skysight-inc/HackerNews huggingface dataset:
Some comments I have on this post:

> Worse yet, I know that Cloudflare knows I have those certificates. Why? Because it asked for them!

Not really. Cloudflare notices your browser has TLS authentication available and asks you for it. That's really annoying, but part of the protocol spec. Your browser won't send this information unless you pick a certificate and hit OK.

Disable your ad blocker and you'll find that many trackers will also ask you to identify yourself this way. It's really annoying, browsers need to design better UX for this type of authentication.

> · MAC address of my machine that I have previously used to access this site

How does it gather your MAC address? Did you disable IPv6 Privacy Extensions? Unless the website is sitting behind the same switch as your computer or you run some kind of native application that sends the MAC address, websites can't read the MAC of your network interface. Enable the MAC randomisation that's present (sometimes even turned on by default!) in every modern OS if you consider the local switch or WiFi network to be a privacy risk.

> Will I be able to create and sync these passkeys myself?

Yes, assuming they follow the standard

> Can only certain types of software use passkeys? If so, who decides what software meets this standard?

I don't really understand the question. Any software supporting passkeys will be able to prompt you for generating or using a passkey.

> Will I only be able to generate passkeys on a device with specific hardware/software requirements like a TPM, DeviceCheck, or Integrity API?

According to the spec, keys can be stored in software no trouble. Websites and apps can ask for securely generated keys, but I don't think those are all that common. Hardware can also be faked relatively easily in most circumstances.

> Can I, at any time, export my passkeys from one service provider and switch to another provider?

Ask your service provider for export options. Most likely, you can't just dump the keys and import them elsewhere (that would defeat the point).

> If a passkey is invovled in a suspicious event, will that suspicious mark propogate to any other device that uses that same passkey? Do devices that contain suspicious passkeys also get marked as suspicious? If so, would that impact the ability of that device to access other independent websites?

That depends on the software using the key for authentication. Maybe?
Is it "having a job" to be required to say "I'm sorry you feel that way, but I'm dedicated to meeting your needs. Let's see what we can do to help you!" in cheery tones after the customer says "you stupid [racial slur], your mother should've aborted you, why can't you get it through your [explicitive] [racial slur] head that I want [thing that was never mentioned, and is, in fact, illegal]"

THAT is the forced courtesy we're talking about.
In college I made a now defunct iOS app [0] for transferring between Spotify and Apple Music.

The bad news is access to the Apple Music APIs requires a paid Apple developer account, so any self-hosted solution will cost you $99.

I’ve heard of previous users of my app having luck with SongShift [1].

[0]: https://github.com/AFRUITPIE/Convertify Note that the code and on-device processing is very much college quality (meaning bad)

[1]: https://songshift.com/
But today everything but Firefox is Chromium.

That's a little different
And then there is air ambulance for remote area's or serious situations which need taking to a speciality hospital, but I would have thought the US to have had more remote area's and thus longer wait times for an ambulance in remote areas.

On the point of remote area's the RAF will fly helicopters (typically Seakings) over popular area's like Mount Snowdon in Wales, to ping peoples phones and get a handle who is in the places with no cell tower signal.

Quite surprised to see the US beating the UK on this metric!

And yet you see these secret service vehicles turn up out of nowhere on youtube video's and people still disappear never to be seen again. Most odd.
I'll admit that when they say "efficient" that word is doing a lot of work.

Disincentivizing private jet usage simultaneously incentivizes alternatives, the most analogous of which is buying at ticket on a major airline. Those airlines operate at economies of scale and are far more efficient in their use of fuel/person/mile than private jets. Less analogous alternatives would be setting up a remote meeting or phone call.
There are US states more populous than some European countries. Maybe a city can’t do it, but plenty of states could. It’s just damn expensive to try.
Physicists open new path to an exotic form of superconductivity
And are they offering them at competitive rates or are they all mysteriously making enormous profits despite the "competition"? Because in much of Europe it's definitely the latter that is happening. There are lots of banks but evidently they are not really competitors.
I'd love to see this on the Play Date console. https://play.date
The existing behavior is extremely unlikely to be helpful, even accidentally. I will be shocked if anyone actually hits a problem related to this change. It may well fix more bugs than it introduces.
Unless they're going to trust my own attestion provider (unlikely, and then what's the point?), I would have to buy another computer to use online banking. My computer does not have attestation. I'm not going to move to Windows just to use my bank's website (and I think I saw Windows 11 requires a new computer anyway, exactly because of this attestation stuff?). All of the programs I use and workflow are on Linux. I can't virtualize it since that's the point.

