skysight-inc/HackerNews huggingface dataset:
Ok so let's assume passkeys are a form of saved generated password.

> 1. They are highly phishing resistant. Unlike passwords and popular forms of 2FA (TOTP and SMS), users can’t be tricked into sending their credential to a fake/malicious server. A passkey is bound to the server domain at the time the credential is created, and your OS/browser will simply not send it to the wrong place.

So why does my browser or password manager send saved normal passwords to a different domain than the one they were saved for? This is not a limitation of passwords but of the software that encourages saving passwords. It didn't need switching to machine only passwords to fix.

> 2. There is no credential for attackers to steal from servers in the case of server breach. This is because only a public key is stored on the server, instead of password hashes (or worse, plaintext, if the app/website developers don’t know what they’re doing).

What has stopped developers from using irreversible transformations on stored passwords in the past? The math was there.

> 3. Passkeys are guaranteed to be unique and secure. The same cannot be said for passwords. Even a password manager cannot guarantee that every single credential stored in the password manager is both unique and secure. And password complexity requirements often make it a painful game of trial and error to create a secure password, even when using a password manager.

If it's generated by software, any software should be able to assure uniqueness. This is again a failure of saved passwords / password managers.

> 4. Because of annoying password complexity requirements, the process of creating a new password can be annoying and take up to a minute or two of fiddling around, even when using a password manager. With a passkey, the process takes as long as Face ID or Touch ID (or equivalent on other platforms) every time. Every single credential creation and authentication is a fantastic user experience (both fast and easy).

Yes and here we get to the elephant in the room.

You become dependent on an easily stolen or destroyed device for authentication. It is a fantastic user experience until you're a plane flight away from home, your phone gets stolen. Your passkeys are safe in the secure enclave. Too bad you can't access them any more. How do you get home? You don't have any other devices to prove your identity, if you even have backup devices, they're at home. The flight options are in an app that you don't have the passkeys any more for. Your flight may get canceled or rescheduled and you have no way of knowing. If you didn't bring any physical credit cards or backup cash, you can't even eat.

Passkeys are all fine in your average techie environment, but can be a disaster outside it.
You can spot an electronic brain from miles away by the number of LEDs blinking in chaotic synchronicity.
Adel wrote a nice little article about the ASCII art history and the font here: https://velvetyne.fr/news/about-ascii-art-and-jgs-font/
The signal to noise being so bad on the web today is AI's most compelling use for me, it's better at getting a pretty-close-to-right answer than searching the web, with much less crap I have to block along the way.

But, consider that all that crap ended up on the web for a reason, and wonder how long before AI just injects it itself into its own results.
IMO this isn't the direction we're going. I'd bet that in 20 years, there will be some form of grid-scale specific battery that is 2-3x cheaper than lithium iron (per joule), but with much worse energy density. Many of the batteries of this type are unsuitable for home installation (because they get more efficient with scale). Some of the potential options for this are things like iron sulfur batteries which require pretty high temps, or some designs for batteries that basically involve physical pumps to pump liquid anodes and cathodes around.
> I'm actually a little gobsmacked anyone on this forum can type those words without physically convulsing.

Apple tells a pretty compelling lie here. Rather than execute logic on a server whose behavior can change moment to moment, it executes on a device you "own" with a "knowable" version of its software. And you can absolutely determine no network traffic occurs during the execution of the features from things announced this week and going back a decade.

The part that Apple also uploads your personal information to their servers on separate intervals both powering their internal analytics and providing training data is also known, and for the most part, completely lost on people.
As a first step, we could as the human species decide that such or such thing is not useful, or even harmful, and stop producing it. Or reduce production of the stuff we are producing in too big quantities. That would reduce the amount of work we do.

Not saying it's easy, it might require huge changes, but seen from outside we probably look very silly.

There's a fast food place I discovered recently, they serve your meal in a disposable box. That could be changed to use reusable plates instead. Okay, that can be hard because then the place needs to handle washing the dishes.

They also give disposable glasses if one asks. I can avoid this by bringing my own bottle, in my country nobody would see an issue with this, tap water is free in restaurants by law. If many people do this, that less of these glasses to produce in the first place.

And above all they also unconditionally give you both disposable chopsticks and a disposable fork without asking. I would guess almost half of this stuff is produced to be immediately thrown without even being used a single time. Those could be made reusable too, but there's even a first step that would also cost less time to the restaurant, so double win: let people take what they need. quadruple win, because that's also less waste to handle, and so less effort to take care of the Earth when we inevitably need to do it.

And the disposable cutlery, or wrapping (for groceries, for instance), is only the tip of the iceberg. Think also useless/harmful software, software that is made over and over because nothing is open source and shared. Think cheaply made and/or unrepairable stuff that breaks too early and you need to replace entirely. And again, all the work needed to handle this waste.

