skysight-inc/HackerNews huggingface dataset:
For software to have secure authZ/authN, it should have robust 2FA mechanisms including WebAuthn, properly integrate with access tokens, and support scoped third party access.

Most software only offers simple username/password auth, or a paid SSO option as the only way to get 2FA working. And SSO makes it much easier to revoke access or change passwords if necessary.

I'm running hundreds of services self-hosted just for myself and less than a handful of close friends. I'm using SSO for all of them.

I had to patch SSO into countless services and I actively maintain forks with self-reimplemented enterprise features for almost half of them.

I had to do similar changes to get S3 support, as I use the AGPL version of Minio as storage backend for everything so I only have to setup backups in a single place.

The only reason one could try to argue that these are enterprise only features is if you assume personal users have no need for 2FA or backups.
Does it mean that in Russia of 10 years ago a person with the same english language skills would not be able to find a better job or does it mean that the troll farms pay more? Or is it just patriotism?

(I genuinely would like to learn more about this topic)
Adding on to yours, since right now you have the most complete background answer.

There's some history in the "Bukkit" family that might make their chaos make more sense.

In the beginning, there was Bukkit, which was a plugin API. And there was its reference implementation, CraftBukkit. It was very popular, Bukkit was the de facto API for server-side modding, and I made 50 bucks off of advertising revenue share for downloads of my plugin, which was a lot for me as a high schooler with one (1) year of java experience. Times were good. Where was I? Oh yeah.

So, for a long good while, times were swell. Then iirc Microsoft announced they were acquiring Mojang (I think this was the precipitating event? Someone correct me if not). And the main Craft/Bukkit guy threw in the towel and pulled a very clever poison pill: he DMCA'd his own repos. You see, Mojang essentially didn't care about server.jar distribution because they were a cool indie company. So CraftBukkit just included it. Which meant it was always in violation of Bukkit's GPL license since that code wasn't open source.

So anyway, CraftBukkit explodes in a supernova and the resulting stellar nursery produces Spigot which pioneered the distribution strategy that all successors would then use - they distribute a decompilation map and their source, then you run a jar that downloads server.jar and performs the unholy mixing of licenses on your machine.

This is where I left the scene so I only have a summary from here on out. Spigot is the main go-to for a while, but the stellar nursery is still hot, and so various creative differences produce Paper, which seems to have mostly caught on to replace spigot though it seems like spigot is still a nontrivial player as well. And these all still implement the same ole GPL licensed Bukkit API.
"Customers are like roaches. You spray 'em and you spray 'em and they become immune after a while."

- David Lubars
I appreciate you sharing that point of view. There's a "curse of knowledge" effect with AWS where its card-carrying proponents (myself included) lose perspective on how complex it actually is.
According to my googling, data center has been bigger than gaming for nvidia since 2022, and almost x2 in Q2 2023 following a crazy nosedive in gaming sales.
Combinatorics is a harsh mistress
US gets approximately 0.5% to 0.7% population growth from immigrants, Canada is gets around 1% to 1.2%.

But US gets 2+ million illegal immigrants annually, which adds another 0.6%.

So US and Canada both have very similar immigration rates after all.
My point is that I see deep hypocrisy in a society that prices housing out of reach of anyone below upper middle class while pretending to be liberal and progressive.

I don’t consider Texas liberal but at least you can have a home without earning $200k or above or having a liquidity event.

My personal opinion is that any good done by liberal policies in California is negated by housing.
Yes, this is a good point. Tracking citations of the original work in the absence of failed replications would be a more informative metric to measure whether a refuted study was still being used to justify arguments.
If only enterprises need SSO, please tell me how I'd set up WebAuthn 2FA for these services without SSO.

