skysight-inc/HackerNews huggingface dataset:
> The popular libraries seem to follow a kind of "shadow spec" where they agreed on using the URL-friendly variant of base64

WebAuthn itself uses base64url rather than base64. See, e.g., the `id` field here: https://www.w3.org/TR/webauthn-2/#iface-pkcredential

(It was probably a mistake, but it predates me so I don't know the motivation.)

> I still don't know whether it's possible to use both usernameless and usernameful passkeys simultaneously.

Non-discoverable credentials can only be used if their credential ID is passed in an allowlist. Discoverable credentials (a.k.a. "resident" in the API, although that name is a bit misleading) _can_ be enumerated in an allowlist. So they can work together, but to have the allowlist you must collect a username first or have some other way of know which account is pertinent to the current session.
That's a good idea, thanks for the suggestion! Maybe I'll let them rename the keys with the provider as the default name. Haven't played with GitHub's implementation yet but I'll play around with it.
Ongoing discussion[0] (86 points, 7 hours ago, 43 comments)

[0]: https://news.ycombinator.com/item?id=40237855
Do you think a guy with a 12+ year old channel and 2m subscribers has never entered into a business relationship with youtube?
>plus I need Microsoft Office and other proprietary tools, which prevents me from switching to Linux or the BSDs full time.

Microsoft office runs on linux (https://thelinuxcode.com/install-microsoft-office-linux/). I'd bet many of your proprietary tools do too (or could be replaced with more linux friendly software that still meets your needs). In the worst case scenario, a VM with windows on it would mean that you use Windows only for the one or two things you absolutely need it for and you're free of it the rest of the time.
It's less about known vulnerabilities, and more about how there is nobody to care about vulnerabilities on the OS anymore. Why tie your horse to an abandoned platform?
As the article mentions, the curves are unstable. This is delightfully apparent when you drag one control point in a circle around another. Interestingly, it can also make fairly sharp corners if the control points approach each other.
The title is misspelled, should be “AM”, not “Am”.
That may be the case, but I think many people will hear "Boeing" and immediately classify them along with Lockheed Martin, Northrop Grunman, Raytheon etc.
I was sat at home drinking brain fluid when fred ring
https://huggingface.co/models?search=Llama3-ChatQA-1.5%20ggu...

Bartowski and neopolita have the most options. DuckyBlender's repo is currently empty.
There was only one round of Nuremberg Trials. There were subsequent Nuremberg tribunals conducted in the same courthouse, but these were a US only effort, and not what people are referring to when they say "the Nuremberg Trials"

Those subsequent tribunals were still quite limited, with only about 1600 people being tried. For context, there were over a million members of the SS.

Further, the punishment for most of those convicted in these tribunals was forced labor, so had Von Braun been tried and convicted at that time, odds are he still would have most likely wound up working for the US developing their rockets. So the claim that the US shielded him doesn't really make sense.
I sometimes think, that c is all we need
> Forcing normal people to try to use Linux

Have you seen how many ads the average user puts up with?
Who do you think should make the content decisions for these platforms?
You have it and can do whatever you want with it. Why should Apple be obliged to provide you with any other services in exchange for nothing?
Because the definition of vaccine has been muddled with what used to be called gene therapy. In this case, they are tricking the body's immune system to attack specific cancer cells like it would learn to attack a flu virus or any other antigen.
Asianometry is a great channel
> And while no one is suggesting that human brains could be grown in another animal

Krang begs to differ!

https://www.youtube.com/watch?v=qgc8swYrcpM

although TBH he lived inside a giant robot.
What is the business model of an "AI smart-matching tool for humanitarian aid"?

Spunds like a word salad, or a weekend project for a developer that could be hosted for few bucks per month.
> doesn't address any of the points Google is making.

Yes it does. YouTube claims he violated their API terms of service and he explains that GrayJay doesn't use the API so they never agreed or accepted those terms. They had no need to.
How can you prove it was him and not someone else? Again, where’s the wet ink signature?
They are kingkong. After they started publishing these Seagate seemingly stopped selling trash less and less. Had so many Seagate drives going south. Bleh. Would be nice to see SSD drive stats too. There are so many terrible SSDs out there, like SP, which has utter trash controllers. One day your drive gets locked up without any forewarning, and your data just disappears.
> And here it also doesn't make any sense; the cat is out of the bag, there is nothing to cover up because we already know about Boeing being a clusterfuck

Executives are the ones that have motivations, not the abstract entity of Corporation.

