skysight-inc/HackerNews huggingface dataset:
They tackled the subject for sure, but my takeaway from that blog posting is not that storing your TOTP tokens in 1Password is “as good as” having separate hardware devices for password storage management and TOTP management, but rather that storing your TOTP tokens in 1Password (or any password manager) is better than not using OTP at all. This of course is definitely true, and a definite improvement in security. I think a sibling referred to it as “1,25x” as secure, which feels about right (on some non-linear scale where 2.0 represents two unique factors).

I don’t use a KeePass or similar device, and I do have my TOTP tokens on my phone (using the great OTP Auth app, no affiliation), but I do most of my work on a computer so I toyed with completely removing password management from my phone and just having the OTP app there. I haven’t committed to that that yet though. Another option is to use a cheap device such as an iPod Touch for OTP, though those are probably more expensive than a dedicated OTP device (I just happen to have one lying around unused).
iCloud should be wonderful except it sometimes refuses to download or upload a file for hours. I’ll want to transfer something from my phone to my computer so I’ll move it to iCloud in the Files app and then it just won’t upload.
It isn't just median vs mean basics, see for example:

"For example, estimate the mean word length in a book by randomly sampling words from the book; predict the winner of a school election based on randomly sampled survey data. Gauge how far off the estimate or prediction might be."

This is proper statistical understanding, since it includes how sampling is made and confidence intervals. They just don't use the names of theorems, they just teach the understanding for estimating values etc. I don't see the value in drilling math equations for calculating those values and forcing the kids to remember lots of names.
Discoverability doesn't always have to be so fast. As long as the word eventually gets around, maybe a slower kind of discovery could be good for some communities.

There's also boardreader.com for finding small communities, although I don't think it really tilts towards Mastodon very much.
> There is, however, a problem with build tools not supporting newer JDK features

This is important point.

From my experience in Enterprise IT the build pipeline is roughly at JDK-8 level in terms of generating deployable artifacts. I have contorted by maven build config to invoke jlink on builder nodes to make standalone artifacts that won't need JDK on target machines. But it is not optimal for few reasons 1) I have to manually track what JDK modules I need to include in build. 2) Its hard to get new JDK installed on build machines for ones, forget the dot upgrades to keep it latest bug fix level. Their reasoning is build machine is just to invoke maven build. Only target machines need latest patched JDKs. 3) From JDK-8 they are now directly jumping to make docker/kubernetetes builds which are fine but totally different direction if I am just looking to make no-fuss standalone Java application to run on a Linux VM.

As one can see some of these are organizational issues not necessarily technical one. But as single developer with no power to force IT infra teams on supporting alternate workflows I am basically stuck with JDK-8 workflows.

What is missing in setup is somehow to tell maven I want to generate a standalone Java app using jlink for linux ver.N target so gather up all modules / java binary and other tools required based on information in this pom file without relying on JDK version of builder . This should be able to run builder machine so it remains integrated with current build pipleline.
It's true, after I ate some, I felt like I was no longer playing ketchup.
I don't even see why you'd need transmission lines. Just use the enormous quantity of free energy for direct carbon capture, at that site.
If the product has to TELL you up front that it has a "beautiful and intuitive user interface", it likely doesn't.

And the Tour page has a screenshot of the application titled "Stunning Elegance", where it does a great job of mostly looking the same as any desktop app developed in the last 10 years -- full of shades of grey, plain, no menus.

As a cherry on top, it is described as "Easy to learn. Exciting to master", which is getting so far out there into marketing land that my spidey senses tell me to stay far away.
Misery truly loves company
Anyone know if anyone ever asked Carmack about how he felt about Descent? That was the first 3d game I was exposed to that ever felt like a true 3d experience.
I thought community notes already existed as bird watch before the takeover?
I agree, I think it's mixing up cause and effect.

Especially how it is phrased with "feel obligated", it's clear these are people who are conscientious about their productivity and most likely set a higher bar for their output. It's hard to think their out of hours work is causing their loss of productivity, rather their work environment is causing it and only the people who feel bad about it (ie: would report that their productivity wasn't adequate) actually work longer hours to compensate.
i have used both for one project or another. but it has been a while. my main reason for trying different video editors was that some were not able to create videos from single jpg frames for a stop motion animation. but apart from that the editing of video streams worked well enough in both.
You see it in solar energy forecasts as well. The last 2 decades have been an exercise in forecasters constantly underestimating solar energy generation. It’s actually quite embarrassing.

The problem I think is that the analysts in these areas are auto analysts, an industry that really hasn’t seen any major technology changes. The majority of cars sold today are internal combustion engines. Same as in the Model T.

