skysight-inc/HackerNews huggingface dataset:
> I think the only necessary ingredient for life is sloppy self-replication.

But self-replication has to be very good to be useful. If it makes a mistake 10% of the time, the longest piece of information that be retained is about 10 bits.
I am not going to renew my GitHub CoPilot as ChatGPT subscription delivers more value. I am probably going to write a VSCode plugin for my specific environment.
No, I live in an at-will state, you can absolutely file for constructive dismissal. And SHOULD. If you can do your job remotely, have been doing your job remotely, and the company wants to end that? Then the company absolutely needs to be challenged and burdened with showing proof as to why returning to the office is necessary when it does create an unreasonable burden on the employee.

For anyone who says this isn't an unreasonable burden, what if you live in a different state? Or in a lower cost-of-living? Or have a home/family life built around a position working remotely that you have been functioning in perfectly fine for three, four, five plus years?

In Physical Security if your position requires body armor, the company is legally admitting it's a dangerous life-threatening position & denying a request for body armor is a legal attestation that the job should not be considered dangerous in the course of day to day work.

Much the same way, the company is now admitting that onsite work for the position is somehow more necessary then working remotely. Challenge these companies.
Thanks, glad to hear it! Is there a specific direction you'd like to see me take PL from here?
eXtreme Doritos and other extreme snacks also came from this era.
Consider the authors of papers and studies don't write the articles and headlines. The headline is written as a click-hook, to get PR, because, well "publish or perish" and that's how the funding comes in.

It sucks, but also if you just published the paper with a dry summary, it would also get ignored.

Also, the bias is old. "Eukaryote" means "true cell"! It's right in the name, this bias about what "real" life is. Of course it's our anthropocentrism, I guess, but...

I also think, on the broader point about abiogensis... it's quite likely that the cosmos is rather full of things that look like our prokaryotes. But eukaryotes and complicated multicellular life is either going to be extremely rare or non-existent within anything observable in, say, our galaxy. I say this because prokaryotes arose almost as soon as the earth cooled and developed a liquid ocean, and have been here almost as long as the planet.

But eukaryotes have only been here for maybe 15% of the planet's existence or less, and seem to have basically arisen as kind of a 'fluke' event, and only once, and seem to have something to do with the very particulars of cell energy dynamics, mitochondria, and the fusion of archaeobacteria and bacteria, etc. Just really weird stuff.

Putting it yet another way... prokaryotes have existed for almost the entire life of our planet, compose most of the life and biomass of the planet, and shape it in its most fundamental ways but are much the same as when they started, because they have rather strong intrinsic physical limits on energy and complexity.

So, yes, life != multicellular organisms, but maybe it might turn out that eukaryotic and/or multicellular life is the only real "interesting" kind of life from the most broad perspective.
TBH, most of the research papers I've read the past few years have been around diet/nutrition. I can't think of anything in terms of recently blew my mind, some of it is definitely interresting, but most of it is low-quality noise.

Probably the biggest thing that blows my mind is the suppression of the Minnesota Coronary Study in the early 1960's. Literally half a century of dis/misinformation from the govt, pharma and medical industries that was disproven long ago. Nothing higher quality or more definitive since.

Basically, the whole, limit cholesterol and saturated fat intake in favor of more grains and seed oils is based on a theory that was long disproven. And, it's still pushed to this day. Why, there's big money/business in pharma and agriculture (corn, soy, wheat).
I can't comment on whether it would reduce your vertigo but the Quest has mountain climbing games eg The Climb 1&2, and intentionally vertigo inducing challenges like Richie's Plank Experience

The Climb 2
https://youtube.com/watch?v=YSNPalIihiE

Richie's Plank Experience

https://youtube.com/watch?v=ArlavrOFpkI
I will argue with your statement that “he was respected as an entrepreneur.” It is arguable, and this weasel word forms the basis for your subsequent argument. It’s wrong. The question is “respected by whom.” I do not believe that anyone who respected him for entrepreneurship beforehand now disrespects him as an entrepreneur.

I do believe that people who marginally understood his work but have vested interests in the existing structure, including “news” orgs, reporters, political hacks, and direct competitors, have tried to create controversy and confusion around Musk.

Of course this would be expected to happen, and those gossipers and murmurers who can be influential will be among the uninformed.
DevToys updates to v1.0.13.0 with some new features
I think the idea is, there is a chain of trust from a TPM (So you don't have access to the private key, ever) through the bootloader, OS kernel, Windows Update, and vendor-blessed web browser, to the server.

So Brave would fail when Windows says, "hm, your hash doesn't match any recent Edge version, so you don't get to issue a key signing request to the TPM."