'Cat out of the bag' would be 'we have specific evidence that allows us to prosecute a specific executive for criminal negligence or manslaughter'. That would be why you might kill someone, to save your own skin.
I think that would be a statistical mistake to cherry-pick the cutoff like that. What would be the argument for ignoring the X months/years beforehand in which no one died?

If I asked you for the odds of the next three coin tosses being heads, you don't start counting on the first heads. The first toss being tails is a possible outcome that can't be ignored.
It had a near 0 or a small rounding from zero effect on overall mortality. Covid rarely, even with co-morbidities, killed people.

Vaccinated people had a significantly lower chance of death but the overall death rate was so tiny it basically doesn't move the needle.
>> Where are all the mass deaths and murders since then?

Murders?!?! WTH?
I think he is just an an honest person who is honest about his frustration with various things that any sane person should be frustrated with.

I find his videos quite relatable including the topic you just mentioned.

I guess real honesty is not really socially acceptable for most of society.
Does this (or a tool like this) actually remove ads and spy “features” without actually modifying the user experience otherwise? I've wanted a tool that would get rid of this nonsense, but leave my system as vanilla Windows 11 otherwise. The ones I looked into all seemed to apply various other UI/UX tweaks that the tool writer apparently preferred. I just want to remove the ads, nothing else.
I pay for YouTube premium and Spotify because YouTube music is just that bad.
Go easy, they’re one of today’s lucky 10,000
If the property is under private control, the city can only make requests. If they own the property, they have direct control over its use, incentives, etc. Lower rent could translate to a more vibrant distribution of businesses leasing space (versus only businesses who can afford market rate rent). Non market public housing is very common, and while I can only speculate on the motives of the City of SF based on publicly available information, I could see why they would do it. As you said, values will jump at some point, so acquiring these properties at the bottom is somewhat savvy. Could they issue muni bonds to fund these purchases perhaps (if needed, issuing debt at reasonable interest rates to pick CRE up while on a fire sale)? Wouldn't be the worst way to spend borrowed money as a city.

Call and ask? Genuinely, not snarky. I'm sure someone at the city is willing to share the motives, and I too am curious.
Self reported? I'm not anxious about anything in my life. I'm worried about some things (line illness in my family), but I'm definitely not anxious over them and they never trouble me when going to sleep, for example.

Now, I'm not an entrepreneur though.
Anything but Zookeeper! It was written long before the cloud was a thing, relies on hard-coded IPs, and is practically impossible to operate idiomatically in a cloud environment (unless you’re using statefulsets in K8S to paper over it). It has served us well over the past two decades, but it’s nigh time to give it the proper burial ceremony it deserves.
Nah, don't need to kill them, just have your PR team make sure that every death that does happen is headline news.
Do you think every phone number is pristine when it’s provisioned?
Any source to your avoid TechStars advice?
And what does „hard“ even mean? Hard for whom? Hard for the average person? For the average developer? Hard for an expert on a particular topic? Hard for someone having practiced a lot or not?
the canonical blog post series:https://ericlippert.com/2015/04/27/wizards-and-warriors-part...
On the Internet of parrots, they really mean it when they give you the bird !
> Until some big vendor just releases a specifically linux machine, which they won't.

Tell that to Dell https://www.dell.com/en-us/shop/dell-laptops/scr/laptops/ubu...
Courts are not binary logic machines. If you go into one building your whole case around such an argument you will be laughed right out again.
Check out Dune3D and Salome-Platform
There’s at least one other possible explanation, which is coincidence. In a sample size of one, it’s entirely possible.

It seems like a relatively testable hypothesis.
Remarkable price. 6.5 million is only the price of 3 San Francisco homes for 90,000 sqft.

If you fund the purchase with debt and assume a interest rate of 5%, you are talking 325k/year for the building.

I wonder what the upkeep costs are? I wonder what the depreciation schedule looks like for office buildings.
Two random examples: A malicious Word document that when opened can automatically run an attacker's Powershell script [0], or if you're tricked into using Remote Desktop to access an attacker they can run commands on your machine [1].

[0] https://www.cvedetails.com/cve/CVE-2022-30190/

[1] https://www.cvedetails.com/cve/CVE-2022-21851/
So the company was essentially signed away even before the bankruptcy.
As many as it takes to leave even a shred of evidence.
No, his response was far from childish.

Now, how I would have responded, THAT would have been childish.

