skysight-inc/HackerNews huggingface dataset:
Your biometric data are only used locally to unlock the secure enclave on your devices. Your biometric data never leave your device and are never shared with "some corporation".
You think you'd forget the 8 years you were VP of the US? Or the decade your son died? Yeah, get checked out immediately.
> No, 0 is a bogus value

No. 0 is the integer's (what i in atoi identifies) zero value, which carries the expectation of being useful.

The problem here is that your example is using the wrong type. Age is not an integer, it is an age. Use an age type that defines the proper semantics for age when you what you have is an age.

Not even the best type system can stop a bad programmer choosing to use the wrong types. Stop being a bad programmer, I guess. No amount of tooling can fix that problem, I'm afraid.
The reason you're getting downvotes is because your comment is irrelevant. The point of the article is the transition of passwords to passkeys. Minimizing the number of accounts you have has absolutely nothing to do with that. If the point of the article was about optimizing your online security posture, and passkeys as a method for that, then your comment would be more relevant.

The reason no one replies and just downvotes, is because we don't want to clutter up the discussion with even more irrelevant comments. Usually I'd do the same, but for the chance that you are really commenting in good faith and not a troll, I thought I'd present you with a learning opportunity.
Even if you bought a Blu-ray, chances are the licensing doesn’t allow you to do that. You usually can legitimately share with close friends and family to a certain extent, and that’s it
Here's a pic:

https://ibb.co/QcMwqnm
C/C++ doesn't emit them at all unless you ask it to. At least on x86-like architectures. It might have to on ARM because of its weak memory model? I'm not sure about that. But the C++ standard does basically zilch with respect to thread safety unless you use the appropriate memory fence compiler directives.
RustConf 2023 – Infrastructure for Rust [video]
Depends on the service. But that's often a long and random backup key that you're advised to store somewhere safe — can be printed on paper — and is used as last resort if you lose all your devices.
If you need a job queue on Postgres, https://windmill.dev provide an all-integrated developer platform with a Pg queue at its core that support jobs defined in python/typescript/sql
The context was to unlock your passkeys stored on your local device.
This is about smudging as a leftie, because your hand is trailing the pen if you write a LtR language like English. If you blotted every word or character before moving on you’d be there a while.
People do not really understand the value of the former. Even dealing with financial options (buy/sell and underlying) which are a pure form of it, people either do not understand the value, or do so in a very abstract way they do not intuit.
I was taught by J. M. Barrie’s nephew. A wonderful person that had a great impact on my desire to become a scientist despite my earlier failings and shortcomings. He was so well regarded.
> Ah yes, the famous morality of big tobacco, as well as big oil, big pharma, big agrochemestry and now big tech.

Big anything?
> IBM PC hardware was misaligned (e.g. terrible graphics)

In 1985 it was terrible for games due to no sprites, but business applications run on the Hercules graphics card (monochrome but 720x348) or EGA, which had decent resolution and was way better than the competition for business applications. It had worse color resolution than say the Amiga, but by 1988 the VGA had fixed that as well.
Announcing this long ago doesn't make it any less shitty that a fully working still relevant and expensive VR device is now a paperweight. Keeping a minimal framework alive so that the devices can be used with e.g. steam would have been the right thing to do.

Also, no one using WMR devices on Windows wants to bother with Linux. Most of us were using the device with things not available on Linux, and even if they were we don't want to run Linux on a desktop. It's not a solution.
They required to be logged in for the code search for years now. The rest (repos, issues, etc.) is still searchable as is. At least where I am at.
What happens if you pick Dax and a year later it's Bun-shell that emerges as "the winner"?

If you stick to Python until a winner emerges, how does that help you? You'd have some old scripts in python, and some new ones in WinnerJS, which I think it's worse than having some in WinnerJS and some in LoserJS.

Your LoserJS scripts won't stop working. At least Bun-shell and Dax scripts in the same language. Since Bun's got some inspiration from Dax, I'm sure the API won't be that different.

