skysight-inc/HackerNews huggingface dataset:
I thought it was obvious that a fingerprint allows you to verify that you have the correct public key via some alternative channel. So I read the article to find out why I was wrong; perhaps the article detailed an obscure wetware hole in the verification process, or maybe a dramtically better way of verifying public keys.

Nope: the article was a straight answer to the question in the title. Oh, well: it was short and to the point.
Don't be bigoted against many-mouthed Shoggoths. Be pseudopod-positive.
Recent data shows AI job losses rising, but the numbers don't tell full story
Conceptually, yes. There are a lot of finer points to this concept though. One of the points most relevanthere is that accessing "RAM" is not _actually_ an O(1) operation, due to CPU caches which can speed up sequential access of "close together" data. Thus, if you manually ensure that data is "close together" (by putting it all in an array together), you can massively speed up your program in the real world because now all your keys/data can be squeezed into the cache at once.
Maintenance costs are easily managed by avoiding brands which generally require frequent or expensive maintenance. Regardless, they don’t hold a candle to the long term savings.

If one lacks the rainy-day savings to afford a hypothetical thousand-dollar repair bill, one certainly cannot afford to throw away thousands of dollars every year “to not have to worry” about one’s precarious finances.
> If it isn't, why doesn't Apple do this

Not sure if there would be any real benefit in that. Consider the over-abused Macs at university campuses as an example, used by 10s-100s of persons/day, each potentially logging in with their own user ID. Suddenly their ID is tied to a legit HW, if it wasn't the case already. Of course, technically, Apple could ban the IDs or these computers... but why would they?
Lol.

Here’s the docs. Here’s the code base. We’ll help you with initial configs and some permission stuff. Go have fun.
Yeah, I feel ya :/ My Xbox controller works better on a Mac than it ever it did on my Surface Book. Ironic.
Sure, but the differences there are very small compared to the nutritional value of the 100 calories of white flour.

Note also that 100 calories of whole wheat flour is more flour than 100 calories of white flour, which will matter to people who need to eat, but gets glossed over as you do the calorie-for-calorie comparison.
> What you are doing I would consider unconventional

It wasn't before JavaFX was removed from the Oracle JRE. That is my point. JavaFX used to be a trivial dependency, but now it is quite painful in otherwise identical configurations, definitely not "low-impact."

> If you want to ship a cross platform jar

We do. Isn't that the point of Java, "write once run anywhere"?

This program is also used as a library in autograders. We do not want to distribute 5 versions of each autograder for 2-4 assignments. The autograder should be distributed as 1 jar. Undergrad TAs are creating that jar and may not have knowledge of complex CI pipelines etc.

> then it's probably worth your time to require a JDK with FX already installed.

That is not appropriate here. This is an educational tool, and students are enrolled in other courses that use Java frequently. We should be able to use the same JRE that students already have installed — it is unreasonable to require installing a different third-party JRE to run a digital logic simulator. It also adds another hurdle for freshmen/sophomores who may not have a natural ability for juggling different JRE installations. (Source: We tried requiring Azul and it was painful for everyone.)

> I do not have ARM versions of any of my code yet.

We have >900 students in this class, so it is necessary to support M1/M2; in fact, a large portion of our students had M1/M2 laptops. It sounds to me like you could just provide a fat jar in your case, actually. Supporting aarch64 is where we hit problems with our fat jar[1], since the aarch64 native libraries have the same name as the x86_64 libraries.

To summarize my point: yes you can make the build/install process more convoluted and avoid this problem. But we have an installation flow that has been battle-tested by thousands of students for 13 years (download circuit simulator .jar and run it) we have no good reason to abandon. The combination of the arrival of M1/M2 and JavaFX getting yanked from the JRE has made supporting our existing (extremely reasonable) flow nothing close to "low-impact."

1: https://github.com/ra4king/CircuitSim/pull/93/files#diff-648...
The context you appear to be missing is actually the content of the post. It's often the way with articles: they give a title, which is then expanded upon in the main text.
The better allegory (and actual advice that might be useful): If you want to avoid a toxic workplace, work by yourself.

