skysight-inc/HackerNews huggingface dataset:
Give me a source for B12 deficiency being serious enough that it's comparable to the health risks associated with cocaine, of all drugs. All the reports I'm aware of involve extreme levels of daily use, e.g. https://journals.lww.com/jfmpc/fulltext/2020/09110/recreatio... ("75-100 canisters daily"). The idea that a single dose will oxidise enough B12 to be clinically significant is not supported by evidence, it's something you've made up, unless you're claiming a dose is made up of 75-100 canisters.

Personally I would rather compare the actual incident rates of side effects from drugs than make a false choice between the most extreme symptoms, particularly when one of them is a common and relatively safe form of anesthesia.
High IQ = gotta work hard and hope for luck to realize your dreams

Low IQ = gotta work hard and hope for luck to realize your dreams

Low or high doesn't give you any new actionable piece of information, but it is true that an official piece of paper claiming high IQ will open the door to some institutions, it remains to be seen how long it takes to fall out of love with such institutions.
iOS 17: New Version, New Acronyms – Round 2
Heaven and stars, my soul hurts just reading this.
It's not that slow.

It's about the same as the AWS Graviton 1 that went into their data centres in 2019, except it's got 64 cores while the Graviton has 16.

On tasks that can use all 64 cores (building software, web serving, and yes HPC) it can have about the same total performance as a current generation 16 core x86 that costs about the same.
Let me get this right...

You buy some piece of land, or (as per TFA) lease it for 30 years. Then, you do nothing with it.

On the basis of you having the potential of doing something with it, you calculate a hypothetical difference in "potential scope of hypothetical activity" somehow denominated in the CO2 unit. The exact procedure for doing this is neither known, reproducible, nor audited?

This purely fictional "measure" (for lack of a better term) is then renamed to "credits" and converted to some monetary unit, like, say USD. The exchange rate is then what? And why?

Last, you sell - as in actually sell - this purely fictional nothingness to states and big corporations who all have multiple economists and/or scientists employed. Plus ample access to external specialists if their own capacities should somehow need a reality check...

Is it me, or does this seem a bit weird (to put it politely)?
Copy mfa code on iphone, paste to mac. Makes it bearable.
We saved $15k a month on GitHub Actions – Part 1
> you unfortunately are semi-required to build platform specific bundles

Can you elaborate on this? It seems like a build tool specific issue to me. In Clojure, most projects use Leiningen (a build tool) and uberjars regardless of the target Java version will bundle native libraries for every platform you run on. You can exclude some of the libraries from your uberjar, but it's a manual process. This has an obvious drawback (e.g. depending on the SQLite JDBC driver bloats your JAR with dozens of native libraries), but it's still very much "build once, run everywhere".

The closest I've been to "platform specific bundles" was dealing with a Gradle project where the developer hard-coded a target platform into a property, thus making it impossible to bundle libraries for multiple platforms.
Sea level data from 1913 to 2022 which shows a change of 0.84 feet in 100 years
As there still appears to be some debate on the matter, here is the most sound data that I can find which proves that sea levels are indeed rising.

If you have any other links along the same lines, please share them. It would be useful to have a salvo of undeniable links at hand.
> I am starting to suspect that if one wants to be good at web design one needs to start doing lots of web design until one gets better. Reading books may come later to place that practical knowledge in some coherent mental framework.

This is true, but it's true for anything. Reading a programming book won't teach you to program unless it presents problems you can build on actively throughout the reading. You need applied reps, otherwise you'll at most get some vague inspiration or enjoy/hate it.

This is why I don't read practical books anymore unless I'm prepared to practice what I'm supposed to be learning about during the course of my reading. This is also true for videos.
I checked out Omg.lol when it first got popular on HN (https://news.ycombinator.com/item?id=34269772).

At the time, I thought it was an amalgamation of things I already did on my own or otherwise had a community for (e.g., Neocities, Tilde Town).

