skysight-inc/HackerNews huggingface dataset:
No, it's not "just a long password". Here are the main benefits not mentioned, which a password cannot offer, regardless of how securely it is stored:
- Phishing protection - passkey credential will be uniquely bound to a domain, so you cannot be phished
- Keys cannot be exfiltrated from the hardware, so even if your password manager is compromised, your key would still protect you
- Duplication protection - synced counters are stored on both the key and the server, so even if somebody does clone your key (very difficult), you'll know about it (unlike passwords)

Obviously, there are some necessary assumptions made, about security of the passkey implementation, DNS security and so on.

>if you are not already doing this, then it requires adaptation
What doesn't?

>ironing out account recovery for the account the vault is associated with
Agreed. This is currently the weakest point in web security in general.

I'd also like to mention (for everyone else reading this) that a unique set of credentials is generated per account, so this cannot be used to track you. Also, it's an open standard and open imolementations exist. It is bot reliant on google/yubico/"big tech". They're pushing it because it works.
There is a specification but it's fallen a bit behind the implementation. Of course the implementation is open source, pretty well documented and covered in lots of tests. So, you could think of that as a living specification.

Some pointers from this stackoverflow discussion:

https://stackoverflow.com/questions/52148566/is-the-typescri...
> My youtube is merely a search bar and the video I wanted to watch, nothing more.

Next up. Pipe the yt url to mpv which uses ytdl to show the video in standard video player in your favorite resolution and codec so your laptop won’t even spin the fan
I like my Lenovo X200 with all its glorious light indicators, some of which one can even see when the lid is closed. I wish modern laptops would have those again.
GPT with Internet perception and expansion capabilities
In this product, GPT can understand your needs and use it to call extension tools to achieve more capabilities. It can access the Internet as needed. When you log in through Twitter, it can help you view tweets and post tweets , Search Twitter, etc., it can create pictures according to your needs, and can also modify the theme of the website, etc. You can also redeem member time by telling a dream with GPT.
> General happiness and fulfilment in life doesn't come from comfort, it comes from being able to being able to deal with problems effectively instead of stressing out about them or avoiding them.

Fucking PREACH dude
>We do have a choice though.

I took the choice: to run from the web with my hair on fire, screaming.

Towards embedded, where none of this matters, and where the crux of the whole thing is really, really important: its the atoms, then the electrons...

We don't need the web if the user holds our interface in their hands. Surprisingly enough, the web holds an iron grip on that face/phone interface, but .. one easy solution to all the cruft, is simply return to the roots.

Yes, this requires hardware production capabilities. Its not for everyone, then.

But I tell you, 40 years into this industry, it was so refreshing to abandon all of the fancy front-end stuff and just get straight down to the embedded realm. Nothing nicer than having the machine - and the user - all to oneself.

Of course, this edge case gets discussed further in the article, but that is just one of a few things this old-timer could say about what went wrong with programming culture... (*cough* *cough*..should never have removed the compiler..*cough* *cough*.. this opened the door for all the weirdos to take over what should've stayed in the OS .. *cough*)
Sherlock Holmes agrees!

> For answer Holmes clapped the hat upon his head. It came right over the forehead and settled upon the bridge of his nose. "It is a question of cubic capacity,” said he; “a man with so large a brain must have something in it."
No shit. In the Spanish version, the column in Explorer showing the 'link target' of shortcuts is translated to the equivalent of 'connect the goal'.
But that's an extra thing that Apple does to store the passkey locally. It's not an inherent property of the passkey system.

Also that then leads to the situation that your passkeys are completely locked inside Apples ecosystem! (Or Googles, or Microsoft, or whatever...)
Membrane sensors have to get very high in temp locally in order to do a membrane cleanup, thos being large compared to a temp probe, the probe is probably catching of the heat because it is not properly isolated. Some SW model for heat flux can somewhat reduce this effect but in general this is AFAIK an open problem for miniaturized AQ sensors.
Whole extension business is very shady.