Or it will allow the request but when it arrives at the server as "Windows, non-Edge browser" they'll hit you with the endless CAPTCHAs or just boot you out as a hacker.

It's not the web I grew up in.
The advertising industry is in some sense dead. Only SEO, tracking, and clicking around in the GUIs provided by the ad networks remains.

I don't think there are many true advertising agents out there anymore, nor are their work valued. What I mean are people who you can come to, who will help you locate your audience and buy ads on the right billboard, website, TV shows and magazines. I also believe that where all the hostility comes from. Many of the online advertising people know full well that they're not really good at advertising, they just know how to navigate Google Adwords and their clients don't.
I love Remote Tunnel and the Remote SSH feature. Super useful for developing on Linux on Raspberry Pi or a cloud VM when experiment with different Linux distros.
Do you give a thought to database indexes? [video]
A short talk about why you should care about your database indexes. Have you hit any production bug where the root cause was incorrect or missing indexes?
> If no company running a CA will give you a cert you'll simply be unvisitable (on HTTP/3).

This isn't technically correct. I believe on the security warning page you can type "thisisunsafe" (just blindly do it) and it'll let you through.

At the very least this works for bypassing HSTS.
The alternative is that some exponentially unlikely step is needed, which would imply we're not going to see another independent abiogenesis event anywhere in the observable universe.
I slightly suspect that the only platforms that will actually implement Web Attestation are the ones I'm trying to remove myself from, so I secretly[1] hope this is the catalyst I need to stop going on crappy social networks and video platforms.

I apparently don't have the will power to stop going on these sites so maybe stopping me loading content from the other side is exactly what I need.

[1] Not so secretly now I've mentioned it here I suppose.
Yes. Let’s do this thing that will likely lower pay and ensure shitty engineers keep jobs they can’t do because of a horribly short sighted view that RTO is not equitable.

The issues with Unions is there appears to be no way for a company to hire non union workers. Once this happens you are basically the mob. And hold the company and other employees hostage to mob rule. Which is almost always not driven by logic.

There are enough remote jobs.

The idea that you want a specific job at a specific place to allow you to work remotely is insane. Nobody owes you shit. Either you like the terms and work there or you don’t and find another job.
> limiting access to features or entire sites based on whether the client is approved by a trusted issuer. In practice, that will mean Apple, Microsoft & Google.

Wait, does that mean they decide what websites I can visit? That doesn't sound dystopic at all.
As a simulator nerd, the best experiences I've had has been with Microsoft Flight Simulator and various racing simulators (like Assetto Corsa). The experiences are so much better than I really don't play them anymore unless I use the VR headset together with the flight/driving controls as the experience is so different.
Did you see the RRSP and TFSA account types? ;)
Whether this is bad or good really depends on the details and the overall strictness. It seems like none of the articles I've seen on the subject go into depth explaining what makes a device "legitimate."

This could be a really good thing if all it's doing is proving that your device isn't malicious, or being better able to detect whether you are a bot. If our end-user experience doesn't change but we stop filling out CAPTCHAs and seeing Cloudflare bot checker load screens, that would be a big plus.

This could be a really bad thing if it means that the web now will just widely reject alternative browsers or computers that have elevated administrative permissions.

I think if we want to see how this plays out, we can look at the Google Play store. A common example that already exists is that banking apps will block rooted Android devices, and it sounds like this attestation API will have the ability to do something similar.

In my opinion, that situation seems perfectly reasonable, and it also seems like most websites don't have the same incentive to block modified devices as higher security services like banks.
Bizarre that Zuck and Musk and I suppose "Goog" can have these spasms of inability to understand branding. Bezos needs a fit of it so we can rename Amazon to, uh, Fwoop. Why not.
Can dltHub solve the Python library problem for AI? Dig Ventures thinks so
Its flat out bad business to exclude customers period. Figure out a way to have your customers not fight in line sure, but never shorten the line unless it is absolutely necessary (ie criminal)
The token received by the server contains information about your platform albeit not very much beyond "it's an Apple device and we think it's enforcing normal security rules".

Why can't you forge the token? Because it's digitally signed.

Why can't you generate a token for your own website, and then "replay it" to another? Because the token embeds the "challenge" which is random numbers selected by the server. The server compares the challenge in the token with the one it generated, usually it will statelessly hash something about the client connection like a cookie. So you can't just substitute a token from one site for another.

Why can't you generate a token for the real intended site but then grab it out of a real iPhone? Because the iPhone has good security which will stop you from doing that (equivalent to jailbreaking it).

How is the token digitally signed? By (in this scheme) Apple, so we can assume you will find it hard to steal their server side keys.

When do Apple digitally sign such a token? When you present a pile of data to their servers.

