skysight-inc/HackerNews huggingface dataset:
A physical device which is not your computer stores some secret information which can authenticate you. This can be passwords, passkeys, GPG keys, your retina etc.

The physical device can be password protected. So you have two step authentication:
1. your physical device
2. your password to that device

Phones are currently being promoted for various reasons, but I believe something like Yubikeys or other FIDO2 fobs will be a better device. You can have multiple of them, you can store one of them in your bank safe. Someone stealing it of you is proper theft which can be traced in a usual manner by police. Stealing is not enough because you still need the password. The difficulty of asking you for password remains equal to difficulty of hitting you with a wrench. You don't need to remember stuff anymore, because you can just use your physical keys. You will need to travel with those keys, but its just same as your house keys. It is probably an extra key in your key fob.

To add to it, the U2F/FIDO2 standard will make it vendor independent, and so no lock-in.
Not surprised at all to see this is Canadian Liberals.

The Liberals have essentially lost the next election and have decided to go totalitarian in response. Canada doesn't have a recall procedure, so they get to do this.

I'm following Bill C-26 as well which states that Politicians can decide to secretly have people disconnected from the internet countrywide. No due process, no court or judge involved.

https://openparliament.ca/bills/44-1/C-26/

This bill is by Marco Mendicino, the same person who deployed the Canadian Army and at least 1 tank to crush a protest. Which they did do, and has since been found to have been very unconstitutional.
Perhaps they don't live in the south and you can share another point of view. Or asking specifically what makes them think that's so. Instead of assuming the worst and dismissing them.
I reread your analogy a few times, and while I think it's probably accurate, there is absolutely nothing simple in it. It reminds me of the "It's like Uber, but for mortgage insurances" kind of startup pitch. It perfectly encapsulates the concept, but the concept itself is just crazy niche.

To note: the key to start a car is provided with the car with no specific operation, is locked to no other device, doesn't care about who's handling it, can be duplicated and passed around. It would be closer to the traditional password system in all of its aspects IMHO.
https://news.ycombinator.com/item?id=40168230
After some frustration with shifted windows, usually even after a short break and monitor standby, I tried several solutions. Even tools that promised to save the fixed position were not satisfactory. My preferred go-to solution is now to define sets of window positions in a script for different work situations and simply call them up via keyboard shortcut. No third party tools needed, just works with AppleScript. The nice thing is, that it even works with multiple windows of the same app.

Here an example of my "Dev1" setting with three displays (two 27" external 4K displays and one 14" MacBook). Move Firefox to the first display and leave 50 pixel space for the left side dock. Move IntelliJ IDEA to the second and iTerm2 to the MacBook screen. Works reliable.

use application "System Events"

get (every window of process "firefox" whose value of attribute "AXMinimized" is false)
repeat with W in the result
set position of W to {50, 0}
set size of W to {1870, 1080}
end repeat

get (every window of process "idea" whose value of attribute "AXMinimized" is false)
repeat with W in the result
set position of W to {1920, 0}
set size of W to {1920, 1080}
end repeat

get (every window of process "iTerm2" whose value of attribute "AXMinimized" is false)
repeat with W in the result
set position of W to {1125, 1100}
set size of W to {1510, 940}
end repeat
But git is not user-friendly. You have to figure out how to push to people directly, and that isn't obvious to a commoner like myself. It would be great to have a nice front-end like Transmission is for bittorrent that makes the experience seamless.
They can, and hopefully will.

To get a new passkey on another device, the provider needs to allow you to prove you have possession of your other device first. They can do that by sending you a one-time code, for example, when you authenticate using your existing device, which you can then type in the new device, and that lets you associate your new device-generated key with your existing account.

With iCloud, you don't need event that because Apple can, and does, sync your keychain across all your Apple devices. So as long as you use the same Apple ID on different devices, all passkeys are automatically sync'd.

If you lose ALL your passkeys, you may be in trouble and for that reason, it's common that when you register your first passkey, you should also be given a long recovery code which you must keep privately in a very secure physical location (as that will allow anyone who can get it to reset your account). You could say that IS a password, and perhaps you're right, but there's a difference in my mind that's pretty big: you're never supposed to use that "password", nor keep it easily accessible or even anywhere in digital form.

Finally, a lot of people in this thread are missing that passkeys prevent phishing, and are basically the only way we know to prevent phishing. And phishing is extremely high in the ranking of security issues we currently have to try to solve.

If you know a better solution to phishing than passkeys, please let us know (Passwordd Managers are not that if they allow the clueless user to extract the password and manually enter it anywhere)!
The open question being: who can you trust. (And the XY backdoor shows that the answer is not trivial at all).
Probably not. Unless you have ulcers or open wounds in your mouth/trachea, virus will be digested and destroyed in stomach acid.
The limit case of prosecutorial discretion is pragmatically indistinguishable from tyranny. The more selective law enforcement is when everything is illegal, the less meaningful the laws themselves actually are and the more important the personalities of the enforcers.