Attestation requirements from banks would mean I must run an OS with adware and spyware built in to use online banking. It's not (just) about browsers.
> They are trying to limit being perpetually sued for the same issue.

Why shouldn't they be perpetually sued for the same issue, until they've fully paid their debt to society, and every person they've harmed is made whole?
I think the most compelling feature behind Discord is having text and voice/video channels. By allowing people to just jump into a channel instead of having to call individual people or scheduling a call, it would allow remote teams to function pretty easily.

Scheduled meetings become "here's this persistent channel for our team, this meeting calendar entry just links you to join that channel"
You're right. Why should any American ever work in any job that doesn't favorably compare to SWE salary and working conditions? Everyone should quit their jobs and become a SWE. It's just that simple, right?

/s
No, social security still is in surplus (the general budget owes it money because congress borrowed it). A lot of the money that is classified as "federal debut" is owed to social security (which is why we are in a situation where the USA owes a lot of federal debt to the USA).

In 2030 something, it will run out of surplus and become insolvent without actual injections from the general budget or via some other change, like removing the applicable income cap. Then you can say "SS is accounting fiction, I told you so", but in 2023 you can't say that yet.

Because SS and medicare are paid for via specific payroll taxes labelled as such on your paycheck (rather than any other tax levied by the government), the books have always been kept separate.
This makes me think of a gag from the Simpsons, where the only dialogue coming from a ham radio was "I have a ham radio"
Funny, I was building fiber optic switches around 2010-ish. I'm not talking one of those cute little 48 or 64 port things. I'm talking 250+ inputs and 250+ outputs, where each input is able to route to any output port independently, all with under < 4dbm loss through the optical core, and a switching time of something like 1-2ms.

IIRC, these things were like 18U beasts. I think 4 of them fit on a standard rack? One of the reasons we employed interns was so we'd have people to plug the damn things into the calibration and diagnostic rigs if necessary. Think about it: each LC connector has to be cleaned, then plugged into the correct port, for over 500 ports. If cleaning and plugging in the connector takes, say, 2 seconds in total, that's 30 minutes just to get it hooked up to get checked out.

Besides getting to play with high powered lasers and work on exotic hardware pretty much nobody has ever seen (which also sold for more than my annual salary at the time), I frequently got to work in one of our clean rooms (my sinuses loved me at that job lol), work with hardware and mechanical engineers, and usually had to figure things out on my own, because nobody else was building these things at that scale and there were no fine manuals to read.

Fun times.
DayStar Motor Homes Inc
MacOS pulled it for me, refused to open it

Replaced it with NightFall https://github.com/r-thomson/Nightfall
> it's a 300mm fab.

300mm is larger than a vacuum tube!
Preventing XSS Attacks Using ML
I can confirm that on mobile (Beeline) internet I can not connect to my WireGuard server anymore.. looks like it’s time to migrate to shadowsocks
That’s science :). We have now established many strategies for context-independent effective prompting via typical experimental research - see https://help.openai.com/en/articles/6654000-best-practices-f...
I do but ordinarily for services that are not anonymous in the first place. Banking, ride-sharing, so on.
I've started using the web in 1996 when I was in my early 20s, but, on my phone, the border around the images was so incredibly small that I couldn't see it until I went back and looked very closely.
Simon and Schuster is now owned by a private equity firm
Their $10s of billions is not a vault full of gold coins in their basement, like Scrooge McDuck has. It represents companies and investments that are creating jobs and wealth for lots of people, probably many of the people who post here owe their job to a billionaire. Those things would not exist if "net worth" were somehow capped at $100m.
> It's not like it's a huge sacrifice on my part. It's just a little reduction in convenience. No big deal.

Sure, I get that. I just feel like it's only a little inconvenience now, but in a few years it will be a big one, and so on. After all, the US is _already_ way behind the rest of the developed world in mobile payment/banking tech.

> The issue is if sites require me to use specific browsers, to not use specific extensions, to not be able to modify the browsers, or to adhere to specific requirements in terms of the OS I'm using.

