skysight-inc/HackerNews huggingface dataset:
> it’s very popular to distribute the software along with the entire userspace

OK, there are two ways to interpret the word "popular".

* As in "a presidential candidate enjoyed popular support".

* As in "ski is a popular sport in some European countries".

So, let me tell you this: distributing software with the entire userspace is not popular, if you use the first interpretation of the word. Users hate developers who distribute software like this, this is what they call "bloatware", "not a team-player" etc. I, personally, despise developers who do this, because, from my perspective, these are the low-skill developers who do less to get equal pay at my expense (as a user).

But, of course, it's popular to be a bad developer, in the same way how it's popular to steal bicycles -- low effort, high reward, if you ignore the disappointment of someone else.
MacOS not ready for the desktop: confirmed

(Yes it's just a satire of people who pick random UX failures like that to say Linux is unusable as a daily driver, as if MacOS and Windows were flawless)
> simulation games with virtual dioramas

Try Toy Trains VR!

It’s reeeeeaaally simple simulation-wise, like it says on the box - it’s mainly a toy, but it’s very cute

> games that play with size/perspective differences

Fisherman’s Tale!
Show HN: I've created my first ever website for my upcoming side-business
Hi HN, I’ve launched the website for my upcoming side business - a little Windows desktop application that I developed to scratch a personal itch. This is a significant milestone for me as it's both my first ever website and side business.

The website itself is built using Tailwind CSS with plain JavaScript and some PHP scripts to handle the sign-up forms. I used a lot of ChatGPT for all of it. It's hosted on the the Hetzner level 1 webhosting plan costing EUR 1.90 per month and put behind Cloudflare. I am actually quite curious how this setting will hold up against the traffic from this post.

You can check out the website here: [https://www.iconpainter.io]. Any insights or suggestions would be greatly appreciated. Thanks a lot!
FWIW: MacOS and iOS allow third party password managers to ingrate directly into AuthenticationServices and list passkeys in the native passkey UI through a "Credential Provider" extension. And it's documented how: https://developer.apple.com/documentation/authenticationserv...

This is the same Credential Provider API they already have to integrate with to show the password autofill in iOS so there is already _some_ code for this.

1Password _could_ just integrate with the native UI. But they chose not to.
This however means shipping a native app which is a lot more heavy-weight than shipping a web extension.

I opened an issue in the webauthn repo about giving an API for WebExtensions to hook into the passkey autocomplete but there hasn't been any traction or appetite for it unfortunately :(

https://github.com/w3c/webauthn/issues/1976
Very valid points. But how would you be able to tell whether the majority of Iranians aren't happy with their Government with confidence?

I find that difficult to believe because, if that were the case, at some point, specially because of all the reasons you mentioned, the people would just get over it and kick the current Government out of office for good?! It may be bloody, but if the people really want it, it's not unreasonable to assume, IMHO, that the military would be onboard with it?? Once the military is on board, there's nothing the politicians and cleric can do to stop it as in a revolution, the only thing that matters is physical power.
Agreed. He does this work repeatedly, no budget, and it's hard to get people to spend time working on efforts like these, whether it be technical or legal.
there is no such thing as hate crime
It's a bunch of crypto bros aggressively marketing a product with no clear use case. If you ask about how the monetization works they frantically wave their hands. They also have been trying to obfuscate their connections with their radicle now rad coin and keep claiming it's unrelated despite the old naming.

Looking forward to the fediverse posts later today, it'll be a good time.
So, you are saying that maybe if there was some sort of an injection.
No one said anything about either types or naive set theory.
I would kill for an Alpine-like distro with glibc instead of musl.
I also heard "Mississippi's Finest Junk" as well. To be fair, I found the MFJ items I had to be able to the job. It was never best of breed but was always serviceable.
There's no account recovery process for passkeys. I thought they are your identity?
When I see a chain of empty “thanks, great” comments, my fake reviews alarm goes off immediately.