Unfortunately the notion that law is best used to restrict government is a uniquely English cultural development. It’s unsurprising that Canada is losing that as she accelerates away from her English heritage. In principle of course there’s no reason a multicultural society couldn’t adopt the principle, but I’m unaware of that actually happening except for lip service.
PEP 686 – Make UTF-8 mode default
But how can we be productive as programmers without blindly copypasting random stuff from the Internet?

...well, I guess if your project is mostly about its internal business logic, not interacting/integrating with the wide world via the loads of weird and poorly implemented protocols and points, then you could be. But is this where the money are?
I switched from Android to iOS and back to Android because the keyboard typing predictions on iOS were so bad in comparison. It felt like I was using a phone from 10 years ago.
That's absolutely overzealous and usually gets fixed in a day or two.

The worst I've seen was someone blocking entire IP ranges due to fraudulent activity. Once their overall sales started declining, they realized they managed to ban entire university campuses because one fraudsters decided to use the dorm wifi for carding
In my case in does that with the (left) external monitor and the (right) MacBook one, while the central one (another external monitor) is fine...
Just look at this thread here, it's cliche at this point:

https://news.ycombinator.com/item?id=40154731
If you think the site is still serving the redirects I’m going to make a phone call to a publicly available number of some Cyber Crime division for Georgia’s GBI.
10 years? It's already happening now.
Sure RC was super simple, but systemd is just the evolution that Linux needed to become what it is today.

At this, I just vomited a little in my mouth.

Linux owes nothing to systemd. In every measurable way, systemd adds more complexity, reduces security by expanding the vulnerability footprint, creates a monolithic ecosystem, and handles everything far worse than, for example, Debian's use of sysvinit.

I spend more time dealing with systemd edge cases, and bugs, and security issues every few months, than I did in 30 years of other init systems.

Systemd is a step backwards.
The first MFJ product I bought was a 941-C Versa Tuner circa 1984 or so. A few years later I tried to load my 80m dipole as a Marconi antenna with 100 Watts. With only about 35 feet of vertical feedline that didn't work so well. In the process the torroid transformers overheated and melted the PVC forms the transformers were housed in. A few years later I ordered replacements from MFJ and these had a larger torroid, Teflon insulated wire, and sandwiched between phenolic wafers for mounting. I sold it a few years later after procuring a second hand 949-D tuner.

I also had a 986 Differential Tee tuner for a number of years that I replaced with a Palstar AT1500DT differential tee tuner. I routinely had to pull the 986 out and clean and lubricate it. I've had the Palstar about 15 years and have yet to open it up. The Palstar was priced about 50% higher than the MFJ but the quality is an order of magnitude better. With the Palstar I only cried once, as the saying goes.
I am not talking about criminals or similar, for that I agree with you.

I am talking about political. There has been a MASSIVE explosion of fakeness since covid, coupled with people who completely lost their ability to actually check information, and anything that makes it easier for anyone to propagate is dangerous in my view.

We've reached the point where "check by yourself / do your own research" moved from what the proponent of the truth used to tell people to go check, to what the other side is now using to give as much value to their facetok videos and whatnot (I am speaking in the general sense).
This is what I settled for after using Arch and looking for a Non-SystemD alternative that feels a lot like Arch. The thing that threw me the Void direction instead of Alpine was glibc support so I can use NVidia drivers (yes I know, Booo NVidia ;-)
Nobody should 'focus on AI', everybody should keep it back of mind as a potentially useful tool for whatever they try to do.

(I won't even make OpenAI et al. an exception, it just happens to be obviously the right tool. If sufficiently educated Mechanical Turkers looking through Wikipedia etc. and typing responses was cheaper than LLMs they should do that for 'ChatGPT'.)

A nice side effect then is that the huge variation in what's 'AI' (from logic & linear regression through generative NN video) doesn't seem so absurd, it's just a bundle of tools, of course there's a variety.
> Usernameless always seemed like an optimization too far to me.

I think it depends on the service. But aside from the occasional forum or social site, usernames are just an extra step. I don’t want or need one for banking/administration/ordering a product. For better or worse, email is usually a better identifier, assuming you already need one for other reasons (like you say recovery is typically needed).

> Especially as it reminds them what username they are using for that service.

Like passwords, forced usernames are hard to remember, if you use different ones. If you use the same, then it leaks privacy across services. (Technically usernames can be private but the expectation from decades of social sites is they are public)

> […] loses access to the Usernameless passkey, and then has also forgotten the username for the service

Correct, no identifier at all can’t be recovered. Hence, email.
Same topic and covering main questions raised here in the comments :

https://www.lemonde.fr/en/environment/article/2024/04/24/bir...
I thought racism and sexism wasn't permitted here.
Reminds me of this reflection, comparing ethical practice to improv theater — improv looks spontaneous, but it’s not that simple:

Ethics cannot be simply about rehearsing and repeating the same script and story over and over again, albeit on a fresh stage with new players.