I have couple extensions I've made. Most have couple hundred weekly users, but one has few thousand and I have gotten emails about adding ad and search redirect code for some money. If I was in bad financial situation or just didn't care, I could have just added the code without anyone really knowing.
Basically every academic peer reviewed research paper will list their methodology.

From your other post/submissions it seems that you already are pretty good at researching topics and discussing things... Research projects are 'good thinking carried through' so just keep the area of interest narrow and keep on doing your thing.

There are masses of research on research, but it can be very different in different fields. I would suggest making a new post detailing you plans, projects, desired outcomes, needed collaborators and current abilities. Only then can anyone really advise you as the substance you are asking for.
The expansion of e-commerce was parallel and had little relation to 'horny trailblazers'. The CC issue was solved by services like PayPal that intermediated CC data, better internet security and better CC dispute resolution. I know people who still hesitate before leaving CC information but would not hesitate if there's Paypal (or similar).
Distinguishing academic paper from humans or ChatGPT with over 99% accuracy
Cubicles obviously aren't soundproof of course, but they're normally made with cloth-covered walls that do a pretty good job of absorbing sound, so offices filled with cubicles tend to be fairly quiet, and conversations don't travel far.
It's mainly a North American thing I think, because Americans are so fat. Fat people feel hot in temperatures that normal people find perfectly comfortable.
So, such LLM still would have to be informed that this is referring to a zip compressed archive, not a postcode file, whatever such file might be. This is basically the same thing as LLM hallucination, in that it comes from lack of constraints in latent space, if I dare use that buzzword.

Without context, a “zip” or “zip file” still can be anything. Could even be “zip [this] file” as a command.
> Google also invented "cloud"

Wait what? Because I'm pretty sure aws predates gcp by quite a few years. And if you mean the marketing word "cloud", I think that's false as well.

Edit: ec2 has been around since 2006
This is still a problem today with YAML. Say you have something like a list of locales, the word 'no' get's interpreted as a boolean.
The only critique is that if I want to check for a particular site I have to do a clunky CTRL-F search.

The 'official' list of sites going dark is here: https://www.reddit.com/r/ModCoord/

That subreddit is also where mods and devs are discussing the situation. A recent post covers a call held between representatives of Reddit and the dev community.
So wait what is this livable city of 80,000?
This seems to be heavily based on Austin
https://github.com/P403n1x87/austin/blob/master/src/version....
https://github.com/bloomberg/pystack/blob/a971a4ced371a5859f...
> It's not a big place

It's about the same size as continental US of A. Quite big I say.
This feels like contrarianism overdone.

Philosophical rambling that completely fails to consider practical side of the product. Can you with your inner eye watch a movie? Will it be the same movie as in the cinema? Can you with your inner eye see a topological map of your city? Will it be as accurate as any actual map?

The virtual camera in our head can only present what’s already in our mind. And as accurately as our mind allows. It can not present whatever other people want to show or what requires greater precision than our brain can muster. I’d be thoroughly impressed if you could have anything close to a spreadsheet in your mind representing financial reports from the past decade with the same precision.

Regarding presence. I was very excited about a virtual big screen in a forest. OP presents it as excessive and utterly pointless but have you been to a cinema ever? I, for one, almost always get distracted by strangers rustling their popcorn or staring into their phone at full brightness two rows down. And at home I can’t get imax-equivalent size screen.

One can criticize Vision Pro (and AR/VR in general) for its dorkiness, price, disconnect, or whatever but it’s completely wrong to dismiss it as absolutely useless. There are very real use cases that can not be fulfilled or closely emulated either by other types of devices or by other practices that don’t use any tools.
LLMs can reason, and it’s surprising.

I think some people get caught up on the “next word prediction” point, because this is just the mechanism. For the next word prediction to work, the LLM has all sorts of internal representations of the world inside it which is where the capability comes from.