Also, please explain how I'd change my password across this project, miniflux, seafile, postfix, dovecot, radicale, quassel, synapse and more all at the same time without SSO (in case the password got leaked)

So far, using keycloak and adding SSO support to these apps seems certainly like an easier option even for setups with 3-5 users such as my own.
Is there a markdown flavor that allows for font size changes mid-document? It seems like you'd struggle to embed higher-fidelity diagrams that don't encounter issues with wrapping in markdown unless you can also reduce the font size for some diagrams.
This company is the person who left Mozilla, joined Google and started Chrome.
It imposes limitations on how one can use it https://freefilesync.org/faq.php#commercial which I don't believe squares up with its GPLv3 license. Between that, and there being no obvious response to any of the submitted patches or bug reports in the forum, I'd guess this is "fork-only open source" ala sqlite

$ curl -fsSLO https://freefilesync.org/download/FreeFileSync_13.4_Source.zip
$ unzip -qc FreeFileSync_13.4_Source.zip License.txt | head
A. GNU GENERAL PUBLIC LICENSE
Version 3, 29 June 2007
> It probably wouldn't be about this year's lipstick colors.

Instead, the best movie [0] is about this.

[0] https://www.youtube.com/watch?v=vL-KQij0I8I
I bought a 3050 low profile / half length with DDR6 at 14GHz for half this price.

And it can play games too.
> Gargini, who is chairman of the IEEE International Roadmap for Devices and Systems (IRDS), proposed in April that the industry “return to reality" by adopting a three-number metric that combines contacted gate pitch (G), metal pitch (M), and, crucially for future chips, the number of layers, or tiers, of devices on the chip (T).

It’s not my field of expertise, but couldn’t we adopt a measure of density of transistors? Billions per mm or something like it.

A single number is also good for marketing as the MHz of the 90s have shown us
Current for charge controllers scales really nicely with horizontal scaling, there isn't a huge reason to do it. With that said there can be various reasons to want higher VOC in a single string. Managing voltage drop, and value engineering on conductor size. The marketing on those is often aimed specifically at max input voltage, rather than charge current because of this. Victron is probably the prime example of higher end stand alone MPPT controllers.
Understandable reaction. The US is trying to keep Chinese companies out of several industries (5G, EVs, certain types of encryption, etc.). Makes sense that the same rationale would apply on the other side.
> aren't efficient enough

Unless you can point to a hard boundary, a line that distinguishes "enough" from "not enough", this doesn't mean anything.
The pay plan is "pre-order", the features don't exist yet.
Speaking of tributes

https://www.youtube.com/watch?v=_lK4cX5xGiQ#t=217

https://www.youtube.com/watch?v=PoAGasPLh30#t=213
The real question is how do they plan to compete with say a Ryzen 8700G with 32 GB of overclocked RAM and the Ryzen AI NPU. 2x DDR5-6600 gives you more memory bandwidth than grayskull. Their primary advantage appears to be the large SRAM and not much else.
10 years on, is the world any closer to finding MH370?
Hysteresis is a bitch.
There have recently been a series of posts about ancient time army logistics here. This used to be much more true than it is today.
Canada has a better national anthem too.
Yes, I love Upload. It's Black Mirror that takes itself less seriously. The novelty ran out by now and they need to do something fresh, but it's still a good time.
More passive than working a job.
> When hiring contractors it is a little like hiring a plumber.

This comparison is more true than a lot of devs want to admit.
you are not wrong but there is more to it.. companies that incorporate have some tax advantages that other small business do not have; corporations with access to public markets also have many more advantages financially than closely held corporations; real estate ownership and financial leverage also make advantages that non-owners do not have.. there are doubtless other examples that I do not know about.. go the other way for a minute .. those that pay legal wages to employees have higher costs than those that hire "illegal" workers.. those that steal wages from "illegal" workers have lower costs than that.. undocumented or non-English speaking staff have been the rule not the exception for twenty+ years in California.. more examples that I do not know..
Also, don't overlook xmlstarlet (MIT https://sourceforge.net/p/xmlstar/code/ci/1.6.1/tree/Copyrig...) which I love bunches because one can execute super complicated XSLT things, then tack the -C on the front of the invocation and it'll cheerfully emit the XSLT syntax for what you just did <https://xmlstar.sourceforge.net/doc/UG/ch04.html#idm47989546...> It has a ton of other fun tricks, too: https://xmlstar.sourceforge.net/overview.php
Researchers develop electron beam accelerator to sterilize medical equipment
The thing that really opened my eyes was how important the pivot/twist/transfer of power is as you plant to jump. It’s really incredible. Once you teach your brain “just jump high as fuck, you’re not going to get hurt on the landing” it’s a game-changer.