Ah, I didn't think about that angle. That would be pretty draconian. I foresee a shift to dedicated embedded apps for that, like a restricted VM inside of a browser tab. We'll see!
Thinking back, Zoom had optimized its codec to provide lower latency than WebEx. The lower latency caused a noticeable improvement in user experience. Combine that with the SMB-oriented pricing model that had a free tier and I think that’s all they really needed.
I don't think it's infuriating that OpenAI tries to discourage people from getting medical advice from an LLM that was not designed to provide it.
Thought: Technological Freedom Index
Right now, people live at the boundary of nation-states, and we have democracy index to evaluate if a nation-state respects the freedom of its citizens. Examples of oppressing freedom: intimidating dissidents, media censoring, etc

People will live at the boundary of multinational tech companies in the future. Should there be an equivalent technological freedom index that evaluates if a tech company respects the freedom of its "citizens"? Examples of oppressing freedom: preying on privacy, content censoring, etc
Open Source doesn't mean free. It costs a lot of money to run models and keep models up to date, and maybe a "good enough" model runs relatively cheaply, but there's always going to be a "state of the art" that people are willing to pay for.
There is some justice in that the young will get old and experience the same system they helped perpetuate. The young should be willing to hire the old, or else they themselves will become old and find that nobody is willing to hire them.
This is kind of misleading in its own way, though? Social Security is also where a large portion of the revenue comes from, per https://www.ssa.gov/oact/STATS/table4a3.html.

I suppose you can make some arguments that we make money from military. But it always feels weird to say we need SS cuts when the data equally shows that we don't. Uncap the max on SS tax, and it would look hilariously fine.
My words ... whole air travel is 1.9% of emissions, animal ag is 15%, aprox?

Phase out subsidies for fossil fuels, stop subsidies for animal agriculture (redirect them to regenerative ag. and vegetables), start massive afforesting. Right?
Getting to indulge in unethical behaviour (like private jet use) is not the kind of reward we should be setting to steer people.
Show HN: Agentflow – Run Complex LLM Workflows from Simple JSON
So, it feels like this should exist. But I couldn't find it. So I tried to build it.

Agentflow lets you run complex LLM workflows from a simple JSON file. This can be as little as a list of tasks. Tasks can include variables, so you can reuse workflows for different outputs by providing different variable values. They can also include custom functions, so you can go beyond text generation to do anything you want to write a function for.

Someone might say: "Why not just use ChatGPT?" Among other reasons, I'd say that you can't template a workflow with ChatGPT, trigger it with different variable values, easily add in custom functions, or force the use of custom functions for steps in the workflow.

Someone might also say: "Then why not use Auto-GPT or BabyAGI?" Among other reasons, I'd say you can't if you want consistency because these tools operate autonomously, creating and executing their own tasks. Agentflow, on the other and, lets you define a step-by-step workflow to give you more control.

I'd like to do more with this, including adding more custom functions, and more examples, and more ways to trigger workflows (such as in response to events). But first, I want to make sure I'm not wasting my time! For starters, if something like this already exists, please tell me.
My life has been just fine without next-day deliveries. It has also been fine without being the master of a slave plantation, or having a live-in servant that works for pennies and sleeps in a closet, or a number of other things that would make it more comfortable and convenient at the expense of others.

---

(It does, unfortunately, depend on a large number of people growing my food, making my clothes, and soldering my electronics largely being treated like shit, but none of those are immutable facts of the world.)
Sure, let's compare it per station. According to Wikipedia, NYC has 5.2 million daily riders and 472 stations [1] for an average of 11,000 riders per station per day — over 26x more than the Las Vegas Loop stations have been accommodating. Even if you adjust for population differences (LV ~600k, NYC ~8m) the Las Vegas Loop does significantly worse.

[1] https://en.wikipedia.org/wiki/List_of_New_York_City_Subway_s...
"nuance" and "exactness" may be decreased, but the ideas remain true
I use a VPN 99% of the time and I definitely see more cloudflare on my systems (as opposed to when I'm bored and surfing in the library) and see the "checking" screen. It does seem to be a lot better than last year though when it seemed I was getting a captcha every time I turned around
Fair use specifically has a clause about disrupting the market for the original work lol. Being transformative isn't the only aspect of fair use, and even if training is legal, you're still a douche for training on art without permission.
I'm well into my 30s, in the top few percent for income in the US, and live in California (one of the highest tax states), and I happily pay them. I'm alive today because of their benefits, and I'd be the worst kind of hypocrite to pull the ladder up after me.

People's objection to social safety nets mostly isn't their desire to keep their money. It's a perception that the people who need those safety nets are lazy bums who don't deserve help. That's a particularly common perception among hard-working professionals, whose logic is "I worked hard to get where I am, so if others worked hard, they wouldn't need help". What they miss in that analysis, of course, is that their hard work combines with talent, luck, privilege, and health, things that many people who suffer lack. As a relative newcomer to the economic elite, I find it pretty distressing to hear how wealthy people talk about the poor when I myself was homeless less than five years ago.
Yup, nostalgia projects often don't work because people don't really want the exact same thing as before, they want something which realises the potential of what there was before.

Good example is the game Minecraft - when it was new, everyone liked it for the sandbox nature and the endless possibilities. Now that most of the creative things in the game are either dead or stagnant, and the developers are actively working against the game's potential, now it feels like a dead end.
It's similar to the web in this regard.

