skysight-inc/HackerNews huggingface dataset:
My meditation teacher described two types of meditation practices designed to train your mind to be more loving and compassionate and therefore happier. I'd like to share a little about them in the off-chance they're beneficial.

One type is to envision the pain and suffering of people and respond compassionately in a way that eliminates their pain and suffering. When I was suffering terribly myself I constantly wished for others who were in similar difficulties to be freed immediately. This actually made me feel a lot better. The problem is that for some people dwelling on suffering is a real bummer.

The second type is similar to the text linked above: cherishing all beings as they are, as if they were your very children that you love so so much. Lately, my meditations have started to transition toward this type and I've felt spontaneous feelings of bliss and love toward others that grows the more I do it. And this kindness is naturally starting to come out in my behavior and interactions with others.

In both cases, the meditations develop "bodhicitta", which is a word that describes the attitude of wishing others well. It's said that this attitude, when trained, nourished, and grown is the very cause of all happiness and when perfected causes happiness to bloom uninterruptedly. Therefore, it is an extremely beneficial and powerful practice.

It's fantastic to see this text linked on Hacker News even without much context. Wishing you all well!
Proof of the fact that this works is that D does exactly this.
For a recent and similar attack at scale, the authors of the botnet software were from an American security company who sold DDOS mitigation solutions (https://en.wikipedia.org/wiki/Mirai_(malware)).
The PIN is checked by the local device. It never goes over the network, and the device can limit the number of PIN attempts to a very small number, because the only way to try PINs is to have access to the device.
CS2 looks and feels wildly outdated for 2023.

I can’t fathom who could be interested in it outside of peer pressure or nostalgia.

I could barely finish one full round. Haven’t touched CS in years but did enjoy 1.5 and 1.6 quite a bit back in the day.

Just move on.
This is an interesting direction. It's worth noting that biometrics, like fingerprints or facial recognition, aren't really 'secrets'. They can be observed or leveraged without a users knowledge or consent, and in many ways function more like a username than a password.
I'm guessing you would do this in advance - "pay attention to tech news next week - our botnet will unleash hell"
We never really used it, aside from some niche use cases. It’s always been Java primarily.
I'm not sure that's true. I think that large software packages like photoshop have become way more available for people to pay for with subscriptions. I never paid for it and never would pay thousands of dollars for it, but now it is included in a $30 a month subscription from Adobe that I got mostly for Acrobat.

The only practical way for a high school student to get photoshop was to pirate it when I was a kid. My parents weren't going to shell out thousands of dollars for something like photoshop or autocad.
Most thugs don't have physical access required to exploit this. They're on the other side of the world and are doing credential stuffing attacks.
Damngood.bio – generate a stereotypical Twitter bio
Then I guess we should include every study participant as an author across all disciplines. 200 participant study in psychology? 200 authors on the paper.
> Seoul is also clean with good subway coverage, but Itaewon is too hilly if you like cycling and it takes forever to commute if you live on the other side of the city but still want the food in Itaewon.

To be fair

- There's electric bikes instantly rentable all over the city that are perfect for dealing with hills

- Itaewon is only a tiny part of the city and the huge majority of the remainder isn't nearly as hilly

- Except for Middle-Eastern (and maybe traditional "US") food, all other kinds of cuisine have at least as good if not better options outside of Itaewon
> and who is going to do it?

One of the big-enough generative/LLM AI users would be my guess. OpenAI for example seems to be even going towards making it's own chips as an alternative to Nvidia things being too expensive.

> are they also going to convince the entire industry to switch from CUDA.

Statistically unlikely, for example ARM definitely disrupted MIPS in several embedded networking niches uses, but didn't convince the entire industry to switch from MIPS.
That and construction slowing down. I see a lot of construction guys downing Monster energy drinks. TBH I'm always a little surprised -- but it does give you energy when you need it.
And then that can be abused...
>...while there is an open-source library called MoltenVK that provides a Vulkan implementation on top of Apple's Metal graphics API, it still lacks some of Vulkan's advanced features.

https://www.macgamerhq.com/opinion/macos-metal-games/
Yes, why would you not?
NHK Web News Easy is pretty good. I built a simple browser extension that would hide the furigana and then show it when you clicked on it. If you're interested, I could dig that up.

