skysight-inc/HackerNews huggingface dataset:
Is there an equivalent that anyone knows about for Podcasts?
And yet, not doing business with disney is so easy. All you have to do is not spend $10/month on their streaming thing. Or not spend thousands on a trip to their park thing. Or not pay a $20 premium for their toy things.

I can't recall ever giving disney money as an adult. And I think the last time my family did was buying a DVD copy of Finding Nemo some time around 2008.

So the outrage threshold to "do something" in this case is "barely outraged at all". In any case, going after one company is a more, not less, realistic target than attacking "corporate media" as a whole.
So the malware on my machine can read my passwords in memory while I have my password manager open, and after it’s closed.

This reminds me of being on the wrong side of an airtight hatch.
Consumers have free will, agency, and responsibility. We're not NPCs. We don't have to be outraged every day, we just have to stop casually shoveling our money over to just anyone.
> "It's a scale of 1 to 13, but it goes up and back down. Eight is the highest score on the scale." - Jason Mendoza

It's nice to see this scale used outside of The Good Place.
Most men’s watches are round. The only square watches I ever see are apple.
How about they fix their long-standing security issues first. Particularly their DMARC is set to "p=none" which is essentially disabled at a time large providers are mandating properly functioning DMARC. Anyone can spoof email account of other Fastmail users (1). Their #1 job is email, yet Fastmail has poor security scores still in 2024 (2). MTA-STS should be enabled for any competent email host.

(1) https://news.ycombinator.com/item?id=18997054
(2) https://www.hardenize.com/report/fastmail.com/1723612173
You introduced your children into the discussion using the bare noun "kids" rather than a more specific noun phrase like "young kids" or "teenage kids." By omitting any age-related adjective, you focused on the essential fact of having children without specifying their age. This choice demonstrates common linguistic practice, we typically only mention the age range of relatives when it's directly relevant to the topic at hand. Your language use here is a nice example of this principle in action, effectively supporting my argument.

One might argue that by not providing the age context as an adjective, you disrespected your children. However, this position seems to assume that age-specific descriptors are always necessary, which I disagree with. In fact, your choice to use the bare noun appears to show a nuanced understanding of when such specificity is needed and when it's superfluous.

EDIT: I also see it's not the first time you've, according to your definition, been arrogant enough to not provide the age range of your children: https://news.ycombinator.com/item?id=41213069
I think it’s so it can look at the login method for the account and act accordingly.

If the user is configured to use SSO it can redirect to the identity provider. If it’s password auth it can ask for the password, etc.
Something I've wondered for a while...

I have a bunch of Chrome extensions installed, but they're all free...

so...

how do devs make extension-development lucrative?

Is this some enterprise-level activity where you market to private players who side-load these extensions for enterprise use?
Is it normal to describe the claimant in a wrongful death lawsuit as a “victim”? I would have said the victim was the person who died.

It makes this seem even more vexatious as Disney want to have the case dismissed because it was the deceased’s husband who signed up for a free trial of Disney+.
> Arguably even a bigger deal than the 30% tax, since I assume this change would affect everyone regardless of where they subscribe from.

I wouldn't assume this until confirmed. The way I read these news is the typical Apple scenario, where if you subscribe from the app, there's an added 30% subscription fee and a loss of all control from the subscription by Patreon, all control and all limitations handed over to Apple, all subscription cancellations, all billing complaints, everything.

But you can still have a parallel system without the fee on the web, the cannot be advertised or guided to it from the app (at least this used to be the case), but it's also as usual completely handled by the developer.

Patreon is probably removing the on-purchase pay model even on the web because it's inherently incompatible with the basic Apple model and would cause a major disconnect in what the user can expect.

