skysight-inc/HackerNews huggingface dataset:
Yep. Expanding on that; before AI everyone I knew would postulate on the fictional Library of Babel. The idea was a thought experiment, where you assume there exists a library with every possible combination of words and letters written down in one of it's books. There would be millions of issues that are filled with garbled and meaningless text; only a few would be legible, and fewer yet understandable.

It begs the question, if sifting through noise is a meaningful way to look for scientific progress. And of course, what if it's wrong? Both the Library of Babel and AI are fully capable of leading us down untested and nonsense rabbit-holes. The difference between Alice and Wonderland and Jabberwocky is unknown to us; we wouldn't know which books are worth reading and which are not.

On the one hand, you have people excited by this idea. Some people really do think that the world's answers are up on a bookshelf in the Library of Babel, somewhere. The philosophical angle runs deeper yet, though; what kind of cargo-cult society would we build relying on a useful AI? Are we guaranteed meaningful progress because an AI model can keep pressing the "randomize" button? Do we eventually hit a point where fiction and reality are indistinguishable? It's all hard to say.
The saddle shown in the "Anatomy of a Saddle" picture doesn't seem very good to me.

One problem is that the sitting area has a convex profile.

Your sit bones should be placed on horizontal surfaces, like this - -. This thing is more like / \. What that does is drive a wedge between the bones under the weight of the rider, which is bad for the pelvis.
Yes, people stuck using a corporate browser might have trouble accessing non-corporate websites because of those browser's loses of capability. It sucks. HTTP webservers are fully capable but realistically every human person should do HTTP+HTTPS for the best of both worlds.

Regardless, for HTTP there's an entire 'year 2000's web' worth of people out there using browsers that can access the non-corporate web. As the corporate web diverges with things like stateful HTTP extensions, UDP HTTP, and CA TLS only implementations (if not spec) there's no need to switch to a niche protocol like Gemini. Just making a normal website on the web is enough to bring back the old small web environment. As a human person not operating under a profit motive and just doing things for kicks this is just fine. A silver lining like how usenet is actually good again now that most people don't get it from their ISP.
Snapchat Camera for Chrome can enable AR lenses directly on your webcam. You can then use them for video calls, livestreams, video recordings and so on. Unlike the previous desktop app, you will need to sign in with a Snapchat account to use the lenses. You'll be able to employ any custom lenses you create too.
More cutesy licenses - there is no bottom to that well, I guess: https://github.com/lamikr/rocm_sdk_builder/blob/master/coffe...
It would presume its significantly easier to implement routing for a few more blocks of IPv4 addresses than switch the entire underlying infrastructure to IPv6, which requires different infrastructure than IPv4 to work properly (like dealing with SLAAC/DHCPv6 addresses, ICMP, and AAAA addresses)
Very cool product! We got into chickens a few years ago and it’s taken over our life in a good way. Sounds like we’re in a similar boat as tomcam :)

I remember the first time my wife saw your coop, she said “that is what I wanted to build”, so you probably have some product market fit going on. We had already built our run at that time, however now she thinks a good supplemental product idea is a feeder with a camera. Like Petcube combined with the Grandpa’s Feeders product. She would definitely be up to chat about her chicken keeping needs and all the ideas that come with it. Her details are on her blog: tropicalchicki.com

Note for other HN peeps: If you really like cats and nature you probably will like chicken keeping! They have lots of personality and communicate in more ways than we are typically taught.

On the article, I wonder if people commonly see their first chickens in trees on islands. It’s a common thing in PR, which also has a lot of wild chickens roaming. Vieques, the smaller sister island off the east coast of PR, kind of celebrates this. Lots of chicken murals, themed gifts, names of beaches, etc
Talk to election brochures of political parties
This is a fun project we have been working on. Soon open source. (Need to write a useable documentation)

"Frag Die EU"

You can ask it questions about the election brochures of the Austrian Political Parties.

Our goal is to help people make informed decisions during the EU election.

Right now available for
- Austria
- Germany

Soon for more countries!