Now, though, I think I get it. There's something to be said for sustained energy.
It's actually quite a good metric, not of intelligence but of gullibility.
Have you ever tried switching project management apps?
I mean any program code is gonna stay loaded, so that's not an issue. So you're basically only left with resource files potentially causing issues. Most programs won't re-load their configs without getting prompted so that's not a problem either.

I feel like it's one of those things that just happens to cause surprisingly few issues and where they do happen it's either no biggie or gets fixed.
The actual reasonable approach would be to implement it as a strictly opt-in feature for the next release and then when many people have tested it, gather some some usage data and then decide on whether to make it the new default behavior or not.

Just breaking established user behavior and muscle memory just because you think something might be better without having gathered any actual evidence is insane.
Why TikTok is dangerously good at making you spend money
No, but easier consumer testing is part of the solution.

I liken this to security: You want layered security.

Right now we have maybe one or two layers of detection at best.
Many good memories using geo works ensemble in the early 90s.
Or we might do away with farming entirely. Photosynthesis is less than 1% efficient while a solar cell can exceed 40%; so direct chemical synthesis of starch could become the primary source of calories in our food chain, further processed into proteins, fats etc. by appropriate bioreactors down the chain.
“I believe MFA commits a deathly sin against the commandment “Thou shall code against interfaces, not implementations.’”

I don’t disagree with the sentiment, but I’ve certainly never heard of this commandment - at least, not until the author conveniently declared it one to make the point.
Yes, the Debian setup is going to be just for cuda and ml. It's intended for cheap and easy experiments, focusing on ml for small systems.
Thank you. They write in the post about the thousands of dollars they receive monthly. A huge amount for people in most of the world, money to comfortably retire on. They can choose to not pay excessive rents. They can solve this problem easily without begging for money.

As for making FOSS software, that is their own fault. There is no more ungrateful public than FOSS users, which mainly consist of hackers and hobbyist who would rather die than donate to FOSS creators, and billion dollar companies, who would rather die than donate to FOSS creators.

I take back the words about scam in my previous comment. These are people who need education in personal finance, not donations.
An Engineering Analysis of the Tesla Cybertruck [video]
Yes and no. Many online services still have silly rules about password construction and length that preclude the random generated passwords that many password generators create. I often have to remove/substitute disallowed characters or shorten the generated passwords because the service has an arbitrary limit on the length of a password.

So yes, they are better but they are still often inconvenient at least when adding a new service.
The post contains some context about why they were looking for something like the service, gives a short review of why they like it, what they get for the cost, and the lists alternatives at the bottom. It seems quite human to me. Humans tend to talk about things they like.

Just shouting "chatGPT wrote this!" isn't really a comment on anything. It's just provocative enough to feel like it's a criticism while also being both totally unrefutable and unprovable.
I find anything that doesn't support U2F keys annoying. It doesn't add any friction when the computer just says "push the USB key", since it's a yubikey nano that's always plugged into the computer.

What REALLY annoys me though is places that do support U2F keys, but only one. Last I checked AWS was broken in this regard. And honestly that adds enough friction that I'd rather do experiments on GCP, which doesn't have this bug.

Not that my experiments affect AWS's bottom line. But it does mean that I learn GCP better, and maybe will recommend it in a work context. Not recommend it because MFA, but because I will better be able to say what GCP product can and can't do, than AWS, because of this.
Show HN: AI GroupChat
With all the new national supercomputers scale isn’t really going to be an issue, they all want large language models on 10k GH200s or whatever and the libraries are getting easier to use
I have MFA on for everything and I've about had enough. I'd rather have super non-memorable passwords for everything and have one MFA code for the password manager vault.