But I don't think the scenario with paused subscriptions is quite the same. Patreon would simply allow them to be paused, while if subscribed with Apple, the button on the web could simply be disabled or gone, or heck, the entire subscription page on Patreon gone, with just info text "This subscription is managed from your device". I mean, many devs do it like that at least.
It's not just the CMB, it's the CMB + LCDM. You know, that theory that posits a form of matter that we have consistently failed to find and that has technically been falsified a number of times, but which was then adjusted to work around those problems, and yet problems still remain. You might have "slight" bit of unaccounted for error sneaking in there.

I personally wouldn't trust the CMB calculation at all until the dark matter issue is resolved.
So buy this phone and install GrapheneOS on it.
I think it's "in Mars", on the surface it's frozen stuff.
If it doesn't kill me within 20 years idgaf
It's good to have options but... I hate passkeys. Here is why:

1. Passkeys are device dependent. That means you need to have more devices and be tied to your existing devices. For a lot of people, that means even tighter phone dependence.

2. Even if you don't use a phone to store your passkeys, they promote vendor lock-in, because you need to rely on Apple, Google, or some other cloud-keychain system to store your passkeys.

Tech companies love passkeys, not because it makes your life better, but because it entrenches people further into relying on their systems. People will love passkeys because it appears simple and makes passwords a thing of the past.

But there's a tradeoff: more dependence on advanced technology are major tech corps. Let me ask you this: suppose you want to go phone-free and big-tech company free. Or you lose your phone and computer overseas. If you only use a passkey, then you'll have to grovel back to Apple or Google to log into your fastmail. Tech corps love that.

This is just one step to make people tied to big tech, and so it seems harmless. But it is part of an overall procedure to integrate us so tightly (free Google docs, log in with Google/Apple/X is another of many), so that we can't function on our own any more, or choose any company we like any more.
Delightful, thanks
Over the life of Earth to date, about a quarter of its initial water bounty:

<https://www.sciencenordic.com/chemistry-climate-denmark/the-...>
> Because it's not their job and therefore they don't have the information necessary to know what is or isn't expensive.

It is your job, when you make something, to understand how it works. How much it costs to operate is an integral part of how it works.

> Ok, we can save 1 cent if we swap this part out. But now we have to purchase lot sizes that are 10x bigger. How does that impact production? How does that affect operational budgets? Etc.

A 10x larger lot size makes each part per unit cheaper and it simplifies production to eliminate items from your BoM. Understanding that sort of thing in an order-of-magnitude sense is also part of your job.

By the way, you don't need to know this stuff precisely to make good decisions. You need to know it roughly. You still need to know it, though.
Most sites that implement it this way do indeed have something similar to what you describe for Microsoft.

e.g. many sites these days allow for "magic link" login where you just enter your email and they send a link to login. There is no password to login with.

The problem from there is that users are dumb. If you have multiple login methods, many users will not remember which method they used to login last time. So if you show them (by default) a username/password form, they will try to "remember" a password that might not exist if they used any method that was not username/password. Much better for that user if you make them enter their email, you do a quick lookup in the backend to determine which method they used to login last time, then you proceed with that method in the frontend.
This is mostly untrue and essentially the point of judges. A judge's role is to prevent people using ridiculous loopholes or misinterpretations of a law.
158M subscribers according to the article.

Sounds like someone should let them know. ;)
Mitre Marks Major Milestone, Minting 400 CNAs as NVD Backlog Grows
Passkeys means no secret material traverses the web.

This is a huge benefit. There’s no other way to put it.

From the admin side this also means significantly simpler database design
Less content frequently better content. Hobby as content job may just not be sustainable in another form. Tons of hobbyist creators jumped on the full time content mill job and burn out. Maybe in another world they have their hobby on the side and put out 1/10th content slowly, without the incentive to make filler to keep bills paid. TBH sometimes when work and passion mix, passion takes a back seat. It would be different if youtube algo doesn't incentivize this type of content milling, but it does.
Wow, the example on that page is brilliant. To quote:

> For instance, in Uber Technologies Inc v Heller (2020) the Supreme Court of Canada found an arbitration clause requiring gig workers in Ontario to litigate before the Dutch International Chamber of Commerce was unconscionable and so void.

