skysight-inc/HackerNews huggingface dataset:
Disclaimer: Co-Founder Corbado here. I think the simplicity actually for the user is why they are so successful already. I can understand a lot of the criticism, although I am not that skeptical regarding the lock-in. I think this discussion is probably already lost with most consumers having their life within Google or Apple cloud via the mobile phone. Although the discussion is valuable, it should not be held over passkeys.

For passkeys, we truly believe even if those options are weighed against each other, the benefits are weighing more. Big consumer-facing platforms have huge problems securing accounts for users. If you force them to use classic MFA (SMS or TOTP), the usage drops and recovery/fallback processes skyrocket. They don't want MFA. Risk-based MFA can help but is not perfect as attacks get more precise.

So we think the adoption will be faster than browser developers can get around fixing all of the issues, because once a standard is adopted, it gets more and more difficult to streamline things. But we are looking forward to it.

Of course, we see it that way, because we are building a company around it, but I have been battling against account takeover for years and took great pride in trying to protect the data as a developer, our users entrusted us. So I see a real chance here to improve security in the consumer market.
>I feel like doctor incentivization and silicon valley's predatory corporate culture aside, this problem does need to be solved if we want to avoid wasting doctors' precious work-hours

Your comment presupposes that time spent on data entry is a waste. Relevant, cogent notes written by a human are infinitely better than whatever the rent-seeking intermediary between the physician and OpenAI shits out. The problem is not technical in nature; it's a misalignment of incentives.

The solution is to pay physicians for time they spend charting, and then the time is no longer "wasted".
Wouldn’t a DDoS be perfectly
legal and permissible under your logical framework?
Explainshell.com – match command-line arguments to their help text
I think it would be possible. It took some effort, but eventually Microsoft caved and provided a key for blessing safe-boot for Linux. Getting to that point, on the other hand, would probably require a pretty significant court case; meaning someone would need some deep pockets.
Just need to get the parents permission for filming/photographing the children and feeding it to an AI.
Sure, but these types of applications are running in a web browser sandbox, which benefits from enormous engineering resources to protect the host computer from malicious actions by the remote code. I'm wondering whether this execution environment (augmented with some policy mechanism to allow apps to declare their URL access needs, a little like an AppArmor or network firewal policy) could also provide some guarantees concerning privacy or information security.
> I've also heard people say reading Lisp functions, inside out, ensconced (heya) in their parentheses, is somehow more comprehensible than sequential C style, but this state of enlightenment thus far eludes me. I can only speak for myself, but I definitely reason about code outside in rather than inside out.

Based on my years tutoring university students in various programming languages throughout their courses, I suspect some of this is personal preference that's set before one starts programming.

Some people who start with C-style languages find Lisp-style languages more intuitive, while some people who start with Lisp-style languages breathe a sigh of relief when they discover C-style languages. I haven't found any predictor of this ahead of time – as far as I can tell it's just something one discovers as one tries different languages.
Roads have huge utility to society. Unless you want the ambulance to go get you on a unpaved mess and take you back to the hospital banging all over the back. Or that they fetch you by bycicle.
And because they are physically more removed from the consequences of being a dick.
It's where the open source community has largely moved. All the newer projects I use are there.

So while I wouldn't call it great, I do think it is better than Slack for communities. Slacks changes made it harder or less featureful for them, and lost their main gateway to organic growth
And (among minor nits) mentions of WGS-02 seem to be typos for GCJ-02.
It is a bell sound as the sister comment points out. We found that a multitude of sounds work with negligible difference in perception. The bell however was consistently voted the most comfortable in post trial questionnaire.
I know I'll never be a motorcyclist because I don't want to ruin my hair with the helmet. People with curly hair will know what I'm talking about.
Florida bans lab-grown meat, adding to similar efforts in four states
I was disagreeing with the apparently absolute 10h boundary even if your hair or child or startup is on fire. I am not one of there people that says you should work at least 32h per day or you've failed, but equally, overly rigid boundaries are unhelpful. If you create something new then it's usually messy at times and sensible flexibilty is vital. Been there, done that, several times, now part retired.
Yes, I agree. We still have passwords although Social Logins have existed for years. And Passkeys are also adopted because they increase security from a 2FA perspective.
You are missing knowledge (Spring, in your example). But you are saying that "I can grasp in on the job" ?

