skysight-inc/HackerNews huggingface dataset:
The Expo Go app needs to connect to a server for two reasons: the server gives you a signing certificate that is used to sign your project manifest, and it also fetches the list of active and recent projects and Snacks. It is certainly not intended to be invasive.

Expo Go is entirely optional and it is recommended to graduate early on in your development cycle to using a development build of your own app instead. Development builds don't sign project manifests (unless you're intentionally using end-to-end signed updates, an advanced feature). They are like regular development builds of a traditional native app.

Also if you'd like to keep using Expo Go, the signing certificate mentioned earlier has an expiry of 30 days or so IIRC, during which time you don't need to connect to a server. You may still want to provide the "--offline" flag to turn off refreshing the certificate.
SSL is the client verifying the server, and the client can thusly opt to skip or alter that in any way it sees fit. WEI is the reverse: the server validating the client, so the client has no choice to opt-out.
Fundamentally both give a 3rd party the authority to verify the legitimacy of something, and similarly both can be avoided if you're willing to not participate.
The difference is that the TV shows came from a place of technological optimism and the YouTube shows from commercial apathy. Society isn't optimistic any more, especially about technology.
What kind of argument is that?
Characterizing a fairly reasonable position like "we should have a way prevent bots at the client level" as an attack on "The Open Web" is pretty much the definition of a shitpost, no? It's a terrible strawman and it pollutes the discourse.

Do you really not agree that people might want the former and not the latter? You genuinely think that the standards folks are being driven by a conspiracy and not what they say they want?

There are ways to argue against WEI that don't involve the existence of enemies you have to fight. Maybe you could try them?
And everyone that ships an Electron app as well.
Maybe if they replaced top Mozilla leadership. Apple had to reinvent itself back into relevance. Mozilla refuses to, and just keeps stagnating in a cesspool of rot and nostalgia. They're less a browser maker these days and more an ineffective think tank. I think Google keeps them around just as a "useful fool" so they can look less like a monopoly...

Probably better for a different org with different leadership to start over. I wouldn't count on Mozilla to miraculously reinvent itself.
Yeah, AFAIK to setup profiles you have to run:

firefox --ProfileManager

And then to use them you have to start firefox e.g. :

firefox -P <profile-name>

Very few casual users (nor even most technical users) start Firefox from a command line, and setting up shortcuts for these is also a step that most users won't do.

The support for profiles is there, it's just hard to use in the context of a GUI desktop.
A quick and dirty comparison on my project:

-- GNU Ld 2.31.1
>> cargo build --release
Compiling mfl v0.1.0 (/mnt/d/Programming/Projects/Rust/mfl/crates/mfl)
Finished release [optimized + debuginfo] target(s) in 10.14s

-- LLD-14
>> cargo build --release
Compiling mfl v0.1.0 (/mnt/d/Programming/Projects/Rust/mfl/crates/mfl)
Finished release [optimized + debuginfo] target(s) in 6.20s

-- Mold 2.0
>> cargo build --release
Compiling mfl v0.1.0 (/mnt/d/Programming/Projects/Rust/mfl/crates/mfl)
Finished release [optimized + debuginfo] target(s) in 6.02s

I did the following for each test:

cargo clean
cargo build --release
touch crates/mfl/src/main.rs
cargo build --release

With the timings coming from the second build. The project links in LLVM, and the tests were done under WSL1 on Windows 10 with the files on the Windows file system, which is how the project is developed in general.
In this context it is relevant. Nobody was programming anything in Python in 1992. The question is, how much of Alpha's apparent performance was real, and how much was due to the missing memory barriers causing programs to go faster and produce surprising (incorrect) results, interspersed with the odd mysterious crash?
Clean gin REST API template for kickstarting your next project
alexmodrono/gin-restapi-template is a comprehensive, clean, and well-structured starting point for developing RESTful APIs using the Gin framework.
neat trick!

sometimes you absolutely need to materialize your CTE, especially if it is one big computation and you refer it 4-5 times downstream.
Please don't do this here.

More explanation:

https://news.ycombinator.com/item?id=36881929

https://news.ycombinator.com/item?id=36881081

https://news.ycombinator.com/item?id=36881034

In addition: could you please stop posting unsubstantive comments and flamebait generally? You've unfortunately been doing it repeatedly. It's not what this site is for, and destroys what it is for.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
What I would like to see at these hearings aren't airmen or military officials giving their "opinion".

Instead I would like engineers from Raytheon and Northrop Grumman etc. who build these sensors system to tell congress what they are seeing. From a duck flying at mach whatever over the surface of the sea due to parallax to the triangular night vision system iris. Explain to the laymen who think they saw an UFO what they really saw.
I understand what you're saying. That's why I threw out the aside about your reasoning being a parody of Chevron. It's cute, but ungrounded.