And the analysts in the solar power field are energy analysts. Another field that hasn’t seen any major innovation that wasn’t another form of a fossil fuel for centuries (the exception being nuclear, but nuclear is kind of a bespoke technology for, if nothing else, all the non proliferation issues associated with it).
Average manager and aspiring tech executive is mediocre, sounds about right?
Tiobe Index for December 2023
>> Martin said it’s also important to remember that vocational training is not the only purpose of math education.

This is true, and not just for high school but for college. Neither are out to teach specific vocational skills - rather they provide the underlying tools that students need to learn their vocation later on.

Sure we could stream kids from grade 1 for their "allocated profession", teaching them only with regard to their eventual job, but there's a reason we don't go that pretty dystopian route.

With that in mind we can argue that one curriculum is better than another for a specific path or other. But really that's a fruitless, and pointless argument. Future STEM students need Calculus, future programmers need Logic, future artists need Color Theory.

If I had to argue for a curriculum change I'd lobby for things like budgeting and basic accounting - but that's just me and everyone will have a different opinion.
DNA Data Storage
> it was mostly just tedious

Sounds like most Java development.
I didn't know the company was founded by Robert Swartz. I'd always see the magazine ads for Mark Williams C, and just ssumed that it was written by a programmer named Mark Williams who made a company.
Client side ssl certificates satisfy all your requirements and are phishing resistant.
There are scholars on both sides of this: https://www.npr.org/sections/money/2019/12/17/787476334/is-a...
Tokyo would beg to differ.
My bike has keyless ignition. Definitely one of my favorite thing on that bike!
If you have mpv or avconv/ffmpeg based video player, you can play and seek the in the gif video file. You can use `mpv http-gif-url` to play it directly.
MUI. It works very well and has great documentation and examples. Makes frontend work so much faster.

MUI is the single biggest improvement to my workflow in 20 years of doing this.
i found pitivi quite stable when i used it a few years ago. i used it quite a while for various projects. i mostly had AMD and before that intel CPUs with onboard graphics and i always avoided nvidia though.
I made 77 requests to the GPT-vision API while developing/demo'ing this, and that resulted in a $0.47 bill. Pretty reasonable!
Free can run on many OS'
The original Halo trilogy, Breath of the Wild/Tears of the Kingdom, The Last of Us, and Horizon: Zero Dawn, to name a few. A great mechanic!
The website works really hard to not tell you what platforms it runs on.
Also fewer people
> All of the city's authority comes from state law, and I don't see why the state puts up with any of this.

It doesn't come all come from "state law" of the type the legislature is free to change, it comes from the State Constitution and/or initiative statute, either of which takes a statewide public vote on the specific measure to change.

Also, the same people that vote for the local officials that are resistant to housing measures vote for state officials, and they aren't much less overrepresented at the state level -- its not a uniquely SF issue.

That said, more to the point:

> Maybe it would be politically fraught, but the state could remove the authority of cities to do things like this.

The entire issue in the article is San Francisco pushing the limits of, and arguably exceeding, its authority under existing law; the State has already restricted the authority of local government in this area.
You're complaining about less than a dozen paragraphs while telling me to read a 560-page book?

This seems like the money quote:

> the broad-based prosperity of the past was not the result of any automatic, guaranteed gains of technological progress… Most people around the globe today are better off than our ancestors because citizens and workers in earlier industrial societies organised, challenged elite-dominated choices about technology and work conditions, and forced ways of sharing the gains from technical improvements more equitably

But this is just the same point I've been making: If you have competitive markets, this is what happens naturally because customers will prefer to patronize businesses that share the gains of technological progress with customers and employees will prefer to work for the ones that share the gains of technological progress with workers. The ones that try to keep all the gains for themselves get outcompeted -- as long as there is competition.

The problem -- which they largely recognize -- is that if you don't have competition, which has been the case in many instances throughout history, the incumbents become abusive. But since this is only possible when they have insufficient competition, that is the problem we have to solve.
Doing something similar with YARP to work around a client that issues a request with accept-encoding: identity,* but crashes when it gets a gzipped response.

Downside to quick workarounds like this is that they almost always end up becoming land mines. No one who looks at that config is going to know why it looks that way and will be tempted to take it out.
As the human brain is a clump if regions all interconnected and interacting, for example, one may focus their attention elsewhere until their name is called, having a ight model wait for an important queue makes sense more than fiscally.

One time I was so distracted, I missed an entire paragraph someone said to me, walked to my car, drove away, and 5 minutes later processed it.
A few resources which you may want to check out, in roughly increasing order of difficulty:

- Free Code Camp: https://www.freecodecamp.org/

- CS50: https://cs50.harvard.edu/x/2023/

- How to Design Programs (HTDP): https://htdp.org/

- Nand2Tetris: https://www.nand2tetris.org/

These are geared towards making you a better programmer in general, though it won't necessarily bring you closer to an AI/ML career.

