skysight-inc/HackerNews huggingface dataset:
They broke literally all my hardware with an upgrade path. I had 6 or so sonos speakers which are now just pretty white bricks. Theoretically some of them will be usable if I update the app to the new sonos app but when I try that it (firstly) says some of them aren't compatible with the new app and (secondly) just plain doesn't find any of the others. And yes I have tried connecting them directly so I have a hub with just my wifi router and the sonos device connected via ethernet and I'm standing right next to it with my phone showing 5 bars of wifi strength and it can't find the speaker.
It's not. Copilot is based on GPT-3
This paragraph caught my eye:

> The financial burden is not imposed on the patient only; the healthcare system is also affected by the consequence of leaving against medical advice. Reports have shown that the cost of an average stay was USD 3716.00 for those patients who left as planned. However, patients who left against medical advice and were readmitted had an average bill of USD 10,761.56 for staying 4.7 days in the hospital upon readmission.

This makes me laugh. As if medical care in the USA isn't already ridiculously inflated.

> Perhaps the most effective way to decrease discharge AMA is through changing existing policies and/or implementing new policies. Historically, governmental policies, incentivizing or penalizing, have dramatically driven substantial changes in the medical system. For example, different healthcare policies/programs have led to improved healthcare access in non-urban areas. Another example is the change of practitioner compensation from traditional fee-for-service models to bundled-payment models that resulted in a better quality of patient experience [51]. Therefore, implementing a lower rate of discharge AMA in hospital metrics, for example, will incentivize hospitals to further invest in mitigating discharge AMA.

We absolutely shouldn't penalize people who leave a for-profit business for not getting the service they desire. Also changing to fee-for-service would help people do a cost-benefit on their medical issues. If we are going to live in a capitalism world, then let hospitals compete for your money.
That is still wine
How to Fight for Internet Freedom
“Weaponized” 2fa (already very common) is a huge UX fail too. In theory this could reduce those terrible flows.
What if you use an old-fashioned desktop PC?
I see a lot of misinformation, or misunderstanding, of Passkeys in this thread.

I highly recommend reading Steve Gibson's notes on Passkeys from his Security Now! podcast episode #870: https://www.grc.com/sn/sn-870-notes.pdf (p. 10-13)

For context, Gibson developed, and completed, an entirely secure and working solution to the problem Passkeys aims to solve, called SQRL (which I argue is better than Passkeys in a few ways). He is familiar with this problem space, and explains Passkeys in a straightforward way.

You can find this full podcast episode on Twit.tv: https://twit.tv/shows/security-now/episodes/870

You can also find a full text transcript of the episode, transcribed by a human - by hand, here: https://www.grc.com/sn/sn-870.htm
You'd imagine that any scheduler that's well integrated with Vault would have a huge advantage over other ones. Surprising that it's not like that for another product from the same company.
Looks like you forgot the video link
Perfect! I keep iCloud off, so this is one "improvement" I can continue to sidestep for a while.
Well you just get in touch with a friendly Google customer support representative /s
There are a lot of interesting points being made in the conversation here.

What I haven't seen yet is a reminder that a Google Account is effectively Google's private property that they're letting you access in exchange for vacuuming up your personal data.

The only winning move is not to play.
What’s the standard then? Should it be possible to recover your account without possessing any evidence whatsoever that you are the person you say you are?
WatchSomething Wonderful
They let me use my phone to login again
Sure, but my point is, how fast does the operation need to be and how slow does accessing the table need to be for the LUT to not be worth it, if a multiplication and a division is too slow?
I don't disagree that in most cities with any kind of upward economic development there's an inherent market pressure increasing prices - people will want to live in a city and there's a limited supply. However, what realpage is doing is distorting the upward market force, making the increase steeper than it normally would be.