LOL. Uber, again.
Do you manually check every site's SSL certificate before connecting? If not, how can you be sure there's not a MITM/Replay attack ongoing right now?

Very commonly user databases are the one being accessed for some reason, resulting in user data + salted passwords released.

How so? I can social engineer an employee to give me the password for a site they have in the password manager. I can't make them give me the passkey because they can't do that. It's not something you can paste in a chat.
I still haven't reckoned the security implications, but Bitwarden supports passkeys, you can mostly use them the same way as you do a username/password across devices.
Angular lead Minko Gechev to oversea converging Angular and React
They develop 5G which is allegedly good for up to 10 GB/s. Then they throttle your speeds to exactly what they were on 4G. Maybe they can serve more customers in densely populated areas, but I'll never get to see a difference anyways.
I'm not blaming the victim, but would never trust my life to random restaurants and employees. There's just no way that strangers give a damn enough to risk it, even if you tell them to be careful.
Just looked up ACA. For 45K income per year for house of 4, Silver plan ~400 - ~800 a month. How are you paying $3500/month? COBRA?
I'm with you that AI is overhyped but your suggested feature is "per app volume mixers" like in Windows? What's the use case on a mobile phone to warrant the extra complexity?
Passkeys are specifically interacting with a pwd manager. Before this, the manager had to try to figure out what’s a password field.
(Chief Product Officer at Fastmail here.)

Once your next step is not necessarily a password, having just the single username input up front becomes necessary to avoid confusion. To support non-resident passkeys (passkeys on devices that can't store the username with the cryptographic key), we need to be able to prompt for the username, then offer them their passkeys to log in.

This does have the effect of making it slightly less ergonomic for just username/password input, but we did everything we could to mitigate this:

> First, I can’t do username <tab> password <enter>.

True, but we made it so you can do username <enter> password <enter>.

> Secondly, with auto fill, it requires two clicks to sign in.

True, but the way we've set it up should ensure the autofill did both immediately, so you don't have to activate your password manager twice.

The flip side is if you do use passkeys, it can be much quicker than any username/password input. For example, 1Password will show you your list of accounts as soon as the login page loads, and it's just one click to sign in.
They sort of solve all these problems with a simpler implementation. But the disadvantage of passkeys is that you are dependent on a tech implementation ecosystem to use them, such as your phone, cloud keychain, etc. In practice, for a lot of people, that will mean tighter dependence on the smartphone, which is rather asinine as people should have the freedom to choose life without a big tech company providing for their needs.
Are password managers resistant to social engineering? You can copy & paste a password to a "support chat" from the manager. You can't do that with a passkey.

The password is only resistant if the one storing it is following best practices, which are NOT enforced and you really can't check for from the outside.
> The reason being that many of our institutions, and especially our courts, are nigh-hopelessly corrupt.

The reason being that Flint's water crisis was caused by the government not adding corrosion inhibitors to the water when they switched to another water source, which stripped the lining from the lead pipes, causing them to permanently leach lead into the water. They basically ruined the city's entire water grid all at once and caused hundreds of millions in damage because all of the pipes had to be inspected and replaced. Which takes a long time to do.

More to the point, it was the executive branch that did this! You can hardly blame the courts for the actions of the Governor and his underlings.
services in any media format or channel

I suspect they may argue that it covers physical services such as those provided by Disney Springs.
Do you think the average person even understands the title? People don't care.
Up next proof based automated arbitration. If input legal argument identifies case, automated verdict. Heard: only new arguments for viability on changing,creating a new proof.
So you want to copy the tactics of an authoritarian regime like China? Your strategy to "get back at them" is to take them as inspiration out of spite?