“Dear Sir or Madam, Your company policy’s aren’t law, kindly go fuck yourselves.”
When have I ever criticized a book I haven't read?
Doesn't that make this a tax scam then?
It’s not a good idea to libel someone much more powerful than you without proof beyond “post hoc ergo propter hoc.”
I'm not sure what type of response you're expecting because in their previous response they directly addressed Google's claims and clarified that their app is not using the Youtube API and therefore isn't bound by its terms of service. Google apparently sent their response to /dev/null and just reiterated their previous claims yet again, indicating that they're not engaging in good faith.
The buyer already had a $45 million mortgage on the property, so while this transaction cost them $6.5 million, they are not valuing the building at $6.5 million.
JustGeometryAndDash [video] [epilepsy warning]
Aha, so it is part of the spec. Thanks for clarifying that. Appreciate the advice on discoverable credentials as well! I was probably leaving out the discoverable creds from the allowlist. Getting the timing down for when to ask for credentials was a bit tricky but I think I see the whole picture now.

I will say though, when it all works out it's a really nice way to log in, and my users are happy about it.
Super cool.

Clearly many of us see the need here. I have also been working on a similar demo: https://search-hackernews.vercel.app/
1. Stack: Vectara for RAG, Vercel for hosting
2. Results show the main story and top 3-4 comments from the story
3. Focused mostly on the search aspect - so if you click it redirects you to the HN page itself. No summaries although it'd be easy to add.

Would love to get some feedback and any suggestions for improvement. I'm still working on this as a side project.

Example query to try: "What did Nvidia announce in GTC 2024?" (regular HN search returns empty)
I'd say it's a sample size of about 250, based on OP's mention of not having received any calls in 8 months of possessing the phone.
I don’t think that works in practise. Social media companies need to be able to use algorithms for discovery. The firehose approach doesn’t work at large scale. Algorithmic discovery will always have some type of bias and you’re just setting up a scenario where companies won’t be able to make any changes without getting sued. Utilities are essential to life. YouTube is not. If you don’t like the way YouTube operates, create your own. Kick did that. Parler did that. Elon did that by buying Twitter. If you don’t want to create one, join one of those.
Given this was published in 2010, and https://en.wikipedia.org/wiki/Word2vec was published in 2013, perhaps this was an early precursor?

From the article linked from this blog post: "Enabling computers to understand language remains one of the hardest problems in artificial intelligence."
https://usetldw.com/

See also: http://summarize.tech

Perhaps someone knows of other services like these?
> If someone were to bring a Win95 machine online and connected to the web today would it be bombarded with assaults or something? I'm curious the mechanics of this all.

Generally speaking yes, but realistically only if you’re opening your ports to the internet. There are lots of random scanners out there that are attempting to exploit known 0-days etc in all systems. Granted the biggest one is probably ETERNALBLUE, which I think doesn’t go back to 95, but still.

Obviously browsing infected pages on a hypothetically working web browser would also do the trick, but sites like HN are benign. Windows 95 is so old, though, that you’re unlikely to find much web-enabled software that works well outside of enthusiast projects.
This is simply a move by the seller, who is also the buyer, to reassess the property tax at the lower base price. Don't try this with your home or the IRS will come after you.
If you use Windows at work, then it is not a problem: nobody cares if Microsoft steals corporate secrets via telemetry, and you can wait if it decides to apply updates for 2 hours because you are paid for this time anyway.

But home computer is a different thing. I don't want Microsoft to spy on me, reboot my computer and luckily I don't need Microsoft Office.
What does it do, exactly? Is it a blog platform, or a feed hosting service, like feedpress?
The material costs (the $300 per kg of titanium suggested in another comment) are only a small part of the overall expense. Electron beam sintering printer time typically costs $100-$200 per hour, and a large build can easily take multiple days.

After the printing itself, one will have to remove to loose powder, which for small cooling channels in the walls of the combustion chamber is very challenging and time consuming.

After that, some post-processing may also be necessary. One process for achieving the greatest strength is hot isostatic pressing, when the part is baked in a furnace in a retort filled with a very high pressure inert gas.

Specifically for rocket engines, it is also desirable to have a layer with the high heat conductivity on the inside, typically made of a copper-based alloy, and the external structure from a higher strength material. This means either bi-metallic printing, which is a rather niche process, or some metal deposition process over the printed part.

In addition to this, there is usually quality control, for example, high resolution industrial computed tomography, to make sure that the invisible internal features have been fabricated and cleaned out correctly.

In addition to the additive steps, it will also be necessary to machine the features which are impractical or impossible to build sufficiently accurately.

Together, these steps add to a significant cost.