There are a lot of low hanging fruits. But how we as a species are organized right now does not handle this very well, does not incentivize it, actually doesn't even care that much and actually incentivizes the contrary and externalizes waste and pollution, mostly.

So yes, that's a pitch for degrowth, that may sound extreme to some, but it should just go without saying. And I'm not even touching the idea that we could (and probably should) lower our comfort, that's free degrowth without hurting comfort!

What I'm proposing here actually improves our comfort, because we have less work to do so more free time, more time with our loved ones, more time doing what you decide to do! It can even be what you do for work, why not, if you like doing this. And maybe more time for boredom and deep thinking, which need more of.

All that junk is making us work more. It's so meaningless to spend so much cumulative time producing pointless things. What a giant waste of time.
> high-margin short-lifetime hardware

I don't think this applies to their watch or tablet business where the limiting factor on lifetime in the market is security/os updates. Most alternatives in that space have significantly worse support cycles.

This used to be true of their phones as well, but the android market seems to be catching up in ways that tablets/wearables have not (see google's 7 year commitment for pixels).

Not sure if it applies to general purpose. Certainly there are non mac computers that we can throw linux on and use for 10+ years and there are examples of apple laptops getting cut off earlier than I'd like (RIP my beloved 12" macbook), but there are often some pretty serious tradeoffs to machines older than 7 years anyway. Also, I'm not sure if apple's strategy re: support lifecycles on products after the AS migration have shifted. It wouldn't surprise me if the first gen m1 products get 10 years of security updates.
I've had similar false positive experiences where I swore some content had to be some form of LLM generated content, until I discovered the source was just poorly done or even just text from some older writing that "sounded" wonky but was more of a product of its time (like a 1940s newsreel).
No, I have not misinterpreted him, he makes faith based claims of fact regularly, as do most/all atheists, famous or not. Our culture ingrains bad epistemological practices into us from the day we are born, we literally teach ourselves to think delusionally.
I don't say it didn't happen before. I know about these occasions and I find it sick how Americans put personal gain ahead of survival of their nation (yes, both in WWII and now stakes were that high).

Those from the West who don't like the truth I'm saying - I am actually Russian, know my country better than you, and I DESPISE every American who supports our regime or just ready to deal with it like with some civilised entity. Fascist dictatorship you deal with has nothing but hatred towards your state and your nation. Every dollar you pay them will come back will to you in form of terror attacks and deaths of your people, directly of through proxy conflicts.

I'm sure during WWII there were anti-Nazi Germans who felt the same for example towards IBM, who had lucrative contracts with the system of concentration camps of Third Reich.
Note I've recently released a tool that can find all chunks of a SPA that works for popular configurations (like webpack or ES modules):

https://github.com/zb3/getfrontend
My quick answer - Search is extremely complex, adversarial, and has billions of dollars at stake. There is seldom such a thing as "solved" for anything with those three attributes.
Question: when an actual power outage happens, does the powerwall backup take over immediately without loss of power to the household? Or if not how long does it take to switch the grid interlock? Just wondering if this would be suitable as a UPS for my computers.
The point is wealth per user, not potential wealth per user. Parents don't always buy their kids the same high grade devices that they use.
The overwhelming majority do not want to pay for online publications.

They are willing to view ads (proving they value the material) but as a rule are unwilling to pay any cash.
> If customers actually wanted true, simple bowling and not "upscale entertainment", there would be businesses to fill the void.

This presumes oxygen in the ecosystem - in this case affordable commercial rents, well trafficked retail locations etc. In their absence local maxima can create all kinds of exploitative socially detrimental businesses (e.g.: casinos, betting shops, dollar stores, lots held empty to maintain property values etc.

It's also circular - a culture sustain a given hobby if that hobby is reliant on venues that no longer exist, aren't safe or customer friendly etc.
This is a silly tangential point, but with good design a V8 can be as efficient as an I4 (and with bad design a V6 can be more wasteful than a V8).

Pinning fuel use seems to be the way to go, rather than penalizing engine geometry, for this reason.

