skysight-inc/HackerNews huggingface dataset:
> With barely any setup, Google/Microsoft/Apple will keep a backup copy, in case you lose your phone.

Not Microsoft. Their implementation has no synchronisation feature and provides no way to back it up or transfer to another device either. You lose the computer you lose the passkey.

Their implementation is very daft and goes counter to the point of passkeys since you will need a less secure way of authentication to remain enabled on the accounts you use a Windows Hello passkey for, for the sake of being able to recover those accounts.

Remember, the best security schemes are only as secure as the least secure scheme that is available to access the account. If you're still on an account that can be recovered by sending a 2fa code to email or SMS/texting then you have achieved nothing.
Linux most definitely has a TPM interface, it's called /dev/tpmrm0 and plenty of libraries for accessing it (eg. https://github.com/parallaxsecond/rust-tss-esapi/ full disclosure: I'm co-maintaining it). Systemd is not needed for that.
Exactly, the improvement will be in rerecording terrible readings into something enjoyable or at least inoffensive. That and personalization so you can choose the voice that you prefer.
Absolutely, have been for decades, see expert systems: https://en.m.wikipedia.org/wiki/Expert_system (I take the strong position that code is data, so an if statement in code is equivalent to an if-then rule stored in a database: it is just a different way of storing the data. However others would take a different position on that.)

The issue is that encoding human knowledge in if statements is hard to scale, so it doesn’t seem to be on the path to general artificial intelligence, but fundamentally it is still automation of cognition.
Sounds like Stripe announced a new version of its checkout experience that will be using THE BLOCKCHAIN AND A WEB3 INTERNET COMPUTER to give a more precise selection of payment options to customers depending on location and what customers may have already used.
I had issues with voidlinux+musl for using rust but that was a couple years back. Thankfully you can easily reinstall void with glibc
Code Signing on Windows with Azure Trusted Signing
I’ve been wanting to try NixOS because I really like the declarative approach, but all this drama is turning me away from the project.
Eh ... they should focus on customer experience rather than AI.

As a customer unable to remove a credit card from my account, despite the service being inactive and cancelled, because the service is "still active", I'd rather have someone I can contact to resolve it, rather than being pointed to the uncontactable merchant.

Fix your broken things first.
From this document, it appears something obviously wrong is happening in this community, but as an outsider new to all this, it's very hard to understand what's going on.

The document is very long and I don't really get the structure. It's very hard to make anything of it really. It somewhat makes me suspicious, even. I would write exactly like this if I knew how to do this and had to sidestep an issue. Long, hard to follow stuff filled with words.

Is there a clear summary, an easy-to-follow timeline? (of course these are always going to be presented from one side)

Also,

> Simultaneously, this group, still upset about the failure of RFC 98, is using the myth of fascism combined with an abusive extension of the paradox of tolerance

- What is the myth of fascism?

- What is the abusive extension of the paradox of tolerance?

I get the paradox of tolerance is that you can't really tolerate intolerance or else you'll be eaten. [1]

> The paradox of tolerance states that if a society's practice of tolerance is inclusive of the intolerant, intolerance will ultimately dominate, eliminating the tolerant and the practice of tolerance with them

[1] https://en.wikipedia.org/wiki/Paradox_of_tolerance
I loved that screensaver, LLAP.
You mean this is the way to write comments now? I might join, sounds like a good idea?
Not related to title, but I'm most excited about "Usage-based billing upgrade".

Their offerings for recurring billing have been lacking for a long time. I'd love to drop the recurring provider we've currently got on top of Stripe, and just use Stripe.

We ended up on Chargebee because we needed fractional unit billing. While there we've also discovered that they apply rounding at different times for different documents. So when a quote is promoted to an invoice the total changes. That was a frustrating few months trying to explain to support what the problem was for them to tag it #wontfix.
I've noticed if you have your screen in a non standard resolution all the icons go weird and stretched (but in different ways, like some look fine and others stretch down and others stretch across) not a major issue but just thought it was worth pointing out in case you hadn't found it. (i.e. 1142w x 452h)
And they actually do full source bootstrapping and signing.
The problem is it's nearly too late to "prepare" for it - the time for that was years ago

Instead, we've spent that time doing things that are only going to exacerbate the issues - like doubling down on voice as an ID

More importantly, trust in both public and private institutions and even between citizens has slowly eroded - understandably so, if you ask me, but still - which as another commenter has pointed out is going to be even more important going forward. I imagine rebuilding that trust is going to be even more painful with stuff like this.