Our minds are wired for living in tiny groups, compared to the internet. The latter brings new rules to the game and you have to adapt. That creates the dilemma of annoying noobs vs annoying olds. It all was known since forever as a netiquette. Human defaults simply n/a here, everyone has to learn and cope.
Might be relevant to point out that "zwiebel" is German for onion.
Let's keep livestock in poor conditions and give them antibiotics to survive, then complain about the consequences
and replace it with what?
No. Read my posts again. I didn't say "cis" or "trans".
That’s why most 2FA’s are 1.5FA by default where you can recover via SMS, delayed e-mail, etc, and you can (sometimes) only disable this by clicking through three scary screens and saving your 10 backup codes.
Let me see if I understand what this is.

It used to be the actual feature size which was quadratically proportional to transistor density.

Once feature size stopped being meaningful they continued using it by extrapolating from transistor density, ie whenever they would quadruple density they'd half this massive number. This, therefore, includes innovations like finfets and other " 2.5D" technologies

Is that largely correct? Because it's gross.
>The degree of arbitrary rule they expressed is something we just lost knowledge of, in the first world

Actually, there are multiple areas in Europe that are now little different from feudal fiefdoms run by drag traffickers(13ème/15ème in Marseille comes to mind) and instead of doing anything about it politicians just pretend they don't exist.
Test it yourself: https://www.google.com/search?q=team.georgia.gov+%22kamagra%...
First they came for the socialists, and I did not speak out—because I was not a socialist.

Then they came for the trade unionists, and I did not speak out—because I was not a trade unionist.

Then they came for the Jews, and I did not speak out—because I was not a Jew.

Then they came for me—and there was no one left to speak for me.

— Martin Niemöller
It’s just such a shame all 8 billion earthlings are so addicted to food!
Thought it was Scotland from the title
Are Rocks Conscious? (2016)
"Don't feed the trolls."

Replying to them is giving them the attention they want. Rebuttals will just invite public arguments. Definitely deal with the problem, but do it quietly, in the background. Do not engage.
We already do this. "Re-education" (yikes at the word, but I see what you mean) is an attempt to get people to make better choices. E.g. to use their will to override their impulses.
https://archive.is/tCUFT
To be honest, with respect to just the headline, you could pretty much substitute Windows or Linux in the headline as well.

We can dump tech workers, en masse, to be replaced with futuristic Artificial Intelligence and advanced LLMs, but plug in 2 displays and your computer shits itself.
Reinventing Unix is not my problem
Hi! I've decided to take the nomad part in digital nomading literally and build a SaaS on my way to Bali by train (and boat - obvs Bali is an island)! Stopping 1.5 months in major cities along the way to focus. Wish me luck
To be fair "we don't down-rank sites for being 99% google ads" is a technically accurate way to read that sentence.
I agree with the skepticism behind your question. I’ve used both at different firms heavily over the years. I’ll believe it when I see it. What about MySQL’s local @ variables… is that supported in Postgres? I guess they do say they will support MySQL’s procedural language… is there a difference between that and MySQL stored procedure compatibility?
It's also falling apart, literally. I have been in Sicily and modern buildings, highways and bridges are in really bad shape due to faulty concrete. Closed roads and buildings wrapped in scaffolding everywhere.
How would that change anything. factory farms are more likely to take biosecurity seriously and thus not allow wild bird contact.
So what do we do? I really think something like Firejail must be the way to go, but it's absolutely not ready for user-friendly prime time. And what do you do on macOS, or for every little tool like `ls` (where I want say filesystem access but not network).

It all seems a bit hopeless, I refuse to believe anyone who claims to audit everything and every update - and would they have caught xz's backdoor anyway?
What happens if I inject milk into my veins? Do I get high?
Plants.
Ask HN: Why is so many packages in LLM dev brittle?
I've been a Software engineer for 5 years now, and recently started LLM dev.