Given a two years gap, you should invest the time and effort in learning whatever it is the market is seeing demand in.

Consider the employer's perspective. Given two equivalent candidates, where one of them know Spring, but the other needs a month or so to learn it.
They'll go with the one that already knows that.

That attitude of I can learn on the job is likely hurting your prospects.

The CV in the website is also really bare bones. Basically, nothing relevant there. The old one appears to at least show the employment history.

The website link from GitHub is erroring. The website you linked looks bad, Geocities bad.

The GitHub profile itself is really bare bones. The first non-forked repository I saw was literally hello world (hidden by many layers).
So generally one should aim to (and have people around you) work somewhat under 8h/d - 6h/d of core non-mindless seems about optimum IMHO.
Helmets are also overrated.

I've fallen many times and not once I've hit my head. They are probably useful in high speed impacts, but then you are fucked anyways.

Gloves are much more useful on a daily basis. Saved my hand many times.
Not clear. Waymo has made it work, but cost per car and per ride is still very high. That should come down over time. It's not clear that this is a hugely profitable business. It's basically auto rental and taxi service, after all.
This 100%. If you are going to include a GitHub link, then you NEED to have at least one project that shows you know how to code. All I see is forked projects and themes. That reads to me as someone who is trying to BS their way into a job. I'd pass because I've got a stack of other candidates to review.

I understand that you usually can't share what you do in your dayjob publically, but in that case you need to create something yourself. Even while working a 9-5 you have enough time for that in a couple of weeks (I say that as someone who works longer than 9-5 and has young kids) - if you have been laid off you have no excuse.

I created an "Ask questions to your PDF" app (using OpenAI's APIs) as an example project that is public on my GitHub profile. There's lots of things that would need to be changed before I put it into production, but it demonstrates that I understand the fundamentals and backs up what my CV claims.

As a hiring manager, my biggest concern is we end up hiring someone who doesn't bring anything to the table, and just wastes everyone's time.
SEEKING WORK | Remote

I'm a full-stack developer and OSS maintainer, primarily focused on generating SDKs from OpenAPI specifications, building custom e-commerce integrations (Amazon, eBay, Shopify, etc), and modern PHP/Laravel development.

I've built dozens of one-off e-commerce integrations – everything from multi-platform inventory management systems to analytics dashboards to cross-border e-commerce tax compliance software.

I built and maintain the largest Selling Partner API SDK [0], which has 3.8M downloads and counting, alongside a number of other OSS e-commerce API tools [1], and custom tooling for generating SDKs from OpenAPI specifications.

I also have experience with several major web stacks (PHP/Laravel, Python/Django, JavaScript/Next, etc).

My email is jesse [at] jesseevers [dot] com.

[0] https://github.com/jlevers/selling-partner-api
[1] https://github.com/highsidelabs
Saying other things that aren't free doesn't make the first thing become free.

People who don't use helmets don't do it because they are too expensive. They do it because it's not convenient to carry, because it's not cool, because it messes your hair, because you need somewhere to store it. (Not) Free helmets solve zero of these problems, it's just a bad idea.
> Airchat is an app that lets you chat with anyone, anytime, anywhere. You can share photos, videos, and personal info with other users, but data is not encrypted and may be shared with third parties.

If this isn't gonna fail dramatically, I'm eating my hat
CL does have some weird stuff, after all it's coming from the 1960's LISP tradition.
But after you get past some basic weird stuff, it's a quite wonderful language.