I'm usually not one to jump on new JS stuff, but writing scripts on any of these feels relatively low risk.

Also, I'm still maintaining code that uses the ORM-that-lost, and the Dates-library-we-don't-use-anymore, and it's OK.
It is a ridiculous fantasy, yes indeed. But the danger with AI is not
what it's actually capable of, it's what people think (hope and fear)
it's capable of, and how that cultural effect impacts real life.
Yup, it is not about awareness, it's about how the economy is structured. If people are paid for unsustainable software, they'll do it.
sounds like it needs CMake+vcpkg like in this example starter of mine: https://github.com/lionkor/cpp-project-template
Even for small workloads it's a difficult choice. I ran a small but vital db, and RDS was costing us like 60 bucks a month per env. That's 240/month/app.

DynamoDB as a replacement, pay per request, was essentially free.

I found Dynamo foreign and rather ugly to code for initially, but am happy with the performance and especially price at the end.
> If you don’t use it, sell it

This is something I try to encourage everyone to do. I don't know why so many are averse to selling things. It's so easy to do with sites like eBay. The great thing is once you know you can do it it lets you try new things without worrying. Thinking about getting into fountain pens? Buy a second hand one. The worst that can happen is you don't use it and resell it for close to what you paid. If buying brand new, always check the second hand value. The difference, plus transaction costs, is what you stand to lose. It can make many things more accessible than you might think.

A related hobby which I think might be up many a geek's street is calligraphy. You don't need expensive tools for it, just some ink, a dip pen handle, some nibs, and paper. Being able to write cards and such with beautiful writing is really well appreciated.
I think this is a Node.js limitation, not a design choice by ZX.

You could perhaps use a different JS runtime that doesn't have these admittedly esoteric file extension rules.
You think that there's data on a networked device that is absolutely safe? I very much doubt that. Besides, if I need a device from "some corporation" to manage my biometric data, I already depend on "some corporation" for my proving who I am online. I'd much rather stick to using a secret only I know and that I can manage with offline databases managed by open source software.
I thought this was a very interesting and accessible talk by the lead of Rust's Infrastructure team about the complexities that come with building a language at the scale of the Rust language. He gives lots of specific numbers, and also reveals some of the plans to deal with future growth.
correct, nicotine is great as long as it's not smoked, what's extremely bad, and I can feel it everyday with my smoking neighbor are the smoke compounds. It hurts my eyes, throat, nose, head..
They meant "Mixed Reality" in general. The Apple Vision Pro has just launched. You can debate whether it will be succesful or not (please - do that in another discussion thread as it a topic I grow weary of) but the timing is worthy of note.
> Ubuntu for dev servers

I didn't understand this section. Ubuntu servers as dev environment, what do you mean? As in an environment to deploy things onto, or a way for developers to write code like with VSCode Remote?
There are two possible scenarios here. Firstly, they can't find the talent to support what you implemented...or more likely, your docs suck!

I've made a career out of inheriting other peoples whacky setups and supporting them (as well as fixing them) and almost always its documentation that has prevented the client getting anywhere.

I personally dont care if the docs are crap because usually the first thing I do is update / actually write the docs to make them usable.

For a lot of techs though crap documentation is a deal breaker.

Crap docs aren't always the fault of the guys implementing though, sometimes there are time constraints that prevent proper docs being written. Quite frequently though its outsourced development agencies that refuse to write it because its "out of scope" and a "billable extra". Which I think is an egregious stance...doxs Should be part and parcel of the project. Mandatory.
I'm not sure where that billion dollars is going to go then.

SiFive has raised a total funding of $366M over 6 rounds and 9 years, which has been enough to give them leadership in the RISC-V ecosystem and a product range spanning virtually the entire range ARM's does -- from equivalents for Cortex-M0 (in fact lower) up to Cortex-X3 (and POWER9) for their latest core announced in October (P870, 18 SPECInt2l6/GHz).
Not the OP, but I mitigate the issue rather than use a different pattern. Like so:

type Server struct {
val bool
}

type Config struct {
Val bool
}

func NewServer(... config *Config ...) http.Handler {
if config == nil {
config = &Config{}
}
return &Server{
val: config.Val
}
}

It took me a long time to settle on this pattern and I admit it's tedious to copy configuration over to the server struct, but I've found that it ends up being the least verbose and maintainable long term while making sure callers can't mutate config after the fact.