Now, that said I’m being specifically pedantic: these are steps to AVOID toxic environments. To COMBAT toxicity is a whole other problem with way too many variables. I went for the solvable problem.
I don’t think it’s particularly uncommon to find bureaucrats who use “we need to do more research from first principles” to frustrate progress of any form.
Looks neat. Have you looked into using the new WebTransport protocol?

https://datatracker.ietf.org/doc/html/draft-ietf-webtrans-ov...
https://datatracker.ietf.org/doc/html/draft-ietf-webtrans-ht...

Still early stages, but it looks promising! Notably it supports multiple streams and unreliable datagrams since it goes over QUIC
Sorry a quick Google suggests your figures for EU users is very inaccurate. Do you have a source?
These factors are what I call the “trappings of life”. It is a completely open question (and I mean completely) how likely life is to arise spontaneously when these factors are present. One single instance of life elsewhere or successful abiogenesis in the lab would change that, but we have neither.
I really appreciate the clarification.

That distilled claim is the one I can honestly believe to be true, though I don’t have the actual numbers to back it up.
SQL Polyglot is really more of an education/exploration thing.

And yes, I should definitely increase the C# sandbox timeout. Will do :)
Smartphone owners have no right to demand anything of you. It’s your freedom to use a dumbphone.

Along the same lines, why should you, the dumbphone owner in the stark minority, expect the majority to cater to any of your whims? If the majority consider you a burden to include in their communications because they have to go the extra mile, that’s on you, not them. If not, more power to you.

I had a longer reply, but probably most of it is irrelevant. In any case, everyone’s social circle is different, but this is the general observation I see everywhere around me both on and offline.
Be notified when to update your devices! Feed updated every 15 mins. Open source.
Continuous Integration as legal fiction?
As I understand it different regions of Europe use different messaging apps, but none use SMS, though the UK uses it more. As far as I know Telegram is particularly popular in Eastern Europe.
I also have a habit of just paying the bill when elderly people start counting out pennies and nickles for a $5 purchase.

Thanks for the correction :-P
Twitter Now Showing Ads for Nonconsensual 'AI Undress' Apps
I have a car I bought on PCP so I understand that math, but when the dealers starts calling after one year trying to get you to re-up it’s a poor decision financially
It got much much harder to run an email server because all the hoops that had to be jumped through to reduce spam made it a nightmare. I'm not sure I really blame Google/Microsoft for that.

I have a pretty decent experience on Fastmail and had at one point reasonable experience on Protonmail as well (except that they could never manage to import my enormous 20 year archive of email :D). Most every ISP in the world still offers email, friends and family that have those addresses still manage to get their emails through. There are also plenty of newsletter hosts mail services that don't get dropped or put in spam.

Granted those aren't self-hosting, but these other hosting options just reinforce that it's more a matter of spam prevention than it is evil companies being evil (to be clear, I accept they are evil, and they do evil things all the time).
Yes.

I keep sharing Gabe Brown's three-part video series titled Treating the Farm as an Ecosystem, now and then, here on HN, whenever such threads come up.

Some really solid practical and pragmatic stuff there, on regenerative agriculture, which, as I understand it [1], goes beyond organic farming, and is related to many of the issues talked about in this thread.

[1] I had done organic gardening successfully, for a few years, some time earlier, so I have at least some practice and experience (and also a lot of reading and thinking about what I read) as the basis for my opinions of his work and those of others I mention, such as Elaine Ingham (a video by her is below too).

One of her most astonishing finds / claims is that (IIRC, I saw the video a few years ago), almost all soils anywhere on earth have more than enough nutrients for plants for many many years.

She said the real issue and limitation is the lack of soil organic content and soil structure and mycorrhiza ( https://en.m.wikipedia.org/wiki/Mycorrhiza), without which even applying tons of nutrients is useless.