This does not do sufficient justice to the unfolding newness of each moment of creation. The […] community learns to take the right things for granted, and on the basis of this faithfulness, it trusts itself to improvise within it tradition. Improvisation means a community formed in the right habits trusting itself to embody its tradition in new and often challenging circumstances ...

Ethics is not about being clever in a crisis but about forming a character that does not realize it has been in a crisis until the "crisis" is over. It is just the same for improvisers in the theater. Improvisation is not about being spontaneous and witty in the moment, but about trusting oneself to do and say the obvious.

— Samuel Wells

How you train, how you wear a groove into the patterns of your thought and your actions and your instincts, are how you will act when there’s no time for thinking. If you do it right, you won’t even notice.
https://en.wikipedia.org/wiki/Russian_mafia

Should we update wikipedia?
"Transphobia" in practice often just means rejecting the bizarre idea that men who say they are women somehow actually are women. Which is a good thing if you care about the rights of actual female women.
Legal opinions don't seem to have caught up...

https://www.justice.gov/archives/jm/criminal-resource-manual...
We do not know if what was described as a "sanity test" actually meets your definition of a sanity test, or was used for some other purpose like a smoke test.

A quick look using Google Scholar finds people using "sanity test" for smoke testing, like

"Typical behavior is to allocate any special resource requirements it needs, map the device into virtual address space, initialize the device and perform a brief “sanity test” to ensure that the device appears to be working correctly" at https://onlinelibrary.wiley.com/doi/pdf/10.1002/%28SICI%2910...

or

"The minimum essential test cases that need to be executed to evaluate the essential functionality are known as Sanity Test Cases" https://uksim.info/icaiet2014/CD/data/7910a048.pdf

or

"Sanity test is a brief run-through of the functionality of the software system to assure that the system works as expected." https://ieeexplore.ieee.org/stamp/stamp.jsp?arnumber=6006830

But it's also used for full testing, including human intervention, like

"There will always be a role for manual testing. For one, it is the only real way to sanity-test your automation itself." - https://citeseerx.ist.psu.edu/document?repid=rep1&type=pdf&d...

and

"Sanity test cases which checks basic functionality and are run for pre-system acceptance and when product goes thru major change. These test cases deliver a
very high project value to both engineering dept and to customers." https://ijaer.com/admin/upload/06%20Apr_2012_Sheo%20Kumar.pd...

as well this example which distinguishes between shallow-and-wide smoke tests with deep-and-narrow sanity tests.

"a smoke test generally consists of a collection of tests that can be applied to a newly created or repaired computer program. This is a “shallow and wide” approach to the application." while "Sanity testing will be performed whenever cursory testing is sufficient to prove that the system is functioning according to specifications. A sanity test is a narrow regression test that focuses on one or a few areas of functionality. Sanity testing is usually narrow and deep. It will normally include a set of core tests of basic GUI functionality to demonstrate connectivity to the database, application servers, printers, etc." - http://archives.christuniversity.in/disk0/00/00/48/68/01/the...

Going with PC Replacement question, since we don't know the actual goal of what was called "sanity test", we can't ourselves come up with a better name.

Which is why we should go with the OP's assessment that "quick" is an appropriate term for what they are doing. Since you don't know what that is, it doesn't matter if you buy a new term or not.
Canada has its problems...it's also exceptionally cold for many months in most places. That being said, most places around the world are becoming hell-holes due to the increasing presence of technology and the enormous amounts of effort we need to maintain that technological increase.
It didn't have to be this way, but the hype train won over practical considerations: https://fy.blackhats.net.au/blog/2023-02-02-how-hype-will-tu...
... which is completely nonviable if you connect to more than a single service.

I agree that you should use a different key per device, but when you connect to over a dozen different services/machines it quickly starts to become a serious chore to add another key. Have fun spending an hour enrolling your new device - provided you can even remember every single usage it should be enrolled with.
Is the content supposed to be the word "forbidden" and nothing else?
... transistor density?
Technical goals and Political goals are always 2 different things. And in this case neither is clearly defined or will be clearly defined, because Social Media was never built with a Goal in mind.

There is no Political Goal or Purpose like reduce Price so everyone can afford healtcare or education. Basically the Political goal of Social Media as a system is nonexistent so far.

The system we have today, was built because it became technically possible to provide Broadcast capability to everyone for Free.

Prior to its arrival you had to literally own a movie studio or a newspaper or a tv/radio station or license radio spectrum to do BROADCASTING ie get you message to as many as possible. You could put up a website sure, but the chances of anyone finding it without access to the above broadcasting methods (to spread the word) would be 0.