(The only other alternative I can think of is along the lines of cryptographically-signed content from end-to-end, government ID to access the Internet, etc. This would be highly detrimental to a free society, so I hope we don't go this route)
It sounds good but doesn't go far enough. Facebook should not be able to use any personal data for ads, unless it is specifcally opt-in. We should have laws that make it very hard for companies to retain personal data at all. Just look at what EU did for cookies: all we get is some annoying pop-up box now, asking whether we want all or necessary cookies.

We should be way harsher on these corporations.
Its all nice and small, etc. but its Apples to Oranges comparison.

On FreeBSD You have ZFS with ZFS Boot Environments - which gives GREAT flexibility and protection against all kind od updates, changes and even accidental files deletion in the system. Moving to 'oldschool' LVM and EXT4 is just a huge downgrade. Especially without any advanced features such as compression or snapshots or clones or ... all the other wonders from ZFS.

As from the busybox ... You can also use it on FreeBSD - its under 'sysutils/busybox' port ... and FreeBSD has 'kinda' itself busybox-like solution - its called FreeBSD Rescue System and its located at /rescue. It contains one executable file 17 MB in size (and ZFS lz4 makes that 11 MB) with hardlinks as commands - including all needed ZFS commands - which BusyBox obviously does not have.

FreeBSD % % du -sm /rescue
11 /rescue

FreeBSD % du -smA /rescue
17 /rescue

FreeBSD % ls /rescue
[ dhclient gbde kldstat mt rmdir umount
bectl dhclient-script geom kldunload mv route unlink
bsdlabel disklabel getfacl ldconfig nc routed unlzma
bunzip2 dmesg glabel less newfs rrestore unxz
bzcat dump gpart link newfs_msdos rtquery unzstd
bzip2 dumpfs groups ln nextboot rtsol vi
camcontrol dumpon gunzip ls nos-tun savecore whoami
cat echo gzcat lzcat pgrep sed xz
ccdconfig ed gzip lzma ping setfacl xzcat
chflags ex halt md5 ping6 sh zcat
chgrp expr head mdconfig pkill shutdown zdb
chio fastboot hostname mdmfs poweroff sleep zfs
chmod fasthalt id mkdir ps stty zpool
chown fdisk ifconfig mknod pwd swapon zstd
chroot fetch init more rcorder sync zstdcat
clri fsck ipf mount rdump sysctl zstdmt
cp fsck_4.2bsd iscsictl mount_cd9660 realpath tail
csh fsck_ffs iscsid mount_msdosfs reboot tar
date fsck_msdosfs kenv mount_nfs red tcsh
dd fsck_ufs kill mount_nullfs rescue tee
devfs fsdb kldconfig mount_udf restore test
df fsirand kldload mount_unionfs rm tunefs

The MUSL also limits some things - but that is topic for another discussion.

... and do not get me wrong - I like Alpine (same as Void or Gentoo or Devuan) - its just not the same thing.

... and its even possible to setup Alpine with root on ZFS - https://openzfs.github.io/openzfs-docs/Getting%20Started/Alp... - it will just take a quite large amount of work while on FreeBSD you just select 'Auto (ZFS)' installer option and hit enter.

Hope that helps.
Aye lad!
Don’t take any wooden nickels
Was this comment by any chance written using an LLM? It really sounds like it was, but I could be wrong…
Well, you can’t convict him if he’s not in the US. He’s been hiding in Romania the past few years.
With minority report, at least the ones calling in the pre-crime were psychics and for imminent danger, afaik.