I can pass nil to NewServer to say "just the usual, please", customize everything, or surgically change a single option.

It's also useful for maintaining backwards compatibility. I'm free to refactor config on my server struct and "upgrade" deprecated config arguments inside my NewServer function.
The biometrics don't leave your device. There is no harvesting of biometric data for other purposes happening.

Passkeys can't be phished, it's literally impossible. It doesn't mean nobody's account will ever be stolen again, but it means attackers will have to switch to other mechanisms (most likely malware, whether it's stealing auth tokens or doing a man-in-the-browser attack). But that's already a win in the current situation, and will only become better over time as platforms become more malware-resistant.

Passkeys aren't any different when it comes to losing your account, it's the same for all authentication factors. People forget their passwords, have their password manager database deleted, have their phones stolen, leave their job and lose their work email, etc. You always need to have a recovery path, the worst you can say about passkeys is that they don't obviate the need for account recovery.
And that I can sync to my other devices. I currently use one of the several keypass managers on my laptop and on my Android devices. As a matter of discipline (not to lose password) I add passwords only on my laptop and I send the db to my mobile devices with syncthing. I don't want to create a new passkey for each site on each device, so syncing is important. Manual export import doesn't work for the same reasons that manual backup doesn't work.
How Computer Programming Feels
almost like getting laid
RDS is not so bulletproof as advertised, and the support is first arrogant then (maybe) helpful.

People pay for RDS because they want to believe in a fairy tale that it will keep potential problems away and that it worked well for other customers. But those mythical other customers also paid based on such belief. Plus, no one wants to admit that they pay money in such irrational way.
It's a bubble
Jul 2023
From the linked site about FIDO:

> Passkeys replace passwords with cryptographic key pairs [...] synced between the user’s devices via a cloud service. [...] stores an encrypted copy [...] Passkeys can also by design be available only from a single device from which they cannot be copied.

> "single-device passkeys” [...] a physical security key could contain multiple single-device passkeys.

> [...] generally referred to as “synced passkeys”, and those that never leave a single device are referred to as “device-bound passkeys”.

So, your keys will rely on:

* The cloud,

or

* Some specific phone,

or

* Some specific USB key.

> They can’t be guessed, leaked, or stolen

So, they can be lost. Also, stolen.
One centralized solution is AppGate, given that you install it on your computer/phone and that everything you are trying to access is owned/operated by the same entity
Show HN: Diagrammatic.com – community for diagrams-as-code enthusiasts
Hi there! I'm building Diagrammatic, a simple and free online tool with the ambition to become a community for diagrams-as-code enthusiasts. Currently, it supports Mermaid, PlantUML, Dot (Graphviz), Vega-Lite, and Typogram, but I'm looking to add more languages. Please let me know if there's a particular one you use. I'd appreciate any kind of constructive feedback as well. Thanks in advance!
How are you envisioning phishing working here? The credentials are bound to a set of origins. I don't know of any passkey managers that have an option to send a passkey to the wrong origin because it just doesn't make sense.
Eh? I've never had a problem moving data out of AWS.

Have people lost the ability to write export and backup scripts?
Nothing about the war in the Ukraine is great, not Putin, not the "things". There is only the will of the people of the Ukraine to defend their country. Putin was (and is) too dumb to see this.

Nothing about the war against Poland was great.

Putin is an aggressor and he even tried to justify his history view with Poland/Germany from 1939.

From the interview: "Hitler asked them to give it amicably, but they refused."

That's complete nonsense, Hitler had very different motives and Poland knew that it was not "amicably".