And, Gabe has a big farm, a few thousand acres (so not small scale) in North Dakota, USA, with field crops, green manure, livestock on pasture / prairie, etc. And is making profits from his farming operations, sustainably, even regeneratively, without government subsidies, and more than his conventionally-farming neighbors, some of whose soils are getting worse, while his get better over time, by objective measures (checked by external govt. agencies) that he mentions.

Here is Part 1.

Treating the Farm as an Ecosystem

https://youtu.be/uUmIdq0D6-A?si=bTLRoacXTGiAP-Qr

And here is the video by Elaine Ingham, The Roots of your Profits, in which she talks about the points I mentioned above, and some more relevant ones:

The Roots of your Profits

https://youtu.be/x2H60ritjag?si=MskMBEIgTUStrWsX
For anyone interested in the origin of life, and the origin of complex life I highly recommend Nick Lane's Books.
You can start with "The Vital Question".
There are also some fantastic videos of him online.
The core problem seems like you can't see the nutritional value in the grocery store. So you can't prefer more nutritional produce so there is no incentive for the industry to cultivate more nutritional crops.

Imagine if every farm needed to test their produce for nutritional value and have nutrition labels at the store. I'm sure things would change.
The universe is 13 billion years old.

Planet earth is 4.5 billion years old.

Life on earth started 3.7 billion years ago.

We sent our first radio wave just 125 years ago.

Probably life is not than unusual and we just don’t have a way to verify this (yet).
No public keys are meant to be public, either yes key will be correct or not. This is why (to my knowledge) package managers like apt still check http endpoints instead of https ones.
> I would point out that this has been standard practice since the advent of the internet

Maybe it shouldn't have been? We've been frog-boiling toward this point for a long time, from a starting point that was generally good for content creators (your content is made more discoverable) to a point that is not so good for content creators (your content is scraped and digested, programmatically laundered and regurgitated on huge corporations' own platforms with token or no attribution, and no revenue shared).

In a parallel universe where search engines were explicitly opt-in from the beginning, I think these conversations would look very different today. What OpenAI and its peers have done would, I dare say, be uncontroversially (and correctly) regarded as theft. Just as I'm not allowed to distribute^[1] software incorporating somebody else's code in a way that violates the terms of its license (or lack thereof), I shouldn't be able to distribute software that incorporates any intellectual property that I don't have the rights to.

^[1] Broadly speaking.
There is no ground truth in SQL. I mean, there is a standard, but none of the vendors bother to implement it.

What SQL Polyglot can do is help you quickly check if certain database engines support a certain SQL feature.
And what would you have done in say 1993 with a computer without floppy disk?
It’s effectively the precautionary principle, and it’s bad epistemology for the same reason the precautionary principle is bad epistemology.

You’re imagining a danger, which you by definition cannot explain to anyone why the danger is real, and then you’re arguing that some very specific action should not be taken because it might trigger the imaginary danger.
Mathematicians Prove the "Omniperiodicity" of Conway's Game of Life
Blockchain and crypto have made any discussion of digital currency sound toxic. I almost downvoted reflexively. But to the extent it can be implemented without blockchain it sounds like a good idea.
Makes much sense
Python Variables, References and Mutability
the new "think of the children"
Dupe of https://news.ycombinator.com/item?id=38646123, submitted 2 days ago.
Tesla have claimed that the Model 3 has the same TCO as a Corolla after 5 years, so does that count?

https://thedriven.io/2023/04/27/tesla-model-3-total-cost-of-...
Why would it be a brick? It looks like it has an 8 year warranty on the battery which is what most people worry about. NMC batteries should last at least 1,000 cycles which equates to 200,000 miles if it gets 200 miles to a charge. LFP batteries should get 2 - 3 times that.
Finding a new particle doesn't necessarily threaten strictly up held religious beliefs like finding life somewhere other than this rock
The btree works great, and has barely changed. I made it faster with two tricks:

1. I made my own rope library (jumprope) using skip lists. Jumprope is about 2x faster than ropey on its own. And I have a wrapper around the skip list (called “JumpropeBuf” in code) which buffers a single incoming write before touching the skip list. This improves raw replay performance over ropey by 10-20x iirc.