My best was 1.98m, and I am of about 1.93m height.
You mention you get to learn new skills and technologies; but if they only want to hire people who can immediately do what they need, how does that happen?

Does it involve a bit of stretching your experience?
And that's how I ended up forking dozens of projects spending a lot of my free time just maintaining my patches.

Still better than having to give in to this open core enshittification.
> Credit Suisse

Credit Suisse had a crisis of confidence and collapsed.

https://www.reuters.com/business/finance/credit-suisse-how-d...

https://www.ips-journal.eu/topics/economy-and-ecology/the-fa...

https://www.economicsobservatory.com/why-did-credit-suisse-f...

https://cepr.org/voxeu/columns/global-lessons-demise-credit-...
the OP was asking about the consultants and their liability. they are able to keep far away enough from operational details so it wont matter to them. much like a prsident, dictator, or mafia boss can have plausible deniability because the entire system is set up so that they set a general tone and strategy but can claim they dont know any details, even though a child could guess what the details would be.
Is this some kind of trick question?

Your core needs to be fully programmable so you can do things like kernel fusion. The simplest form is to load quantized weights and dequantize them to bfloat16 as you go. Llama.cpp and it's gguf files support various types of quantization and most of them require programmability to efficiently support them.
Interestingly enough, CB wasn't DMCAed by Mojang, but actually from one of its contributors, who was angry that he had been contributing free labor to a project that was secretly owned by Mojang (there was no CLA so he was legally able to take down the project by not authorizing his contributions to be used). There was a whole lot of drama and conflicting viewpoints around about this, but here's a post about it that I think stays pretty close to just the facts. https://blog.jwf.io/2020/04/open-source-minecraft-bukkit-gpl... (not associated with the author)
I suppose it depends on who the measure is for.

If it's for engineers: In 2024 a single metric is going to be far too simplistic to realistically drive any decision.

If it's for the general public: Any metric will do, might as well stick with nm.
Heh, what a name for a DB explorer ("Adminer - Database management in a single PHP file"; Apache 2 or GPLv2 https://github.com/vrana/adminer/blob/v4.8.1/readme.txt#L7 )
I don't think the person you're replying to is saying perjury should be legal. They're saying perjury might be a good idea sometimes. Especially if you're guilty, sometimes your only chance of staying out of prison does involve lying. A guilty person looking at 20 years would be reasonable to be unconcerned about whatever addition perjury charges might add (if they were even caught perjuring).
Java: Update on String Templates (JEP 459)
The problem with whistleblowers is that now the entire system's security is transferred to them. Whistleblowers can also be bribed to blow whistles early or not blow whistles.

Here's an another idea. Bitcoin has a halving, right? Somehow the entire system has agreed to halve at a certain time, and not halve early or halve late? How does this work? Can we utilize this time agreement somehow? Can it be incorporated into an algorithmic whistleblower, whereby (a) N people each know 1/N of the key (b) if anyone demonstrates that they know the answer to a question before halving, whistles are blown by a contract and all N people are punished (c) after halving, all N people receive a reward?
Is it important to predict how it will be received? If you are trying to tailor your work for your audience, then you are on your way to being yet another content farm and when’s the last time any of those published something great?