What is disturbing, is that Putin compares his own motives to attack the Ukraine to the German/Polish situation in 1939, where we see Putin siding in his arguments with Hitler. That's completely crazy.

Hitler had all staged this, back then, to conquer Poland and follow his long-term goals & plans (-> kill the jews, enslave east europe).

Putin reverses the attacker and the victim.
How was it better for business? Text mode?There were plenty of terminals available at that time with better monochrome and color text modes and fonts, even line graphics support. It was about various attractive business software available for PC, not about EGA being superior somehow.
saw a convenience shop selling bottles of (soft-)drinks bundled with a single cigarette, so there's that
There was a time I was writing scripts using Node about once a week, and I settled on ShellJS. I don't remember loving the experience.

Haven't had this need in at least a year though. From looking on npmtrends[0], ShellJS still seems the incumbent and quite alive.

Are these new zx/dax/bun-shell tools, each inspired in the previous one, way better?

[0]: https://npmtrends.com/dax-vs-shelljs-vs-zx
Well, you just made something I have been working on for two decades and told me I need to do it in a different way so what the fuck are you wondering about.

Legal and illegal is a human concept. In Nazi Germany it was illegal for Jewish doctors to treat non-Jewish people.

A workaround isn’t necessarily circumventing.
I still dispute that eye tracked selection will prove to be the correct solution. I think it might be part of the correct solution but eye, hand and controller based interactions all have distinct advantages and disadvantages and I'm very sceptical of anyone claiming that only one of them should be the only option across a wide range of applications.

Personally speaking I have used all three and if someone put a gun to my head and insisted that I had to pick just one, it would be 6DOF controllers. (and that's me also trying to take into account future improvements in implementations for each)
Meta isn't creating a market, rather instead a hole in which they've dumped 30+ billion dollars into with nothing to show for it.

Apple's VR is nothing new and will also fail.
I disagree, I also have a large number of accounts (in online shops for example) that I forget about and 3 years later when I make a purchase in the same shop my password manager reminds me I already have an account there.
The validation is not completely thrown away, since the type indicates that the data has been validated. I understand "parsing" as applying more structure to a piece of data. Going from a String to an IP or a Username fits the definition.

I push my team to use this pattern in our (mostly Scala) codebase. We have too many instances of useless validations, because the fact that a piece of data has been "parsed"/validated is not reflected in its type using simple validation.

For example using String, a function might validate the String as a Username. Lower in the call stack, a function ends up taking this String as an arg. It has no way of knowing if it has been validated or not and has to re-validate it. If the first validation gets a Username as a result, other functions down the call stack can take a Username as an argument and know for sure it's been validated / "parsed".
> homebrew for Linux

No, just no. I see this cropping up now and then. Homebrew is unsafe for Linux, and is only recommended by Mac users that don't want to bother to learn about existing package management.
Even as early as 15 years ago, MIT switched from scheme to python. The reasons are detailed in an interview[1] (see HN discussion[2]): the educators belived the future of programming would be snapping pre-made libraries together instead of engineering from scratch.

1: https://www.wisdomandwonder.com/link/2110/why-mit-switched-f...

2: https://news.ycombinator.com/item?id=14167453
What a clickbait title. I refuse to even click.
I'm curious, when do you need this?

I still use `writeFileSync` and such out of habit, but I don't think I really need them since we got first-level await (out of async functions).
seems like the latter given "Originally I tried making the dev servers the same base OS that our Kubernetes nodes ran on, thinking this would make the development environment closer to prod"
> The point of the article

It's fine that you found that to be the singular "Point" of the
article. Discuss that if you like. But no, sorry, articles do not come
stamped with "This is the point from which you will not diverge". My
remarks are both relevant and valid and I do not wish you or anyone
else to tell me what you think the "Point" of the article is. These
comments are made in good faith (please don't bandy specious
accusations of trolling) to address what I and many others consider a
widespread misunderstanding around password security.
When ships were attacked in the red sea they started diverting. When nordstream blew up that was it. Something to take into account, at least.
We get a lot of birds in our garden, but I'm not great at connecting the bird calls with the birds. Hopefully this will help, thanks!
I like Merlin better, it is the 'live match' version. With birdnet you have to record and submit. Both are from the Cornell Lab for ornithology.
If only Toyota were as dumb as Ford and volunteered to lose $60k per EV. Now that would be economic sense.