2. Text (“sequence”) CRDTs replicate a list / tree of fancy “crdt items” (items with origin left / origin right / etc). This special data structure needs to be available both to parse incoming edits and generate local edits.

Turns out that’s not the only way you can build systems like this. Diamond types now just stores the list of original edits. [(Edit X: insert “X” position 12, parent versions Y, Z), …]. Then we recompute just enough of the crdt structure on the fly when merging changes.

This has a bunch of benefits - it makes it possible to prune old changes, it lowers memory usage (you can just stream writes to disk). The network and disk formats aren’t dependant on some weird crdt structure that might change next week. (Yjs? RGA? Fugue?). File size is also smaller.

And the best bit: linear traces don’t need the btree step at all. Linear traces go as fast as the rope. Which - as I said above, is really really fast. Even when there are some concurrent edits and the btree is created, any time the document state converges on all peers we can discard all the crdt items we generated so far and start again. Btrees are O(log n). This change essentially keeps resetting n, which gives a constant size performance improvement.

The downside is that the code to merge changes is more complex now. And it’s slower for super complex traces (think dozens of concurrent branches in git).

I’m writing a paper at the moment about the algorithm. Should be up in a month or two.
>I'd argue that working in a fast food restaurant isn't in the same category as working in a diner or other actual restaurant, being a chef, or working for a big box retailer.

I don't disagree. I'd like you to think critically about why.

>If everyone has to work in those jobs, most people won't find that fulfilling or enjoyable because they're not suited to that sort of work. And when you add the fact that these are low-paying jobs, you have most people doing something they hate for very little pay, because (in this scenario) the work they are suited to do is unavailable. That's the beating heart of a dystopia right there.

I think this is incorrect. Firstly, because (per the proposal) they wouldn't be low-paying. Secondly, and to the contrary, if everyone has to work these jobs, then not only are they no longer jobs only for losers and the unskilled, they are suddenly jobs with a lot of staff with which to build accommodating and reasonable schedules.

I WANT a society where my doctor serves food or works the register for a few hours a week, or where someone laid off from their 6-figure coding job can earn (or even be given) enough to avoid losing their house. That's the opposite of a dystopia; that's a world where even the most educated and prestigiously-employed community members are connected to the rest of us. Maybe that's a dystopia for them?
SSH Certs are not related to x509 PKI certs. SSH certs are created with ssh-keygen and is the result of one key signing another. The public portion of the signing key (ie. the “cert”) needs to be distributed separately.
> Pointers are annoying anyway.

But the parent indices are pointers. Not in the index-into-all-memory sense but in the offset-into-array sense. They’re smaller, type safe, inherently well packed, and can’t point outside the instance of the data structure in question if they’re bounds checked. But I would still think of them as a sort of pointer.

So this is just a tree, with only parent pointer, in SOA form, and iterable (in no particular order). Which is maybe useful if you want that specific data structure.

And it’s utterly useless if you want, say, a tree with children and need better-than-O(n) access to children. Which you probably do need. Of course, you can add child pointers in SOA form if you want.

(SOA is Struct Of Arrays)
TSMC founder Morris Chang on the evolution of the semiconductor industry MIT [video]
There's a setting somewhere to auto download cards when they're seen. That should get you up and running quicker!
If you mean an old school flip phone, they don't work because of the 2g/3g shutdown. If you mean a current one, they have similar issues to the Nokia 225 plus are expensive. Oh well.
Feels like they're desperate for a pattern but focusing on size (which can either increase or decrease) is oddly specific. The headline of the article should probably be "insular animals tend to differ from continental counterparts" which is really all you can extrapolate from this "rule"
Actually there are trivially easy ways to calculate DOW off the top of your head.