What's in that data? Unknown as it's (probably) encrypted, but most likely it is various version numbers and device IDs. At the very least it can change at will. Also, it's going to be signed by a device specific key pair. The device generates the private key on first boot at the factory and that key never leaves the device. Apple record the matching public key. So, now they can identify when a the data pile comes from a real device. Also if someone successfully steals the private key from a device, it can be revoked by Apple server side.

Real RA schemes are more complicated than that usually for privacy and anti-tracking reasons. What's outlined above is a generic, textbook implementation.

So to recap: you can't steal a token because the device's security won't let you, you can't steal the private key you need to get a token because there's no way to extract it from the hardware at all (short of putting the chips under a SEM), and you can't swap one token for another because of the challenge.
It’s the opposite of the attestation scheme under discussion, because it requires the server to satisfy attestation, while the client can be whoever. Whereas the Apple and Google schemes require the client to satisfy attestation.

I agree with you on the necessity of maintaining support for bare HTTP in the Web ecosystem. But I think you’re not likely to get as much support on this, simply because far fewer people run servers than clients.

I kind of doubt that clients will ever connect exclusively via HTTP/3. I think browsers keep bare HTTP support. Maybe at some point it may be hidden behind a client config flag.
hn yesterday: "astrology is stupid and anyone who believes it should be shunned"

hn today: "where are we on the gartner hype cycle on this one?"
If you haven't yet experienced Rez Infinite, you owe it to yourself to do so.
JumpCloud hack linked to North Korea after OPSEC mistake
Given enough time, even with a random process you will have iterated through every possible result some day. So inevitable here means, it would have to happen at some point, simply because it is possible. So, math.
“I don’t understand.”
As if RTO solves this at all. Lots of teams are distributed across the many hubs. Amazon is basically asking a large number of its employees to commute hours into the office, or move across the country, just to sit on chime/slack all day anyway.
Case to sue for what? Constructive dismissal is legal
Right. That's why Mozilla can't meaningfully stand up against these forces anymore. It's not that they don't want to, it's that they don't have the market strength.
I believe GP was complaining that rich people can also make their kids actually more qualified through better, more expensive schooling, not that colleges are letting them in when they are actually under qualified. I agree that legacy admissions should be abolished yesterday.
No to the first and kind of for the second. Apple doesn’t stoop to the levels of actual ad tech companies as far as tracking and linking data sets. They do sell ads but they are really limited. The only place I think they use customer info for ads is in their News app. App Store ads are search and possibly location based IIRC.

In any case, the info used for the ads is fairly generic and they do not have access to the level of info that the actual ad tech companies use. Apple does not know which articles you read, your location, your web browsing, search terms, etc. while using the News app.
We use JumpCloud at $DAY_JOB and I had to rotate all our keys and SSL certs. Not a fun time.
This got way out of hand as of by now and isn't about serving humanity as a whole anymore in big parts (!). This is some actors with the money and hardware trying to build their AI dream castles up on the shoulders of the rest and even don't care what the implications of their actions are. Money is regulating this business and is taking more away from us all in the long term than it pays in the short. I'm kinda glad we're developing backwards, because this changes are necessary for building a balanced future for all of us. Not just for a few eligible...

edit: I'm not in for a discussion.
Do you realize your comment just sounds like "Mozilla is not perfect hence I use an even worse browser from an even worse company!"
I am actually rooting for the web to die, so I say bring on all the competition-killing features Google can muster. It's only in the face of an extreme and impossible choice that people will finally wake up. Giving up the entire user-facing compute ecosystem to a hypertext markup viewer has held back technological advancement for nearly two decades. Computer chips are now 4 nanometers and solid state storage is reaching the speed of RAM. But we're still churning out platform content line-by-line, by hand, like digital punch cards, because apparently it's technologically impossible to invent the equivalent of PowerPoint for web pages, or, god fucking forbid, not using HTML, CSS, and JS to create customer-facing applications.

Yes, the web is a great success story. But it's also backwards and ancient, and has been limping along by stuffing an entire operating system into a program made for viewing hypermedia. Are we going to wait 20 years to advance past these limitations? 40 years? 100 years? At what point will people finally fucking say "hey, maybe let's not kill ourselves jumping through hoops just to show pictures of cats and tax prep programs?"
Unless you post your own Q&A, it’s difficult to get the initial mod points to even be able to comment.
No, it's a copout. The handwaving about "a long time/many planets" is very weak, when confronted with the complexity barrier between non-living matter and the simplest known system capable of Darwinian evolution. All that time, and all those planets (that we can see in the observable universe), give a number that is very small compared to the unlikelihood of just randomly surmounting this barrier.
Also Google Trust Services has free certificates although you need a Google Cloud project for it.
Did they ever get their ultra high voltage grid going? Last I checked, it was still in the planning stages, and they were still running coal in the east because they couldn’t tap renewable power from the west. Looks like they are still building:

https://www.reuters.com/business/energy/chinas-state-grid-in...