Ultimately, I got sick of splicing together different home-grown tools and different web sites that I started to build my own to provide a more integrated learning experience that adapts to how students want to learn.

I am working on a Japanese course with a well-known Japanese teacher, and we're hoping to start rolling that out soon. Feel free to DM me if you're interested in that or want to chat about learning Japanese.
That's the great part.
I don't think they do. There are a variety of DDoS attacks which require more expensive computing to detect
Another classic uncurated one: Jean Piaget in his home office https://www.instagram.com/p/Cp_Oeb_PLji/
To add, it is pretty poor there is no FAQ linked to from that post to answer basic non-technical questions as to how this is intended to be used.

I assume as a technical person, the answer is I should have a backup device with a friend and/or store my passkeys somehow on my Apple or Microsoft or password manager account as well.

But it needs more explanation in detail from Google!
> The backing of that number was testified to, under oath, to Congress, which by itself is a felony.

He did not testify that the number on the website was real. He testified to the existence of the insurance fund and the single biggest daily drawdown from the fund.

"which by itself is a felony" - wouldnt you mention that as the prosecution??? Or are they aiming for a mistrial on the grounds of incompetence?

> Prosecutors haven’t mentioned it, but Sam Bankman-Fried would go on to testify under oath in front of the U.S. Congress in May 2022 that “the insurance fund has paid out a net total of $9.5 million” in the preceding three years, and that “the single biggest daily drawdown from the FTX.com insurance fund was $4.7 million.”

Actual testimony. https://www.congress.gov/event/117th-congress/house-event/11...

> Finally, prosecutors questioned Wang about the FTX “insurance fund”, which was ostensibly supposed to protect both FTX and its customers from trades that went badly even more quickly than the exchange’s risk engine could account for.

> One such example was in 2021, when a trader was able to exploit a bug in FTX’s margin system that allowed them to take out a massive position in the MobileCoin cryptocurrency. They were eventually liquidated, and FTX suffered a loss of “several hundred million dollars,” according to Wang.

The losses to the exchange from a failure of the code should be borne by the exchange not from any "insurance fund" whos purpose is the make good slippage losses for customers. There are grounds to ask why they passed the loss off to Alameda (in which case FTX co was defrauding Alemada co for an FTX mistake).

I see the narative that the prosecution is trying to push, but unless SBFs laywers are idiots they should be pointing out that they are trying to connect two distinctly different dots.
Unleashing Vision with Prototyping
>Nothing will be safe any longer. Actors will cut pipelines. Internet cables. You name it.

Among the first things the UK did in WW1 was to cut Germany's international telegraph lines, while the UK's remained intact because it had built (and, more accurately, had the ability to build) the All Red Line. <https://en.wikipedia.org/wiki/All_Red_Line>
Some folks have more faith in their ability to derive proofs than write simulations and vice-versa.
Funny some guy on HN was just arguing with me the other day that the oldest Firefox bug was 11 years old and that they fixed over 1,000 bugs in their last release. I tried to search their bug tracker to see if this was true but the web server doing the searches was unresponsive.
"To use passkeys, you just use a fingerprint, face scan or pin to unlock your device, and they are 40% faster than passwords — and rely on a type of cryptography that makes them more secure. "

Who wrote this sentence? It's just a mess.
Don't they need both physical access to device + fingerprints/face?
I was interested until I noticed that the testimonials appear to be just unsplash stock images. And I can't spot any of the people on LinkedIn.

Are these real testimonials?
The an older version of the same talk. Things have moved a bit since, Java 21 and such, but mostly the same.
In case od data leak - you cannot change your face, or fingerprints. You can change passwords though.
You go through.... account recovery?