A lot of the huggingface, accelerate and bitsandbytes are exceptionally brittle and newer models somehow get stuck in dependecy hell.
The Permadance
> if the nix community is that against me taking money from the military

As far as I understand it, the objection would be if

- you were simultaneously a key person in Nix, like a release manager
- your company officially sponsored events that associated Nix with military
- several of your employees were active contributors to core parts of Nix

I think the last one might not even be a big issue, or at least it might not blow up.

Surely, the usage of Nix in any domain is a free choice. You can't really police that anyways.
Regardless of race or gender, you would be hard pressed to find a victim of online harassment who reports anything along the lines of "the law bent over backwards to help me."
lol so many words to say you’re not American and understand us.
>virus will be digested and destroyed in stomach acid

So how does food poisoning happen?
Goofy Shirt Paralyzes Robotaxis
Stereotyping and persecuting all white males due to the actions of a very small (but visible) minority is not a point of view with which many would agree.
Non factory farming. Prices will go up and this would be a good thing in addition to treating the animals in a more moral way.
Unlike with covid, we know how to make flu vaccines on a large scale. Is there a reason why we couldn’t also preemptively vaccinate against H5N1 during regular seasonal vaccination campaigns?
mixing milk dramatically increases these chances.

If each person drinks milk from one cow, and there are 1 million of each, then you have 1 million chances.

A chance is higher if a cow has a few mutations in its viruses, or if a person has a slightly different receptor or immune system...

But if you put all the milk from the 1 million cows in a mixing vat and then distribute it to the same 1 million people, now there are 1 trillion chances, and the slightly better mutations will end up coming into contact with the humans with slightly more receptive cells.

This is one of many reasons I think we should limit the fanin/fanout of food production. Ie. you may only mix animal products in say batches of up to 10,000 cows, and that batch may only be split up amongst up to 10,000 humans. Then you have to clean the production equipment before the next batch.
Not reused, each service has a different key

To rotate, you go to the key management page of the service and delete/add a new key.
There's more alt-milks than I can count. While cow's milk obviously is used to produce other things, we can drastically reduce the need for it by moving to other kinds of milk for the liquid-consumption part.
Hopefully no viral particles capable of infecting humans will be found. We’ll know soon though.
It is not required that your connection has been MITM'd. The service you are authenticating can accidentally log the plaintext password, they can store it with an insufficiently secure hash function or not salt it. A malicious browser extension can scrape it directly from the input form. Etc, etc, etc.

Passwords are reasonably secure since we've been using them for a long time but there is in fact a huge chain of trust required to keep them secure and links in that chain frequently break.
You get brie.
SSH certificates solve this issue.

AFAIK there is no equivalent for Passkeys.
Is that really it? I use systemd at work and still have plenty of scripts to write getting my Debian packages to configure themselves correctly :)
The part I hate most about Passkeys is that it essentially killed the FIDO1/U2F ecosystem.

Just about every website which implemented Passkeys removed the option to use hardware tokens with "non-resident" credentials. This means you're stuck using your Yubikey as either an insecure TOTP token, or as a practically-useless Passkey.

We had the perfect 2FA method with U2F hardware tokens, why did they have to take that away?!
I can imagine much as it did in olden days, networks of person to person trust. But with the added possibility of using public private key pairs for verification.
The worst part is that the federal opposition parties seem little better. Many of the provincial governments are disastrous. Even my municipal government is a trainwreck. Canadian governance as a whole seems to be on a decline, and there's no end in sight.

The Canadian motto is, "peace, order and good government." At least we still have peace.
No, absolutely not.

Plus, don't run experiments on your own body.
That's the secret, you don't have to replace it. It doesn't produce food, it takes in food and turns it into less but different food.

So yeah, plants. It's painful, but we've gone beyond what we can do on this planet.
I completely agree but have we gone full meta? Being negative about the negativity? ;)
The Post-WW2 era you speak of ended in the 1970s or so.

