skysight-inc/HackerNews huggingface dataset:
The problem with cookies (and “remember this device”) is that the same mechanism is used for remembering things that help the user (that we are logged in) and things that harm the user (ads, tracking).

Edit: I’m talking about first-party cookies.
I hate the fact that if you lose your phone and restore to a new one, suddenly every app is logged out again.

Like can't the login-state be part of the backup? If I was logged in when the backup was taken, I should still be logged in when restored to a new device.
How does destroying the industry you are in and making it easier for competitors to enter with crappy product create value for owners?
Sure, but packaging a web app with a PHP framework in a Chromium wrapper to accomplish that is still ridiculous.

I don't care how ubiquitous the whole "web apps are now native apps" paradigm becomes, it will never not be ridiculous.
Do you now admit that the way you posted the video was highly misleading?
Look at Nvidia stock, the market knocked it all the way down and then all the way back up. There is no efficient market. Its really about making a contrarian bet. The reason traders lose money is that most of the time there are no good trades to make. If as a retail trader you made a trade once every two years, things would be different.

Another thing, it takes a while for news to price in. If inflation craters and it means the QQQs should be 10% higher, that move CANNOT happen in one day.
> I'm sick of people ignoring the science. Educate yourself before writing ...

Oh science again... You totalitarians are always calling for science when lacking arguments to convince people....

Nazism was supposedly based on race science. Communism was entirely scientific. So were COVID lockdowns.

And now climate science. It isn't science it is just weird millenarian religion. Please stop propagating your religious beliefs on HN.
It's even worse than that. According to the article, the sockets were basically alright, perhaps with some QC issues. They could have paused the automated line for the ratchets, ramped up hand production of them using the knowledge from their existing facility in the same region, and been selling sets that were mostly produced by automation. Instead they just threw the whole thing away?

I've got to wonder how much the problem is due to consolidation (see: infamous toolguyd picture of power tool brands). If there were a healthy market of competing independent companies, when SBD executives couldn't figure out how to get it up, another company would have bought the complete factory and made it work.

I find it amazing that so much VC money is (was?) slushing around trying moonshot ideas like littering sidewalks with e-scooters and hoping loose change falls into them, but there is no motivation to start new companies doing traditional things in stagnant markets. I mean a "$90M factory" is like a tenth of one Instagram [0] ? I guess it's just not exciting enough.

[0] an old arcane unit of a currency that has since become obsolete due to its small size
Why aren’t we more scared of the climate crisis? It’s complicated
Disclaimer: author works for the European Defence Agency.
It’s not clear that it does make economic sense. Amazon may be burning margin for growth, or placing bets on the future relative costs of satellite vs 5G and cable/fiber which may not pan out.
I don't understand your point.

Do you know that major tech companies saw a near 100% reduction of successful phishing attacks after adding yubikeys? The population there is hardly uneducated, yet they still had quite a few break-ins. Some of the companies have also nearly removed passwords, changing the minimum length requirement to something like 5 lowercase characters. They still experience a near zero, or zero, phishing success rates.
> phishing resistance (with UX that supports that) and low-level security audits of encryption software and hardware

Pardon my ignorance, but isn’t this saying “we can’t rely on reducing the likelihood of breaches, we should focus on reducing the likelihood of breaches”? Your recommendations are no more deterministic than the methods you eschew.
It’s a nice summary about error handling in Rust, but doesn’t present anything new for anyone who has been writing Rust for a while.

The title “more than you’ve ever wanted to know about errors in Rust” had me expecting to learn something new.

Still a nice intro though, and could for example form part of the documentation for shuttle in the future, to help people who are new to Rust get into using shuttle.
Calling such people “technological deadweight” and “free riders” is the insensitive thing, regardless of the veracity.
100%. Storing your "2FA" TOTP tokens in your password manager is asking for trouble, in my opinion. Why put all your bags in one basket? The moment your PC gets owned your are pretty much permanently locked out of all your accounts.
Wisdom teeth started growing at the age of 14-15. Are you willing to inject botox to your child?
Very interesting, you appear to be a rebel supporter whereas almost everyone from Syria that I have met in the more affluent circles I am in in the US appears to have heavy sympathies for the regime.
> doing basic entropy checks on a user-provided password pretty much solves the issue anyways.