Like if you lose your password today?
Probably a stupid question but why can't photos of my face be used to defeat this?
Those damn obscure ARM processors. Nobody uses those!
These things aren't that expensive: about $1m - $3m for a top of the line one, and cost about $20k/month to operate on top of that. Depending on what kind of MRI you want, you can pay less than $200k. You can find used/refurbished GE Signa LX 1.5T's for ~$100k for instance.

But let's assume you've got a million dollar top of the line model, the expected lifespan is 10 years, and you're using it 20 hours / day, then you need to account ~$100 per hour of usage. That's not a crazy amount in the medical world. Personnel costs of those operating / using it are going to outweigh the cost of the machine itself.
In fact, it's the same set of stock testimonials as https://rivalhunt.co :)
I don't know what the "Top 10 Movies" are.. Is this just, like, box office sales? How could one even judge one set of ten movies against another?

If the problem is simply, "I have to look too hard to find good things," or "ugh, they are making another Minions movie," then, congratulations, you are a hipster. But that's not really a problem, you just have good taste!
Java8 was at least a decade into generational and concurrent GC. It does STW once in a while though which may be what you meant.
The London Underground used to have a freely accessible API for real-time data as well, it was useful to curl it to plan when to leave the house :) Sadly no longer.
Never. You can pry my passwords from my cold, dead hands.
also, "ah yes, a several digit pin, famously more secure than a same-length password that adds even as little as letters".
Wow, this brings back memories. Years ago, the persistence of this particular bug led me to believe that Firefox was "buggy" and "messy". It broke any perception in my mind that Firefox is an elegant tool. It hit whatever that cognitive bias is [cit needed] that tells us "if it can't get simple things right, what else is it getting wrong?" or perhaps "beauty good / ugly bad".

I'm older now and have Experience(TM). I know that:
a) many expensive commercial tools are far less elegant and just plain broken (looking at you Autodesk AutoCAD and Revit since 2010s)
b) my own idiocy/ignorance has larger-than-expected extents

I wonder if I'm just jaded. Is it correct to believe that Firefox is "good" software? Is it what it is designed to be?
Passkeys are typically synced to cloud storage.
Hey all! Just wanted to say that I’ve updated the app to version 1.2.0. I added support for turning off the sound after some time, fixed the bugs y’all reported and updated the sleep tab UI to be more intuitive. The app is also now available in all countries and there is now a week long free trial for the monthly subscription. I appreciate all of the great feedback and thank you to all of you who signed up and tried Timbre out!!
Another good one is Bell Atlantic's support number which is strangely still connected even though they merged to form Verizon in 2000. 570-387-0000.

"Thank you for calling Bell Atlantic. Due to an emergency condition, we are operating with a reduced staff, and you may experience delay."

Waiting on hold is like the forever traffic jam of Doctor Who.
The secondary problem to the high resource requirements, is that I think once you ship the model people can just basically pirate it right?

I’d be surprised to see the models go the ground breaking commercial AIs shipping but then I’m surprised at how much we’ve gotten open source anyway.
API Improvements for working with files in the browser
The Database for Bootleg/Unauthorized Video Game Consoles
Here you can find thousands of Atari VCS/FC/NES/MD/SNES/GB (and more) clones, from historic bootlegs products to modern legal ones. Soft-emulator based multi-platform consoles are not supported.
That is only guaranteed to work if subsequent tosses are independent of each other. TFA suggests that they are not.

[edit]

If you always start with the same side of the coin face-up, then the tosses will be independent of each other, but if you e.g. always flip it once or always keep it the same before the next toss, then they are not.
If you can recover an account without the passkey, how much security is it really adding?
They don’t have to be though, a yubikey can be used as a passkey as well.
The way the problem makes sense to me is this.

Doors: Goat Goat Car

You pick a door. Monty shows you a Goat. You switch or stay.