> I can only speak for myself, but I definitely reason about code outside in rather than inside out.

You can indent code to make it much easier to "parse", and use some macros that turn the code inside/out, it's more readable than most other languages.

The CL cookbook is an excellent resource, and this page links to several other excellent resources and books you can read for free online: https://lispcookbook.github.io/cl-cookbook/

The "new docs" also present the documentation in a "modern" looking way (rather than the 90's looks of what you get if you Google around): https://lisp-docs.github.io/cl-language-reference/

About other Lisps...

The Racket Guide is definitely not "bone-dry": https://docs.racket-lang.org/guide/intro.html

It is well written and looks very beautiful to me.

On another Scheme, I find Guile docs also great: https://www.gnu.org/software/guile/manual/html_node/index.ht...

They may be a bit more "dry" but they're to the point and very readable! In fact, I think Lisp languages tend to have great documentation.
The guy who wrote is an excellent writer (he has written Racket books which are equally great) and I believe is the author of the Racket docs tool!
I mean can't you just open up preview and then export?
Ask HN: What does stripe use for their unique IDs?
Here's the discussion on the Id's
The IDs are neither completely random and are of variable length
https://gist.github.com/fnky/76f533366f75cf75802c8052b577e2a5
https://archive.org/details/russianidea017842mbp
As a Unifont user under UXTerm and reading RSS articles, news, chat, code and everything, I think having a good font size matters. WIth Unifont, start from 12pt and use multiples of 4: 16, 20, 24, 28, 32... until the font doesn't look fuzzy and it perfectly suits your resolution/DPI.

Also, as an European I used the read the Teletext (It was almost an electronic newspaper with national/international news/sport results/weather forecasts and so on which worked accesing every page/section by a 3 digit number) on a CRT TV just fine.
It wasn't before I had a good place to run (away from cars and the city) that I started running. Yes, it's free, but it's very hard to pick the habit if your environment doesn't help.
Can you explain why? Are you suggesting he used the money on marketing instead of product?

I don’t know too many bootstrapped companies that are billion dollar plus but most well run bootstrapped companies can end up becoming successful small and mid level companies that make a decent money. At least from a revenue:num_employees, can’t be capital intensive so they have to be profitable from early on. Pls explain I’m interested to learn thanx
> McDonald's is a public company. Do you think that its CEO and the fund managers who hold the biggest stakes in it regularly eat there?

Yes: https://financialpost.com/executive/mcdonalds-new-ceo-eats-a...
Ask HN: What Linux distribution for desktop are you using?
On servers I use Debian but I have not used Linux on desktop for over 10 years. Now that my upgrade path to Windows 11 looks undesirable I am looking for alternatives.

Linux is actually looking great now as gaming seems to be a solved problem.

What do you guys use?
Fair enough. In fact I agree with the broad point that having functions that do things is a source of bugs and CL is a huge language with less than perfect names. My point is that having less functions that do less things does not obviously reduce the number of bugs in the end if those things still need to be done. Anyway. I see how a logical argument may be out of place if the thread is understood about sharing feelings and not about challenging claims.
This is a very Android centric viewpoint ;)
The MUD-family of games are usually built in a C-like OOP-language, LPC. I think it's rather nice.
Semi off topic, but what happened to this website, used to be the top result when searching for services, now even when I search alternative to x it often won’t be on the first page.
Medium is not the best place to host your writing. I didn't even read the article because more than half of my screen was taken up by the Medium call-to-action and the Google account modal. Does anyone remember when a webpage just loaded a document?
Uff that must get hot under the Quest.
IMO if anything will get us to longevity escape velocity, it's AI. This is why I'm so fundamentally against the anti AI folk. Their jobs simply are not worth the chance that we can evolve this into AGI and achieve escape velocity, saving billions of lives.
Guess what, there wasn't a single reason and it was a multitude of reasons and whoever tells you they found the main contributing factor is more likely to just want more attention than they'd get with a more mild version like "this contributed to it".
I don't think so. This is just for Aptiv's investment. Looks like Aptiv (APTV) will remain separate.
Is this actually new? See here: https://www.nature.com/articles/s41598-017-16621-w - discussed here: https://news.ycombinator.com/item?id=24669593