Human reasoning probably comes from evolution (genetic survival/replication), and then somehow thought was an emergent behaviour that unexpectedly came from that process. A thinking machine wasn’t designed, it just kind of came to be over millennia.

Seems to be kind of the same with AI, but the first example of these emergent behaviours seems to be coming out of the back of building a next-word-guesser. It’s a little unexpected, but a simple framework seems to be allowing a neural net to somehow build representations of the world inside it.

GPT is just a next word guesser, but humans are just big piles of cells trying to replicate and not die.
I think it's because the unit heats up over time, and its sensor can't adequately adjust for that.

My baby monitor does the same thing - the temperature tracks up after a half hour or so. The unit is warm to the touch by that point.
for example https://www.hrw.org/news/2022/10/14/turkey-dangerous-dystopi...
That couldn't really exist as people are different and want different things. Using just the "espress machines" category, my partner hates light roasted third wave coffee and I like it. The only way to win is to have both a small roasters beans and Starbucks or equivalent beans.
can you share which one was it? I'm also looking for one, and CO2 is surprisingly uncommon. I'd also love for it to be HomeKit compatible, which makes it nearly impossible
Its not entirely bollocks, you may have just missed the point: technology is cyclical, according to its application. Once, Ruby on Rails was the badass, non-boring way to write apps, now - because it was once so badass - it is 'boring' in the sense that anyone can do it, and you don't really have to think about much - its quite possible to operate on cruise control, and is thus 'boring' from the coding cowboy/techno-aristocrat sense of things.

>Basically no-one seems to use Ruby for new Serious™ Programming™ Projects™ anymore.

Yes, and in so witnessing this, you are demonstrating how non-bollocks the original bollocks was and now is. Such is the cyclical nature of things in our highly stratified industry .. its one layer of bollocks on top of a shit cake, after another ..
Are there quality magazines still being released about programming, even if just digitally?
Yeah, i applied at the MV office a few years back and it was just hell on earth. Huge office park of nameless buildings and their big perk was a free lunch at a picnic table in a warehouse with 2000 computer programmers. I really don't get the appeal.
Maybe you should find a different sport...
I see a lot of " i didnt get notified about the change" in the reviews, but personally i got 3 of them. 1 was just out of the blue and the other 2 were when i installed the extension ( i formated my PCs ). I know that the move is bad dont get me wrong, but a notification was present, most people just close the "New Tab" that open from an extension that's maybe how they missed it. Anyway, there is a community one "i still dont care about cookies" and i will be moving to that one.
I'm a bit worried about this. Sometimes people on the internet get a bit... intense about solving a thing and finding someone. They don't always get it right either.
It is a wide spread problem with extensions and much more common that you would think. Also developers completely change extension to be something else and you only discover it when it asks for more permissions or by going to the extension page.

Notable examples:

- Resolution test (allowed to change browser size so you can make perfect screenshots and videos), now needs full tab content access because "Facebook upload functionality" - [1]

- Awesome screenshots (it was perfect extension which allowed to take screenshots and videos), now it is called "Awesome ChatGPT Screenshot & Screen Recorder"

- [1] https://chrome.google.com/webstore/detail/resolution-test/id...
- [2] https://chrome.google.com/webstore/detail/awesome-chatgpt-sc...
What is it encrypted by? Or asked differently, what does the user need to have to decrypt it on all their devices? And how can we know that Apple & Co. don't also have access to that? It's not like Law enforcement hacks into your connection, they just force the company to hand out your data.
> "Fundo do quintão"

Close - it's Fundo de Quintal [1]

[1] https://www.youtube.com/watch?v=IgIdKSv6pl8
Interesting counterpoint to this at [1] which claims the immediate aftermath of The Guardian's Snowden reporting led directly to the effective capture of the UK's leading critical press outlet by the security state.