So one link at least according to your video, I would be curious about actual numbers about how much they can move already.
One of two things is happening here. I'm not sure if its one or the other or really both.

1. Copilot and LLM trained on code is reducing usage of StackOverflow.

2. People are just coding less and searching for less with layoffs and slow down due to burnout.

But it's definitely connected to these points. The degree of magnitude for either though is difficult to assess.

If it is mostly #1 though that's the worst thing isn't it? Because SO is weakened and then the LLMs gradually become less effective. We generate less curiosity and public discussion overtime as people use AI and LLMs more. That's sad for software engineering as a whole. One of the best parts of this job is collaboration and problem solving. Not just individually but as a community as well.
your last paragraph largely answers your questions.

it doesn’t take much to yeet some python scripts (and more) at the wall and get something to stick. SO, GPT, pick your poison, it’s painfully easy. solved problems as far as the eye can see, with a little glue or tape to hold it together.

elixir demands more of an investment. more than approximately zero is quite a bit if you already have momentum.

(elixir can absolutely be yeeted. not arguing otherwise.)
So far, Private Access Tokens are not widely adopted so you can get a feel for the potential Linux experience by browsing the web with iCloud Private Relay enabled. This flags almost every website's anti-spam classifiers, and you end up having to do 3-5 captchas to access anything protected by one. Wikipedia also blocks you from editing: https://meta.wikimedia.org/wiki/Talk:Apple_iCloud_Private_Re....
The training costs and performance at that scale are mostly driven by hardware and I personally don't think language will make a large difference (I may be wrong).

Most of the Elixir Nx efforts are on inference, especially on how you can embed and scale it using concurrent and distributed patterns (see this post/video [1]). It may not be what you are looking for but we have more folks deploying than training models, so maybe they will find incentives to give Elixir a try. :)

[1]: https://news.livebook.dev/distributed2-machine-learning-note...
They simply refrain from explaining things they don't understand.
My strategy is attrition, I avoid developing new sites of habit and over time the old ones get worse and I lose the compulsion to visit.
Great - I keep meaning to come back to it. The shooting range and weapon mechanics, the crazy graphics. Completely worth the purchase. The game is extremely stressful and draining when the going gets tough, though in a good way. I just haven't managed to give it enough time yet. I've tried a few other titles, so far I think this is the most technically impressive one I've played thus far.
Having more than one railway terminals for a city as big as Paris is not unreasonable. There are technical difficulty with connecting the stations as it's not easy to build lines through/beneath the city. A single reasonably sized station also may not have the capacity to handle all the passengers.

In China, most long range railway services are centrally planned (this is not necessary a bad thing here.), but Beijing, Shanghai, Guangzhou, etc. all end up with more than one terminal.
> Industry-controlled UNIX is the reason Linux exists

Linux only exists because it is free and it runs free apps for every category of keyboard-driven task a typical user would want.

The answer to my question of how a predator like IBM is going to take out the other non-RHEL based distros is starting to come into focus. This should help Ubuntu get the Mint monkey off its back too.
You point out one of the key things about making public transport work well as an alternative: frequency and reliability . And I don't mean reliability in the sense that it doesn't break down, I mean in the sense that you can rely that the service will be offered, no matter when.
Now the funny part is that it's probably a lot easier to make a self driving train, airplane or bus on a controlled, dedicated lane than a self driving car to increase frequency and extend running hours.
What about running JavaScript on a browser?
im gonna remove even https from my server. gotta go http in protest against this nonsense.

i'm already pissed off that firefox warns people that my site is unsafe for them when i dont even stick a cookie on them and yet provide useful Free software.
I think what you have here is akin to the massive errors in polling we see in elections.

The clear reveled preference of the consumer they did not like New Coke, they expressed this by not buy it.

Limited market research will often give the company the answer they are already looking for, there are plenty of examples of this

Further is completely self defeating to New Coke was better than Classic because Coke Zero failed. First off, Coke Zero tastes NOTHING like Classic, To me aspartame is actively bitter to me not sweet. So Diet Coke or Coke Zero or any other drink with aspartame in it is a no go.

But aside from my personal tastes, Diet Coke has the first move advantage for the zero cal beverage, so all of your arguments as to why classic won over coke would apply equally well to why diet won over zero.

Further still, I think there is a massive consumer disparity between the consumers of zero cal soda, and people that want regular soda. Comparing their consumer preferences is going to be very hard