skysight-inc/HackerNews huggingface dataset:
> There's a fingerprint reader on my laptop, face id on my phone, and a yubikey in my USB.

Great! Not everyone has that! I do but if I could only implement one type of 2FA I'd probably still pick SMS.
This is great news for preservation efforts as we have a large set of stuff that can't be opened.

I wonder what this means for the maya codices, many of which are in similar shape: https://en.wikipedia.org/wiki/Maya_codices#Other_Maya_codice...
perfectly cool project and accomplishment, but title should be "my business card snags, snares, and ruins fabrics... but it's really cool in a 'it's been done before' sort of way"
Yeah but no normie knows about it. It never prompts to store them.
Which "people" do normal parking enforcement? Most cities do zero parking enforcement in residential neighborhoods unless someone specifically complains.
The 12% returns are not adjusted for inflation or depreciation. Historically, India had a much higher rate of inflation than the US. And the rupee has continuously lost value against the dollar.

US 10 year treasury yields are ~4% while Indian treasury yields are ~7%.
Ask HN: Best books on early/prehistoric humans?
Looking for some recommendations on books on prehistoric humans.

Not interested in Neanderthals, more our direct ancestors.

Bonus points if the book is available in audio format.

I tried searching Reddit etc, but the recommendations fell short (Sapiens, The Dawn of Everything)
It’s a much easier pill to swallow if said user has a US phone plan and ever tries traveling abroad.

Good luck getting those SMS codes. And good luck getting the US carrier to not shut off your plan if you travel for longer than a few months.
The cynic in me wonders how much easier it is to run a wash trading scheme to pump up something now that the Layer 2 network is taking more than just smart contracts. The L2 network provides a ledger which can change much more quickly than traditional wallet to wallet transfers, faster even than exchange wallet to exchange wallet.

That said, I believe of the remaining viable cryptocurrencies the Ethereum blockchain is the most impressive to me. It attempts to provide real solutions to the many problems crypto has, and switching to proof of stake reduces power usage in general for the network, as does the L2 network. So if crypto is bad, Eth is possibly least bad lol
I wonder how Seacrest feels about already being "the old guy who has hosted New Year's since forever".
Random thoughts.

I have a feeling that very few hardware projects have a bunch of people working on the same schematic. I have personally never experienced that in the context of a team project. What might happens is that each engineer works on a board and the interface between boards is defined by the team. I have done systems with 15 to 20 PCB's interconnected through custom backplanes this way.

Modern EDA tools have ways to save portions of schematics to a library of reusable designs. This could be one vector for collaboration if, for example, you have someone who is an expert in SMPS (Switch Mode Power Supply) design doing all your power supply designs. There is no need for this person to actively modify an ongoing design, all you need is a verified and tested schematic unit you can just plop down and move on.

I think a key difference in hardware is that you cannot constantly be engaged in modifying the schematic. These are things that become real physical instantiations at a given point in time. And so, the concept of using software tools isn't necessarily applicable. You most definitely do not want someone changing a schematic after it has been released to production.

Then you have to step back and look at things at a system level. The schematic is the least important part of the process. Imagine something like an industrial CNC machine, the real deal, a $100K machine that has to work 24/7 and not kill anyone. This machine likely has dozens of PCB's, wiring diagrams, mechanical components that need to be machined, injection molded, made from sheet metal, hoses, valves, sensors, etc.

The schematic, is the least of the problems we come across when designing such systems. It simply isn't a pain point. And there is very little need to iterate like we might in the software domain. In fact, that could be very dangerous, because, at a minimum, you can't just recompile your way out of a mistake.

Sorry if I sound negative about this. That isn't my intent. This is just my opinion based on decades of doing electronics at every level. I have, BTW, used software to generate netlists for very specific designs. In one case it was an array of hundreds of sensors (the same sensor) on a PCB. I just wrote a Python program to generate the netlist. That's a very specific case where a schematic doesn't offer a great deal of value. In this case a simple PDF documenting the board interface and how the sensors were connected (a matrix) was enough.
>> began in 2001.

A little clickbaity. I could change chords on a million year long piece (that started 30 seconds ago).
https://archive.vn/Tkfxy
I truly believe aviation, mostly general, is one of the things the U.S. does best, by far. I have no idea if other countries have these kinds of charts available to the public, printed or digitally (I assume many do) but combined with the relative freedom you have to fly as a regular private citizen and the sheer # of public airports, it's amazing. I highly recommend a demo to anyone who can afford it and has even a passing interesting.

When I was learning to fly, I loved combing over these VFR sectionals. Hell, I still do!
That comment is so ridiculously out of touch. Most of my guests are coming from outside of biking distance.
Been there done that. It’s better to get out, they will only ruin your algorithm with their lack of understanding.