One could make the argument that this is just capitalism and applying market forces to human lives is always the moral thing to do. I don't believe it is, I care more about the human outcomes of the systems we use. Ultimately, the underlying problem is the lack of housing supply, which is different from Realpage enabling the collusion between different independent landlords exploiting the shortage in housing supply even further.
Whisky: A modern Wine wrapper for macOS built with SwiftUI
> We're just assuming that the audience using these sites is the exact same audience as the comparison?

No, we are assuming they are highly correlated.
Someday, we will have brain reading technology to extract information from a newly dead brain, like we have to extract it from a RAM that was just turned off https://en.wikipedia.org/wiki/Cold_boot_attack
I don't believe Valve currently targets any ARM systems with any of its games.
Are you sure they're accessing personal accounts on a company computer?
Google has notoriously horrible customer service, or none at all ... A Google Domains issue took me months to resolve, I couldn't contact a human.
This is not surprising, the chat function is mind-blowing. It knows about your code, it is helpful, explains concepts, and is rarely wrong. It is the first time I'm genuinely impressed about an AI tool, and makes learning new frameworks very easy.
I think it also needs to be mentioned that he most likely isn't taking large risks, so the rewards are smaller but the risks are smaller as well.

I know that's essentially what you were saying, I just wanted to clarify it a bit.
The answer is: "when the world stops using the dollar".

There is no spoon.
Ask HN: Protecting Against Attacks Triggering Costly Tasks?
How do software companies safeguard against attacks that trigger costly operations like LLM inference through a 3rd party service or generate excessive egress traffic for files housed in S3? I know companies where a malicious actor could in 30 minutes of work and and some proxies spend hundreds of thousands of dollars. In theory, one could devise a sophisticated system to monitor trends and apply automated limits to each expensive task. However, from what I've observed, most seem to rely on a mix of basic account/IP rate limiting and global spending quotas set in cloud or 3rd party API providers. Has anyone encountered such an attack and how was it handled?
CS is currently at an all time peak of 1.8 million concurrent players, including an actively growing pool of new users. There is no marketing for game, let alone "peer pressure." It is exactly the chase to outrun becoming "outdated" by adding faulty game mechanics that these players are looking to avoid.
Depends on your goals for production. The code above indicates a bug. In some domains it really is preferable to crash with righteous fury rather than to continue executing with broken invariants and doing who knows what.

The assertion didn't cause you to have limited test coverage that let you edit the branch condition without detecting that it introduced a bug in the false branch.

Yes, if you've got a language that supports compile time checking of complex invariants then that's awesome! But few languages support this today.
Not parent but the more important thing in "de-googling" is to move your logins to your own domain. That way you are not tied to a single provider and can always switch if your current one starts degrading.

After over a decade of @gmail being my primary personal email it is pretty painstaking to move all of my logins over, and some services do not allow you to change your email at all so your mileage may vary.
Interestingly, even within Africa, the human genome notably lacks variability, to a point where it’s hypothesized that there was a fairly severe population bottleneck at some time in the last couple hundred thousand years.
I play the full Blizzard suite on my Mac. It's nice that some game makers support the platform.
It is only a problem if you can't pay the interest right? Why is that? My home has to be payed in full, interest and the base sum.
I feel like many “unsubscribe” links don’t actually unsubscribe me, so I just block the email addresses as they come in now.

“Please allow up to 48 hours for this change…” nah I’ll just block sender.
DigitalOcean Managed Kubernetes Outage in all regions
Nice to see that the haproxy people had spotted this kind of issue with http/2 and apparently mitigated it back in 2018: https://www.mail-archive.com/haproxy@formilux.org/msg44134.h...
The vaults have been adding passkey support (1Password already has it, for instance).
a hundred dollars. A year, thats 0.27 cents a day. The boomers tell me that's just 5 avacado toasts a year.
When can we use real crypto on a Smart Card / PIV / CAC without relying on Google, MS, or the Government?
X also isn't GPT-4 but the previous cheaper model
Those points remind me of the topics of Bret Victor "The Future of Programming" DBX talk:

https://www.youtube.com/watch?v=8pTEmbeENF4
Having used Copilot for a year now I very much doubt this figure. In my experience it only works well in boilerplate kind of situations where most code is copy/paste work anyhow. As soon as the code gets a little complicated it stops working well. It has also gotten quite slow for me lately. So I doubt it increases my work efficiency by more than 5%, but I do like it for reducing strain on the hands. For that I find the price appropriate.
You have a valid concern, but I'm curious how many sufficiently non-technical users would be reading Google's blog. Practically speaking, it could be a moot point.
I have a toy language I play around with that's just in specifications stage. Not mine but an interesting compile-to-c language: https://github.com/koka-lang/koka. Functional, effects, no-GC.
Why are you quoting macrumors? Valve says they don't care to support macOS because very few gamers use it:

> Similarly, we will no longer support macOS. Combined, these represented less than one percent of active CS:GO players.

https://help.steampowered.com/en/faqs/view/73EF-08A3-0935-63...

The existence of other games/companies that do choose to support MacOS is irrelevant. Valve isn't those other companies, they're making their decision based on the statistics of their players, not because they think it's technically impossible for games to support Macs.
The literal shock to the adrenal system with trauma is this century’s cancer. We see it as decreasing expectancy of the last 30 years in the U.S. The fight for survival is a basic instinct that needs to be managed with holidays, nature, and recreational pursuits. With AIs will we learn to work and fight smarter? Even drone pilots get PTSD.
Inded, some folks are so worried about their code being sucked up by an AI bot they forget they ship every single revision and byte to MS via github. If MS wanted to be devious with the data entrusted to them they could have done it already.
Coincidentally, we can also pry fingerprints from your cold, dead hands.
Ah I just missed the sarcasm. Yeah, and when the sole goal is to minimize suffering, tyranny is introduced.

"Those who would give up essential liberty, to purchase a little temporary safety, deserve neither liberty nor safety."
It's employee driven in collaboration with Odense University Hospital. It's part of a study, so handing out lego sets to every hospital on the planet with an MRI machine just doesn't make sense.

The sets are assembled by volunteer Lego employees with bricks provided by Lego.
That's the difference between a mortgage and a bond. A bond only requires interest payments until the term is up and then it is repaid in full all in one payment.
If it were that easy, it would already have been done, no?
Never it’s fiat money therefore all debt is illusory in spreadsheets predominately but nobody wants to go in and change the valuations or formulas with any efficacy…

The top of the top investor class is pretty much dying off with their estates structured like a CDO inside of a CDS hidden in a tranche pinned to both LIBOR and the Japanese birth rate, divided by the number of penguins in the San Diego Zoo.

After the disaster of higher education in the US getting unsustainable bloat thanks to Federal backing for debt but not ways to earn income (sorry Boomers vote their own interests and have Gen Y n Z pay for it)…it would be a great sign of financial integrity and creditworthiness as a nation to hurry up and treat that debt like prohibition - didn’t work, change it.
Passkeys aren't "finger prints and face scans." They're dolled-up versions of SSH key authentication.

Just as SSH private keys can have passphrases to unlock them, passkeys can have passwords, passphrases, PINs, or biometrics to unlock them too. Servers don't authenticate you on those PINs or biometrics; those merely unlock the associated private key.
You can actually get an interest-only mortgage, it's not super uncommon, and you could refinance every 7-10 years to keep it interest-only in perpetuity, if you wanted to.
Some simple ways to make content look good
Yes, but when the US uses monetary policy to control its debt, debt holders get pissed and start to hold fewer dollars.

It isn't a free money printing game forever.
Spanish airline Air Europa hit by credit card system breach
Solid article. The one quibble I have is IMO that there should be mention that, when the choice is made to use an untried technology, it needs to be acknowledged and communicated that this carries some level of risk and an increased chance of not meeting the project goals.
Fastmail rocks. I decided years ago to be the customer not the product, so I don't mind paying for services I use.