We always believe the hunger for piece of prosperity after 1945 would last forever. Nothing lasts forever. People forget, and then go on to repeat the same mistakes. Time is a circle.
Solopreneur Documenting His Daily Journey
Agreed. Next step, it'd be just great if most open source software (and presumably most non-OSS code, although that's harder to determine) didn't pull in half the internet as mostly pointless dependencies. While we're at it, it'd be sweet if major OSes like Windows and most Linux distros would move to a threat model of "machine is used by one or more users who each want to safely run untrusted code without risking their own files, safety or privacy" instead of the old "machine is shared by many users and our main concern is guarding them against each other" model.
>2) In the second case when one service is breached you'd still have to manage rotation of public key somehow

Why would you need to rotate your keys? If they're storing passwords/hashes it makes sense to rotate because they might be able to brute force the hashes on a GPU cluster, but you're not going to be able to brute force a randomly generated public key.
Or “Dave I see your on an iPhone and paying with an Amex” increase the price by 15%.

“Android and debit card” keep price the same.
Which of those alt milks are produced using biodiversity supporting practices? Oat? Soy? Almond?
Yes, what if it helped all these years and you aren’t even negative? i.e. still have a greater potential in criticizing, i.e. analyzing things.
If they don't fix siri in the next year, I really should drop iOS. It's sad.

Why cant I use my device to talk to GPT4 from the lock screen?
> Apple Keychain has personally wiped out all my Passkeys on three separate occasions. There are external reports we have recieved of other users who's Keychain Passkeys have been wiped just like mine.

i have been using passkeys on apple since they launched it. i have also converted all of my 2fa’s to passkeys (where supported) or enabled them as password alternatives. a lot of website support passkeys nowadays. i never encountered what the author encountered and it seems like something seriously wrong happened.

did anyone encounter this issue? is it logged somewhere?

i seriously considered dropping passwords completely for future projects, but it looks like there are still issues…
Well, Parquet seems to be so widely supported, it's my default pick, unless you can explain why it's not the right fit.

Though I'll say if your primary use case is "higher-dimensional arrays", none of Parquet etc are likely to be a good fit -- these things are columnar formats where each column has a separate name, datatype etc, not formats for multi-dimensional arrays of numbers. That's a different problem. A Parquet column can be a list of arrays, but there's no special handling of matrices.
There are other foods that do not carry this risk.
Generally by bacteria or their byproducts (toxins). Viruses are relatively smaller and more fragile.
If you think that a voice actor reading an audio book is too generic then I've got bad news about an AI trained on the author's voice...
Well that make poor folks harder to fulfill nutrition requirements. Especially for kids that'd be devastating.
>but plug in 2 displays and your computer shits itself.

Didn't Kyle Machulis fix that problem?
Milk is pasteurized
The thing about evidence is that it can be contested. I imagine that in the cases you refer to, one side presented them as evidence and the other side said oh bugger, you got me. If they had reason to believe the audio had been tempered with, or entirely fabricated, they would then bring expert witnesses and eventually the other side would have to offer more evidence that it was not tampered - often this sort of thing comes down to "under oath, I swear I recorded this at the date/time and the subject on the tape is $name". This might not be enough to convict or exonerate, but it'll then count as part of the case.
Congrats on doing the podcast! Definitely looking forward to it.

I wanted to complain about the audio, but the YouTube comments on the topic made it clear what the problem was. This means that audio is going to be better in the future.
1Password includes Passkeys in archive/exports of the 1Password database. Safari developers have stated that it is a planned feature to support Passkey exporting (but not currently supported) including between apps.

I'm not aware of any restrictions at this time on your second point. I also haven't seen any examples of attestation and Passkeys being used in practice.
Fair enough, but it is a different interface to touch, and it even has a separate (duplicated) home in settings. There's no good reason for it to be the same toggle.

