skysight-inc/HackerNews huggingface dataset:
Hi! These are the actual problems that led us to develop Polykey (https://polykey.com) - https://github.com/MatrixAI/Polykey and https://github.com/MatrixAI/Polykey-CLI.

The problem is actually a bit more general than just passwords alone, it's any kind of secret credential like keys, tokens, and certificates that enables authority. Thus the problem is actually about authority management.

Even when SSO is involved, there's always going to be credentials that enable access to various external systems. Especially when autonomous services or apps need to perform actions. Also SSO is very much human-operator centric, and is only suited for tightly-managed centralized systems. Such kinds of centralization is ripe for service downtime if the SSO gateway/portal ever goes down, especially if somehow you hacked the SSO flow into autonomous systems. It becomes a single point of failure.

> What are the recommended ways to store and give access to passwords?

If it's just passwords alone, using a cloud password manager is probably fine.

> How can a new hire be given access to all required passwords day 1?

Although you can just select a bunch of passwords in your favorite cloud password manager and share them with the new employee account, the challenge is actually scoping their authority, tracking them, and managing change, entropy and sprawl - that's not well managed by password managers yet, because password managers are primarily just the key-value DB CRUD of passwords, they have no awareness of the Source, User and Target of authority. So this is what we are focusing on in Polykey.

> And when such new hire gets promoted, how can we give access to the additional passwords they will need?

See previous answer. This requires understanding authority scope, which is best done with some sort of visualisation system.

> And if someone leaves the company, how can we change only the sensible passwords they had access to and preferably notify everyone with access to it that it was changed?

See previous answer. This requires automation that integrates with the source of authority and other users of authority. It's a also a deployment problem tying into devops and so on. The key thing to understand is that once you share a secret with them, there's no takebacks. Capability-based security theory does mention ways of dealing with this, such as delegating a proxy derivative authority rather than the true underlying authority.

We're still in development and we're currently working on the enterprise portal as a control plane for addressing the more difficult questions you have. We've got internal documents explaining the theory behind the general problem of authority management, however they haven't been released to the public yet. I will likely publish them on our https://polykey.com/docs soon.
This is so cool.

Question (caveat: first export to treesitter and tools like this):
Is there a reason the example demonstrates the use of depth as a variable
instead of it being built in?

Nesting level of a particular "type" is general enough that it might be included OOTB.
What you want to do with this might be generalizable -
for example instead of

```

enter section {
depth += 1;
}
leave section {
depth -= 1;
}

enter atx_heading {
print("<h");
print(depth);
print(">");
}
leave atx_heading {
print("</h");
print(depth);
print(">\n");
}

```

It could simply be:

```

enter atx_heading {
print("<h");
print(depth);
print(">");
}
leave atx_heading {
print("</h");
print(depth);
print(">\n");
}

```

So depth is always of the nested levels of the same node type, but available out of the box.
For markdown, it's headings, sections and lists come to mind - but I might be wrong.

In any event, this looks really well thought-out and now to checkout the other tools mentioned in the comments.....
I think doing a breadboard like 6502 would be interesting and would be my next side project. Not sure this count: https://bread80.com/2020/07/24/couch-to-64k-a-k-a-building-a...
Money is an abstraction. If AI can't produce enough value to support humans, then clearly there's stuff humans value that AI can't do. If AI can produce enough value to obsolete human labor, then human labor is unnecessary and money need not represent it
in your first example, how does Signal route messages in that model?
its not only Germany, overall all major West-European countries are facing an identity crisis.

None of the developed west-european countries (UK,France,Spain,Italy,Germany) do have any ideology or a civic idea, similar to the American Dream. By rejecting religion and ethnicity as a basis for identity, and importing millions of people from the third world - they don't know what to do with them and how to integrate them.

smaller countries like Poland have ethnic and religious basis, but what is the German identity, anyways? not even Germans themselves have an answer, because the last guy to have an answer caused a world war
That's exactly GP's point.
Canva's Price Hike: A Risky Bet That Could Alienate Its Core Users
> Then, adopt `uv` instead, for all your Pythons: https://docs.astral.sh/uv/

uv looks great, but its coming from a VC-backed company with no apparent way to monetise. Discussion here:

https://news.ycombinator.com/item?id=35617198
> Aliexpress is legit

That's way too positive. Aliexpress is loaded with counterfeit products as well.
> concept of geodesics

Ok, you brought in the "g" word. I think that makes it fair to ask how you plan to calculate the analog of spacetime intervals along your rubber sheet.