I know Paul does have some trusted readers that he shares early drafts with. Maybe he uses those readers as his focus group?
- "“It’s interesting that the majority of the offences relate to an outfit of black silk – taffeta, satin or velvet – ornamented with some sort of precious metal stitching or with lace. Just such an outfit appears in a portrait of an anonymous Genoese nobleman by the artist van Dyck which, to modern eyes, looks relatively sober. But black was a clear status symbol in Renaissance culture. Black dye was one of the most difficult to fix effectively, so we should be careful how we interpret these apparently ‘plain’ portraits,” said Galastro."

Here's a related explanation from /r/AskHistorians,

- "Black fabric was indeed more costly in the Middle Ages than many other colors, but it's not a straightforward question of dye expense. In terms of dyestuff, cost depended on two things: source of pigment and duration of dyeing process. The most popular option for dying fabric black in the Middle Ages was not, of course, "black pigment." It was to use woad, the bog-common blue pigment, to dye fabric to the darkest possible midnight tint. Then a second dye, typically a red (madder) or yellow (weld), would be added over the top to eliminate the blue tinge."

- "Woad, weld, and madder were standard dyes, not prohbitively expensive for a decently-endowed monastic order. Benedictine monks could adhere to their Rule not to spend too much money on individual habits..."

https://old.reddit.com/r/AskHistorians/comments/4b7lke/black...
> There is no theoretical or empirical basis for LLMs having any reasoning capability.

Geoffrey Hinton - Mapping Part-Whole Hierarchies into
Connectionist Networks (1990)

https://www.cs.toronto.edu/~hinton/absps/AIJmapping.pdf

"The paper, titled "Mapping Part-Whole Hierarchies into
Connectionist Networks" (1990), demonstrated how neural networks can learn to represent conceptual hierarchies and reason about relations like family trees.

Specifically, Hinton showed that by training a neural network on examples of family relationships (parent-child, grandparent-grandchild, etc.), the network was able to accurately model the inherent logical patterns and reason about new family tree instances it had not encountered during training.

This pioneering work highlighted that instead of just memorizing specific training examples, neural networks can extract the underlying logical rules and reasoning patterns governing the data. The learned representations captured abstract concepts like "parent" that enabled generalizing to reason about entirely new family tree configurations."
As a lawyer, but not criminal one, none of this surprises me. Some amount of your job is protecting clients from their own misconceptions and things they have convinced themselves of. Those who say this guy is a scum or should be in jail do not have much of a concept of the justice system and what it means to zealous represent a client. Without the truth, you can’t see you blind spots—in fact, your client is making them. To both their and your detriment. I personally love how the writer handled the fingerprints. It allows an immediate inflection point of “let me do the thinking and handle strategy, and stop lying, or find another lawyer.” But, some clients won’t, and those are the ones that end up with an imperfect defense by virtue of them thinking they are being clever or whatever.
Anyone can halve at any time, so anyone can "cheat" that by halving immediately.

The reason everyone does it at the same time is because doing it [literally right now] will lead to a history that nobody else agrees is valid (halved at the wrong block number), so any coins you mine on your forked chain will be worthless. There's a monetary incentive to play by the rules, but absolutely no technical requirement.

Bitcoin's primary achievement (IMO but it's fairly common) is that it managed to design a technological system that encourages playing by the rules. Cheating always pays worse than playing along, and even trolling only works if you have the majority of all computing power (very expensive), so there's no reason to cheat. But outside the core public key cryptography that handles addresses and proving transactions, and the "proof of work" that basically just limits the speed of everything so there's time for the world to agree on things, there's not really any fundamental crypto involved. Just self-reinforcing social incentives.

(this kind of disagreement is why there's both Bitcoin and Bitcoin Cash. they share a common beginning but branched off some time ago and are now completely separate)
In general putting memory physically close to compute is good. If two cores need to share that memory doesn't it make sense to place the memory at the interface?
How many of those are invalidated by Specter? We’ve been building chips that are literally impossibly fast for half of the last decade at least.
Oh god, I'm so thankful for this, I was extremely sad when this disappeared, it was by far the best!
Is there a UTF-16 version?
> Contractors can get a new role almost immediately...