Suits with an algorithm will eventually drive it into the ground in the long run.
Others have posted links to the FAA's website where these raster charts can be downloaded. But did you know that the US Government also used to make this kind of data available in a structured computer-readable format called DAFIF[1]? You could (I did) write a parser that chewed through these files and produced most of the information contained on these charts yourself, render them as vector graphics, and do all kinds of exciting aviation data mining on them. It was worldwide, too, not limited to the US. Sadly the NGA ended publication of this format in 2006 citing vague intellectual property issues. For a brief, beautiful moment, though, you could build your own electronic charts.

1: https://en.wikipedia.org/wiki/DAFIF
Yeah, now that you mention it, that seems like a major issue. Of course unlabeled nucleotides will outcompete labeled ones, they're smaller so they get less steric hindrance. And I don't understand what can be done about it at the polymerase binding site. Maybe some induced proximity chemistry?
FYI it seems ChatGPT could have answered this for you.

> The book you're describing sounds like "Rainbows End" by Vernor Vinge. In this near-future sci-fi novel, set in 2025, one of the subplots involves a project called the "Library Project," where the UCSD (University of California, San Diego) library decides to digitize its entire collection. The process is somewhat as you described: books are destructively scanned by being shredded into tiny pieces, which are then scanned and digitized, with the text being reconstructed from the scans. This process is a part of the broader themes of the book, which include the effects of technology on society and the concept of "wearable computing" and augmented reality. Vernor Vinge, a retired San Diego State University professor of mathematics, computer scientist, and Hugo Award-winning author, is well-known for his works in the science fiction genre, especially for exploring the concept of the technological singularity.
Maybe if you could start by persuading a small black hole to go where you want and following in its wake (or lack of wake actually). The black hole swallows everything in your path and grows more powerful. Perhaps if you had an array of three or more black holes you could steer the group by differentially feeding them somehow. If the initial black hole were an orbiting pair your spaceship could orbit a lagrange point and be swept along.
"Companies should not let account recovery happen over SMS, they should just let the accounts be completely and irrevocably lost."

The position of the post is just rigid absolutism that has no chance of surviving the real world, and it's not at all clear that the author actually has any expertise in the subject.

It should be completely obvious that password + SMS 2FA is better than just a password. And while the industry has been trying hard to get people to move away from SMS 2FA (yes, the industry would actually like that, despite the author's conspiracy theories), it is slow going. TOTP has horrible ergonomics and doesn't permit passing side-channel information about what exactly is being authorized. Emails get caught in spam filters. Push-notification style app authentication is secure, but a lot of people will refuse to install your app unless you're like their bank.

Yes, SMS isn't the best form of 2FA for a bunch of reasons. Sim-swaps honestly aren't one of those reasons. But they are the form that you can actually get people to use, and succeed in using.

Ah, but what about single-factor SMS, you say (unlike the author, who doesn't seem to understand the difference). Again, consider the alternatives. If you don't allow for account recovery over SMS, what is your account recovery story? Human customer service will just be socially engineered as easily as the mobile operator was. TOTP seeds, recovery codes, etc can be irrecoverably lost. Phones with authentication apps can be stolen and fail to be bootrapped again. Email accounts or IDP accounts can be lost to hijackers, and are also frequently lost when people change jobs, graduate, etc. Security questions can be stolen and brute-forced.

SMS has a unique property that makes it invaluable as a recovery factor: it's a globally accessible communications channel that can be bootstrapped from just your real-world identity even if lost.

That said, allowing SMS for account recovery does carry some security risks. They can be managed or mitigated by e.g. require a cooling down period, during which the account owner is notified about the recovery attempt and can cancel it. But like everything in this space, those mitigations are also tradeoffs. Which tradeoffs are the right ones depends a lot on what the account is for, there's no one-size fits all.
Very highly unlikely. The method in the paper isn’t measuring quality or novelty or authenticity or listenability or anything useful for evaluating composers without listening to them. It’s measuring the compressibility of MIDI files. We already know that Bach is less compressible than Philip Glass, and more compressible that Charles Ives. The methods in this paper cannot tell you if a composer is boring or derivative, nor whether they’re fresh and innovative for their time. They also can’t tell you anything about a performance. I mean go ahead and try, I’m all for experimenting, but I predict that trying to apply this paper to looking for overlooked composers will be an exercise in sifting through noise, more effort than searching manually, and spending time writing code instead of listening to good music.
And how many in that group are actually fit to spend many years living that lifestyle without losing their mind and getting into deadly fights with one another?

And who's covering the great expense of building these generational colony ships and training their only inhabitants, only to have them zip away never to be heard from again? (With no benefit other than believing there's a slight chance we've succeeded in making our species multi-plantary)?
>A typical week for me included working between 70 and 80 hours a week. I worked almost every weekend, and almost every day for the entire time, without a single day of holiday.