So, much less bad than what canada is up to.
Yeah this is essential. Personally I use:

- Ctrl + Opt + Cmd + Left/Right Arrow to snap window to left/right half of the screen

- Ctrl + Opt + Cmd + Up Arrow to resize window to fill the screen

- Ctrl + Opt + Cmd + C to move window between monitors (centered on the next monitor)

I don't need any other shortcuts, this is enough to be able to effectively work with two displays for me.
Just to clarify Estonian Id-Card most certainly implements the PIV applet while Yubikeys implement both PIV and the OpenPGP Card (the latter has a benefit of natively supporting ed25519: https://github.com/wiktor-k/age-plugin-openpgp-card).
without commenting on this specific case because TLDR: the same argument could be used in a situation where moderators allow harassment against certain groups in the name of freedom of speech, while moderating harassment against others.

moderation is prone to power plays no matter which angle you approach it with.
When I first got an iPhone I was sooo excited to give Apple all my personal information. That is weird, because, that is a negative as a consumer.

When I first got Fedora, I was pretty accepting of flaws in the system because I was so excited. Weird because, this is a negative.

But vocally, we love our brands we associate ourselves with. You are such a vocal proponent of Apple products, when Apple fails, you think it reflects on you and your decisions. You don't want to be a dolt that spent $3000 on a computer that can't do what Fedora can do better for free.

We give the companies we irrationally love, passes.
Overall-size heterogeneity could be partially epigenetically-driven right? I should try to read the paper, but I'm not an academic biologist. I've been listening to Michael Levin quite a bit though, and from what he says it seems like there's some very interesting ideas around how genes participate (or don't!) in setting up or affecting 'vmem' (that's what they call this intercellular voltage-pattern 'memory' of what-to-grow-into, that cells apparently retain in a non-DNA-based way after the initial setup).. I think it is interesting to ponder what might be able to get through the gamete-gates and still affect the vmem pattern (ie the morphological-target, which would usually probably include 'how large to make it' right?) by going around the side (ie via cytoplasm/membranes or even encoded into the cytoskeleton?! Rather than just what goes into the next generation via the sequence in the DNA in the nucleus).
Yes, that's my point. Original link either doesn't use CF or has lower CF "sensitivity" settings. Which defeats the whole purpose of archive.ph.
... and they are getting warned about that feature existing: https://news.ycombinator.com/item?id=39698502
"It's not sweeping, it's only going to be used for the worst potential crimes"
https://gitroll.io/result/repo/Zm8ZZHP03jH4XkjPd8gP aka https://github.com/CubFinance/cub-bridge on my profile (github.com/CADawg)
Enrolling both at the same time still requires both authenticators to be present at the same machine/physical location.
Similar impression here. I think we're not the target audience of this document.
> This is a GitHub web page for the repository "rfc-evidence" owned by user "nrdxp". The page contains the file "rfc_evidences_experiences.md" which is part of the repository's master branch. The page includes various HTML, CSS, and JavaScript files that are used to render the GitHub user interface. The page provides metadata about the repository, such as the description, analytics, and social media sharing information. Overall, this appears to be a standard GitHub repository page for a project called "rfc-evidence".

Time saved: 171 minutes.

Thanks Kagi-search summarizer....
I used this as part of my bigger write up on how to open source a Python package in 2024.[0] It is really great and takes away a lot of pain.

0. https://jonathanadly.com/open-sourcing-a-python-project-the-...
SURELY they wouldn't use generalization to put the worst potential crimes and thoughts they dislike in the same bucket.
From hypernormalisation to hyperreality.

I’ve been telling my friends that 5-10 years from now, the only things that you’ll be able to ~100% trust is what happens in front of your eyes, in that very moment. You can elect to trust reliable news organizations to vet things for you, but even if you do, due to polarization a huge subset of the world will think you’ve been got and discard everything as fake.

Look at stuff like Sora, or all the new voice models coming out. Just a few days ago there was a high school athletic coach (!) arrested for cloning the principal’s voice using that to say vile stuff. He only got caught because he used his own e-mail.

Now combine that with the fact that Microsoft’s new Phi-mini model approaches GPT-3.5 performance using 3.8 billion parameters, whilst GPT-3.5 uses 175 billion. And we’re only ~5 years of optimization into this tech.

I want to get off Mr Bones’ wild ride.
The daily routines of people you encounter in news, or search for on Google
Problem remains when you lose one, and need to block and enroll a new backup?
I also liked how the '[ok]' moved to the right after GPU drivers have been loaded :)

- https://rubenerd.com/files/2024/alpine-openrc.png

Of course its OpenRC related and not Alpine.