If you want to collaborate, hit me up
This is an empty tautology. You have no insight into the actual design, so I presume your fundamental design flaw is the CDN existing.
I would add two pros of jwts (I guess oauth 2 and oidc more specifically)

1. It standardizes your auth system. While sessions auth is mostly implemented in the same way across systems, learning oauth and oidc gives you a standard across the industry.

2. Jwts give an easy path to make “front end” applications and api authentication work in the same way. This in theory reduces your security surface area as all of your authnz code can be shared across your offerings.
We use a rate-limiting rule in the existing firewall on the /auth endpoint. Our default is on five failed attempts in a five minute window gets you a one hour ban.
https://archive.is/zHwsM
This is a great point. 10 requests per second is likely to be sufficient scale that you are noticeable to people that might want to attack you. The ability to validate the key before doing anything with it could be a huge time (and resource) saver on AWS.
I know the Italian canon, being Italian myself.

I was trying to point out that you can’t cook pasta above the boiling point. This thing should work fine in any case.
Regrettably little, mainly because Lorenzo Colitti who is in charge of the Google Android network stack refuses to support it.
Can someone explain how the "hello world" prefixing example works? I assume it has to do with converting a base64 encoded string to a different charset then base64 decoding but I don't understand how that would get extra characters.
Nothing is being renamed. "Permissions" is another common name that dates until at least the 1980s in computing. The suggestion here is to use one common and correct phrase instead of another common and correct phase. Login/Identity are also completely standard.

The only reason to keep using Auth/Auth is because you want to be less easily understood by others. Calling it "renaming" is itself odd to me, if someone said Identity/Permission or Login/Permission, it wouldn't even flag to me as being unusual or non-standard. I'd know exactly what they meant.
Sorry but if you step on a hose and the water stops running, that doesn't mean the hose was the source of the water

The materialist worldview is a fair null hypothesis, but it is not mutually exclusive with some higher-order thing we haven't discovered yet

You seem influenced by Dennett's ideas on consciousness. Not all of us are willing to accept that consciousness is 100% an illusion. Seems like gaslighting to me.
I liked that "curl" is in the border ornamentation https://imgur.com/a/6vaimcj
Show HN: Receive detailed feedback and practical tips to enhance your art skills
Unlock your full artistic potential. Get instant, feedback on your artwork and receive actionable tips to improve your skills. Whether you're a beginner or a professional, our app is designed to help you enhance your creativity and perfect your craft.
Something so key to the news, and yet not mentioned in this article.

The ring we see is how it looked 9 billion years ago. The universe is 14 billion years old. So, when the universe was still a baby.
Then does the server handling the requests needs to produce html fragments?

If I request a page, how does it know to only serve / fetch / render the main content vs the full page?

---

It seems like a lot of would be logic a real language has been moved to DSL and strings, i.e.

https://htmx.org/docs/#swap-options

`hx-on:htmx:config-request="event.detail.parameters.example = 'Hello Scripting!'"`

Not a fan of this fad of moving programming to embedded strings, also seen in lots of Yaml based systems
Disclaimer: I'm a guy.
This is why I switched to riding recumbent bikes.

Towards the 'end' of my previous riding lifestyle, I could only be in the saddle for 10 minutes before excruciating pain and numbness (I don't know how pain & numbness can happen together; but they did.) would force me to walk. And this was during a stage of my life where I was riding 50km daily, and 100+kms every weekend.

Now, I can ride for 12hrs and the only thing sore are my muscles from the workout.
Show HN: Local phi3-mini-4k-instruct for iOS/macOS
Are you familiar with the OSDev wiki? Perhaps their list of links will be helpful:

https://wiki.osdev.org/ELF#External_Links
You make a lot of assumptions about what I understand.

If I am in charge of a data center I had better understand the impact of security and stability as well as the qualities of vendor relationships on my costs or I probably won’t be in that role very long.