>I could have simply worked 40 hours a week. Had I done so, it is likely I would still be employed, still building the platform today.

>but have I snookered myself and made myself unemployable for working too effectively during my last role?

Was this really effective working.

Overtime, working weekends and no vacation isn't effective working just squeezing work time into a tight schedule.

That's the road to burn out.
I load EPUBs via the Kindle app or KOREADER. Typically download them from browser.
This is awesome, it's such a shame they don't make this available anymore. The act of flying has plenty of great public data, but sadly the charts are bit anachronistic in that sense.
As a primarily Python programmer, I did not feel over-burdened by learning Rust. Sure, I never learned how to deal with lifetimes, never wrote a macro, and probably used clone a few places where I did not have the need. I was almost certainly leaving performance on the table. Yet the language gives you so many guardrails that I always felt like my code was doing the correct thing.
I built a system at an old job that as far as I know has been in operation for over 10 years, completely untouched. I left the company that long ago, interviewed about three years ago for another position in the same department, where someone disclosed it was still up and running, without modification. I’m sure someone had to read the code at some point, but they could have fired me right after it was built and suffered no great loss because of it. I guess I should’ve spent some more time overengineering the whole thing or introducing subtle bugs if I wanted job security, as I have seen others do.
On the first point, you're correct about Harvey. Several neighborhoods were built in the basin of a flood plain. And lesser examples of such poor planning and drainage are all over Houston. But sometimes it really is storms that stall over the city dropping rain for three days.

To the second point, yeah... My family tried to evac Rita (2005) and got 5 miles in three hours. Turned around, and the storm missed us.

Three years later, my parents stayed for "cat 2" Ike and were trapped in the attic for 12 hours because Galveston Bay had come five feet up our house.
From the examples I've seen, the attackers essentially become the customer. They've either socially engineered the customer or done research to gain access to enough information to validate themselves as the customer. Come up with a solution and sell it. You'll make some money.
People like definitions that have clearly defined boundaries but biology is not like that.

There can be a messy continuum between is and is not. Things can match a definition strongly by some measures but miss some that are critical to how other things meet the definition. At best, a definition is a constellation of semi-related characteristic where some organism meet some subset and other meet another subset, but there isn’t a 100% match and may not even be an overlap.
For many use cases, English text generation using LLMs is cheaper than human writers of equivalent quality. That's just one example - I'm sure there are plenty more.
while it works well a majority of the time, it results in an exceptionally bad UX if you lose your phone, don't have reception, or are traveling outside of your service area
Everyone can get an app on their phone or computer that supports TOTP, such as Google Authenticator

https://en.wikipedia.org/wiki/Time-based_one-time_password
One of the lead devs on Panda also did Chakra (the React UI component lib). For me, Panda has been great, it's a very nice library to work with, with compiled CSS you get best of both worlds. Type safety and expressiveness of typescript and a clean way to define CSS styles for your components. I believe it works with any JS lib too. There's also a port for the shadcn UI library for Panda: https://shadow-panda.dev/
how to make human?
I wrote a comment 11 days ago talking about SMS for a second factor, but it applies in general as well: https://news.ycombinator.com/item?id=39130032 Email is better, for sure, but mostly because email providers are either controlled by the user (for us nerds with a custom domain) or a large, impersonal entity (google or similar). Neither is available to change by attackers in the same way as phone number providers are.

I work for an identity provider and we have a number of folks who want us to support this, almost always from a UX perspective.

I think that there also needs to be some onus on the phone providers, as suggested above. With the continued push to have the phone number as a global identifier (offline and online), we need our telco providers to require more to change phone numbers.
We built a social media platform for chatbots... We wanted to see if chatbots could self-develop unique personalities through social media interactions.

The results were actually hilarious... but wanted to share a bit about our process and see if anyone had any comments or insights.

So first we initialize the bots with a basic personality that's similar to if you were selecting attributes for an MMO. Things like intelligence, toxicity, charisma and the like. There are also a couple of other fields like intrinsic desire and a brief character description. These are fed to the model as a system prompt with each inference.

For the learning part, we established an event ledger that essentially tracks all the interactions the AI has - whether it is a post that they made, or a conversation they had. This ledger is filtered on each inference and is also passed to the model as a sort of "this is what you have done" prompt.

Obviously with limited context (and not finetuning and re-finetuning models) we have to be a bit picky with what we give in this ledger, and that has been a big part of our work.

Our next question is: how do you determine what events are the most important to the AI in determining how they behave and act? It's been interesting!