Nostalgia projects should just start from the old principles and build something which is an improvement over the things we had back then and which we have now.
For almost all (99.999999%) intents and purposes git consists of the following commands: pull, push, merge, commit. If you are the mythical 10x developer, the add rebase and submodule to the list. Everything else is just fluff. If you use anything else, it ends only in 2 hours of agonizing googling, with shaking hands before each new commands you run trying to undo whatever arcane stuff you just did.

The core of git is cool. Few simple commands, easy to use. The remaining stuff is something only a mother could love.
A more generalized approach than encouraging them is simply telling them who to model themselves after.

A 10 year graphic design artist talking to another career graphic design artist will be opinionated about selecting a specific font for example. But an persona-less AI trained to be helpful to all people should not be so opinionated, since a beginner might be mislead into thinking there's only 1 font for their situation, rather than an assortment of guidelines and intuition most professionals have.
I always assumed that xkcd strip was a parody (who didn't do that at least once after all!), but some people seem to consider it a literal advice...
"WHEREAS, NightOwl app enables Users to share internet traffic by modifying their device’s network settings to be used as a gateway for internet traffic. Additionally, the User’s device acts as a gateway for NightOwl app’s Clients, including companies that specialize in web and market research, SEO, brand protection, content delivery, cybersecurity, etc."

Fuck that with a chainsaw. Burn it. Burn it with fire.
The market was pretty well primed pre-COVID. We were already doing a fair number of video calls at work, webinars (though usually just with slides) were very much a thing, and I guess a fair number of people would at least sometimes use Facetime to see the grandkids or whatever. As you say, webcams were getting pretty ubiquitous and mobile networks were improving.

When everyone switched to more remote interactions during the pandemic, it was natural to just really ramp up the technology they were already using and a lot of people were upgrading their video and audio gear to make videos anyway.

Not clear to me what is next. I'm pretty sure most people don't want a more immersive experience most of the time and some percentage of people resent peer pressure to be on video as it is--as noted in various comments.

ADDED: I do agree with one of the points I think Ben is making. There is still a lot of UX work that could go into simplifying screen sharing and other, for lack of a better term, multi-mode interactions.
And the implementation behind those abstractions tend to be of really good quality. Thanks to the borrow checker and the scrutiny around the unsafe keyword.

In other words I am more willing to trust abstractions over tricky problems in Rust than I would in other languages.

Just for a second, try to imagine a generic memoize in C++.
My Big Regrettable Lockdown Project was to use Golay codes to try to get a bit more range from cheap non-LoRa RF modules. I didn't really find anything else suitable for the chips I'd be using, that was easy enough to implement and optimize without real math skillz. I copied the code from Wireshark, but I remember it needed some work for 8 bit chips or something.
Love this one! It's such a crap shoot with synthetic wear, some stink as soon as you put them on while other are actually end up almost as good as wool.
Each Tesla car carries 100 TFlops, same as PS5 .
To that 13% add the 5% spent on veterans services.
> what's the actual issue you want capitalism to solve

Seeing as it's more or less the de facto world order it should ideally solve global alignment for the long term wellbeing of Earth-borne life
I think the fundamental flaw of this paper is that it's _starting_ from the assumption that it can't reason and taking any demonstration of flawed reasoning is evidence that it can't reason _at all_, but there are many examples of ChatGPT output that I would argue aren't possible _without_ some form of reasoning and even a _single_ example of that is proof that it can reason, no matter how many failures and counter examples there are.

It seems to me that focusing on understanding exactly how and under what conditions it can and can't reason would be a much more interesting paper than making a blanket, totally unsupportable claim that it _can't_.
Why not tax all fossil carbon fuels with a universal refundable tax of $1/kg? That way you wallop the private jets at ~$1000/hr and more importantly you also discourage the real culprits, Americans driving around in pickup trucks, with a smaller but still effective incentive. Plus, being universally refundable, it also acts as a sort of UBI that puts money into the pockets of people who don't use fossil fuels.
Hey Rich,

Will Svelte or Sveltekit get incremental builds like NextJS?
Almost, but it's more like throwing ideas with an expected outcome at a non deterministic black box and hoping for the best.
Shockingly naive take.
frankly, the ads are the least bad part. at least ads are honest in their intention
As the parent pointed out, banks don't care about customer access or even customer security per se. They care about not getting fined or accused of not being "as secure as possible." You and I know that using SMS for 2FA is a non-great idea. Banks mostly know it too. The reason they continue to use it is because regulators will not ding them for using it, and there's currently no better alternative that the average muggle customer can handle.