An added benefit of Fastmail is somehow its calendar is able to sync between my Outlook work calendar and some shared Google calendars I have, while Google is completely unable to reliably sync a shared Outlook calendar for me.
I might regret this but I have an (almost finished) draft of a paper on Passkeys, it is available, with comments enabled (which will be turned off if vandalism becomes a problem) at:

https://docs.google.com/document/d/1eBjQDWkbqXJSL4GRrAdTUcAx...

TL;DR:

============

Major insights in this paper:

Passkeys level up security, and while Passkeys make some tradeoffs concerning security vs. usability, they do not introduce any new attacks and make many existing attacks much harder or impossible (e.g. brute forcing attacks or credential stuffing)
Passkeys will bypass the hurdle of getting people to start using password managers, and will likely result in the widespread use of biometrics to secure Passkeys
Passkeys can potentially make account sharing harder once attestation is supported, something a lot of service vendors are in favor of. Passkeys are also easier to deploy and reliable due to optional device synchronization, which should reduce the need for account recoveries and lower support costs
Passkey client support in both software and secure hardware tokens is widespread and available now on most platforms, browsers and most third-party password managers
Passkeys are being deployed by major vendors (e.g. Google https://blog.google/technology/safety-security/passkeys-defa...)

============

Conclusion:

No new significant risks or attacks are introduced from the threat model perspective. From a usability and reliability perspective, Passkeys are infinitely better than passwords. Finally, from a support perspective, chances are that if you currently use a system to manage your passwords, it already has Passkey support. For high-security applications, you can also choose to use your hardware token.

Web applications and websites are becoming increasingly critical to everyday life (banking, healthcare, education, shopping, etc.). We must improve security across the board and get rid of old and insecure things like usernames and passwords. The world has also changed, and virtually everyone has a smartphone, something unimaginable even ten years ago, let alone twenty.

Simply put, in every situation where you use a password, you should upgrade to a Passkey if possible.
> For transactions, they primarily used the stablecoin tether, which is pegged to the U.S. dollar, avoiding the volatility that affects other tokens.

they need to be careful using Tether, DAI is the best bet for a stablecoin without a freezing function and automated redemption. US VC backed if you're not familiar with it, pretty time tested.

I appreciate crypto that highlights the relative morality of transaction whitelisting and other capital controls, since an asset seizure by any sovereign nation theoretically cleanses that crypto when it is recirculated or sold off, despite the transaction history always showing the illicit use (by the opinion of that one nation) and the subsequent seizure and cleaning.

Are transaction flagging services like Chainanalysis and Elliptic even equipped for that? Are we to care if China says moving >$50,001/yr is illegal and moves to sanction one of their residents, or are we to only care when Israel gets a seizure order against a Hamas-linked account on Binance like in the article? Or should our opinion be limited to our own country's regulations against drug dealers and court orders?

smells like utility to me, especially when the people see this game is futile and deprecated, and get their government out of the business of whitelisting transactions at all, since its wasting everyone's time and an unnecessary overhead cost for all financial institutions
A photo caption also says, "No need to measure – just drop a few pea-sized pieces of alum/two pinches of alum powder into the solution and let it dissolve.", so the exact ratio is unimportant.
Next up: encryption without gov backdoors.
I don’t know the answer to this, but in the future, perhaps in 10 years, we will be able to look back with hindsight and better understand the wax and waning of yet another empire.

I am an old man, and one thing I have learned in a long life is that if something seems unclear, then wait a few years for more data.
Part of me agrees with you, but then you meet a kid who has some terrible illness and is afraid of X and needs it.

It turns out that ‘just deal with it’ is a pretty cruel attitude when a child needs help.