It's important to remember, though, that semi-trucks get 5-8 miles to the gallon due to their weight/purpose. Perhaps these new fuel taxes should only affect classes other than A, B, and C to avoid knock-on effects.
Give me some examples of benevolent non profits that provide anywhere near the level of consumer services as a company like Apple.
Because PHP sucks.
I think it's a joke. The arbitrarily accurate power series approximation of pi (4 - 4/3 + 4/5 - 4/7 + ⋯) predates NIST (and the US).
Historically, there have been a few examples of radical egalitarianism in revolutionary movements but like the Paris Commune they generally are short-lived – or never even become the dominant force, e.g., the Levellers during the English Civil Wars. It was the accomplishments of the CNT/FAI in organising one million members in 1930’s Spain that inspired me to become a libertarian socialist. However, since then I’ve come to the conclusion that the more egalitarian and democratic a society is, the more vulnerable it is to external and other threats.
The PIO's really are the star of the RP2040 show, giving it a capability that competing chips like the ESP32 can't match. They are appearing all over the place in the console hacking space for this reason. Lower power consumption in steep modes for battery-backed applications would be a welcome addition in any V2 version though.
I thought it was just that you get hit with fines if your vehicle doesn't have a minimum mpg fuel efficiency and it's hard to make smaller trucks and SUVs with enough efficiency to avoid the fines
If it was the speed of light, it would be infinite mass-energy.

Which is why you normally talk of "x% of the speed of light", e.g. 99% of the speed of light.
Decades of internet use has shown me that people absolutely do not want to pay for content. The average person will choose free+ads over paying every time.
Ask HN: Do you think AI Agents are overhyped?
How are people using this in practice?

I’ve never worked with a BGA device. I’m guessing you need to design a board send it to say pcbway and then have the equipment to solder the bga in?
If I read that right, Lochridge was not compensated for silence at all, he paid them $10,000 ?
Great writeup. This is a chilling reminder why we can't make inference based on the likelihood of the data alone.
Apple actually does not control the private keys baked into the hardware, see the "Root Cryptographic Keys" section of their security whitepaper: https://help.apple.com/pdf/security/en_US/apple-platform-sec...

Your example indicates a situation where law enforcement does not know which device belongs to their suspect, if they even have one. That's a very different scenario from a targeted "tell us the requests belonging to this individual".

Warrants to search a device are extremely common place, otherwise the likes of Grayshift and Cellebrite would not be around.

From a threat modeling perspective compromising PCC is high risk (Apple's not just going to comply and the fight will be very public, see the FBI San Bernardino fight) , high effort (Long protracted court case), low reward (I only see requests that are going to get shipped off to the cloud). If I were law enforcement I'd explore every other avenue available to me before I go down that particular rabbit hole which is exactly what this design is intended to achieve.
Usenet in the early 1990's is still superior to modern forums. Threads could go on for years, the newsreader programs automatically marked posts as read and would only show you new posts in the thread. Compared to today it is hard to find what is new and then discussions die after a day on places like Hacker News and Reddit after it is no longer a top post on the page or subreddit.
> I know some dogs that don’t quite understand capitalism but can definitely reason in a novel way

I would just describe this as intelligent but less than average human intelligence.

> I think intelligence might not just be reasoning but also the ability to seek knowledge and reason. Some form of will to attain higher intelligence.

This is a circular definition of intelligence that doesn't really make sense. How can intelligence be the drive for more intelligence? Those have to be two different things.

Consider a college educated person working in some field that requires lots of critical thinking. They have been doing their job for 30+ years, and they are very good at it. They are stubborn and set in their ways; not interested in changing anything. Now consider a 3 year old who is curious about everything. Who is more intelligent? The answer seems to obviously be the adult, even though they refuse to learn anything more.

I really don't think the willingness or ability to learn is a component of intelligence. A system can be statically intelligent or it can be dynamically intelligent. Dynamically intelligent systems are more exciting and novel, but statically intelligent systems can still be extremely useful.

Ability to learn is more interesting in the context of general intelligence (also note general intelligence implies the existence of non-general or domain specific intelligence). In order to be able to act intelligently in any situation (such as: what if my computer suddenly grows legs) it must be able to learn through experimentation.
In general, read-out protection provides a very limited level of protection that I wouldn't rely on to stop cloning. There's quite a few firms that will extract the firmware from protected microcontrollers for a couple thousand dollars (i.e. https://russiansemiresearch.com/ ) which is a drop in the bucket considering the potential profit from industrialized cloning. Lots of microcontroller series also have exploits that can allow hobbyists with very little funding to bypass read-out protection (here's one for the STM32F0 series for example: https://github.com/racerxdl/stm32f0-pico-dump ).
I too was curious, received some useful discussion here: https://news.ycombinator.com/item?id=40343284
Don't know if this fits, but given your background you might find it interesting. I work at a startup which works with structured video, video which has a certain structure and so allows for reuse of segments. Our challenge is how to show the user this structure, when videos can quickly grow in complexity and end up having multiple thousands of possible variations. Contact me at ismael at lont.ai if you're interested.
Tesla has a V2H/V2G (Powershare is the name Tesla uses) available for Cybertruck owners included as part of the vehicle purchase. I am still waiting on mine, despite receiving my Cybertruck almost 6 months ago.