IMHO it would looked more 'nice' if the '[ok]' stayed where they were - at least till 'login:' prompt - but I know that its just implemented in a way that 'write [ok] after space from right side of the screen' and as resolution increased - it happened what happened.

They could just move the '[ ok ]' or '[fail]' to the left - beginning of the message - that would 'solve' that problem also.
People for whom gender is part of their identity are covertly hostile towards people who don't care. The people that are expelled are never those who have pronouns in their bio's. Respecting (=affirming) gender identity is part of every CoC.

Just a feeling. I have no proof.
> The biggest issue with passkeys is that I just can't trust the companies offering them. They are locked into the platform for reasons that are ostensibly security but often indistinguishable from platform lock-in.

On MacOS you cannot enable passkeys (or using TouchID with them?) without enabling iCloud Keychain.

I'm fine with iCloud Keychain. But to enable it, you have to enable "autofill form password" which enables it in Safari. Disabling it in Safari disables the global setting and disables iCloud Keychain.

WTF.

https://twitter.com/dmitriid/status/1782787035637375050
Rule based stuff, decision trees etc have survived a few AI winters, I think...

And technically even, say, a credit approval system using if (rand() % 2) to approve or reject is AI. No humans involved!
> stupid double stack

DoubleSpace/DriveSpace?

Mostly, you are absolutely right, yes. MS-DOS 5.0 was the peak, and then it started to acquire bloat as MS bundled stuff to compete with DR-DOS 6 and DR-DOS 7.

But the thing is that by modern standards, the bloat is tiny. :-)

I gave MS Office 97 a bad review at the time because it was several times bigger than Office 95, had virtually no new functionality, but introduced a pointless new file format just to get people to upgrade so they could read the files sent to them by companies with the newer version.

But for a decade now, Word 97 is my go-to version. With all the service releases installed, it works great, it's tiny by modern standards -- I think a full install of Word with all the optional filters and things totals 14MB -- and it's lightning fast on 21st century hardware.

Word 95 is even smaller and quicker, but it can't read or write the file format that everyone else, from Pages to Wordpad, uses. So it's crippled: everything has to go through LibreOffice first, to convert it to a .DOC format anything else can view, import, edit, or print.

Time changes the meaning of bloat somewhat.
I coincidentally started lurking and responding to some support threads the NixOS discourse a few weeks ago, because I appreciate the project and I wanted to get more involved in it. In the past couple days I've seen this train wreck play out in real time, both on discourse and on github discussions.

From what I could gather, the main factor that led the community to this point is Anduril's involvement in the community. Anduril is a miltech company and a contractor of the USA DoD. It looks like they use Nix extensively to train ML models and deploy combat drones, and several of their employees have very close ties to the Nix community; Jon Ringer (an Anduril employee, who is mentioned several times in this document) has recently been a release manager for three versions of NixOS, and was nominated to become a release manager for the upcoming 24.05 release.

Anduril wanted to sponsor NixCon last year because of this deep involvement in the community. I was not there to see it, but from what I've seen lately, many members of the community were not happy about it. The sponsorship was eventually pulled, because the on-site video team for the conference (https://c3voc.de/) threatened to pull out on their own over this sponsorship.

From my understanding there has been no official decision taken over Anduril's sponsorship since last year's debacle. Many people in the community think that this is because Eelco Dolstra, the creator and de-facto BDFL of Nix, is currently employed by Determinate Systems, which is rumored to have a contract with Anduril.

Edit: I just want to make it clear that I don't agree with what is presented in this document. I just wanted to present an overview of what, from my perspective, happened up to this point.
Or internal theft syndicates - but those are even harder to fight than external theft.
Yeah, the post just got flagged, maybe for the best.
I read Plato's Gorgias, I believed Callicles over the Conventionalists.

I got my mind opened. Philosophy is words by old people in control, Science is the reality of things. Thousands of years later Niztsche says something similar. 200 years later, we are back to teaching Stoicism.