The newspaper initially ignored national security advisories (D-Notices) which had suppressed and distorted reporting on Snowden in other more co-operative UK press. This independence resulted in a show of force by government where GCHQ staff supervised the (pointless) destruction of Guardian computers which had copies of Snowden's documents. Shortly thereafter The Guardian weakened its stance:

> The Guardian was then the only major newspaper that could be relied upon by whistleblowers in the US and British security bodies to receive and cover their exposures, a situation which posed a challenge to security agencies.

> The increasingly aggressive overtures made to The Guardian worked. The committee chair noted that after GCHQ had overseen the smashing up of the newspaper’s laptops “engagement … with The Guardian had continued to strengthen”.

> Moreover, he added, there were now “regular dialogues between the secretary and deputy secretaries and Guardian journalists”.

[...]

> But the most important part of this charm and threat offensive was getting The Guardian to agree to take a seat on the D-Notice Committee itself. The committee minutes are explicit on this, noting that “the process had culminated by [sic] the appointment of Paul Johnson (deputy editor Guardian News and Media) as a DPBAC [i.e. D-Notice Committee] member”.

1: https://declassifieduk.org/how-the-uk-security-services-neut...
https://dave.cheney.net/2019/10/06/use-internal-packages-to-...
Probably it is a sound strategy. People who are better--for whatever reason--to secure funding, are probably also better in talking to partners, suppliers, media and the like.
So you are a potential 'customer' for this product you say?
I think it's because it's seen always at he city and only sometimes at the town. You'd generally expect to see it primarily where you live.

However, the person may have a strong preference for poopin' on the clock.
I am using a FOSS app that cannot charge me. I would probably pay $2-3/mo for my own personal API key. Or, I guess I could just not use reddit ...
Ask HN: React UI Libraries – Share Your Experiences
Lately I've been building an open source component library that I will be using on my projects at work and I'd love to get your thoughts and experiences on the react UI libraries you use, the challenges you face, and what you think could make them even better.

1. Which React UI libraries do you use?

2. What are your biggest struggles with the UI libraries you use? Every library has its pros and cons. I'd love to know the pain points you encounter while working with your chosen UI library. Are there any specific challenges or limitations you've come across that hinder your development process?

3. What features do you feel are missing from your favorite UI libraries? Are there any particular features or functionalities that you wish your favorite library offered?

4. What do you enjoy most about your preferred UI library? What do you enjoy most about the library you use?

5. What are the most important features you look for when choosing a React UI library? When evaluating different UI libraries, what factors do you prioritize? Is it performance, ease of use, documentation, community support, or something else entirely?

Thank you in advance!
Just have a cache of 100 pre-canned ideas and it will cost you nothing to demo and give people a feel for what this is
I'm sure that's true for certain jobs at certain levels, but in my industry most people need to closely collaborate with people from different disciplines on an almost daily basis.
The adjustment is still enough to cause conflict - evidenced by it being discussed here.

The design of an enclosed space should be to minimise conflict. The fact that people will be entitled over either "right to recline" or "personal space" is just a point for unecessary conflict.

Keep it simple, keep it same for all.
> Before covid, my coworkers would get half the office sick, including me, about 4 or 5 times a year. Back then it was just taken for granted that getting sick was a part of life.

Any thoughts on how this happened? Did not have this experience in a diverse 40-year job history
I don't think it's globally far less effective. I think it's particularly less effective when you need constant communication, say being next to your teammates throughout the day, or when the people are really unmotivated and they won't work unless they're being constantly physically monitored.

As someone who's in a startup and is very motivated, with coworkers who are experts in their area and there's little overlap in skillset, so that everyone knows what they need to do and do it well, without having to constantly synchronize with what each other is doing, I strongly doubt someone would be more effective than me simply because they're going to an office. Specially if they have a long commute and a family.
Wow, you're quite lucky, because Google doesn't want you working for them either.
Threads are but one way to handle the concurrency/parallelism problem on a given set of processors, old or new.