Passkeys should not require MFA either. I see a good enough future for me and it's:

1. Bitwarden with vault password and MFA

2. Everything else within, passkey

I'm completely unconvinced MFA is necessary if the "password manager at top + passkeys for services" mentality is ingrained in everyone. If you offer a service where I sign in with a passkey and also require MFA you better publish an extremely convincing security paper why, or have an infrastructure critical service that burns the world down if someone unauthorized gets in. There is no other justification for that level of security other than to be an asshole.
It's effective... Until you need sqlite, or lmdb, or something like this.
1Password does allow you to set it up as an authenticator for sites with 2FA so you don't need a smartphone.
uh sorta - while the livelihood of some deniers depend on dollars (commercial or political) I think its more correct to say that to make others doubt climate change is their primary task they get funding for.

You can see this very well when compare American vs European climate change debate - in Europe is a very passive "not doing anything useful" while actually everybody gives at least lip service that something has to be done. This is because there was less opportunity to couple the debate into politics in an concentrated way. In the US the 2 party thing makes that very easy and the whole thing has staying power as an "issue" so it probably needs comparatively little or even no investment to keep alive.

In the EU I can only directly speak for Germany but to me it seemed like there were no direct attacks against the concept of climate change directly (although we get some splash damage from the US). most issues stem from single big companies or industry groups trying to bend things to their advantage. A good example that is maybe best known international is the "Clean Diesel" thing that VW so disastrously chose because it was short term cheaper than investments into EV technology. This is what in the end lead to the diesel scandal. There are better examples but they get too local to be as easy to explain.
Some years ago, I wrote a custom JNI wrapper over libuv [0] for a Java/Kotlin project I was working on. It’s mind-blowing how much work it took to get cross-compilation and everything else working. That said, as someone who’s been writing C code for years, it wasn’t the worst experience I’ve had; it was mostly just tedious.

[0]: https://github.com/1791-labs/carlie
Password manager + MFA is a lot more secure. Password managers aren't impervious to attacks.
I just installed it on my 32B Mac yesterday, first impressions: it does very well reasoning, it does very well answering general common sense world knowledge questions, and so far when it generates Python code, the code works and is well documented. I know this is just subjective, but I have been running a 30B model for a while in my Mac and Yi-34B just feels much better. With 4bit quantization, I can still run Emacs, terminal windows and a web browser with a few tabs without seeing much page faulting. Anyway, please try it and share a second opinion.
Author should try Bitwarden - it can generate TOTP codes along with remembering your password. It even autocopies your TOTP code when you autofill password, so you can log in without mousing around menus and losing flow.

Nullifies most of the benefit of MFA though so maybe keep your critical stuff like email logins out of it.
The main issue with the App Store isn't Apple's cut, it's all of the other rules and restrictions.

A lot of Mac software can't even be sold in the Mac App Store because of sandboxing and other technical limitations. Then there are also the absurd, arbitrary business model limitations in the App Store. And of course, app review can reject you at any time for any reason or no good reason.
Just use a password manager that stores your TOTP token along with the password and never care again. I use Bitwarden.

Say no to proprietary hardware enclosures that deny you access to your own keys. Only use them as secondary auth of convenience, store all your passkeys in a software vault you control.
Can’t stand this. I want to challenge the CTO of my bank to a public debate about password best practices.
Because Jujutsu is Git-compatible, there are lots of supported forges (GitHub, GitLab, etc.).

There's no native forge yet.
So do password managers.

Websites concerned about password use should provide an option to use a randomly-generated password (generated by the website, not the user) in leu of MFA. This guarantees the password is unique and complex, and practically ensures that the user has a password manager.
Neat. I did something similar and created a stack based NLP language, I used it, mainly for synthesizing prompts for image generation.
The author seems to not have heard of hardware tokens to store your MFA.