I also have the Ford equipment from when I got my Lightning, however finding a competent installer has been impossible. Right now it's collecting spiders in the corner of my garage.
I can see the use to describe AI spam, but I am starting to seeing people using it to describe anything they don't like, basically a replacement for "mid" with was highly used the last couple of years.
I noticed that when some people learn a new "trendy" word, they want to use it in every possible opportunity until it loses meaning.
true! but we regulate people's desires in a million ways, so there's no reason why we can't regulate this too. I don't care if half of Americans want a monster truck any more than they want to fly attack helicopters and walk around with live grenades. it shouldn't be allowed, simple as that.
> Believing that all nationalism is racism

Sure, that would be a ridiculous thing to say, which is why I didn't. If I meant "every person who is opposed to immigration is fuelled by racial hatred," I would have said that. I thought that a good-faith reading was one of the rules of HN?

If you look at the times when anti-immigrant sentiment is highest, whether via popular opinion or governmental action, it directly corresponds to when Americans were the most racist about the arriving immigrants.
I'm not expressing a preference here; this isn't a problem I have. But I do also suspect that a project with as high a profile as curl sees a lot of trivial PRs with less intent to improve the software, than to have the merge show up on the contributor's behalf in Github's various recruiter-friendly metrics.

How that intent plays with Git as Git is done, versus how Github does it, I have no idea. But the existence of the article, and the perspective toward which it seems to be written, suggest to me the answer is "not well" and that Stenberg et al may be seeing the same questions and complaints frequently recurring about this.
So the other alternative is piracy and only consuming public domain information?
I have been trying to create a facebook account recently, for work, I didn't use my real name (I just needed a facebook account to follow some pages). I got flagged and now have to provide additional proof of identity. Same for IG. I don't think it's as easy as before to create a temp. facebook account. After setting it up you need to feed it right.
To be frank, I don't get its appeal at all. Most hobbyist uCs were already unbrickable, and using mass storage mode for flashing is rather cumbersome and clunky to automate as soon as you're past hello worlds.
Tracking-based Ad targeting is blip in the history of advertising and goes against previous decades of "common sense" in advertising that the best ads cast the widest net and catch the eye of people you (and they) don't even know are potential targets.

I hope this current fad dies and people return to that older marketing "common sense". Over-targeting is bad for consumers and bad for advertisers, the only people truly benefiting seem to be Google and Meta.
Damn, this topic got downvoted onto the 3rd page by the HN hive mind in no time. Right after:
SQLSync – collaborative offline-first wrapper around SQLite, 16 points, 20 hours old

..must have a hell of a lot of downvotes.
Companies will serve slop to paying subscribers too.
I have worked on a few projects that use language models over the years. Most of them don't use the models people would call large these days, but have had cases where we used those.

In all of the cases that I have used them it has been for categorization. Basically in areas where we can't write enough if statements to do it well enough so the only option is human review. For the most part language models do great here.
Agreed, Kosovo is the only actual NATO intervention of that sort. And agreed that it was neither unjustified nor ‘aggressive’.
I just opened an .mht file from 2000 on Edge/Mac the other day and it displayed just fine.
It's a good thing that the development of general goal to action mappers is in the hands of more prudent and wise executives.
> id assume those unchanging ipv4 addresses are not shared and natted with other customs...

Over the last several decades of me having residential Internet service from a variety of ISPs here in the US, I've never had an IPv4 address that was not globally-accessible. Relatedly, I've never had a guaranteed-static IPv4 address, but I COULD get one if I paid the ISP additional money.

I understand that in other regions of the world NOT being behind CGN is not guaranteed.

> That's not the same for not changing an ipv6 address

Hopefully you now understand the context in which I made my remarks. In the world that I (and many other folks) live in, I get one globally-accessible, but definitely-not-static IPv4 address.
How Stripe Built a Culture of Shipping
Norway discovers Europe's largest deposit of rare earth metals
Here's why it's interesting: https://termbin.com/blz3

There you go, now it has parens, just backwards. Can even use parens instead of braces if you want, I just didn't want to overwrite comment syntax.
No I’m asking what city the person responded to me is talking about.
Married to a current vet and you’re right. The clients are the worst. People are shit.

Suicide is a huge problem in the field. My wife’s class of slightly over 100 has had two suicides.
Nobody in their right mind is updating a bootloader in the field OTA, let alone one inaccessible on a mountain top.
Love the term.

People should call it for what it is. Tried to find some answers on Google earlier in the day, and the first result pages were 100% generated slop. Funnily enough, any AI summary of the slop would be slop squared.

It's everywhere, and I hate it. What ways do people have to combat it out of their day?