The general curves (not just geodesics) down to the heavy central ball all end up where the ball and sheet are in contact unless blocked by earlier contact with the central ball. How do you recover anything like the behaviour of a smaller ball bound to a non-spacelike radial geodesic with one end normal to the central ball's surface and the other "at infinity" (or at least in the part of the sheet that is asymptotically parallel to the ground)?

How do we show students, using your adapted rubber sheet, that spacetime curvature around a spherically symmetrical mass is symmetrical in all the spatial dimensions and that there is a curvature induced on the timelike dimension too.

What's the relationship between your pen lines and the Christoffel symbols (notably \Gamma^{1}_{00}) or Euler-Lagrange?

How does your "3." work with highly eccentric elliptical orbits? How about a grazing hyperbolic orbit? Think Halley's comet and 1l/`Oumuamua.
The problem like assembler or god forbid vacuum tube based old system is those edge cases … hard to log them or eyeball them. Then once a year or certain event, the logic happened. Old system worked. Yours don’t. … sigh
How many deer collisions or caused accidents are fatal for people? I see an estimate of 150 a year for the whole US. Broken radiator vs eaten by a wolf I can see the objections.

There are probably bigger risks from large deer populations, like Lyme disease, but also other ways of reducing deer populations. And are there other ways of spooking them if that's all it takes to make them more wary of automobiles?
I'm asking about real actual examples, not handwaving.
> People stick to iPhone because they love their AirPods.

Wow, I had the reverse course where I jumped off the iPhone train mainly because airPods were doing nothing for me compared to the competition (mainly Shokz), and I also wanted the 3.5 jack (and NFC as a bonus).

I still get that people can enjoy their airPod as a good product, but don't see it as massively better than Bose or Sony's product for instance if set in a vacuum, which makes the difference in market size extremely artificial to my eyes.
sender specifies recipient but the signal server cannot tell a group-chat message from a non-group chat message.
Yeah, it's not a crazy influence, it's just to point out that the economy is a pyramid and if you make the stone on top smaller, there are thousands of other little places where you can shave weight. Cars account for a small but significant amount of our bulk material usage, think mining equipment -> iron ore -> sheet steel -> stamped parts -> car. If you can reduce the number of F350s we sell, we can reduce the amount of iron ore we're consuming, the size of the ships carrying it, the trucks that haul the mining equipment etc.

The US sells on the order of 4M domestically produced pickups and SUVs per year and produces 1.8MT of steel. If we, conservatively, reduced the weight of all of those cars by half or 1T ea (they're often 3x the weight of a sanely sized vehicle) we quickly eclipse US steel production, even if we exclude some parts as non-steel. That multiplies by 1.6x when you think in terms of iron ore (though most is recycled from scrap).

TLDR: go play factorio
Do they support curvilinear cells?
If there is a huge stigma against being a drug addict, you better believe that people will think a lot harder about it when offered drugs at a party. There is a lot of personal choice involved, so I totally get that we don't want society to enable behavior, there has to be consequences so someone decides not to get addicted to fent.
It’s not an important topic, any more than any other moral panic.
The library comes with ESP32 use DMA for image stream.
Don't think you can workaround that, unless you write your own driver
English version posted 1 minute later https://news.ycombinator.com/item?id=41415627
Boeing is a very strange example to give for this, because it's been under "professional management" for probably one whole century now. How does professional management suddenly decimate it today vs. say 1960, when it was also run like a corporation?
It's licensed MIT and Apache 2.0. The community can fork it if it ever becomes an issue.
No apologies needed; I quite like the image your word choice inspired. Shame about the fish; wrong kind of bits.
This thread seems beaten to death, yet I feel strongly that I'd like to express this:

Groups of people that work together share a common purpose, that is aligned with the individual purposes of all the people that make up the group. A great leader helps remind people that they can cooperate and all win, and uses the clear purpose to cut through bullshit. There are few people in the world that can do this.
> Sometimes the threat is so bad or goes on for so long, that the nervous system decides there is no way to fight or to flee. At that point, there is only one option left: immobilization.