There is nothing in the Constitution that explicitly prohibits legislative power being delegated to the executive nor vice versa. The Courts are sorting this out, people are upset, they're tabling stupid suggestions--whatever.

What you're failing to grasp is how those transfers weaken the power and shape it to their vessels. An agency has less rule-making power than the Congress has in legislating. It also exercises it subject to the rules and restrictions of the executive branch. (You can't FOIA the Congress.) Moving Congress's power to the FTC changes that power; the same if you move enforcement to a glorified Congressional committee. Every matter of enforcement would either require a full act of Congress, or, could be endlessly dragged out in the courts until the Congress changes and everything resets. (We aren't on the 109th FTC. We are in the 117th Congress.)

Congress delegating its authority to agencies simply results in a more durable transfer of power than the executive deputizing a committee of Congress.
>And more important, what if anything that means in terms of how I live the rest of my life. For instance do I live life to the fullest now? Or do I skimp and scrounge now to have some hope of surviving when things really go sideways.

I'm facing the exact same question. I think I've mostly resigned myself to appreciating the world as it is today, while it's still recognizable. I want to see glacier national park while there are still glaciers. I want to see others before forests give way to savanna. I want to see the old world before things really destabilize.

Don't get me wrong, I've made choices to reduce my impact on the world, and I'll continue to vote for anyone who I think will seriously help on the issue, but I'm not going to live some 'hairshirt' existence of climate piety when my sacrifices amount to a fart in a hurricane compared to the actions of corporations and the ultrarich.
They already are, but it isn’t yet in your face enough for most. Things like food price increases or insurance woes are readily abstractable or blameable on other phenomena.

There are enough extreme events happening now, however, that it won’t be long before everyone, everywhere, has either been directly affected by or knows someone who has been directly affected by an extreme weather event. This kind of rapid change could be the best hope we have for remedying the situation, as rather than being frogs in slowly warming water, we will find ourselves thrown directly into the skillet.
That's exactly what WEI is supposed to do... And yes, websites should not be able to use the TPM for attesting the user's environment.
So fudging sick and tired of having to defend free and open information.
The EU's GDPR only requires explicit consent for data collection for the purposes of the processing of data that is personally identifiable and there are exemptions such as for operational reasons. For example if you make an HTTPS request to my server then of course I have your IP address. It's what I do with that personally identifiable information that determines whether it requires explicit consent or not. For example if I only use it for the purposes of ensuring operational security and destroy access logs after some limited time, then explicit consent isn't required.

Data collection for aggregate analysis that discards personally identifiable information in a non-recoverable way similarly does not require explicit consent.

Sounds to me like what they say they're doing is compliant, does not require explicit consent under the GDPR anyway, and therefore whether or not the checkbox defaults to checked or not is moot from the point of view of the GDPR.

I understand some people might not want to trust them, their processes or their competence regardless, but that's a matter that's outside the scope of the GDPR. The GDPR is about what they are doing and for what purposes, not whether you trust them.
RIP. "The Lion and the Cobra" is a great album IMO, although as the album cover suggests, it is intense.
Despite the headlines, the official forecasts favor a normal season:

https://www.almanac.com/content/hurricane-forecast

https://www.noaa.gov/news-release/2023-atlantic-hurricane-se...

Seems so counterintuitive when you read about these massively hot sea surface temperatures. I think the long term rise in sea level temperatures as a trend is more worrying than any one season, as the overall potential for a super-normal event is apparently rising.
She lost her son of 17 years only 5 months ago. With no additional details, I know where my mind goes.

Edit: whatever article I read said 5 months ago, but that appears to have been written some time ago. Plenty of articles stating that Shane died in Jan/2022:

https://duckduckgo.com/?t=ffab&q=shane+oconnor+wikipedia&ia=...
> It's pretty generally accepted that the correct way to do web standardization is for proponents of some new thing to implement that thing and deploy it and then once it has been shown to actually work bring a spec to the the standards folks for standardization.

- Behind dev flags

- And then wait for consensus

- And then there have to be at least two independent implementations

And only then does this become a standard.

