skysight-inc/HackerNews huggingface dataset:
It also reminds me of ClearCase, which is why I kind of hate this, lol. ClearCase is fucking awful to work with, the last thing I want is to turn git into it.
> During the first run, Zen will prompt you to install a root certificate.

Well, nope.
Interestingly, the effect is larger than smoking!

If your first though was correlation != causation. Good!

The paper gets that rights actually, this is on the journalists

The paper is here: https://jech.bmj.com/content/jech/early/2023/08/17/jech-2023...
The costs listed in the article seem to be the result of random sampling without any price-consciousness, i.e. you can easily end up spending that much or more, but you don't have to. I spend much less, but I always compare prices (especially for food, I check the unit price per kg or liter) and take the cheapest option within a given category.
Nuclear explosions on Earth, while very powerful, are not even a blip compared to the random noise in the amount of energy that the Sun gives out. You would have to very very carefully measure the Earth itself in particular to notice them in any way.
what is NN? The website doesn't offer much context
Are you commenting in the correct thread? There's no AI art in this article.
One day, Sir, you may tax it...
if you want to do coke and benzos more than once an hour sounds like you got a big problem
Google abandoning their service and its users? This can't be!
"Our European visitors are important to us", says the page blocking the content since years :D
https://news.ycombinator.com/item?id=33311523 :

> [WebAuthn, TPM, U2F/FIDO2, Seahorse,]

> tpm-fido: https://github.com/psanford/tpm-fido :

>> tpm-fido is FIDO token implementation for Linux that protects the token keys by using your system's TPM. tpm-fido uses Linux's uhid facility to emulate a USB HID device so that it is properly detected by browsers.

TPM > TPM software libraries:
https://en.wikipedia.org/wiki/Trusted_Platform_Module#TPM_so...

TPM > Virtualization; virtual TPM devices:
https://en.wikipedia.org/wiki/Trusted_Platform_Module#Virtua...

WebAuthn: https://en.wikipedia.org/wiki/WebAuthn
And this right here is why you keep hearing RTO pushes from C-Levels and corporate boards.

Those folks all have investments in commercial real estate that they would like to not become worthless. What's wasting your employee's life time on a commute compared to that?
IBM bought them in 2003.
> Norway was a lower income country

Lower than now? Sure. However it still was one of the richest countries in Europe going back at least to ~1900 (just the gap wasn’t that big as now)
> feel it's better to just implement multi-threading in your own code (as needed) instead of using something convoluted and confusing like Node.js. What say you?

I could give a long and detailed answer, but I think the best way is to simply try implement this, in Java or Python (but without using Python's async obviously, which would be just node but worse) and then report back about which is more complicated and convoluted.

Oh and to ensure you're providing the same guarantees as node you should have some test code that a) modifies a variable both in the main and worker threads b) causes exceptions in the worker thread which can be handled in the main thread

For a) I'd suggest using the code here as a starting point:
https://realpython.com/intro-to-python-threading/#race-condi...

After you've done that try the same in idiomatic node
So, where are you going next August?
> I see HN talk about MS being stupid for supporting decades of weirdness,

I see it almost universally praised on HN.
biometric yubikey seems to be a viable solution
Except, you know, all the elementary particles. I have this intrusive thought those are just bits of non-smoothly kinked/knotted spacetime but have neither the physics background or sense where to even start to look further into that.
In theory you could potentially decap the enclave and read data out of it but you would need extremely high end equipment to do that and it would be obviously destructive so it's not in most people's threat model
Couldn't you have a small (meaning auditable) priviliged daemon store the keys in RAM when the keychain is unlocked once? The daemon would then release the keys when it determines that the fingerprint is correct.

You would have to compare the fingerprints on the PC, or you would have to have a authenticated channel between the fingerprint reader and the PC, otherwise you would open yourself to device spoofing attacks. I think an attack like that was discovered recently for Windows notebooks.