So what are some other ways of handling multi-core code that you were taught?
And at my company, we've seen performance and throughput improvements across the board that the managers themselves agree with :)
I agree, but I also think it translates to a psychological discomfort for the passenger behind.
This is incorrect. There is literally nothing a motorcycle’s electronics can do to prevent you from putting too much input into the bars, fix your stupid body position, or save you from a decreasing radius or off camber turn. Say nothing of dirt, gravel, moisture, leaves, etc.

Yep. If the only thing you have to deal with is a ham fisted input into the throttle, the bike may prevent that. Most crashes aren’t from that. Rider aids are just that, aids. You see skilled riders with top tier aids crash all the time during racing.

Don’t trust the Nannies. Learn to control your motorcycle and you will only have them to nudge you in the rare case you need it. That’s what they are for.
If you’re building a whole new PC then it is expensive for someone without much money
Ironically that's the opposite of what he said lol
Fine in iOS (iPhone SE, 3rd gen, Safari)
Reminds me of a Just William story where he copied a letter from a letter-writing guide book, studiously converting all the "f"s into "s"s.
This kind of 'you only care if it affects you' argument is so disingenuous it makes my eyes bleed. You only care about crypto because you invested in it. Please tell me how much volunteer work you have put in for food relief or refugee causes then tell me how much money you have put into crypto and then let's see if you can claim the moral high ground.
> Obviously, there are some necessary assumptions made, about security of the passkey implementation, DNS security and so on.

Basically you need to trust more vendors of security solutions than before, isn't it?

Plus you cannot access your accounts from any random device without an intricate security setup that eats at your time and messes with the device.

As in you cannot borrow your friend's laptop for 5 min to check your email any more. You have to set up your keys on said laptop and then remove them, which makes it a 2 hour affair?
> Homes are full of distractions

Offices are even more full of distractions, over which you have far less control.

At home, I can designate my own closed office. I have full control. I can remain distraction-free.

How does that compare to an open-plan office? People constantly walking and talking around you, many of whom have nothing to do with your job. You simply can't control that. You can't control the noise. You can't control being called into useless meetings or getting pulled into senseless distracting conversations. If you're a senior, you might get pinged multiple times every hour by juniors asking for advice, instead of being able to buffer these interruptions once every hour or two. Hard to buffer requests and questions when they are a tap on the shoulder instead of a message waiting in some inbox.
This is a point employers often overlook: working with other people means exchanging bacteria, viruses etc.
The more people there are and the higher the turnaround, the higher the likelihood of disease. Covid has finally shed a light on this.

A friend of mine gives tours at a museum of modern art; he says what you say: it's almost a part of the job to get sick at least once per year, typically in flu season in winter.

Employers should be forces to either guarantee there only a very small and stable team of people you meet on a daily basis -- or pay employees premium for the risk they incur because of diseases.

The alternative is to live like people live in Japan where everyone wears a mask all the time during flu season. But people in the west are often too lazy and "individual" for that. I don't really like to be overly broad and generalize, but the COVID stats prove it clearly:
https://pandem-ic.com/japan-and-us-are-worlds-apart-on-pande...

/rant over/
> People will start asking where your funds are coming from.

This is a weird statement.

If it's a cash offer, it's a seller's job to determine if you have the money, not if you paid taxes on it.

If it's a mortgage down payment, then the bank is more interested in if your assets are going to disappear (e.g. are they actually a loan from a third party?). I've never had a mortgage bank inquire about my tax situation.

If you're talking about IRS audits... then yes, they might be curious how you purchased a giant asset without any declared income. But that's similar to any unreported income situation.
That is exactly what happened. You can see the rear lock and leave a black stripe.
With Bitcoin you have to think in terms of the exchange rate. To the extent that you can buy things in it most of that would be based off a dollar conversion. I doubt you can buy much denominated in Bitcoins at a stable price.
That’s a new module in Go parlance. Making a new package just requires making a new directory.
Wounded QR Codes