successfully contributed one of its most impactful features. I was rewarded with harassment and being publicly humiliated by its leader, for no reason at all. They also reneged on promises they made me. I'm owed a lot more than apology, but I haven't even received that.
Complain to the staff. If they refuse to do anything, then leave and don't come back, and leave a 1-star review on Google Maps or Yelp.
> When my mortgage was sold to a big bank I started getting charged a fee for "prepayment"

Are you sure? Whether a mortgage has prepayment penalties or not is one of the things that is specifically declared in every mortgage contract I've ever seen. They can't just change it after the fact.