I’m not convinced that a Lego set will help get an MR done, but if these sets do help a few kids, that’s a pretty good thing. You never know what’ll help.
I don't like just treating trust fund debt as if it doesn't exist. It's not so much that the government owes itself that money, it owes the American people that money via Social Security. So it's as much a public debt as any other. I especially don't like ignoring it like this because it implies the US government simply needs to ignore that obligation to the public, let millions retire with no safety net, and just default on trillions of debt. It's horrible from every financial perspective. What should be mentioned is that Social Security could easily be well in the black with even higher payments to retirees by simply raising the income limit on the social security tax. The biggest problem with funding Social Security is that income inequality has ballooned, so more and more income is exempt from the tax.
> Forced phone number 2FA has the same effect; in Big G's case forcing phone number 2FA is anti-anonymity disguised as security.

It can actually be both; in fact it very likely needs to be:

1. Phone numbers are the best long-term identity most people have

2. Google has billions of users and needs to support account recovery at unbelievable scale

3. Many people lose passwords and devices, but very few lose phone numbers

It logically follows google uses phone numbers to assign and delegate identity on their platform. Is this bad for privacy? Yes, but it's also very good for security because it allows users to control their data using a third-party authenticated "credential" they don't have to manage.
In general I agree. But if you're going to hold a news conference, if you want anyone to show up, you have to tell people when the news conference will be.
At what point is it less work to just build something real rather than have all these workarounds to support a fraud?
This is the exception which makes the rule. Any area with massive economic devastation is of course going to vary from this rule. The same is true of any other commodity, or thing you can own, that is immovable and in that 'depressed economic zone'.

But certainly, where I live, rural areas.. very rural areas too, the land goes up, slowly, surely, but the houses follow the rules I originally stipulated. It's really quite a universal.
Or, perhaps, piracy measurement is link to box office revenue.
Submarine U-475 Black Widow
An abandoned 1960's USSR submarine floating in the River Medway in England, with intact interiors and (I believe) torpedos still aboard.
I'm also a primary mac user and have been almost my entire life. I have a pc that literally does nothing but play games, it's a stupid expense at this point. I may not bother to buy another to replace this one when it's finally to slow to bother with. May be a console life for me.
Why you should join SmarterDx
Or yubikey.
Well, honestly I don't know. If I had feelings of loving kindness, I'd know that; but that would be just feelings. I don't have a loving-kindness detector, and I wouldn't know how to calibrate it if I did.

I suppose one could work from hatred; people generally know if they hate something. So if one has reduced the incidence of hatred, then perhaps you could say the technique worked. I used the technique (along with others) over a period of a couple of decades, during which I "suspended belief" concerning rebirth. But over a couple of decades, it's quite possible that my personality changed for other reasons - such as other techniques, or watching my children grow up, or simply maturing.
Google Password Manager.

https://developers.google.com/identity/passkeys/supported-en...
Every time the opposing political party is in power.
I wish I had a better answer but:

When you suspect things are broken, check X (FKA Twitter).

Other devs will be talking about it before there's an official status page.
A PIN associated with a specific device that been cryptographically linked to your account. So while a seven digit PIN is easier to guess than a password, the physical device is much harder to steal over the internet. It’s defacto 2FA authentication.
I don't think you can dismiss 1.8 million concurrent players on CS:GO back in May of this year as just "peer pressure or nostalgia". Plenty of people obviously still find it extremely fun, myself included.
Those diseases introduced the Americas didn't target specific races. Eurasian peoples could still get them too but had some immunity. If Eurasian people were immune we never would have carried these diseases with us.

Saying that...shamefully it was consciously used as weapon in some instances.
Mimic.css – CSS Animation Library
I'm willing to bet Google already has a frighteningly accurate ability to determine whether I am associated with or own a particular account.
Which is definitely coming, not because of debt levels, but because of lack government responsibility and management. There will no future governments with responsible spending and correct calculation. This is truth in few sentences. They are addicted to spending debt like it's nothing. At any real stress, they will be back to unlimited brrrrr, sunday meeting after SV bank went down was just a small sign. Boomers panic so fast. Market knows it, all smart money knows it. Plan and act accordingly.

https://home.treasury.gov/news/press-releases/jy1337