This scheme would mean that root can access your keys without the fingerprint (unlike on a Mac I think), but the root account already has other ways to get your passwords.

Similar, you might be vulnerable against an attack where somebody confiscates your locked PC, freezes your RAM modules, and reads them out later. But you could encrypt the passwords in locked state using the TPM to make this much more difficult. And again, people who can do these attacks have much easier ways of getting your passwords, such as rootkits, or simply forcing you to put your finger on the sensor.
These tik tok videos are pretty short right? Why not just get a note book and write down the instructions.

You could even do a little line drawing of the important bits.

You could keep this "cook" book in your kitchen, and maybe pass it to one of your kids (just an example) when they move out or something.
There was a "cable 2" future where content bundles were going to drive differentiation, but then we got Netflix, Disney and Amazon so that went out of the window. I must admit I can't see any future for consumer ISP's apart from the one that you describe.
Magit has a really easy to use way to "step" through previous versions of files. It's usually bound to something like "C-f p". You get a read only buffer of the previous version open in the best text editor (emacs). You can then press n and p to step through next and previous versions of that file. Can be pretty useful!

It's kind of funny, I think, how most git users don't seem to know how to access any version other than the current one. So many people think of it simply as the annoying tool you have to use to make code changes but don't really know what version control is.
Honestly, a few decades isn't even a century, let alone forever, and the 8bit games are much worse re e.g graphics, so fewer people are outraged since there are better alternatives, also, if non-native way to run is an option, that also dampens outrage
The freeze/thaw cycle causes things to work their way out of the ground, so buried things you want to stay put need to go below the freeze line.

https://en.wikipedia.org/wiki/Frost_heaving
San Francisco overbuilt in high-rise office buildings. There's no good reason to concentrate workers that much. Work from home works in tech.

AI, reasonably enough, doesn't need that many people. That's kind of the point.

Are residential prices, both buy and rent, dropping yet?
Many porting houses (aspyr, feral) have had their own equivalent of the porting kit for ages.
Yet Microsoft unlocks the Keyring with the exact same fingerprint readers.

Microsoft pushed the reader industry to adopt their protocol almost 6 years ago and it's universally implemented in almost all laptops (citation needed; maybe I'm wrong here and it's not as universal).

They even have an open source reference implementation
- https://github.com/microsoft/SecureDeviceConnectionProtocol
- https://github.com/Microsoft/SecureDeviceConnectionProtocol/...

Yet Fprintd still doesn't support it to date.
https://gitlab.freedesktop.org/libfprint/libfprint/-/issues/...

So the problem really isn't with the fingerprint readers (at least on modern laptops) it's that fprintd is horribly outdated with current tech

The other problem with Linux is that SDCP needs to be implemented in tandem with TPM support. Another area where Linux Distros are at least 10 years behind Windows.

However systemd has been slowly making strides with PCRLock

I am also pretty sure (but citation needed) that Microsoft has fallback code for image-matching fingerprint readers that run that code in a VM in some kind of trusted execution environment so that Windows Hello also works on old fingerprint readers
I sorta stopped playing GTA after GTA IV… but this actually looks really cool. I think I’ll give it a go!
Walmart takes Elon up on his offer
And game developers decided that the churn was not worth it.
Running on CLR and coming from Mordor are the prime reasons I won't even evaluate it. Not sure how prevalent or fair this is, but at least for N=1 makes it not shine.
> I don’t see how that addresses the LTS issues since k8s is updating so often that you have to keep pace with the updates (that you now need to do).

They're not saying they moved to running k8s on a VPS - they're saying they moved to using a VPS instead of k8s (i.e. have escaped the k8s upgrade cycle).
> In an alternate timeline where Norway has no oil

Norway was already the richest European country back in 1938, decades before oil was even discovered in the North Sea.
They're going to do everything they can to learn how much money you have in your account and then they'll relentlessly try to manipulate you into losing more of your money.
Yes, we use gross numbers for salaries but the gross salary value does not include social contributions, payroll taxes/fees paid directly to the government, the gross amount is just before income taxes. There are quite a few extras on top of the gross advertised salary which the company pays for and we employees don't even know about (it's not shown in payslips).
They're trying to avoid repurcussions from saying something their employer doesn't endorse
It resulted in such strong social cooperation that the majority of the population (the workers) succeeded in a revolution in 1917 and then for decades drastically improved their material conditions.