You, on the other hand, apparently have never managed an enterprise ISA transition, or even cross-compiled software. The idea that Microsoft would just do that and that it would work is naive in the extreme. CAD software is compiled first for an architecture, and then generally within an operating system. It is all interconnected and interdependent.
Mona Lisa Review:

Review: Your artwork displays a mastery in the use of sfumato, a technique of allowing tones and colors to shade gradually into one another, producing softened outlines or hazy forms. The landscape in the background is skillfully rendered, showcasing an excellent depth and perception of natural space. The color palette is harmonious and adds to the serene and enigmatic quality of the piece. The hands are detailed and convey a relaxed yet deliberate posture, which is an impressive feat. To improve, you may consider further exploration of fabric texture and luminosity to bring even more life to the subject's clothing. Additionally, enhancing the contrast between light and shadow could amplify the three-dimensional feel of the painting.

Actions:
* Experiment with varying levels of contrast to enhance the three-dimensional effect
* Explore further techniques to render fabric texture and luminosity
TAI is a CLI that helps you with Linux and macOS terminal commands. Just ask it a question, and it will use AI to suggest a command and explain what it does. If you like the suggestion, the script can automatically run the command for you in your terminal.
Well a lot of value in application architectures like this is, I want to give something access to my Google Calendar forever, to schedule tasks and read stuff, expressly without user intervention. Most people want token exchange - that an all-powerful user token gets exchanged for a token with the privileges specific to the service that holds onto it. I don't really want Google or Apple or whoever has, for idiosyncratic reasons, possession of a private key, to sign every request I make to Google Calendar, because they will inevitably revoke it sooner for obnoxious business reasons than any good security reason. And if I give a signing key to the service doing this deed for me, it's kind of redundant to an ordinary exchanged JWT.

Really the ergonomics are why this hasn't been adopted more readily. I wonder why it's possible to have OpenTelemetry inject a header into thousands of different APIs and services for dozens of programming languages, more or less flawlessly. But if I wanted to do this at process boundaries, and the content of my header was the result of a stateless function of the current value of the header (aka token exchange + destination service): you are shit out of luck. Ultimately platform providers like Google, Apple and Meta lose their power when people do this, so I feel like the most sophisticated and cranky agitators are more or less right that the user experience is subordinate to the S&P top 10's bottom line, not real security concerns.
Thank you for taking the time to write such an informative response.
What's with the link to Suno.ai in the footer? Are you doing AI music arbitrage?
how is this related to elections?
I need to do something and this is something is not usually a good justification for anything.

It takes literally years of experience to properly diagnose someone, so yes, I do think it is potentially less valid than an official diagnosis. Self diagnosis has an effect of becoming a self fulfilling prophecy many times. Therapists have to get training in avoiding leading a patient into a wrong diagnosis because it leads to some terrible outcomes. It's called "iatrogenic illness" in the literature. Self diagnosing patients have none of that training and are at significantly higher risk of causing it to themselves.
> That's a great idea to record locally. Do you keep a deep history or wipe after 30/90/365 days? Do you need any special hardware for it?

If there is anything I want to keep, I will usually take notes but sometimes I cut the small part I need and store it in a special folder. I just wipe once in a while the main "obs" directory, every other week or so. if I haven't felt the need to play back a video, I doubt it will in the future so I don't keep a lot of retention, it is pretty much only to help me when I am getting distracted or multitasking during a meeting. Most of the time when I feel the need to play back the video, it is immediately after the meeting because I know something important had been said but wasn't 100% focused and want to be sure I haven't missed anything.

But I don't have lots of meeting, a handful a week usually. I don't need special hardware, obs seems to be heavily multithreaded. It might hurt the battery usage if I am not plugged but no core is going very high in term of cpu and I don't feel any slowness. I am recording in the 2500/160kbps veryfast(medium CPU usage, standard quality) setting at 1080p, it takes like 1MB every 3 seconds.
I'll take a slightly different approach. Depression is solved/cured by appreciation. I say this as someone who has suffered from pretty debilitating depression as well, while by otherside measures being a successful person.

The working out, the meditation and all that shit is not meant for the health benefits. It's so that you'll appreciate that you're slightly healthier in time, or slightly more mindful, etc. Teaching appreciation of the things you have and have achieved.

There is a direct line from the explosion of modern depression to social media (particularly Instagram). Social media is entirely about envy of others, and as the saying goes "envy is the thief of joy".