Gabor Maté has expressed a similar sentiment in regards to ADHD. According to him, when you encounter stress while both fight and flight are not an option, the only option left is for your mind to distract itself.

Gabor Maté on Rogan: https://www.youtube.com/watch?v=4jQSOSi2DA8&t=133s
While there is sometimes an exaggeration of the differences, I have always found LLMs to behave like (and have many of the weaknesses of) the left hemisphere of the brain as described in books like “The Master and His Emissary.” Considering the left is the language center, this shouldn’t be surprising.
Is the intended purpose of Lynx to access the "modern web"?
Giving access to a debug server on a local network is a single command line when running natively to the host.

Sure making them understand everything is a journey, but just spawning the server is fairly quick and painless.
I think your suggestions are for people who know more the students I meet in the classroom.
You're skipping the part where the people they were asking to ban were calling for a coup against the democratically elected government, which is not legal in Brazil. Your argument is a strawman.
Something the USSR did in 1961…
iHP48 on iOS is excellent. It’s my mostly go to calculator on the go. I find the lack of a backlight on the legacy HPs to make usage difficult (plus I always have my phone).
It's Okta's key feature... Once a user logs in and reaches their 'Apps Dashboard,' they can click on any SaaS app to open it in an already authenticated session without needing to know the passwords. This makes it possible for multiple users to access a single license.
Of the many problems with “hire good people and give them room”, the first is that you don’t necessarily know you’re getting good people. And if they are good you don’t know they’re good in your environment. You generally do know a founder is good if they’ve got scale problems, but obviously a lot of founders have failed before ever reaching that hurdle, and maybe would have benefitted from help.

But even assuming you can get good people in the door, the problem with giving them room is that you’re often creating something static and giving them ownership of it. When the world suddenly turns sideways and potential needs to flow through multiple people’s fiefdoms, at the very least you’ve created a lot of friction, but at worst you’ve erected impenetrable walls. That these problems can often only be solved by founders isn’t a surprise: when you create a a top down structure that doesn’t work, you can only fix it from the top. It’s exceedingly hard to delegate the one power that matters, which is the ability to reshape the business rather than optimise parts of it. If you can work out how to scale that without conflict then you can probably solve world peace while you’re at it.
More or less, yes. CLI, offline, no need for a cloud account. Used ast-grep successfully to locate bad code blocks (dynamic typing, don't even get me started) and also to replace them with others. Highly recommended.
The 50 state solution is a great feature because it effectively prevents unification solutions.
this was likely designed that way. it’s frustrating isn’t it?

What i mean is, one could trivially craft an LLM prompt that lists various “automated capabilities” the business has as an array (each one maybe backed by an api) and then ask the LLM to rank the 3 closest matches based on the users query. Then have the user confirm if any of those choices are correct. If not, trigger the “speak to a rep” workflow.
1.5 B$ per year at $0.15/KWh.
yeah, I use it a lot :)
I come from a traditional finance background. One underappreciated possible role for ZKP is in compliance.

Eg Goldman Sachs could encode all their compliance rules in a program, and publish a proof that their books pass the check by that program, without revealing anything about their accounting.

More crypto focussed: suppose you build a 'better FTX'. You could publish a proof that you ain't hiding an Alameda, ie that everyone who should have been liquidated actually got liquidated, and doesn't get special treatment.

In a banking context, you could in theory also run your know-your-customer (KYC) rules against customer provided data, store the proof, and delete the original data. That way, you still have proof that your customers don't have ties to North Korea or Russia, but you can't be compelled by anyone to reveal the data later (nor accidentally leak that data, etc).

Of course, for that latter application, you need a sharp lawyer to make sure that storing the proof instead of the original data is enough for your KYC obligations.

If you want to go further, you could have your customers run the KYC rules locally, so that their data never leaves their premises.

(For all these applications, you still have to have a mechanism that connects the real world to the inputs of the programs whose execution you are proving.