The platform is anotherlife.ai for those curious!
The macOS/iOS integration for autofilling SMS 2FA is so convenient due to this. Basically everything I do online now requires it.
Here is a NYT article from 2018 that seems to very much vindicate grandparent's memory: https://www.nytimes.com/2018/01/23/business/dealbook/tesla-e...

> If Mr. Musk were somehow to increase the value of Tesla to $650 billion — a figure many experts would contend is laughably impossible and would make Tesla one of the five largest companies in the United States, based on current valuations — his stock award could be worth as much as $55 billion (assuming the company does not issue any more shares over the next decade, which is unrealistic). Even reaching several of the milestones would bring him billions.

> Mr. Musk’s critics — and there are many — are likely to contend that the new compensation plan is just the company’s latest publicity stunt. He has been called a modern-day P.T. Barnum who has created the illusion of success while consistently missing production estimates. The company continues to lose money; at one point last year, it was losing almost a half-million dollars an hour, according to Bloomberg News. Jim Chanos, a short-seller who has bet against Tesla’s shares — and has thus far been on the losing side of that trade — has contended that Tesla is worthless.

Do you believe the article above is consistent with the idea that everyone thought the goals were achievable?
It also sucks if you lose your phone number.

I haven't been able to log into my primary Google account for many years because while I have the username, the password and the recovery email address (and all the emails are forwarded to me), I no longer have the phone number associated with the account, so clearly I'm trying to break in.
what, no blame for the stupid mobile providers who let themselves get social-engineered?
Gameboy is a nice system to start working on emulation with. Very well documented. Many games use only a small fraction of capabilities making progress visible.
Far far more people have a biometric reader or smart token than have a cell phone.

Smart phones are obviously phones and have biometrics. What you're left with is comparing the number of people with non-smart phones (~31 million in the U.S.) to the number of people without smartphones but who have biometric tablets, Windows Hello-enabled computers, PIV cards, etc.
The impact of one of these is greater than a paper card, but in turn pales before basically any other electronic device; given that they're made in absolutely tiny quantities, I struggle to imagine that it matters.
Counter-counterpoint, when companies implement a system with a known flaw, then they're responsible for the consequences of creating that system.
I is for Intent
> Is the wealthier kid more worthy of receiving a college education?

Not to mention, what about us test-disabled people?

I didn't know I had ADHD and its "friends" when I took the ACT, and I could have potentially benefited greatly from the reasonable accommodations the test allows for. However, it's not like every child is required to have some kind of psychological evaluation while in school.

I find all of this standardization in testing to be nothing more than Goodhart's Law in full swing.

Just what we need, more "Teaching to the Test" and route memorization in our education system...
If having your account hijacked is is a good user experience then I have no idea what UX means.
How do you make brick?
Not all IT professionals are exempt, you have to have an university degree. Most do, but a sizeable minority doesn't.
It doesn't run in my browser and I want to thank the author for giving a proper error message! So often, pages just break for various reasons and you're just sitting there "is it gonna load?" or "is this what I'm supposed to be seeing?"

This is the first time I see "xyz is not supported", which both helps me understand what's wrong and lets me switch to a popular browser to see the content. And the site works and looks great there (on mobile)! Thanks OP :)
These resources, particularly in machine-readable format, have been invaluable for the simulator community, and for simulated ATC in particular.

For an example, check out https://www.youtube.com/watch?v=vlauVZ_5Le0, a virtual controller operating a chunk of New York airspace. As he moves around the screen (for example, around 21:30), you can see he has various fixes displayed. Those will be important fixes from various approaches, and their coördinates will be coming from machine-readable data, ultimately (in the US, at least) coming from the FAA.

All of this is possible thanks to these materials, as products of the U.S. Government, not being subject to copyright in the United States.

I will say, one important thing that's missing is publicly-available mappings of three-dimensional airspace (latitude, longitude, and altitude) to ATC sectors, and mappings of ATC sectors to frequencies. If you had that, you could (for example) look at your flight's location (in FlightAware or the ADS-B Exchange), work out the likely frequency for the airspace, and (if it's available) listen to your flight on LiveATC).

Source: Was a VATSIM controller, controlling up to & including Indianapolis Center.
I can never get it.
Well, could go many ways. Depends who is going to "succeed" to Putin (which isn't getting any younger) and especially how.
I'm so frustrated reading these comments because I assume this is the logic used at these companies that make my life a daily pain in the ass.

My email is more secure than my phone. This is shown to be evident on a monthly or bimonthly basis, despite insistence from sms proponents that it's the only feasible oh and also secure way. Bollocks.

Every single time, it basically boils down to the truth - SMS auth is circumvental, recoverable, whatever you want to call it. And there's ample evidence of that being used for account takeovers.

I honestly don't understand how this remains a discussion.