Also, math is pretty important if you want to get into AI and similar things. Even otherwise math is important; don't listen to people who say you can get by without the math! So, try to get a head start on probability, calculus, linear algebra etc.

Good luck!

Gosh, I'm embarrassed about what I was up to when I was 16.
This is great.

Is there a way to do code colocation with templates? I mean for writing presentation logic alongside the html.

Asking because it seems templ functions only allow html.
A great project!
Thief 2. There's an incredible amount of fan mission content for it, ranging from relatively simple levels, to one-off-masterpieces, to incredibly elaborate full-game-length mission packs.

Warcraft 3. It shipped with a powerful but approachable map editor, had thousands of custom maps and game modes, and spawned two separate gaming genres (Tower Defense, MOBAs).

Morrowind and Skyrim. Both were solid base games to build on top of, both shipped with a powerful creation kit, and both have an incredible amount of modded content available for them.

Technically, Neverwinter Nights would also qualify, but that was less of a game and more of a DnD dungeon master sandbox.
Yeah, Elon just rebranded it, and pushed fwd its full deployment

I was fully bought into the premise of birdwatch due to it being based on a great tool I've worked with for years (Pol.is), but Elon seemed to have loved it for all the wrong reasons, in a way that irked me. He seemingly just wanted to cut the trust & safety teams, and remove onus of creating policy :/
i have used it. it is easy to learn. certainly no worse than the alternatives.

i get your criticism. but i see that very often. most projects just don't know how to present their apps in a good way. it seems like we are trying to describe apps in ways that we think non-tech people would expect, but we are failing.
The headline here is ludicrous clickbait. The article is mostly about San Francisco dragging its feet (like many cities in CA) on housing obligations.

There's a couple sentences about Sacramento going beyond its obligations, and then the weak connection that this means San Francisco is dumping its problems on Sacramento, rather than just Sacramento being more aggressive about dealing with its own problems.
The article really focused on doing this in Yellowstone, and all the problems we'd have there. I noticed the second hottest spot on the map is Southern California - which has the benefits of being a desert and close to major population that'd use the power.

Looking it up, we're of course already on top of harnessing the geothermal there https://en.wikipedia.org/wiki/Imperial_Valley_Geothermal_Pro....
Didn’t Steve Jobs originally say that iMessage would be an open protocol? Or am I misremembering that?
TLDR:

"But, according to Chien, your gift list doesn’t need an overhaul yet. She suspects the companies will reach a licensing agreement or detente in the coming weeks. “Typically, you want the market decisions to be driven by the market, not by litigation,” Chien says.

“My guess is they will work things out, and Apple will still be able to sell its product.”"
I don't know why Beeper was putting their future on something that was reversed engineered. It is so easy for apple to deny list those keys used from hacked iphones...
How so? I'm more than happy to take constructive criticism, but without specifics there's not much I can do.
Of course not. They'll remove or modify the infringing feature, or work out a license deal.
It’s reasonably straightforward to produce a very nice resume/CV in LaTeX.
Sure but is it a particularly long bow to draw to say those who feel less productive often are in fact less productive?
11 paragraph in, the answer is, apparently, Sacramento.
I see what you did there with the Dr. Horrible reference! :D
He said FaceTime would be an open protocol.
Two reasons: 1) it's bad long-term (the doom loop exists because no one can get skin in the game, and all of the houses are owned by people who see it as a physical 401k) 2) SF is damaging the region, by being a bad citizen and hoarding all of the investment that has been poured into it in the last 40 years. Think of it as a museum that suddenly jacks the price of admission up by 10000% because some billionaire bought it and wants it to be their private collection.
Correct answer to the headline is “probably not.”
A financial news site uses AI to copy competitors
You’re misremembering. He said that about FaceTime.
No, it's not like a balloon, an eruption isn't the earth popping, it's an upheaval from the mantle eventually surfacing through a weak spot that causes it.
Take WebMIDI, for example. A website using it would show the following permission prompt in Chrome:

example.com wants to

Control and reprogram your MIDI devices (SysEx)

[Block] [Allow]

According to you, everyone should understand that term to mean example.com can access their device to overwrite the firmware of a MIDI device, turn it into a keyboard, and take full control of the computer. It's feature working as intended and no security issues are involved.

I am so glad both Apple and Mozilla doesn't subscribe to you or Google's definition of "security." These gaping security holes can cause so much damage, and to see these as "features working as intended" shows how disconnected you are with actual users. Even the infamous ActiveX would not have security issues if we redefined security under your terms. A browser should never ever include capabilities for full system compromise as one of its features. No permission prompt should ever let that happen.