(To me, the scroll wheel is reflecting the scroll bar on-screen, so I'm pushing it up or pulling it down. A touch area more naturally resembles the rest of the page/window, so I'm on board with 'natural scroll' - I'm pushing the page up or pulling it down.)
This makes my week! Long overdue and finally the middle finger back to Comcast/Universal, Verizon, Spectrum, and AT&T etc. The regulations should never have been tampered with.
We’re not even close.
Pasteurization would render the virus INOP?
I wouldn't cry too long for the curious children of today. There are more frontiers and available resources for kids today than we ever had tinkering with an isolated TI-99/4A or VIC-20. We could share a cassette with a friend and if we were super lucky there was a local user group that met in a church basement right after the AA meeting.
> Assuming, of course, that the platforms don't somehow intercept the passkey requests and refuse to allow KeepassXC to do its job.

My understanding is the ability to do that is built directly into the spec with the attestation feature. The only thing that might slow it down is Apple choosing to not implement it and zero out their device string. Others can piggy back on that to protect themselves behind Apple's skirt, at least until Apple changes their stance anyway.

Platforms of course could just not allow Apple passkeys and only allow Apple users to use other 2FA options as well. Rest assured that small players like KeepassXC will be the first ones to have their passkeys blocked or not supported.

The whole thing is a trap IMO.
Show HN: Sound 100x confident on calls and meetings with a teleprompter
I built a beautiful teleprompter to help you sound more confident on cold calls or videos.

I Recently had the experience of recording a quick demo for one of my products, and i was taking 3 second long pauses and blanking when the record button hit.
I found that a lot of other teleprompters on the market were just too complex or had terrible UI/UX and didn't really allow navigation abilities.

I recorded the video on my landing page using my own product and when i say this is "the most confident i have ever sounded" I mean it lol.

Check it out and let me know if you guys have any feedback, i plan on adding a ton of other features if i find product market fit, such as, the ability to pivot scripts and handle multiple scenarios, custom shortcuts to handle most common objections.
It doesn't need to be produced through the incredible wasteful in-between animal.

People can either eat straight up plant-based food, or alternatively go for lab grown meat. There's no need to go through all the inefficiency and suffering of factory farms.
Long recovery code is definitely a password lol. Needs to just have email recovery and call it a day.
2? 3 is more like it.
The TL;DR version in my opinion is that passkeys are quite similar to a SSH key pair, like one you'd use on GitHub. Basically you generate a key pair, the server stores the public key, and the client stores the private key. When you want to authenticate, the server sends a challenge, you sign it with your private key, and send it back. The main debate is over how to manage those keys after generation.

- Backups: It depends. It seems like the big players (Google, Apple) are pushing an implementation where your passkeys are backed up either in the Google Password Manager or iCloud keychain. That way if you lose your device, you can recover your passkeys the same way you recover your other phone data.

- Storage: It depends. Google and Apple are pushing phone implementations where passkeys are protected by a hardware security module of some sort, either the iOS keychain or Android Keystore. The private keys can't actually be stored in the HSM though, because you need to be able to back them up. So the passkeys are stored encrypted on disk, and the decryption key is stored in the keychain/keystore. Other options include passkeys actually stored in hardware (eg. Yubikeys, but then you can't back them up) or 3rd party password managers.

- Login: It's pretty seamless, just click "login with passkey". The browser handles finding the right passkey, and part of the signed challenge includes the domain the passkey is for, preventing MITM-style attacks. There's also a whole separate thing for authenticating a session on a different device via scanning a QR code or Bluetooth.

Here's a good fairly high-level breakdown of how it all works, if you want some additional detail: https://webauthn.wtf/how-it-works/authentication
Not sure how 'successful' it is, but Netherlands government also started a Mastodon server https://social.overheid.nl/about and e.g. the tax office has over 2000 followers https://social.overheid.nl/@belastingdienst