You'd be destroying your own country by setting precedents and new legislation and suffer its implications forever, when instead you could respond with a capitalism mindset, understand the market and put together a coordinated effort to kick their asses and make them lose mindshare.
This is ridiculous but what I can't work out is why they don't just (correctly) claim that they neither own nor operate the restaurant. It would be absurd to hold a landlord responsible for the actions of their tenant.
Fuel dumping is probably a much smaller deal then it was a few years back!

"blogs" ruined a lot of tricks and fun for some; but my understanding from observing the FT thread is that there are still people involved, just on a much smaller scale.
Still, I’d rather see empty Waymos bumbling around a parking lot than seeing empty Waymos clogging up our SF streets, and (observed twice recently) blocking pedestrian crosswalks.

Still, I wish Waymo had at fielded a vehicle smaller than an enormous, 5,000 lb, 400 hp Jaguar i-Pace SUV. That Jag is designed for 80-90 mph freeway cruising, not 15-30 mph urban driving.
> Nobody goes to office hours

This is rough. I was a student who really struggled with some courses during uni. I would estimate that 75% of professors that I visited were incredibly unwelcoming, no matter how much prep I had done before the visit. It really turned me off from asking for help. That said, I do believe that most of my uni professors were not passionate about teaching -- they wanted to do research, and a modicum of teaching was required for their role.
Teaching is very difficult to do well, and if teaching isn't rewarded financially, well... would you want a 'passionate' doctor who was paid $50,000 a year and lived in a rented one-bedroom in the bad part of town treating you for cancer?
All of that still filters down to- experts at agencies don’t have the final say, naive judges and a deadlocked congress do. It’s a terrible decision and everyone understands it correctly.
> (if we can ignore the ethics of using the actor's voice and the loss of work for the dubbing companies and actors)

This is a shocking parenthetical.
Onset is minutes to hours, usually within one or two hours of exposure. "In rare cases, anaphylaxis may be delayed for hours."
(source https://www.mayoclinic.org/diseases-conditions/anaphylaxis/s...) Additionally: "anaphylactic reactions can also present in a biphasic manner in up to 20% of cases. Even after successful management of the initial presenting symptoms, there can be a recurrence of symptoms peaking 8 to 11 hours after the initial reaction." (source https://www.ncbi.nlm.nih.gov/books/NBK482124/)
> This is a common misconception about Free software. It's not about freedom of its users or authors, it's freedom of the actual code to be available for others.

That‘s wrong. Free software is all about freedom for users. Stallman wrote whole essays explaining that.

Of course, back in his time, pretty much every user was also a programmer. But he is still very clear about that point, never writing about programmers when he means users.

It‘s also why people still fight their silly argument whether BSD or GPL is "freer". The BSD camp optimizes for developer freedom, the GPL for user freedom. Both camps think everybody sees the world their way (philosophically), so the other camp must be wrong and stupid.
Do you have examples of a few popular sites that support them?

I honestly don't know that I've seen one, unless the Apple / Google / Github / Gitlab "single sign on" links have all quietly switched to using passkeys under the hood (I thought they were all OAuth 2.0). Would be frustrating if so, because it wouldn't provide for custom / hardware implementations of the standard.
I don't think that's a very good understanding of what lawyers do
Article title: Google Angular Lead Sees Convergence in JavaScript Frameworks
Photography. A small cheap camera array could produce higher resolution, alternate angles, and arbitrary lens parameters that would otherwise require expensive or impossible lenses. Then you can render an array of angles for holographic displays.
It's not normal. It is however possible.
Market access and free speech don't work the same way and I'm not sure why you're conflating them.
I know several people who interviewed at OAI recently and they were told explicitly it's office only. None of them were ML devs so it's probably highly team dependent.
That still means dependence on some software product to log-in to basic services. With a password, I don't need to use a software product.

What if I don't want to pay for Bitwarden, or buy a smartphone, or tie my log-ins to my computer? What happens when the WebAuthn standard evolves and only the big-tech companies have solutions for storing passkeys because little software vendors or open-source vendors don't support the standard as well?