You also need to consider the inherent danger of exposing hardware to websites when considering whether permission prompts are adequate. Again, hardware aren't designed with the expectation that they'll be exposed to websites. Browser vendors can't possibly be aware of the security implications of doing so for every device out there either. That was one of the core arguments of my previous reply and I wish you hadn't omitted that. Unfortunately, my point about the permission prompt was taken out of context and spun into a "pathological" view that "everybody in the world besides myself" would laugh at.

Lastly, you might want to actually look at the examples I posted. Some of them don't or didn't involve permission prompts and enabled attack by third parties. Which I believe to be a security issue even under your terms.
I have seen this repeated so often, but let me put something clear: If your work constantly requires weird hours when it could realistically be a 9-to-5 job if they just hired enough/the right people or had their marbles together in terms of organization — then the only reason you need to do this is mis-management.

I worked in the film industry where you are sometimes for actual physical reasons (the sun being the sun) required to work weird hours. Excuse my french here, but only idiots wear bad work schedules as a badge of honor. Bonus points for when you confuse the thin bond you form with the other victims of such abuse with friendship. If you constantly need to overschedule people, you did a bad job at resource allocation. If your work load is constantly on the edge and things are always "exciting" for all the wrong reasons, you are managed by incapable fools. In a smooth operation the content of the work is exciting, the schedule and the work hours boring.

You can call yourself a "hero", but it is your life (that all of us only get one of) you're wasting. If you ask me (and you didn't) there is better a good reason each time it is wasted like that.

Don't get me wrong, I am willing to step in to do the extra mile when there is a good reason, but in my experience it is very rare that there truly is. If the content of my work is exciting I can easily go for the whole day, but it would be in the interest of my employer to stop me, so I can do this for months without burnout and fatigue.
Would have been amazing 10 years ago. Client side js is what would make this messy to use in big projects imho.
It’s a shame GNOME doesn’t invest in it as much as KDE does in Kdenlive. Really liked its approach at first, but now still nowhere near truly usable.
Probably supposed to prevent abuse (people cresting bot accounts to use the free credits with GPT-4)
Given what would likely be billions of dollars to build such a plant, I am not sure why the transmission infrastructure is more than a footnote on the project. There is a lot of engineering know-how on moving electricity large distances. Less so on building the world's largest power plant in the efforts to avoid a global catastrophe.
Only officially supported on RedHat, perhaps. Works well on many other distros (I run it on NixOS).
This seems like an extremely important point, which applies not just to desktop Linux (my OP,) but especially server Linux.

Since I am very much a Linux & infosec muggle, please indulge me with these possibly dumb questions:

What are the mitigations for the lack of provenance in pip/npm?

Does properly configured SELinux do enough? Or is the fact that many of these packages use 80/443 negate that? Or is the fact that a pip/npm package could be comprised after install, during update the main problem?

I always think of that left-pad NPM drama, could that single dev have comprised thousands of systems by changing his update to something much more nefarious, instead of just deleting the package?

Again, sorry if these are dumb questions.
Apparently they have a broader offering that aggregates messaging across various different platforms (though not iMessage anymore). I have also wondered if the value prop is sufficient if iMessage is not in the mix, but have concluded that their team is probably smarter/more well informed than me, and they're dedicating years of their lives to this!
I did read the paper, and I am generally familiar with the physics of charged particles.

And of course I caveated everything with “likely” and “unlikely”, to hedge against misunderstanding. What else would you like me to do?
Twitter is dead, long live X. Twitter as it was no longer exists. Regardless of what one may think of Elon's leadership, he's making big changes to the platform.

It's a Ship of Theseus argument. How much does a platformm have to change before it's no longer what it used to be?
My goggle fu, though used only briefly, comes up with no quick link for the paper, “Death, the Priest, the Woman and the Cow: Chronicle of Research in the Village”.

Anyone else have better luck?
I reckon that if consciousness is a quantum process happening at room temperature, it can probably be replicated in other systems at room temperature.

The popular science that has been coming out about the origins of consciousness has been really interesting to follow. Quantum nanotubules seems a dark horse in the lineup against the frontrunners, Integrated Information Theory and Global Workspace Theory.

When I was in high school, I was always very interested in the history of science and how scientific advances played out over time, quite dramatically. In my lifetime, I've had the pleasure to watch quite a few of them play out in such a fashion. There seem to be multiple big ones looming large on the horizon these days, the origins of consciousness among them. I suppose I'm rooting for Penrose, because he has a lot riding on this and he seems like a genuinely brilliant person. Maybe I'm a romantic?

Thanks for asking.
At a time when people are being bombarded by ai generated images the examples shown will be hard to pass as real. Lighting looks as if it's a 3d rendered model instead of a studio shot.