No it does not. Users will find one high-enough-entropy variant of their password, and reuse it across all sites for life.

> Authentication is pretty much a solved problem

Hrm. It might be solved for you and users like you - but it depends on your site's demographics: most internet users on the whole will not know anything about encrypted "password lockers" and "physical Webauthn tokens". Browser-managed passkeys, on the other hand, stand some chance of being easy enough to use while enforcing good security and high entropy secrets, but lack widespread adoption so far.
> “es em oh el”

I read this with a Spanish accent and it gave me a good laugh.
Lineriazability Checker in Rust
I developed a Rust library for testing concurrent data structures for linearizability (strict adherence to a sequential specification). It is built on top of loom model-checker and uses proptest to generate random scenarios. Any feedback is appreciated.
They are unorthodox and they’re wrong. If stuff does not need to call your service, put it in a private subnet. It’s not rocket science.
Loss of water, living space, and farming livelihoods absolutely leads to nasty stuff.

https://en.wikipedia.org/wiki/Water_conflict
I've been in enough projects that changed version control systems, had to restart the version control from a snapshot for whatever reason (data loss, performance issues with tools due to the commit history, etc) that I wouldn't want to take this approach.

> amount of time new devs waste learning an impenetrable codebase, vs. the amount of time existing devs "waste" making the codebase more lucid by explaining their changes.

That's a false dichotomy. The codebase won't be impenetrable if there are appropriate comments in it. In my experience time would be better spent making the codebase more lucid in the source code than an external commit history. The commit messages should be good too but I only rely on them when something is impossible to understand without digging through and finding the associated ticket/motivation, which is a bad state to be in, so at that point a comment is added. Of course good commit messages are fine too, none of this precludes them.
It was shocking to me that room mates could get hired that easily.

This was the bay area.

My comment is highlighting structural imbalances as they exist in society right now.

Even though networking as a way to grow, it is not an option for a lot of people until much later in their careers. That is because of social conditioning.
Tara Walker: Blending Math and Music to Building Vector Databases
Tara Walker, a principal software engineer, currently working on open-source and vector databases in Microsoft's Developer Division. Passionate about building software at scale and the intersection of AI and robotics, Tara has served as a tech evangelist and mentor for underrepresented minorities and the next generation of computer scientists.

Find Tara on LinkedIn here: https://www.linkedin.com/in/taraewalker/

And on Discord at: tawalke

Podcast Info:
Spotify: https://open.spotify.com/episode/389h2I8X06cAG41Xs1oLJ1?si=e33cd08a896e4333
Apple Podcasts: https://podcasts.apple.com/us/podcast/tara-walker-blending-math-and-music-to-building/id1695347715?i=1000621985921

If you would like to be a guest or sponsor the podcast, send me a note at alex@humansofai.xyz

And follow me on other platforms so you’ll never miss out on my updates!

Sign up for my free AI newsletter Chaos Theory: https://alexchao.substack.com/subscribe
Follow me on Twitter https://twitter.com/alexchaomander
And Threads! https://www.threads.net/@alexchaomander
Connect with me on LinkedIn https://www.linkedin.com/in/alexchao56/
The problem is that email is not guaranteed to arrive in 30 seconds. Speaking from experience, it is extremely frustrating trying to access a resource and being unable to do so because someone in the entire email chain did a transient whoopsie.
New Yorkers Got Broken Promises. Developers Got 20M Sq. Ft
I just checked on my iPhone (I posted the comment on my MacBook Pro): link opened just fine.
Oh, thank you so much, and whoops :)

Fixed the code example and merged!
> Even if I wanted to use Edge as my daily driver, I couldn't on my Fedora workstation.