Monty will never show you the Car before offering a switch. He always shows you a Goat. It doesn't matter which Goat he shows you - it's just "not the Car".

If your first choice is a Goat, switching will win you the Car. If your first choice is a Car, switching will win you a Goat. You have a 2/3 chance of picking a Goat, so, effectively, you want to pick a Goat so that you switch to the Car.
Passkeys really aren't biometric authentication per se. If you use TouchID, for instance, Google isn't authenticating you based on your fingerprint. Rather, the fingerprint merely unlocks the cryptographic key pair that's then used to authenticate you.

I use Yubico Security Keys myself as passkeys. They're protected by a 6-digit PIN. But that PIN is strictly local to the device, meant to prevent snoops from logging in just by having physical access to the device (the keys get blown away after 10 consecutive unsuccessful PIN attempts). When I enter the PIN, the keys unlock, and it's those keys that get me into my Google account.
I'm about at the threshold for wanting to de-google my life. Do you have an alternative email provide you recommend?
Passwords are also not entirely secret, as they're shared by definition. Passkeys use public-private key crypto, which is more secure in every way.
Just like Sony, Nintendo and Microsoft.
does this work in conjunction with multifactor authentication?

like biometric + one time passcode?
Not just typically - on iOS, you cannot use them at all without iCloud enabled.
As usual, the multi-device/multi-OS and recovery scenarios are simply just glossed over. I'll stick with a password vault I can sync to multiple OSes, thanks.
I think you’ll still need a password on your account for cases where no passkey is available, and possibly for other scenarios of heightened fraud risk. That’s why the setting they’re describing in the blog post is named “Skip password when possible”.

Disclaimer: although I worked for Google many years ago in a role entirely unrelated to Google account authentication, I have no inside info on this announcement, could be wrong about what I say in the first sentence of this comment, and am not speaking for Google here.
I don't want to use it, I don't need to use it, I don't consider it "great".
They can be, but most people will use what is built into their mobile ecosystem of choice, with built in sync/backup. Physical secure authenticators in general use will likely remain rare, but are still useful for use cases where passkeys that can be synced or migrated are not secure enough (and you want access governed with a simple physical device).
What a gorgeous web map! As a GIS Analyst that occasionally gets to work on web mapping technology, this is quite inspiring!
I've never seen an online store ask for my address before I'm in the checkout process. The only exception is when I check to see if an item is in-stock at my local store or if one-day shipping is available.

The location detectors are notoriously bad. I'm either placed in some town in Washington (multiple states from me) or somewhere else that does have different local tax than my part of my state.
Never going to happen, after all Proton emulates Windows.
Do you specifically activate it?

The main functionality I get out of copilot in vscode is autocomplete on steroids, so it's getting all code as I write it. I don't use the question based generator most of the time.
What happens if you forget your password?
Yeah, because good old passwords are safe against thermo-rectal cryptoanalysis.
A FAQ at the bottom answers some questions https://safety.google/authentication/passkey/ .

Seems that the recovery if you lose the devices with stored passkeys is still using a password.

And will it be possible to use software keys and backup them to wherever I want and use them with Google or is it going to demand TPMs or that I keep the key in a secure vault in my phone or something or the sort?

There still isn't a way to use this on desktop Linux right?
Not in the sense of the common uses of Social Media. I see it as curious discussion of interesting topics with some guidelines to try to keep it from going off the rails most of the time.