Now, let's not blame ourselves. It was the people we voted for who gave Toyota money to do nothing. Not us.
The author leads infrastructure at Cresta. Cresta is a customer service automation company. His first point is about how happy he is to have picked AWS and their human-based customer service, versus Google's robot-based customer service.

I'm not saying there's anything wrong, and I'm oversimplifying a bit, but I still find this amusing.
I've recently built https://SharpAPI.com/ on top of LLMs.

SharpAPI is an AI-powered Swiss Army Knife API for every software developer.

Talking directly as a programmer to Large Language models might get unpredictable and prone to issues.
It is hard to fully automate its communication with them.

AI sometimes hallucinates, GPT endpoints sometimes simply time-out,
it's hard to force GPT to give you the same response format and replay the same request to a failed GPT job.

All of the issues mentioned above are the main reason I'm building Sharp API.

What can it do for developers and their apps?

With Easy-to-Use RESTful Format, extensive documentation, and support for 80 languages and SDKs, It allows to add usual AI capabilities quickly for common scenarios of data processing, f.e.
- product categorization for a well-organized products catalogs
- generating engaging product descriptions and tagging
- filtering out spam content
- allowing to understand and analyze sentiment in product reviews, comments, users feedback for data-driven decision-making
- generating complex job descriptions and extracting information from resume files for easy processing
- and much much more

Some ideas for use cases I've added in this article:
https://dev.to/makowskid/when-laravel-e-commerce-app-meets-a...
Automated Call Center with AI
Does anyone know how to block Arc's crawler/Browse For Me from accessing a website?
I wanted to re-post this brilliant crystallization of startup success, and how it all boils down to only two things.
But I thought the whole point of the container ecosystem was to abstract away the OS layer. Given that the kernel is backwards compatible to a fault, shouldn't it be enough to have a kernel that is as least as recent as the one on your k8s platform (provided that you're running with the default kernel or something close to it)?
It is funny how there is all this elaborate discussion here when it was just corporate officers jerking each other off all along. Occam’s razor.
Dupe:

https://news.ycombinator.com/item?id=39301116
The US government would do the same if European companies would be economically dominant. And it indeed gleefully persecuted Deutsche Bank and Volkswagen (IMHO well-deserved)
Man gives incredibly honest review of Apple Vision Pros
Using the INSERT/UPDATES is kind of limiting for your events. Usually you will want richer event (higher level information) than the raw structure of a single table. Use this feature very sparingly. Keep in mind that LISTEN should also ONLY be used to reduce the active polling, it is not a failsafe delivery system, and you will not get notified of things that happened while you were gone.
Im guessing my experience is very different; I work more in robotics than pure software, and this is an industry where many of the problems are investment intensive...

I wouldn't call it a crash in this field, but there is definitely a trend away from ambitious attempts.
Its not really a field where you can take your savings at make a go for a year or two, capital is required, and capital is more hesitant at the moment.

I am curious about your product, to me SaaS startups aiming to replace an existing always had the problem where the risk to your client was immense compared to the value you offer. For example even if your service is a hundredth the cost of the entrenched it might not be worth it, because its a saving on a small line item against what could be the entire turnover of a business.
> A top loader can wash a load in 20 minutes; front loaders takes hours.

This doesn't seem accurate. The regular permanent press cycle on my front loader completes in about 40 minutes. There's also a "quick wash" cycle that takes about 20 minutes.

The last top loader I used also took quite a bit more time than 20 minutes. This was a good 25 years ago, so maybe they were just slower then.
Hyperinflation is extremely uncommon, especially in developed countries, and when it occurs it's always caused by incompetent or corrupt governments, not by the currency itself.