Perhaps inside IR35 and perhaps for a low rate. Big corps mostly do umbrellas these days.
https://archive.ph/iZuWD
Freelancer here. Yes, you have to sell yourself.

If you’re smart, you’ll pick it up on the job or read a little about it before the interview.
400 papers retracted.

Imagine having a build tool for papers, that will automatically retract papers based on those 400.

And better yet, having reproducible builds for papers. It would be a better system if instead of peer review, you would have a random lab trying to reproduce the findings. That would mean that the instructions on how to reproduce the process would have to actually work.
The solution to the affordability crisis shouldn’t have to be withdrawing from society and homesteading in the woods.

Humans are social animals and social connection is essential to our health [1]. This strikes me as trading one problem for several.

You lose access to quality food you don’t have to spend all summer growing yourself (too bad if you didn’t harvest enough for the long, long winter; you don’t have a passable road). Good luck raising children with no help, and no education beyond Kahn Academy. You must purchase a ton of equipment and learn how to use it and maintain it for self sufficiency. And on and on. It is not for the faint of heart.

[1] https://www.who.int/teams/social-determinants-of-health/demo....
This is good entry level stuff. As a contractor in the UK exclusively for the past 20 years tho, it doesn't paint a very full picture.

The most inaccurate bit is day rates. They're underestimated by quite some way in my experience.

What I would say is contracting in the UK is a game with different layers. This is the basic "coder for hire" layer. There's levels above that, with contracts spanning 10 years+ and higher day rates, but it is much more like dark magic.
Of course AI is extractive, everything is lately
The two are not the same. One promotes radical chemical and surgical intervention in the face of ever increasing evidence that it actually makes lives worse. The other promotes acceptance and belief that you are fine the way you are.
Even if the developer isn't, it's no problem at all. The word is to be used and enjoyed by all New Zealanders, and anybody else for that matter.
At first, I thought they used a cool new variation of something like VDF (Verifiable delay functions) or sequential proof of work to make a time lock.

In these two options, you need to make a very long sequence of calculations to decrypt the message. Since the calculations cannot be parallized and since the sequence can be as long as you choose, it creates a time lock on the message.

But no, they just use some kind of regular multi-sig/secret sharing.
Thank you for the feedback, this is the first time I have made a website with such contrasting colors. Usually when I go with a "dark mode" I make sure not to go fully black or fully white because of the reason you mentioned. With that said, I don't have a problem reading the text with this color scheme. However, you are not the first person to mention this so far. I have made the update, hopefully that's easier on the eyes.
The elephant in the room is the modern collectivist initiative of college/higher education for the common man. I don't how people don't see it, especially the HN crowd..

This article is shows only one of the smaller downstream consequences, it gets much worse. We are talking an entire generation indebted by trillions, entire areas of the economy with staff shortages, "highly credentialed" people working unrelated jobs etc etc

Colleges we always meant to a niche entity. Huge inequalities were not just optional downsides, rather they were structurally essential. Most people shouldn't go to college, most phds and professorhips shouldn't exist and most colleges shouldnt..

This is not a luddite take, i think these things actually should 100x but not like the way it is right now. The issue is socialism.

Government/non-profit funded high education should only be afforded to a very small subset of the population. The gifted.

Everything else should be private and amongst them most should be treated like trades/apprenticeship.

These ideas seem radical/ridiculous but most of what we think of high education these days are a consequences of extremely silly post WWII socialist policies.

I don't even have a massive problem with government funding either, this can be effective but not socalism, nothing like what we have now. More like military research during the WWWII and the early period of the cold war.
We don't talk about bruno
It is amazing what the Nix team has built. It's horribly complex, especially once you start peering behind the nixpkgs curtain, and yet it works incredibly well and is almost universally adaptable.

I've got my 2 personal machines as well as my homelab and a few other appliances all running off of it now.
Show HN: Your AI Product Manager
Productly uses AI to automatically log product feedback from all the customer conversations happening anywhere inside your company in a single place!