The point of a happy, fulfilling, depression-less life is not to have everything, it's to have something. Particularly "somethings" that you've worked for.
You might be able to reach the intended audience at lesswrong forum. Can also ask Zvi (https://thezvi.substack.com/), astralcodexten, Marginal Revolution to publicize this.
Clang-tidy[0] supports a good set of them (cppcoreguidelines- prefix). It supports extending the checks too with your own checks that operate over the AST[1], so if there are extra guidelines internal to your company like mine has, there's room for extension there. For automation, I've seen a few examples of people integrating clang-tidy into IDEs, git hooks, and code review systems.

[0] https://clang.llvm.org/extra/clang-tidy/

[1] https://github.com/coveooss/clang-tidy-plugin-examples
Like with autism. People are going to look at you differently anyway, but if hey know you're autistic, they might be willing to overlook some things that otherwise would label you as weird.
Royal We does not know exactly how he made his money. You are making up another Hero Worship happy story.
It took until 2021 to settle his tax fraud case inspite of audited financials.
This article took some time to think through, reason about and write, likely with years of experience as a prerequisite.

Some articles/proposals like this are beyond what current AI could offer, but it’s interesting to see which ones.

Asking Gpt4o, it gives:

Authentication:
Verify
Authenticate
Login

Authorization:
Authorize
Permission
Access

So in this case, it was able to offer the same suggestions as the author as well as some of those from the comments below.
"according to evolutionary theory"

Promoter genes are also part of evolutionary theory. You seem to think evolutionary theory came to an end in 1882. But a lot has happened since then.
Hello everyone, I plan to write a series of 10 articles on getting started with GPT. This is the first one.

An article has been published, which explains the basic knowledge and development of GPT.
I agree in part. We should have more people checking science like this project: https://en.wikipedia.org/wiki/Reproducibility_Project
Overall I feel (and have no proof) that science is under pressure from so many angles. Climate change denial, conspiracy theorists and, as you ask, way more subtle things like overhyping marginal effects.
I've given my Go templates a double suffix like index.go.html and index.go.json. Most tools will recognize these as HTML and JSON files so highlighting works as expected. Additionally in JetBrains IDEs you can assign the "GoTemplate" language to .go.html and .go.json files and it will also recognize the template/html and template/text syntax. So this gives you full syntax highlighting of both HTML/JSON and Go templates.

See https://github.com/PDOK/gokoala?tab=readme-ov-file#intellij-... for a script to set this up.
An Offline LLM App with Online Browsing for Apple Devices
Because of all the short vikings and tall Vietnamese?

"Allen’s Law, which dictates that body shapes in endotherms (warm-blooded animals) adapt to climatic conditions—short and stocky helps retain heat in cold climates, while tall and lanky helps dissipate heat in warmer ones. "
It's argan, not argon. And the whole goat poop thing is just a urban legend guides like to repeat to naive tourists.
I agree.

I feel like this is trying to simplify something that can’t be simplified so easily, and perhaps shouldn’t be. The desire to reduce such a complex and broad problem space suggests to me a lack of understanding of what a simplification entails. Using these different words may only present confusion in other directions.

Login isn’t always what authentication is about. In fact, I recently wrote an authentication layer for identifying users based on something that would have been sent to their email, but they don’t exist as users in the system yet. They can’t log in. They don’t even need to in order to utilize this authentication layer. So it isn’t login, yet it’s a form of authentication.

Permissions is a good word I guess, but it’s as specific as authorization. Why change it?

Maybe I like auth because it’s familiar. I am open to new ideas though. This one just doesn’t seem to make sense.
Ah yes, more abuse of the CVE system. Real Linux foundation vibes off this.
What do you think about sports (say badminton) compared to treadmill or cross-trainer for cardio?

If I end up burning the same amount calories? Because I find it much easier to burn calories playing badminton compared to treadmill..
JWT is not a protocol but kind of a message format from my perspective.

https://www.rfc-editor.org/rfc/rfc7519

It can be signed with HMAC SHA-256 algorithm: {"typ":"JWT", "alg":"HS256"}

Ripping off JWT from surrounding context is a road to hell.