Even after the internet appeared and connected everyone up, sending broadcasts to the whole planet via TCP/IP would cause routers to melt down or get you kicked off the network.

Thanks to moores law, all that changed, and routers could handle crazy loads, and suddenly allowing people to Broadcast was possible.

No one asked why is such capability required? What problems does it solve?

Instead the technical focus went towards - how do we handle the Info Explosion that was a consequence. Everyone was connecting to the same network and everyone was broadcasting. Simultaneously. So How are people going to get noticed if everyone is speaking? How does music emerge out of millions playing their own tunes without a conductor?

The answers were half baked because there was never any goal to this system. The answers being Page Rank and the Like/Follower Button. Both creating an entire new set of problems involved never ending spam and gaming of the ranklists. So the focus shifted again to how do we get better Quality results.

And tech response was to collect Personal data. Opening the gates to Advertising and influence/attention wars. So the "answers" keep creating new problems.

With all these distractions, the original question still remains unanswered - why do we all need these systems? Why do we all need to be broadcasting? When is it producing something good? When is it not? When is it required either way? when is it not required either way?

We dont need to be building all kinds of garbage to handle an info explosion if these questions have answers and lead to clear political goals.
> Id hazard a guess that live virus contact with people on scale is what — by chance — eventually selects a cross over strain.

Seems that way!

Now do anti-microbial resistant pathogens appearing at factory (fish and other) farms.
Seems like growth as we know it today is leading to death via ecosystem destruction.
these most likely aren't using the Neural Engine

the ANE seemed to be optimised for small vision models like you might run on an iPhone a couple of years ago

these will be running on the GPU
Python>2.6 has excellent bignum support. Do you happen to know what blew up?
I was granted passage. There is more behind the gates.
I can't emphasis enough how I hate that you can't have one dock per screen, aggravated by the fact that multiple windows of the same app (i.e browser) can't be degrouped.
Maybe, just maybe, we should ease off on the factory farming...
Awesome. Congratulations, JeffieL!!
I generally prefer Gentoo's method: /var/lib/portage/world for manually installed packages, /var/lib/portage/world_sets for selected sets, and sets can be defined in /etc/portage/sets/. This allows you to split your packages into categories and only install certain bits on systems where you need them, as well as add any comments to the files as necessary. The equivalent to `apk fix` is `emerge -uDU @world && emerge -c` which is slightly more unwieldy but oh well.

Alpine allows something akin to sets by using `apk add -t setname pkg1 pkg2 pkg3`, which creates a dummy package which depends on your package selection. I generally create shell scripts in /etc/apk/sets/ to mimick the Gentoo experience, but it's not always the same.
Maybe I'm doing something wrong, but I "cloned" my own voice and the outputs were nothing like my voice.

I thought I was going to hear myself speaking French, but it's definitely not that.

A bit misleading if none of the examples actually clone a voice when the title is "instant voice cloning"
I use jam bands like Phish as background. No danger of hearing something I might start singing to, just music.
https://news.ycombinator.com/item?id=40168230

See this and let me know if it makes more sense.
I've had that complaints for four years when I had to use macos to develop for an iPad.
As a Windows(or Plasma) user its window manager is just absurdly behind the times with its exclusive full screen and lack of snapping or having to edit application manifests so you can put the simulator in a tiled setup.
It really didn't give me a good impression on why people like macos for development apart from having a shell with outdated utilities.
It also doesn't respect the reduced motion accessibility preference to the same degree that windows does, it's how I get around annoyingly long animations on there.
Aviator (YC S21) is hiring engineers to build a dev productivity platform
If they control the information flow can't they simply steal the passkey too?
How does one actually avoid this? e.g. Say your boss needs you to make a react native app - you start their default project, pull in a few Expo libraries for core functionality. At that point there are hundreds of third party libraries that are being pulled in that you can't realistically vet.
In the end, the problem with the claim is that if it is true then 'computer' is defined so loosely as to be uninformative; as soon as you add plausible conditions, it seems obviously false.

According to the best physics, the universe: isnt programmable; doesn't evolve deterministically; isnt described by functions over integers; isn't electronic; doesnt transmit power through programmable operation; isn't abstract; doesnt have causal powers through mere arrangements of parts; .. and so on.

Whatever it could mean, "computer" here is a strange term. I've no idea why people are so keen on it.

I take it to be a sort of humean-idealist-passivist theory: the world is an abstract set of discrete states that are just mere arrangements with no necessary connections; there is only pattern in these discrete states; these patterns are abstract and can be realised by mere number alone.

This is roughly somehting like an early 20th C. logicial positivist view, which was somewhat influential -- but it's wholey false, and throw out in scientific practice