What happens when password-based login is phased out because passkeys are SO much simpler...assuming the user acquiesces and signs up for a big tech company's service? Who will be able to choose then?
but somehow it is unbaised and "pure".
In other words: Opportunity.
Yep! Been here many years, between HN and Hackaday I probably find half the projects I work on.
It is obvious, and I’ve made it. I had planned to join PyPA - attended a sprint, even had a fairly significant PR ready to submit. Then some drama started behind the scenes and I saw one of my friends drug through the mud by almost exactly the sort of thing this article is about.

I “noped” right out of there. Deleted the PR, and will never be associated with that group.
Played your role, as expected. No actual problems described and a link to a list of mostly "draft" and "candidate" items. Every fucking time.
Ask HN: Best AI services for product matching
I have been trying to create an account with OpenAI but all i get is "unusal activity error".
It's also for the cred. In legal circles, the first lawyer to do something enters l337 status. You think the legal team for Trump are doing it for the money he's going to not pay them? Hellz naw! Their names will be written about from here to eternity.
always disappointed to hear “well it’s good because we already built it this way” as a deflection. you will, of course, do what you like but the flippant attitude is a showcase of why the boosters have failed to bring the doubters along. reassuring to hear that I can further offload my login security to an opaque fortune 500 of my “choice”

if, when challenged, one is unwilling to acknowledge the trade offs that indicates that they don’t understand them which suggests that they should not be trusted, in short.

forced passkeys are coming and I do not believe that is a good thing.
The point of arbitration is to errode the rule of law and attack the state. Surplanting it with "company law" which is not supervised/vetoed indirectly by democratic voting. All other stated goals are lies, often ironically co-evolving to mimic the states already existing more efficient structures.
It helps in strawman cases when users have the data, and the platform doesn't have social features. For instance, oh, an online photo editor used by the user in isolation, on either local files or easily downloadable files. User doesn't like that instance, so they find the AGPLed source code and run their own, bringing all their files.

(Why, in that situation, would the user be entitled to the custom modifications in that instance they are abandoning? If you don't like that instance for whatever reason, but like the features, tough luck. Code your own.)
https://www.theverge.com/2024/7/30/24209395/dashlane-passkey...

https://www.theverge.com/2024/5/2/24147030/google-passkey-pa...

https://passkeys-directory.dashlane.com/

https://passkeys.directory/
EFF getting more and more extreme in the last few years does seem to be a pretty widely held opinion on HN though.
Absolutely hate it since it makes auto-filling the password with a password manager a pain and makes me believe that UX designers are all useless.

Then there's the absolute dogshit of Bitwarden with SSO.
The current SCOTUS would disagree strongly as they are using ridiculous loopholes from the bench
Show HN: My First Website Is Live
Ta-da~ Check it out here: https://www.demonnamegenerator.top/

I've spent nearly 5 years as a machine learning algorithm engineer (ML/DL/operations research/LLM), and now I'm transitioning to becoming an independent developer.

Last month, I quickly brushed up on front-end knowledge, glanced over HTML/CSS/JS, and then reviewed the documentation for Next.js, TailwindCSS, and ShadcnUI. After that, it took me about a week and a half to create this website.

I chose this seemingly whimsical theme because I found on ahrefs that the optimization difficulty for the keyword 'Demon Name Generator' is 0. It only requires more than 0 backlinks to rank in the top 10 of Google's search results. It seemed perfect for a beginner like me, haha.

This project is mainly about getting familiar with the development process and the basic features of the framework. Our small goal is: 1. Get the website live, 2. Rank in the top 10 of Google's search results.

For my next project, I plan to create some AI-related tools. The features will still be kept simple, but I'll aim to provide enough value for users to be willing to pay for it.

Feel free to leave any suggestions or ideas in the comments. If you have any questions about ML/DL/AI algorithms, you can also ask me, and I'll do my best to help answer them!