It’s not linked to a single device (you can get your codes on a computer, phone or tablet), it doesn’t require you to be “online”, and you use them for OTP, passkeys and whatnot.
They also do pillow forts, e.g. http://PillowFortStudios.com/
Investor Group Launches $5.8B Buyout Bid for Macy's
Go back upthread clear to mikrl's comment (and I know you saw it, because you replied directly to it).

mikrl said that the amount of oil used in "non energy applications" (plastic feedstock, but also lubrication, and probably other uses) was only 10%, and that if we stopped using oil for energy, then oil would essentially become an unlimited resource - demand would be nowhere near available supply.

You replied that using fossil fuels 10x more slowly would just reduce the rate that the temperature increased. You totally missed mikrl's point - if you had understood it, you would not have replied as though the 10% was being used as a fossil fuel, contributing to global warming.

I pointed out that the use being discussed wasn't as a fossil fuel (and therefore that you were missing the point).

You replied that there is still some use of fossil fuel to make petroleum usable as plastic. Um, I never said there wasn't. And that still isn't the point under discussion.
This is sort of my point - one of the options is "rule based system". That doesn't need to be statistical at all. It doesn't look like what people would think of as AI at all. I don't see why it isn't just "you can't use computers for this" and AI is an implementation detail.
.com rather than .edu I think
What I have been thinking would be really cool and fun to try would be to remake zork with llms, speech to text and text to speech.

I think you might be able to do it with a lot of prompting, and having a database that functions like a wiki for the current and past states of the game world.

If you got really fancy, you could also make it a pseudo MMO where the content of the story you create with a character could be used as the basis for a NPC plotline in other people's worlds, possibly reducing the amount of content needed to be written.

If it got popular you could also use it as a research tool, where you could force some subset of the player population have some interaction, and be able to test and get a dataset for counterfactual reasoning.

The next 5 years will be wild.
So he was lying then too?
Stuff like this is cool, and I like a nice TUI, but it’s really not for everyone. It always makes me think about how I’d like GUIs to be more like the TUIs I know and love, and what a pain it seems to be for the world to converge on good, simple GUI toolkits that aren’t HMTL+JS. Please don’t say QT or GTK+....
Open source models will probably catch up at the same rate as open source search engines have caught up to Google search.
It's even worse than that: if you're using a local password manager like KeepassXC (I do), you already have some form of MFA: something you know to unlock your password database, and something you have (in the form of the password database itself).

GitHub recently forced me to use TOTP (not quite the only choice I hear, but bear with me). Well, so I've added my TOTP secret into KeepassXC, and now instead of copying my password from it, I copy the TOTP time code.

I believe the increase in security, if any, is negligible.
Is that Google's Yubico?
good: they support 250! passkeys (vs 25 for yubikeys)

bad: most sites still don't support passkeys so you can't use it yet
There is a couple of things I wouldn’t agree with. SMS as authentication factor is certainly bad idea, but it’s not MFA problem. Many services support OTP and modern password manager is expected to support it too.

Unique 25 character password is much easier to steal than your biometric information. All hackers need is a successful MITM attack (key logger?) or a database dump containing unhashed passwords. They could be some script kiddies from Russia or India running an automated attack on some old version of WordPress. For biometric information they would need to get access to it first and hacking your device (or getting physical access to you) if you protect it properly may not be feasible for majority of them.
Don't fall in love with your creation, is not stop creating.

https://www.cell.com/joule/fulltext/S2542-4351(23)00365-3
> it distracts me

It would be faster if a password manager is used with browser plug-in.

> It forces me to have a smart phone

Not if we're talking about TOTP. The information for that can be stored in a password manager.

> Or couples online with offline

Not if you use a password manager.

> it can be replaced with other solutions

TOTP + password manager is more convenient (and more online) than yubikey, in my opinion. Especially convenient with a browser plugin.

My chosen pm is KeePassXC, would highly recommend.

One caveat: I hate non-TOTP MFA. It's either proprietary lock-in or less secure.
Japanese Institute breaks optical fiber record with 22.9 petabits per second
I see a lot of comments asking what or how people are using these models for.