So what is going to happen, people who read philosophy learn a religion of virtue, find out another set of truths, and go through an existential crisis that causes anti-social behavior?
Yup. Boot DOS off a USB key and it suddenly speaks USB. :-)

Only for drives, but still...
Related: https://github.com/topics/voice-clone
Congratulations to those involved on taking the road of a proper cross-platform native approach, and the article was quite interesting read.
Hm. The main criticism is you get locked into a cloud platform storing your private key(s) when using „passkeys“. This can be convenient as you can use your favorite smart phone to authenticate everywhere or even choose to rely on local TPM storage on your laptop or PC through MS Windows. This trades convenience with the risk of a vendor lock-in. But AFAIU the FIDO2 protocol you are free to use a dedicated USB key storage instead to store your private key (protected by a PIN or passphrase) on your own. This a bit less convenient but gives you peace of mind if you hate MS/ABC/Apple.
It means "best regards". In Morse code transmissions, a lot of words and phrases are shortened to commonly understood abbreviations and pro-signs. You can see an example here: http://lidscw.org/resources/cq-qso-template and a list of such abbreviations here: https://cwops.org/wp-content/uploads/2018/07/CW-Abbreviation...
Probably because their benchmark for displays (>220dpi, plus 10bit HDR in some cases) chews through so much bandwidth that it's not really feasible to squeeze two of them onto a single DP1.4 connection. DP2.1 could do it but Apple doesn't support that yet, and even if they did the monitors would also need DP2.1 passthrough, which also none of them do yet.

MST over DP1.4 only really makes sense for traditional low DPI displays.
I've actually heard Jeff do the humpty dance live; now I'm thinking you have too
It appears the bulk of the actual requested changes are here: https://github.com/NixOS/rfcs/pull/175

When there's stuff like this going on, I don't think it's helpful to try and do a full review of who did what wrong, or what the hypothetical motivations of any of these groups of people are, but instead to just review the actual proposed policy changes.
The beginning of the end. Its been a ride, see you in a totalitarian canada in 10 years. I'm excited to read the "how did this happen" posts, then, I guess? Good time to start a business providing visas for other, less crazy, countries.
So I should get locked out of all services when my device breaks?
Apologies if this becomes a re-send!

Overall-size heterogeneity could be partially epigenetically-driven right? I should try to read the paper, but I'm not a biologist. I've been listening to Michael Levin quite a bit though, and from what he says it seems like there's some very interesting ideas around how genes set up or affect 'vmem' (this intercellular voltage-pattern 'memory' of what-to-grow-into, that cells retain in a non-DNA-based way after the initial setup).. I think it is interesting to ponder what might be able to get through the gamete-gates and still affect the vmem pattern by going around the side (ie via cytoplasm/membranes or even encoded into the cytoskeleton?! Rather than just the information that goes via the nucleus).
Passkeys can’t be phished, or shoulder peeped, or entered on a malicious domain. And for the layman, it means they can’t forget their password.

Technically the place where you store your passkeys can be hacked into, but there is no technology that protects against that. You could give a tech layman 5FA and he’ll give all 5 factors to the nice man on the phone call.
Exactly, Philosophy does stand at the root. I often wonder why some—perhaps all too many—scientists (especially physicists) dismiss Philosophy as being irrelevant and pooh-pooh its ideas. For me, Philosophy and Science are and have always been complementary, after all Science was once called Natural Philosophy. I say that as someone whose main profession is electronics (it pays the bills).

Re Gödel: I'd like to have been in the same room as Russell and Whitehead when they were reading Gödel's Incompleteness papers of 1930/'31 for the first time. In the light of Principia Mathematica one wonders what they must have thought. There are some references† but it's a pity they aren't more enlightening.

Perhaps the answer is here in the words of the man himself (it's very hard not to think so): https://www.youtube.com/watch?v=ihaB8AFOhZo. For those who doubt the value of Philosophy then these few words of inspirational wisdom ought to put their minds at rest.

___

† https://philosophy.stackexchange.com/questions/29288/what-so..., https://www.jstor.org/stable/44083314
You're right. I don't know how that happened.
The DEVICE line loads device drivers.

EMM386 is a device driver which needs to be started very early in the DOS boot process for it to work -- because most of the rest of DOS is then loaded into memory blocks that EMM386 provides.

It's an .EXE file because the command invocation gives some useful data -- but it can't load that way, and if it could it would be useless because then it was too late to load drivers into the memory regions it created.