Then what are they?
You haven't lived until you've manually typed your ed25519 public key into your Hyper-V VM authorized_keys because "Type clipboard text" still doesn't work out of the box...
Some literature is almost certainly more accessible than others. I'm not sure where Dickens is on that list but it's almost certainly not on the very accessible side, especially at the high school level. Mind you, I'm not sure that some of the more modern novels we did in high school age especially well. But I loved A Picture of Dorian Gray, for example.
>No public keys are meant to be public, either yes key will be correct or not.

Yeah but how do you know if the key is correct if you're getting it for the first time?

>This is why (to my knowledge) package managers like apt still check http endpoints instead of https ones.

Your distro ships with a public key that lets you verify package signatures. TLS is redundant because you already have that trust anchor which came with the distro. (I would suggest using TLS anyway though, to force an attacker to break 2 layers of security.)
Hopefully there's some way you'll be able to get it out of your device. Obviously not as ideal as a simple checkbox in Google, but to me making you have to set up some sort of export/sync yourself is an acceptable tradeoff for what the rest of us get from this change. Of course, it's easy for me to say that, because I don't use the feature basically at all ;)
There's quite a bit of interest; e.g. ex-colleagues of mine have spent lots of effort on refining the 'chemoton' model. I think it's a fascinating subject.

"The basic assumption of the model is that life should fundamentally and essentially have three properties: metabolism, self-replication, and a bilipid membrane.[3] The metabolic and replication functions together form an autocatalytic subsystem necessary for the basic functions of life, and a membrane encloses this subsystem to separate it from the surrounding environment. Therefore, any system having such properties may be regarded as alive, and it will be subjected to natural selection and contain a self-sustaining cellular information."

https://en.wikipedia.org/wiki/Chemoton

https://www.nationalgeographic.com/premium/article/he-may-ha...
Ask HN: Where do I get the data to have an LLM help me grow food?
A gold standard would lead to deflation. Noone wants to get an annual 2 to 5 percent paycut while paying interest on a mortgage on a house that goes down in value every year.
Paris mayor plans to triple SUV parking tariffs to cut air pollution
How many exoplanets would you say we have proven have no life? You imply 10^40 exoplanets are known to harbor no life. That is probably vastly more than the number of planets in the observable universe (something in the wide region of 10^20 to 10^25).

Something like 5,000 exoplanets have even been discovered. We can’t cross off many of those as certainly lacking life.
How does the licensing work here? Does Apple need to pay AMD anything or submit their contributions back to the FSR codebase?
I did come back to it as an adult. Spent a while doing 2d and 3d graphics. It was much easier as an adult but rendering involves too much of this math stuff and I gave up. Definitely not for equipped to shine as graphics programmer.

Which brings us to my original point - not everyone can do it (well).
You can already use certificates to login via SSH. Usually you setup your own certificate authority and sign your own certs because they need special attributes.
You're talking about an attacker who wants to tamper with communication. Eavesdropping is far easier. [I agree you'll want deepfakes if you want your MITM eavesdropping to handle emoji codes, for mass surveillance at least.]

But even tampering seems pretty easy if the attacker has a more modest objective, of having you and your buddy each talking to one of the attacker's henchmen using voice changers. The emoji verification won't help here -- each henchman just gives the emoji for their respective conversation.
It's probably both - right?

Because there's more CO₂ each individual plant will grow larger and draw up proportionally fewer nutrients. At the same time, we are also able to rotate crops more often, so whatever replenishes nutrients in soil is probably now "covering" a larger numbers of growth cycles.
I think that Chesterton's fence is a useful guide when it comes to some incomprehensible systems, including our own biochemistry and physiology.

Once upon a time it was thought that some organs are useless (thymus in older age, appendix pretty much always). This has been revised. Nature often introduced hard-to-understand systems in order to cope with something we don't even realize is a problem.
Interesting the casual references to languages K, J and Q. I have never heard of them, and they are hard to google. Anyone know?