There are of course other factors than climate.
While to each is their own, I don't think so.

I have spent and still spend a lot of time on digital document and task management systems. I have considerable note and project troves in Evernote and Pagico. In reality, long term memory provided by Pagico is a great complement to pen and paper workflow of me, because I bake longer term plans into Pagico, and use that tool everyday, too.

The phone is not frictionless, because at the end tap/click depth is much more when using a digital device when compared to pen and paper. I always put stalls into my mind flow, because you need to at least add some keyboard shortcuts or taps while streaming your knowledge to something digital. Paper doesn't have that kind of friction. Just dump it down. Markdown provides some good middle ground, but it's not completely intrerrupt-free either.

A small A5 or 17x24cm notebook doesn't take a place in your daily backpack, neither a good, run of the mill flight-safe roller.

Digital organization has its perks and uses which can't be and shouldn't be ignored when the data volume one manages passes a certain threshold, but pen and paper is irreplaceable in my mind. Because the uninterrupted workflow and the pacing it provides works as a great regulatory aid for me. It doesn't run out of battery, has much faster random access, do not tax my eyes much, and last but not the least, prevents carpal tunnel.
We've (workers, non-CRE owners) collectively known this all along. What I don't understand is how the green/net-zero lobby is relatively quiet about fewer people using transport to go to work. It makes far more sense for WFH to have been the default long before the covid lockdowns, frankly I'm sad that that's what it took to get us here. It shows how much hypocrisy there is about all the climate efforts if those same people aren't clamoring for WFH
Texas sues Pfizer with Covid anti-vax argument that is pure stupid
Yeah, that's why I'm against it, too. Bad incentives all the way.
> I figure as much, but that's kinda why I'm asking what made it mysterious.

You expect simple explanations to VERY complex problems from random internet commenters. I think you expect too much.
Serfdom disappeared almost 500 years or so earlier in Western Europe that it did in Russia (or most of Germany for that matter..)
Why do I keep reading about the CueCat multiple times per year?

What makes this primitive gadget so enticing?
There are protocols that you can use to authenticate the fingerprint scanner [1]. When they are not used you can indeed just shim a fake scanner and unlock the PC [2].

This all assumes that nobody can break into the secure silicone of the the fingerprint scanner (or the PC) of course, but that is a pretty high bar.

[1] https://github.com/microsoft/SecureDeviceConnectionProtocol

[2] https://www.theverge.com/2023/11/22/23972220/microsoft-windo...
Don't expect too much from version numbering schemes; they can follow sufficiently objective conventions (breaking changes for typical usage or not, worth announcing according to the authors or not) but not convey complex information.

There is no way to tell which ones in a set of equally major versions are LTS or not using version numbers because there are often too many; for example Java has major version numbers for major language features and standard library additions and removals, with reasonably relevant versions currently spanning from 8 (1.8 in the old numbering) to 21, three or four of them LTS and the others transitional.

There is also no way to tell obsolete LTS versions from current ones using version numbers, without explicit documentation committing to dates or making EOL announcement.
https://news.ycombinator.com/newsguidelines.html

> Off-Topic: Most stories about politics, or crime, or sports, or celebrities, unless they're evidence of some interesting new phenomenon. Videos of pratfalls or disasters, or cute animal pictures. If they'd cover it on TV news, it's probably off-topic.
Infocom’s code-porting tools for Zork and other games have been found
That part jumped out at me. Why on earth do they need the permission of the descendents of someone who lived 500+ years ago? And how on earth are they even going to get it? Surely even if one guy says it's ok (and you can prove he's descended from a body you found), what happens if another person says no?