Why not? Edge exists for Linux. Microsoft maintains a repository with rpm packages for Edge and it is also available via a Flatpak.
Google Cloud IoT Core was deprecated last year.
You can't ratelimit someone you have not yet identified. Unless their username is also a password. But then you just have 2 passwords. And the ID password would have to be sufficiently high entropy to not be hit by bots.
i don’t agree with the article but i think there was a big urban/rural divide in poverty. Sure, Damascus was doing great but I think a lot of the rebels came from outlying areas
And the network failures happen more with wider impact?
OK: I want an animated wallpaper of desktop windows, with the windows moving from time to time. It's good to be distracted from the useful parts of your computer.
That's why we're in the process of phasing out third-party cookies but retaining first-party cookies. It's the closest dividing line we have for "good" and "bad" cookie applications: most good cookies are first-party (there are some use cases that are unfortunately caught in the crossfire) and most bad ones are third-party.

Any time you give developers access to storage on the user device for any reason, you've given them a way to track users. First-party cookies are a decent compromise in my book: you can track users, but you can only track their movements on your own domain.
Gimp 2.99.16 released: Wilber Week 2023 edition
Noone within the team was a founder.
I would still want Linux on my laptop.

It has been “the year” for Linux on the desktop for the last 10 years, even more so if you use Emacs as your WM.
A password can be stored offline without any electronic device or even be memorized only.

Passkey depends on your device.
Indeed, but you still need a Personal Access Token to integrate pull requests and issues with your Git client. GitHub doesn't support SSH authentication in those cases.
Yes, nice intro to errors, and nothing new.

I would have liked a small conclusion under the chapter that names thiserror, anyhow and eyre, arguing why you might pick one library over another, and which one to pick if you don't have any requirements (anyhow). This blog post compares the two first with examples on when they're neat and cumbersome:

https://www.shakacode.com/blog/thiserror-anyhow-or-how-i-han...
Adobe Illustrator's new AI feature instantly recolors vector graphics
So kind of like breaking one of two compasses before going out to sea. Makes perfect sense.
I over-simplified. It's about Google News. The news paper companies managed to lobby for a law that requires search providers to pay money to the news papers they link to (or for the tiny excerpt they show in the search results). So Google said they will discontinue Google News in those countries. Suddenly the news papers gave Google a free license to link to them. (still simplified story)
Wow yeah kind of a far cry from the headline..
Apple will make sure PWA's aren't successful. They can't risk their control over the app ecosystem.
Accessing a users data is not the only reason for hacking their account. Performing actions on behalf of a user is just as much of a threat.

Edit: also, if an attacker dumps all the data today then loses access to the data tomorrow, having access to my password hashes means they can access my account and data later.
> Take my father, there is no way he could use a password manager...He has a notebook of passwords

Your father does use a password manager: a slow, very inconvenient one. If you could teach him to reach for ctrl-c/ctrl-v instead of a pencil, it would be easier for him.
Thanks for leaving the most important part out bro.
But, think of the astronomers!

These LEO satellite internet companies need to pay a tax to fund more space telescopes!
> The best I can do is give examples. I’ve been to Disney World, and it was very fun and nice, and there were no homeless people asking me for money, and it was clean, and the windows weren’t broken… but it was also obvious that it wasn’t a healthy economy. I was paying an unsustainable price for that, those who couldn’t afford it were excluded, etc.

I'm sorry, but in what way is Disney World an economy? You know that it's a fake place run by a single corporate entity, right?

> I’ve also been to somewhere in south america and (where I was) it was largely the opposite. There were people aggressively selling / begging, everything was dirty, buildings were in disrepair. This also wasn’t healthy. Everyone I saw was poor. That wasn’t diverse either.

Why do you think any of this is due to missing "economic diversity" instead of simply missing money due to geopolitical and historical reasons?