The promise of LLMs is not in chatbots (imho). At scale, you will not even realize you are interacting with a language model.

It just happens to be that the first, most boring, lowest hanging fruit products that OAI, Anthropic, et al pump out are chatbots.
But native code dependencies in those languages usually work similarly to JNI in java, where you write wrapper code in c or c++ to convert from native apis to the interpretor's interface. So interfacing with native code isn't fundamentally easier than for java. Python does have ctypes, but that isn't what libraries like numpy use, probably because of performance.

I think there are a couple of other reasons why Java doesn't have the same problems with brittle builds. One is that for python and ruby and to a lesser extent node, it is more often necessary to use native code to get desirable performance, so there are more cases where native code is used. Another is that in the JVM ecosystem, it is more common for packages to be distributed in binary form rather than as sources, so you don't run into problems compiling dependencies, because you download a package that already has the compiled library in it.
TurnVoice: Transform and translate voices in YouTube videos
I don't mind additional factors. It's the disablement of things like paste and similar that I despise.
Just search for CloudFlare worker abuse. There's lots of stories like this https://news.ycombinator.com/item?id=37064311 , larger campaigns like https://www.bleepingcomputer.com/news/security/blackwater-ma... , DDoS campaigns originating from workers https://news.ycombinator.com/item?id=38496499

It's kinda hard to point to someone saying how big the problem is, because most posts are just "sigh, here's yet another example, anyway...". I wouldn't go as far as saying they're doing this as an intended strategy, but it's definitely a case of it being hard for CloudFlare to care about an issue when they're in business of selling protection from that issue.
Plenty of folks are!
AWS supports multiple U2F keys, I have two on my accounts. The UI is a bit clunky, though.

PayPal, on the other hand, only allows a single U2F token.
I'm not sure if it's still true, but I believe back at Google the interop with C/C++ was even more integrated - if I'm not mistaken the "java" binary got recompiled from scratch (but thanks for caching, not much hit), and your C/C++ code got compiled in with it - so no ".so" loading - you still have single binary (and I think the .jar also went at the end of the file).

Or maybe that was for python (e.g. compile CPython along with any ffi modules as one) + .zip file with classes.

In any case, even if above was not 100% true, it's doable with system like bazel/buck/etc., and still allow you for smooth incremental development (or say in the default "fastbuild" .so files may still be used - locally, but in "opt" the full static link, or through a --config)
> but the developers are mostly on Macs or Linux.

Is that really true outside of web devs?
IMO Git's central enabling technology was disk space getting so cheap you could afford to have a copy of the entire repository and all it's history locally. I'm not sure what the next iteration of that would be... maybe always-on networking, so you're constantly consuming changes from all collaborators without having to manually pull them? What useful things could we do with that information?
"they seem easily replicable"

It is all about the upfront costs and maintenance.

It takes some serious capital and talent to build a high-availablility data center that SaaS run on.

The software is just icing on the cake. You did not include the cake, the plate the cake is on, the table the plate is on, the chair at the table, and the roof overhead. All of those other components are needed and they have costs which must be paid for everything else to work so well and be so easy to use.
> So when my brain is at 200% CPU usage and I log into some service and they ask me to authenticate with my phone, my attention receives a right hook that directly knocks it out. When this happens it means that half of my morning productivity gets destroyed

The author deserves to have a way to work that fits their needs, but really they need to realize that this is an extreme neurodivergence. This is honestly shocking to hear.
Everything I've seen to replace or "fix" the problems with passwords just makes things worse.

My requirements are:

1. Nothing tied to a specific device, especially one that can be easily lost/stolen/broken like a cell phone or USB drive

2. No biometrics

3. It shouldn't permit anyone, outside the website I'm logging into, to know if, when, and/or how often I log into that site.

I'm pretty sure using passwords with an offline password manager is the only thing that satisfies that, but if someone comes up with something better that meets all my requirements I'd be all for it.