It's even been in Wild Kratts!
None of which are particularly sexy, unfortunately.
not a problem if it's done locally. at least the consent is only to capture/store the images with the practice, not giving it to third-party.
The test coverage is pretty low. I'm raising a PR for this. Code quality not the best.
Not the undercover-kind
No one will be double checking. On at least three occasions now I’ve had to correct monumental fuck ups in mine and my ex wife’s medical records. One nearly lead to a transfusion of an incompatible blood type.

I suspect this will lead to a decline in accountability with there being another party to blame rather than the medical professional.

The LLM did it, not me.
I have not tested it but some users in the bitwarden forum has mentionned that it's included in the vault export (cf https://community.bitwarden.com/t/passkey-portability/59177/...).
From the Methods section of the paper (under "study design"): "We also included meta-analyses that pooled data from primary prospective/retrospective cohort or case-control studies. These studies were the focus because of their ability to assess causality for observational research".

While "causality" is a strong word in the sentence above, the data is much stronger than simple correlation. Of course, outright causality has not been established, but the evidence to determine a predictive association is strong.
True. I personally prefer non-residential keys that don't take up any space on your yubikey. The keys are reconstructed on the fly based on a value that I receive from the server I am authenticating against.

Passkeys are residential keys and they consume storage. The minor upside is that they free the user from remembering their username.
TBH, this is better than custom UI that blocks password manager copy paste.
I wonder what's the payout for individual soldier to do this to have somebody die after the battle has already ended with win or loss.
True. You did not say "standard http port", thank you for clarifying.
Just ask for it, glitter some PR over it, done. People consent into all kind of things.
Don't do it. I'm married to a doctor who started in family medicine and bailed out because the work-life balance was awful and the money was mediocre, but she wasn't willing to see 6 patients an hour.
SoftHSM2 Maintainer Needed
It seems like the development of SoftHSM2 has stalled quite a bit. There is still a lot of user interest, but very little action in terms of management of the project. There are many pull requests and issues raised by users, but very little in terms of taking care of those.

SoftHSM was originally developed as a PKCS#11 and HSM test platform for OpenDNSSEC, but later took on a life on itself. The reason for that is that there is a lot of need to use software that talks to Hardware Security Modules, but without actually spending the cash of buying one, mostly for development. But it has also become a cornerstone of a lot of other products, for example IBM Red Hat Identity Management.

NLNet Labs states in the GitHub issue linked: "Given the above, the current state is that development on SoftHSM v2 is dormant and not likely to pick up significantly in the near future. We are conferring as a team on how to proceed in the future, but this will likely take us until at least the summer of 2024."

So the future of SoftHSM does not look very great. Are there any organizations reading this willing to take up this challenge, and make the future of this small "insignificant" open source project great again?
Disclaimer: I am a Corbado Co-Founder.

I have commented further down, and I really think that, from a broader perspective, there is a great chance that there will be strong positive effects for consumers. I agree that there is a threat with attestation being used to lock out certain implementations. On the other hand, the technical details do not allow that because the IDs can be changed easily. Also, there is no attestation enforced for passkeys, and that should stay that way. But I agree with one concern: If Apple or Google wanted to achieve such things, they could, just because of their market dominance in browsers. However, I just do not see how that would make sense for them from an economic perspective.
Istanbul in Paint
An AI-generated song using Javascript as the text of the song
Depends on the system I guess, but I'm familiar with a local one which is very much tuned for just summarising/rewriting. It seems very good at what it's doing and since it's working from the transcripts, it's actually picking up some things the doctors were not concentrating on because it wasn't the main issue. I've never seen doctors so keen to adopt a new tech before.
Google/Apple don't have to pressure anyone.