> Parts of Europe were largely a toned-down Disney World. There were nice areas with a fair degree of economic diversity and an absence of the very worst poverty… but then there were places I was cautioned to not go, places were the symptoms of an unhealthy economy existed and were hidden from public view. It was still fairly healthy. There was a lot of diversity. I saw a couple supercars, a bunch of neat European beaters, and a fair number of cars that I’d say were fairly average in the US but were clearly fairly to do.

And Europe is on average much safer than the US is, people are happier, fewer people die of preventable reasons. Seems like they are doing something right?

> Meanwhile theres virtually nowhere in the US that I cannot freely go in relative safety. I routinely see people from every walk of life… and the US is the strongest economy in the world.

Well, except literally all of the US.

> Eliminating the diversity may be good for some people individually, but it’d hurt the whole. Of course I’m not saying that it can’t be too extreme, but people pursing an utter absence of poverty or utter absence of extreme wealth don’t know what they’re talking about.

You haven't shown that ANY of what you wrote is due to missing "economic diversity". You've compared a bunch of places that have very different economic histories, and you just decide that all the differences are due to "economic diversity".

> Economic diversity helps. It means there are people with means, others with motivation, others with a mixture, etc. It creates a economic system where systemic needs are most likely to meet a person who can recognize and fulfill the role.

And now please explain how and why economic diversity helps. Why is it good if there are poor people? Why do you like it better when there are people dying of preventable reasons due to their economic status (US) compared to places where this doesn't happen (EU)?
lol, the blog post has to be satire.
The "room mate" network is pretty exclusionary and self selecting.
To create a space that holds together information of a varity of data (types, format, unit, etc). This would enable a more holistic approach to themes that include multiple points of content, which itself can be linked to several themes.

Example: Download a PDF of a book. Read it. Notes derive from that. Those notes can concern a diary, quote for some other work, inspiration for art, language learning, etc. The book itself can contain text, data entries, tabular, photo, etc.

There is a multitude of possibilities to find categories for every aspect of this 'idea'. The goal is to find a (not 'the') abstraction to handle data so it is possible to work with it. As someone already mentioned, even if such a system can be found, it is unclear if this would make it easier to work with all it contains, than how we do it conventionally.

Addit: DevonThink comes closest to what I described.
Yeah this is the unfortunate outcome of the past two years. Memegen is now primed to take anything in the maximally critical way.
A person does not belong to society or to the government. Sane or not, a person who chooses to not get mental, physical or preventive treatment (like vaccines) or other social manadates should not be compelled because humans lack the authority to do so.

What should happen is they should be expelled from society. Expulsion was very common in historical societies. The famous version of this is leper colonies. The land of thr country belongs to them, so designate a place for them to live in isolation except for volunteers that wish to visit them and offer aid/help.

People should be asked that in the event they are deemed by professionals to be incapable of making their own decisions that they delegate the power of decision making on their behalf to the courts or society.

This is a pervasive issue, even things like not wanting to be dependent on tech for day to day survival is a person's right. Compelling a person to do anything means you have deprived them of liberty and subjugated them, and to do that, having a good and legitimate reason is not enough, you also need authority.

In communist governments for example, people are subjucts of the state and the state assumes authority even over what people belief. But in the US at least, the government that derives all its power and authority from the governed has not been granted such unlimited authority over law abiding citizens, or authority to pass laws to manipulate peoples bodies, regulate their beliefs and convictions or imprison them when they have not broken a law "for their own well being and without their prior consent. The people did not consent to have their wellbeing and safety taken care of against their will. If insane people, unvaccinated people, naked people and other people are considered to place a burden to society or to cause harm in the future, simply forbid them from coming into contact with society and only enforce complelled measures when they persistently refuse to comply.
My article is, indeed, targeted towards folks who did not do undergrad in CS! Self-taught people need better resources to understand more low level things. I have never taken a CS class, undergrad, high school, middle school, or otherwise.
The "weight" solution is the way to go. A long stick is hard to store and has all sorts of forces acting on it in the wrong direction.