Some of the above processes can be seen in this video:
https://www.youtube.com/watch?v=7pXEf0wHU1Y
There was also purescript: https://github.com/andyarvanitis/purescript-native
Starting a paragraph about how to "safely" remove safeguards, and then tongue-in-cheek joking about Rust, kind of looks worse when your very first example isn't safe and liable to segfault even before the "proverbial gun" variant :)

It needs to be

> auto &lhs = *node_storage.emplace_back(make_unique(...));

instead of dereferencing lhs on the third line: emplace_back returns a reference to the inserted item, so it's a &unique_ptr...and that reference is invalidated by the rhs emplace_back reallocating the vector.

Rust also has a number of easy to use ways to do the same thing - slotmap or typed_arena are the standard, or just doing the vector indices scheme manually like at the bottom: this post is talking in circles around the fact the vector is really being used as an arena allocator without saying that, and so has obvious problems with it being extremely fragile to anyone who reads the type and expects it to be vector-like. It would probably do better explicitly saying that and linking to the wikipedia page or whatever, so the reader can look into the proper way of doing the code pattern.
Refurbed drives have a MUCH HIGHER failure rate. I used to send back lots of drives to Seagate, they come back with the service sticker and that means trouble. YMMV
I have no problem with this change itself - the free version of Spotify is barely more than a trial anyway. They probably pay substantial licensing fees, so I totally get it.

But the way they generally behave towards their (paying) users irks me so much - not even a hint of respect. This general attitude (leading to progressive worsening of the product) eventually made me jump ship to Tidal, which also has its annoyances, but is at least consistent with them and doesn't randomly shuffle shit around every week.
Their app is more comparable to NewPipe, they both were written from scratch.

Vanced is a hacked original YouTube app and made to be more user friendly.
Most people do not need this software at their home computer.
There are unpatched remote code execution vulnerabilities on basically every version of Windows that is out of support.

If you plugged it into the internet with a public IP, someone would likely gain full remote control of the machine in a matter of seconds to hours.

You might think you’re safe if you only connect to your home internet, since that’s not wide open for anyone to scan. But then your kid/nephew/friend uses your wifi and they have a spyware-filled Doodle Jump game clone on their phone that asks for permission to connect to the local network, and your kid/nephew/friend wants to play the game so of course they click yes, and now that’s scanning your home network, and now your Windows 7 computer is part of a botnet.

The same thing would happen on the coffee shop’s WiFi, the hotel’s wifi, and so on. Unless you never connect to a network of any kind ever, it’s a bad idea.
Besides this point, I mostly mentioned it as an example of probably the simplest in-memory yet disk-backed database imaginable. For example, if you want to implement any sort of transactions, you don't want to actually do anything like fsync until you start trying to commit the data.
You can't make any such conclusion from a single event.
You can't post like this here, regardless of how you feel about someone or who they are. We have to ban accounts that do, so please don't.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
As much as I appreciate this kind of work, I'm shocked and dismayed that anyone would even consider distributing it as an opaque binary.

I mean, this problem-area has always been extremely fertile ground for sneaky hacks, trojan'ed knockoffs, and simply trusting the wrong people or files. Plus knowing exactly what things get changed--and how--is important in case you need to revert anything.
how do you allocate which types of squash farmers will be able to plant? Knowing very little about farming, I do know that certain varieties have much more desirable traits than others. For example, yield, pest resistance, soil acceptance, etc. What if everyone just wants to grow the "good" kinds of squash? How do you allocate the winners and losers? How do you allocate who will get to eat the "good" squash?
> they murdered a whistleblower to keep themselves out of jail, not to protect share prices.

And Boeing is accused of far worse, hundreds of people have died.

If a whistleblower has proof that a some executive has personally ordered to put into service a dangerous product, knowing full well that it will kill people? That's jailtime.
I look after integration with quite a lot of industrial machinery. One runs DOS. Good luck with getting Windows or a Mac talking to Lanman/NetBEUI. Samba can talk to it after you take the safety catches off (but at least you have the option).

There is also quite a lot, and growing, amount of software that is rather legacy and will only run under WINE.

You can obviously run up a Linux box on a Mac in a VM and Bob's your mother's brother.
Thats not how I read it. LNR was the lender of the old mortgage, and the purchaser of the property.

This is like a Bank foreclosing on a home-owner and then buying the house.
Sorry, good point. It was a 34.
I laughed at that, too, but the commenter, Greg Smith (disclosure: a former colleague) has been involved with Postgres for ages, and concludes that Rust would not actually be a magic bullet here.
The normal YouTube TOS says things like "You are not allowed to: access, reproduce, download, distribute, transmit, broadcast, display, sell, license, alter, modify or otherwise use any part of the Service ... circumvent, disable, fraudulently engage with, or otherwise interfere with any part of the Service" https://www.youtube.com/t/terms#c3e2907ca8 This pretty much bans alternative clients.