It's obviously nonsense - so why claim it?

The part about indiginous research is kind of mad as well - "This research places unnecessary responsibilities and obligations on Indigenous communities to participate in microbiome research". We're talking about a mouth swab here.

It makes me glad I don't work in academia!
Openreach offer 2 SLA's to ISP's, a cheap one and one that gets service. Sky, Voda and BT buy the better SLA. I have worked in these organisations and I can tell you Openreach really doesn't give a flyin f about BT Retail/EE above and beyond the customer relationship that they have with Sky or Voda. They do care less about the smaller ISP's because they spend much less with them and don't have the bosses phone number.

It doesn't matter at all if you get fibre as that only goes wrong due to physical breaks (I know this is only 99% true but it's basically true), but both Sky and BT invested a lot of money in being able to resolve copper faults so have a good capability to both identify what's needed and get appropriate action from Openreach, I don't think anyone else does.

Anyway - the Openreach infrastructure really is separately managed. BT Consumer is just another ISP now.
Might as well pin this to every thread.
Partly that, and partly because they were/are built with constrained functionality (do one thing well) that significantly limits the interfaces exposed, and are designed to be secure under the assumption of physical attack (which most things aren't!)

Partly because many secure enclave type applications have undergone formal verification and verification through something like CC EAL, which should reduce the likelihood of glaring oversights etc.

One final aspect, more for hardware enclaves though, is that they're often designed specifically to resist the kinds of physical attacks people may try - as security products, they've very likely considered power rail glitching and how to reset the enclave if there's a glitch. Similarly, the physical ICs may be produced with physical features to try to prevent successfully decapping the chip, like sensing wires you'll disrupt, and inbuilt EM shielding.
Not OP but the Nordic model is social democratic: inherited from the social democrats that fenced off the communists around the turn of the last century with the promise of delivering socialism through reforms, not through revolution. Early adoption of this model from the capitalists kept class warfare in Scandinavian countries at a minimum, and a prevailing sense of the state as "for the people" has taken root. Which means that the state in Norway was expected to invest the oil revenue to benefit the people, not for the benefit of foreign oil interest in an alliance with a wealthy few as is often the case.

This backdrop explains for example why Musk may find that Tesla needs to withdraw from Sweden unless they sign the deal with the trade unions. Or, as some will have it: Musk and some others will succeed in delivering a coup de grâce to the Nordic model, it has admittedly been withering for some time.
Conservative satirists attempting to mock "only teaching unproblematic history" is rich.
> Most orthodox economics is pretty unanimous about basic policies: for free trade, against occupational licensing, for free migration, for free movement of capital, for simple taxes without loopholes, against messing with the currency, against corruption, against subsidies, for taxes instead of bans (eg on drugs, or emissions, or guns), against price floors or ceilings or other price controls, etc

It's interesting that if you oblige your models to fit a set of policy positions then they return that set of policy positions and are pretty useless in general. A cynic might say that's by design.

Orthodox macroeconomic modelling is laughably naive and mathematically wrong before even getting to the basic issues of failure to validate. Let's not compare it to disciplines where validation is the entire point.

Your rhetoric clearly shows you don't want to think too critically about this so I'll sign off now.
Rockstar can rent from Azure just like OpenAI I guess. Buy capacity that matches the actual paid demand.
World Record Optical Fiber Transmission Capacity Doubles to 22.9 Petabits/Second
Strava Introduces Messaging Feature
If having someone reading your email is ok to you, then having some AI reading your email must be the biggest security upgrade in years.

from a self hosted person this sounds hilarious, what do you think?
Why don't you self host your email for few bucks per month?
The headstart is also in your customs. If you are used living w/o e.g. social security, a migration to the US is far more easy/interesting than when you are used to social security.
tl;dr

The lawsuit argues that Pfizer should have presented its vaccine's effectiveness in terms of absolute risk reduction rather than relative risk reduction.