Tacking a payload onto the spare anchor isn't unheard of, and if you need more depth then a weight on a leaded line is fine. If you leave it out with a buoy, use more rope than you think you need to not lose it in a current. The pulley is just a nicety if you're not hauling in a bunch of steel; the water displacement makes it so anyone in good shape can haul in a couple thousand pounds of fish by hand.

Also, salt water corrodes basically everything. Good stainless isn't too badly affected. Bronze is better. You'd want to make sure a cooling system like that didn't have a stray charge buildup.
Is it, though? Grammar is more like a set of tools than a rigid mechanized system. Formal proofs have recursion and logical rules which generate vast structures, structures which, in our era of computation, can move and act without our full understanding of their function. But whenever we seek to describe how something functions, even in our most clear and rigid proofs we use natural language, and I'm sure many of those proofs contain "grammatical errors."
Marie Curie died of acute aplastic anemia [1], at age 66, after decades of working with radioactive materials and operating an unshielded X-ray machine thousands of times during World War I.

While long term radium exposure has been known to be hazardous by the 1930s, and Curie's work had been suspected at the time to have affected her health, I estimate that contemporary thinking would have been to avoid exposure to radium.

Conversely, I do not think that acute exposure to radiation happened enough before World War II to have any kind of safety thinking around it.

[1] https://en.m.wikipedia.org/wiki/Marie_Curie
To be fair, yaml has a form of inheritance, I wouldn't define it a relatively simple format
Thanks! Those Cloud Guru courses look great and are also much more affordable than those from Linux Foundation. Replying to your other comment - yup, I do plan to get my hands dirty, either on my pet project or by helping out my DevOps colleague.

I wanna ask - how deep should I know Linux? I bought this crazy book years ago, Linux Programming Interface, which is clearly overkill. Do you have some recommendations there? Thanks again.
What you're looking for is client certificates. This has existed for years but webby people think users are too stupid to use them, so we get the menagerie of half baked trash we have now instead.
A long time ago I wrote a variant of this - the signup page would generate a token, place it in a hidden password field, submit a hidden form, and instruct the user to click the "Save password" dialog in their browser. One advantage of this was e.g. Chrome would sync the password immediately across all your devices (in some ways this was a privacy violation, although one that the user had to explicitly opt themselves into). New sessions (e.g., if you reset or lost your browser's stored passwords) still happened via email verification, though.

Today I would just use passkeys.
Doom.

A friend gave me a 3.25 floppy and told me it was this cool new game, with a new way of playing called 'first person' which confused the hell out of me until I played it.
I'm talking about inference. We need to save is keys, we need all of them to compute next tokens. We don't need queries. But we can play the fact that each next token depends only on the previous. And in whatever gets out of each tranformer's block it's the same. Let's call it 'history'. Which is 2d array [prev_size, embed_size]. Typical will be 1024x512 = 0.5M, may be more depending on the model, but looks like still affordable. prev_size here is [0..max_prompt_size] as we do inference. The idea is that we don't need to recompute it every time. Just add one element as we compute each next token. And if we want to try several alternative tokens, we can put them in one batch, and they will have the same 'history'. We need just a copy, or better reference. This way the branching is almost free. As opposite to 'normal' way when everything is recomputed for each alternative token.
You don’t find enough hard materialists on HN?
I take your 10 and raise ;)

"A horticulturist has managed to nurture a single apple tree which bears 250 different varieties of the fruit."

https://www.bbc.co.uk/news/av/science-environment-24348394
A glance at recent ycombinator edtech investments seem to put a lot of emphasis on classroom-replacement/supplementation rather than tools for improving instruction.

This is probably just a sign of the (post-)Covid era, but I do find it interesting when compared to the broader SAAS world that obsesses about “improving [professional’s] ability to do [job]” at increasingly granular levels.