Companies like PayPal and eBay are already gate-keeping the ability to use PassKeys based on user-agent.

Firefox on Ubuntu doesn't get the option to sign-in with PassKeys on Paypal. Fake the UA over to Safari on OSX and it'll happily work.
There doesn't seem to be any reliable casualty numbers from the war. It's entirely possible there are more Ukrainan than Russian casualties.

https://www.newsweek.com/russia-ukraine-losses-casualties-ta...
>Any UI is an API with extra steps.

What isn't an API with extra steps? This argument also applies to scripts, extensions, and for that matter, web browsers as a whole.
Thank goodness they are not.
I dropped Chase literally this weekend because of this. Their security questions were useless, and in one case, wrong - they had an estimate of how much I owed on my mortgage, that didn't take into account additional principal payments, so made me go through a second three rounds (either that, or the cs rep screwed up one of the address questions).

About ten years ago (it was my top Google+ post, if that dates it for you) I emailed one of their emails to me to their fraud department, because it was so ridiculous, urgent calls to action, obfuscated links, no identifying information that only the bank would have known. They're fraud department thanked me for reporting this obviously fraudulent message, to which I replied that it wasn't fraudulent, to which they were flabbergasted.
Cyqur – Securely Encrypt, Fragment and Distribute Your Data
Would you know not to?

My mum bought into a lot of homeopathy and Bach flower remedies. Thought she was doing me and dad a favour by getting both, and even "secretly" gave dad doses of the latter (and I was a kid so didn't have much say), so I was fortunate both categories were basically nothing.

But her and dad?

One of the Bach flower remedies was "for memory"… she got Alzheimer's about 20 years younger than her mother.

When my dad was dying of cancer, there was some mineral he thought he was short of (magnesium?), and he didn't realise the homeopathic pills labelled "magnesium" didn't actually contain any magnesium.
Isn't this what humans do?
To ber very frank, a lot of these logging and note taking requirements have already led to many mistakes, and we already have many case studies of how the system does not care to remedy such things. I can easily see how AI will be adopted here and its mistakes will be glossed over the same way we already glossed over the same mistakes before.
Password managers like 1Password support PassKeys.
It's good, but falling into the enshitification cycle.

There is room for a future competitor, but now might be too early.
You should check out MagicaCSG, which is a more sophisticated version (though still free!) of this: https://ephtracy.github.io/index.html?page=magicacsg#ss-caro...
obviously, but i'm not so keen to turn it into a pre-emptive scheduler either lol.
But the Yiddish speaking culture of Ashkenazi Jews was also erased. At the founding of Israel the ideology was "we're all Israelis now, so speak Hebrew and forget your experience in the diaspora (https://en.wikipedia.org/wiki/Golah). It was certainly harsh and from modern perspective wrong but it applied to everyone, not just Mizrahi Jews. My grandparents had their last name "Hebrew-ised" and spoke Hebrew at home rather than their native Romanian/Ukranian/Russian.
Thank you!

This post is a little braggy but it's also one of the best things I've did and I'm genuinely proud of it. The result and the process wildly exceeded my expectation at the time when I started last summer and it made me happier, more efficient, and even gave me time to reflect (since there's not much else you can do while going on a long ride/run) mentally.

If anyone is thinking about it - give it a try! The starting months are the hardest, but once it gets going a positive feedback loop takes over. I've been able to convince some people in my life to start exercising when they saw me change so substantially in a single year.
I'd honestly prefer a standard login page (or aria fields well defined for all inputs) so my password manager could click 'login' automatically.

On the other hand, most Password Managers now support Passkeys, including Bitwarden.
Besides the absurdly slow load time, I find the UI somewhat complex and cluttered. For example — I accidentally pressed the #general voice channel in a big community, which makes the phone ring for everyone. Oops.