It's worth to study JWT in context of OIDC (OpenID Connect) IDP providers.

You will quickly bump into buzzwords like client (RP), server (OP), PKCE, Token Exchange, mTLS and all kind of Implicit. Hybrid flows.

My biggest regret I didn't go through JWT related RFCs and OpenID Connect specs earlier.

[1]: https://openid.net/specs/openid-connect-core-1_0.html#CodeFl... 3.1. Authentication using the Authorization Code Flow

[2]: https://openid.net/specs/openid-connect-core-1_0.html#Implic... 3.2. Authentication using the Implicit Flow

[3]: https://openid.net/specs/openid-connect-core-1_0.html#Hybrid... 3.3. Authentication using the Hybrid Flow

[4]: https://openid.net/specs/openid-connect-core-1_0.html#Client... 9. Client Authentication

[5]: https://openid.net/specs/openid-connect-core-1_0.html#Refres... 12. Using Refresh Tokens

[6]: https://openid.net/specs/openid-connect-discovery-1_0.html OpenID Connect Discovery 1.0 incorporating errata set 1

[7]: https://www.rfc-editor.org/rfc/rfc7523.html JSON Web Token (JWT) Profile for OAuth 2.0 Client Authentication and Authorization Grants

[8]: https://www.rfc-editor.org/rfc/rfc7636.html Proof Key for Code Exchange by OAuth Public Clients

[9]: https://www.rfc-editor.org/rfc/rfc8693.html OAuth 2.0 Token Exchange

[10]: https://www.rfc-editor.org/rfc/rfc8628.html OAuth 2.0 Device Authorization Grant

[11]: https://www.rfc-editor.org/rfc/rfc8705.html OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens"

If you dont have patience for RFCs and specs, just go play with open sources IDP or better start from OpenID Connect client and server library,
and try to integrate it into your "hellohell" app ;)

Very soon you will find out why developers keep building their own IDPs and how simple OpenID Connect can become a full time business

Go back here and here
http://cryto.net/~joepie91/blog/2016/06/19/stop-using-jwt-fo...

And reflect yourself

Trust nobody
Not quite: "As a result, the new filter can be tuned to any frequency between 3.4 GHz and 11.1 GHz..."

The 600 MHz to 6 GHz referred to currently used communication frequencies.
Tai [Terminal AI], a terminal AI assistant
The addition of `switch` and `restore` has probably reduced my daily cursing-at-git rate by half.
> barred from investigating the effect on humans

Wait they're legally prevented from investigating tattoo inks? Why?
What's a "modal editor"? I don't really understand what's so unique about this.
In an activity where words have specific meanings and should be used in their correct place in order to prevent miscommunication of intent or purpose, "stretching the meaning" of a particular technical term can only bring confusion (and bugs).

Authentication and Authorization are correct and complete terms that have separate but related meanings, personally I don't feel them to be confusing at all.

The entire article feels like whining because the author stubbed his toe against a corner.

Lay people need explaining these concepts using non technical words? Of course, that's what documentation and manuals are for. "WE" are not lay people, and we should understand what their meanings are.
If you're sitting next to each other with regular volume then clearly you do, with the same volume, but across a room it's probably going to be ok.
Shoutout to my favorites, Flatcar https://github.com/flatcar/Flatcar#flatcar-container-linux (Apache 2) and Bottlerocket https://github.com/bottlerocket-os#bottlerocket (Apache 2)

Flatcar grinds my gears in that they have their own cutesy (and ragingly stupidly named) Ignition/Butane/whatever instance provisioning file format when they deprecated the damn-near-standard cloud-init. Bottlerocket also has their own thingy, but at least they go wholesale toward static Kubernetes Pod manifests which are much easier to reason about
> Balls and shafts stick out more than labia

Do you suppose that this first-order reasoning was not available to the riders, their doctors, and saddle designers? Would you be willing to consider that balls and shafts may stick out differently than labia; and how addressing those differences may be more fruitful than reducing a 3-dimensional problem to a one-dimensional consideration of "more vs less"?