Chrome doesn't care. They create a semblance of the spec, create a semblance of a discussion, and then enable it APIs in Chrome. And then pretend it's a standard.
I don't know a whole lot about electric vehicles, but I am already aware that fire departments struggle to put them out compared to say, an ICE vehicle fire. Often, fire departments have to just let the fire burn itself out. Fires on ships is extremely problematic, as I am sure you are aware.

likewise, the fumes released from the batteries are much more toxic than those released from gasoline. coper, cobalt, lead, and other toxic minerals are released into the air in much greater quantities. as you can imagine, this is also extremely problematic in enclosed spaces, like on a ship.
Whistleblower tells Congress: US Gov't hides 'non-human intelligence' evidence
Why isn't carbon capture just:
Take the fastest growing plant, grow as much as possible, turn it to charcoal or similar substance and bury it?
I would argue that being public is one of the ways you may be unintentionally biasing your hiring set against visible minorities. Most minority folks I know tend to avoid being public figures because they will become targets of bigotry. I’ve seen some fairly innocuous stuff get the most vile shit in comments/inboxes. I would hesitate to index for public profile knowing that being a public minority is riskier.
What's your solution then to the problem TPMs solve?
I’ve put barely any thought into it but I think a “localnet” would be better. Your usage is entirely based on calculated geoposition and the userbase is segmented into regions based on user count. More than X0,000 users in any one region and it splits to keep things small. This would be a limitation for hosting content. If you want to send a message out to another person in a different region you’d have to make a deliberate effort to do so and it will be private such as a letter would be.

Idk if that would achieve my goals and honestly I can’t plainly state what my goals are. All I know is I get tired of privileged California snobs telling me how things should be in my back 40
Sure, then you're okay with the consequences of the product not existing when they go out of business.
I think you're mistaken about what TLS does. It doesn't give a third party any authority to verify anything. It provides integrity and confidentiality to both parties to an HTTP exchange, nothing more.

A TLS client does not contain any trusted private key. You can write one yourself by reading the RFCs. The same is not true for WEI.
Plenty of ICE vehicles catch fire unattended in a garage. The 12v electrics are plenty to ignite flammable residues everywhere, or even just plastics in the body.
sure, but in practice when people use the word science (as in "trust the science"), they mostly mean research happening in academia
why not? how do you want to solve the problem of provenance? if you feel it's not a problem to begin with, then the sites in question can simply choose not to enable it. if they enable and believe it is a problem, then clearly there's a dissonance between the places you choose to visit and their goals, no?
If all major governments keep it secret, the conclusion would be that the phenomenon wants it that way. The US wouldn't be in charge. But apparently something changed.
This kinda seems like a fantastic way to implement micro payments. The site owner sets up a attestor that knows they’ve paid.

I hate Wei in general, but it really could open up control over bots and paid access.
> I mean, a few month delay on a brand new space vehicle isn't "OMG, Boeing failed!"

The hubub is not about the few more months of delay just anounced.

The starliner and the dragon 2 started development around the same time to deliver about the same thing. The first crewed dragon 2 launched in 16 November 2020. It is not about the months of delay, but the years.
This is actively being worked on. Also a big area of investment over the past couple of years has been adding support for custom native code to Expo and the Expo Modules spec. It is easier in several ways now to write your own module when an existing one doesn't work for you.
The average person in California doesn't live near wildfire areas. Seven percent of the population is in a high risk area. Last year 876 structures were lost, or damaged, due to a wildfire. Not exactly moving any needles for the average Californian.
The big problems are going to be when unstable weather patterns destroy food harvests and we end up with huge famines and wars over food crops and liveable habitats. Currently the world's food production is very much just-in-time, so there's going to be hungry people. Civilisation is only ever three meals away from collapse.
Seems like you'd have to break quite a few relational model concepts in order to retain compatibility with SQL, no?

Ordered tuples like you say, but also duplicate tuples. And null values.
Yes, absolutely, it will work fine. People on the Internet don't have that long of a memory and many people will not have seen your articles on HN. No one is going to look your site up on the wayback machine.

You can also ask dang to delete some of your posts on HN if it helps disassociate your name from discussions like these (though I doubt most people would think to look you up on HN based on a name)
TLS doesn't verify that particular software or hardware is on the other side; one could design a custom CPU on an FPGA, write their own TLS stack for it, and be able to connect to any TLS-using site as usual without needing to get those things approved.
Please don't cross into smearing one group in order to defend another. That's no way out of hell, and we'd rather not be in hell here.

https://news.ycombinator.com/newsguidelines.html

Edit: I've detached this post from https://news.ycombinator.com/item?id=36874695 because I misread the comment - see below.
I was just able to finally move my wife back to Firefox. Chrome just stopped working on her Mac. Wouldn't pull up a page. Everything else worked.

She's now happily using Firefox with a non-hobbled version of uBlock Origin.
SDXL is in roughly the same ballpark as MJ 5 quality-wise, but the main value is in the array of tooling immediately available for it, and the license. You can fine-tune it on your own pictures, use higher order input (not just text), and daisy-chain various non-imagegen models and algorithms (object/feature segmentation, depth detection, processing, subject control etc) to produce complex images, either procedural or one-off. It's all experimental and very improvised, but is starting to look like a very technical CGI field separate from the classic 3D CGI.
WEI proposal leaves open the functionality of the attester, so it’s neither correct to say this will prove requests are humans nor that it simply proves a sanctioned OS/browser.