The difference between the two calculations is quite simple: Absolute risk reduction is a matter of subtraction—the percentage point drop in risk of a disease between an untreated and treated group. So, for example, if a group of untreated people have a 60 percent risk of developing a disease, but, when treated, the risk drops to 10 percent, the absolute risk reduction is 50 percent (60 – 10 = 50).

Relative risk reduction involves division—the percent change difference between the two groups' risks. So, as in the previous example, if a treatment lowers disease risk from 60 percent to 10 percent, the relative risk reduction is 83 percent (50 percent drop / 60 percent initial risk = ~0.83).

Both numbers can be helpful when weighing the risks and benefits of treatments, but absolute risk reduction is particularly key when there's a low risk of a disease. This can be easily understood by simply moving the decimal in the above example. If a treatment lowers a person's disease risk from 6 percent to 1 percent, the relative risk reduction is still 83 percent—an impressive number that might argue for treatment—but the absolute risk reduction is a paltry 5 percent—which could easily be negated by any potential side effects or high costs.
It is the same in many other European countries. But I guess in case of minor scratches those laws belong to the most frequently broken ones... ;)
Wonderful! Glad I got my reps in with C# and Azure last year.
It's okay guys, Google is only a small startup so you can't really fault them for not having the money to fix things.
Those are good arguments for using an online service. But your conclusion is premature and certainly cannot be made blanket like that in favor of using the API.

Just as many arguments can be made for an offline check. Or against an online check. From added latency via required uptime to added dependencies.

My point being: no. "It depends"
> it's that fprintd is horribly outdated with current tech

This current tech? https://www.theregister.com/2023/11/22/windows_hello_fingerp...
From your issue link:

> Then commons-logging changes its API incompatibly and is released as commons-logging 2.0.1. Authentication adopts commons-logging 2.0.1 while other libraries still depend on 1.1.1

> Now my-application is broken, because the dependency tree includes two versions of commons-logging which share packages, class / functions names, and thus can not be loaded simultaneously.

I absolutely don't see how this is a problem with semver, it is not the responsibility of semver to tell a language how packages should be isolated and loaded. That is a problem of a) the language and b) dependency resolution in the package manager.

> SemVer is a product of Ruby community.

Bundler, by design, does not allow the above, instead having a flat, consistent vision of dependencies.

NPM though, allows that, allowing nested dependencies, by virtue of the ES6 module system importing to a variable in a lexical scope. Go also allows that, by virtue of its imports being scoped to a package (or file, I can't recall).

Ruby has side-effectful load/require decoupled from the open class system - which is what bundler is designed around -, but can do that kind of isolation too! In fact, I've done it: https://github.com/lloeki/pak

Unless packages leak to globals each version is oblivious to the one next to it. Unless package dependents communicate with one another using objects from the packages they can happily live in their own little isolated world. Now if they do, then it's like hitting a HTTP /api/v1 with an HTTP /api/v2 client and somehow wishing things will work. Either the package (which should not leak globals / disallow cross-version communication) or the language (which should not allow leaking globals / detect incompatible communication).

None of this is the responsibility of semver. In fact, semver would help the language provide tooling to detect that kind of "hey this instance is from foo-1.0 but you're trying to consume it in foo-2.0".
Both companies make good products, so this is bad news mostly from a lack of competition point of view. Very different from say Behringer eating historical big names and turning them into cheap Chinese stuff with a shiny name.
Curl 8.2.0 supports –ca-native and –proxy-ca-native with OpenSSL 3.2 Windows
Yes! Panning shots are such a pain. Motionblur them or something please.
Shouldn't be hard to do both things, will def. add that. Part of the plan is to switch to Tree-sitter and use other languages as well.
covid api
If it is about the startup scene in Gaza or some hacks/cracks done by some people living there, etc. then go ahead and post. If it is about "the current situation", then find another forum.

See the guidelines: https://news.ycombinator.com/newsguidelines.html.