Such guidelines do not exist in Social Media and Social Media sites use algorithms to try to increase engagement and advertising and additional use beyond-dystopian levels of tracking and psychological warfare against people. Social Media sites curate what people see based on their personality and psychological profile to steer public sentiment and beliefs. These profiles are learned from quizzes, mini-games, questionnaires, clicks, likes, dislikes, comments, etc... all masqueraded as fun anti-boredom dopamine driving widgets.
Ah right, account recovery. The one that tells me the only way to sign in to my old Google account is to use a phone that no longer exists.
There's nothing about the PKI aspects of passkeys that requires you to buy into a vendor ecosystem and have them on device, right? They're just key pairs, but I guess it's a good as chance as ever to ram through device attestation.
I would argue that much of Microsoft is built around legacy applications and code that prevents moving to alternative solutions. A lot of companies do not want to spend the time and money to pivot, not have the labor to do so. The true tech debt is a hidden cost where change is a visible cost.
RP1 is a peripheral controller, designed by Raspberry Pi for use on Raspberry Pi 5. It connects to an application processor (AP) via a PCIe 2.0 x4 bus, and aggregates many digital controllers and analog PHYs for Raspberry Pi 5’s
external interfaces. In the case of Raspberry Pi 5, the AP is the 16nm Broadcom BCM2712.

https://datasheets.raspberrypi.com/rp1/rp1-peripherals.pdf
It would also be weird to me for them to not have linux ports of their engines after blogging about the performance and bug squashing benefits of doing so for previous game engines.
It would have to be scanned by a device that has already logged in, basically.
Look for processes running on your machine. If you don't see any suspicious process except the game itself (and the game's process or or processes are running only while you're playing) then only the game itself could be logging your keystrokes. Which means that, if while the game is running you don't type sensitive information, you're safe.
> What is the account recovery process if I’m locked out and don’t have my phone, say it’s lost or broken and I can’t verify my identity?

> You can always fall back to legacy authentication options such as passwords and traditional 2-step-verification. In a case where you can no longer remember your password, you can also go through Google’s Account recovery flow. We encourage you to add your email and phone number to ensure you can always access your account.

> https://safety.google/authentication/passkey/
I could view it as a news aggregator with a comment component.

Tomato, Tomatoe, I supposed?
Most "thugs" interested in data sit in windowless offices in Manila or Delhi and effortlessly spam phishing and other attacks on weak credentials; they do not roam the streets looking for face-unlockable devices to exfiltrate. That is to say, almost all attacks are remote. And just because someone walking next to you on the street might have a black belt in martial arts, does not mean they're going to turn you into a pretzel on sight.

The reality is people are not good at creating, managing and using credentials well - and this is an existential risk for most users not realized until it's possibly too late. Any efforts to assist, support and otherwise absolve users of credential responsibility is a net win for infosec (though likely a loss for privacy).
More a comment on the main page.

Show some code or small example on that main page. I have no idea or sense to compare it to graphql without some small toy example.
No, the house on to the left is 1 East Clay street, and the house on the right is 1 West Clay Street. Directly across from 00 Clay Street is a street. On either side of that street are 2 East and 2 West respectively. 00 is the only house not on East nor West Clay Street, but just Clay Street. It's at the origin.
I don't think there's any claim you could make about the language model, factual or otherwise, that would resolve my primary hangup. As a non-native learner of a new language, I do not have a trained bullshit detector for that language. I cannot, by virtue of still being a novice, determine if the sentence structure sounds "weird," and I certainly can't determine if that weirdness is a limitation of the language model, some hallucination, whatever. So, by learning from that model, I would pick up any mistakes it makes and fold those into my own speech patterns.

If I'm going to pick up speech patterns at all, I would really rather pick them up from a native speaker of the language, since at the very least I'll make the sorts of mistakes that a human might make. I want to sound like human, not like a language model. Language models sound like the average of several humans at best, and a strange program trying to imitate human speech at worst.

Once I'm fluent in a language, enough to recognize when the language model itself is probably making a mistake, then I might become comfortable using it. But not as my first introduction to the nuances of the language, when I'm still building my own internal representation up from scratch. After all, my goal is to converse with other human speakers. Shouldn't that be my personal training corpus? I'm a neural network too, and I don't want to feed myself bad data.
No, but it has more iOS and iPad devices than Valve will ever ship SteamDecks.
You said "they do not store inputs / outputs in any database", I disproved it, and you even admit they do in this message.

It's not private and it's not "complete control over your data"