The attester will attest whatever they want. They can evolve to match the further degradation of user freedoms.
Doesn't make them unimportant.
Thank you! I had no idea this existed in Germany, and I know some people who will be very happy because of this discovery.
We would all like bug-free hardware, but we won't get it and our job is to write good software in the environment we were given
it _tried_ to open. it did not succeed.
There are venues that are Ticketmaster specific because Ticketmaster's parent company owns the venue and some acts just use Ticketmaster because they are the most popular ticketing service. If I want to go to UFC 292 for example, I have to get my tickets through Ticketmaster. UFC isn't using some service that shows up on indiehacker
Yes, I'm a huge fan of Huggingface. There's a tendency to always distrust anybody that is a company that is trying to make money. But "makes some money with some of their product offerings" != "is incapable of producing valuable resources." It's always a balance, but I think Huggingface is doing well at both being a huge resource for the NLP community and having a viable business that allows them to keep being such a resource.
@dang, is it possible to get the title corrected?
One provides encryption over the wire (TLS), but in modern implementations (extended validation certs are more or less dead in the browser space) hardly provides the user any guarantee that the website is who they think it is.

The other provides the website the ability to ensure that the user's device is one of an approved set of devices, with an approved set of operating system builds, with an approved set of browsers.

These are fundamentally different, surely you can see that.

> similarly both can be avoided if you're willing to not participate.

Actually, no. Unless your definition of "avoided" is simply not using a website which requires attestation, which, over time, could become most of them
Commercial varieties don't normally have the IP restrictions. A few do, but most don't. However hybrids don't breed true so only a fool would save seeds. Non-hybrids breed true, but generally don't yield as well so there is a lot less profit in them (though sometimes there is more if that variety is in demand it)
Isn't it the Russian modules that keep leaking atmosphere? Maybe its time to jettison them? I honestly have no idea what the Russian modules are or what purposes are are served by them.

However, that does bring to mind something I never thought about. There is talk of privatizing ISS since NASA doesn't want to continue funding it. How do you privatize something made by multiple nations? Or is that precisely why the privatization isn't taken seriously?
And the Bolt is $19k after credits...
Anyone using a browser without this feature will end up becoming second class citizens who must jump through (extreme) hoops to use the web...

Or they're just walled off from most of the web entirely.

I use a variety of personally developed web scraper scripts. For instance, I have digital copies of every paystub. These will almost all become worthless. My retirement plan at a previous employer would not let me download monthly statements unless I did it manually... it was able to detect the Mechanize library, and responded with some creepy-assed warning against robots.

No one would go to the trouble to do that manually every month, and no one was allowed robots apparently. But at least they needed to install some specialty software somewhere to disallow it. This shit will just make it even easier for the assholes.

I also worry about tools I sometimes use for things like Selenium.

This isn't SSL.
WEI does not solve any "problem of provenance"; it's DRM for the web. It asserts things about the browser environment to the website operator, not the other way around.

Are you sure you actually understand these two technologies (WEI and TLS) sufficiently to make these claims?
> All arguments of the form "where is the evidence" are moot at this point, as there is a mountain of evidence

Sorry, I haven’t seen a single decent photo or video—everything is always blurry, distant, or ambiguous. And this is after a decade where virtually everyone is constantly carrying a camera on their person.
Answered in detail here: https://news.ycombinator.com/item?id=36881502
So they are forcing you to use their product. Outrageous.
Nope, it’s a serious project; I mostly made it for personal use during my last semester of college. I rewrote it a few times and packaged it up because I think it’s genuinely useful. Langchain gets you 80% of the way there but you run into issues with it very quickly.
And SpaceX Crew-1 was originally supposed to fly in November 2016, and was then delayed a year, and then another two years, and then another year, finally flying in November 2020.
Fair enough—I was too lazy to click through to Sematic's site and see that it is indeed FOSS!
For production it's highly dependent on the business needs. But restarting the entire estate every day seems a big enough hit to capacity at the very least that may already be prohibitive without any further consideration.

Not to count that would require every service to be prepared to be restarted daily, which could require a more complex system than you'd need otherwise.
I think it goes both ways. Some do spend insane amounts of time on individual hits or compositing sounds to various functional points.

You can also get the same thing looped 4x that has no variation. Hard to fault either side. Musicians have to get work out rapidly and then occasionally something gets legs.
Mastodon and Lemmy are turning into tiny DDoS botnets