So eg Goldman Sachs would still need an auditor that checks that the assets and obligations they have in their balance sheet actually exist, but the auditor does not otherwise need to make judgement calls or apply any rules.)
Assume it's connected to OCLC, the Ohio Library College Center, in Dublin?
Maybe doesn't apply to Firefox on iPhone, but firefox android at least can keep sound playing with the screen off. Does the mandatory webkit integration end up interfering with that? Not that Firefox has enough marketshare there to really help...
> This ignores historic examples of societies with multiple cultures, religions, etc living peacefully.

Can you give me some examples? My own knowledge of history goes like this: proximity (between cultures / ethnicities) = war.
Tow-Truck Gangs Menace Toronto, One of North America's Safest Cities
https://www.wsj.com/world/americas/toronto-tow-truck-gangs-s...
In the enterprise, the cost of failure to ones career/reputation is unreasonably high.
pg's reference to "most skillful liars in the world" stuck out to me.

The extreme conservatism employed by managers to prevent failure - can only be summed up as "success at any cost". The consequence is decisions that spread the pain far and wide.

Unfortunately, these managers are not accountable for these consequences.

It's no winder that solutions take longer, cost more, are sub-optimal at almost every level. Furthermore, they very painful for the poeple who have to suffer these solutions.
But hey, some unrelated manager-chain can claim success.

The worst of it is, these managers rinse-and-repeat at their next gig!
He has always said he believes everyone (which includes the Chinese too) should enjoy Free Speech (calling himself an absolutist) while at the same time saying that he will abide by Laws of the country. If the Chinese people want Free Speech it is for the Chinese people to revolt against the CCP. It is not Elon's decision as he is not operating X there. In the case of Brazil, the Judge wants X to break Brazilian laws, which X is not going to comply with. Simple as that. Free Speech became an issue only when the Judge banned X. It became an issue because Brazil has Free Speech Laws (or at least had in effect and not just on paper like China). If Brazil wants to go the CCP route then nothing can stop that from happening. Neither Elon, you or me.
Ask HN: Continuous Deployment for the Front End?
Searching around I haven’t found many sources for the state of the art in frontend CD. I find myself wondering what others are doing for continuously deploying and monitoring web apps.

How often are you deploying your apps? Every commit? A few times a day?

How do you measure these deployments to make sure they are stable / non-breaking? How are you alerted when things go wrong?

Do you do ramp your deployments, or deploy to 100% of users at once?

How do you solve the problem of measuring low-volume flows, where it’s harder to tell if there’s been a drop off in conversion?

I’d love to know your experiences have been like, and any recommendations you might have.
Boeing's Starliner started making a repeating 'pulsing' sound yesterday
He isn't going back on anything. This is a misrepresentative oversimplification of the text.
A few years ago I bought an 8086 chip on eBay and it turned out to be fake, a random logic array chip relabeled as an 8086. It made for interesting die photos at least. It hardly seems worthwhile for someone to fake a chip that gets sold for $3.80.

https://www.righto.com/2020/08/inside-counterfeit-8086-proce...
"Radio Birdman: Retaliate First", by Murray Engleheart. First full history of the pioneering Australian proto-punk outfit.
That’s because the us has no pedestrian impact design requirements and people like grills.
DC one liners always seem like the most arcane bit of magic (to the uninitiated like me).

E.g. dc -e '_640320[0ksslk3^16lkd12+sk-lmlhd1+sh3^/smlxljsxll545140134+dsllmlxlnk/ls+dls!=P]sP3^sj7sn[6sk1ddshsxsm13591409dsllPx10005v426880*ls/K3-k1/pcln14+snlMx]dsMx'
> If you are in this articles audience you would simply state the producer of the ID card signs a statement that the person is over 18. No ZKP needed.

> The article like many others would be improved with a better example.

It's easy to make this example better:

Assume there are 50 different providers of ID cards, and Alice wants to convince Bob that she's over 18 years old.

Bob trusts all 50 issuers, but Alice doesn't want to reveal who her issuer is.

So here Alice could indeed get the supplier of her ID card to sign such a statement (and perhaps already have one prepared). For ZKP, you can also assume that the ID card issuers are not co-operating (nor do they care about each other), and that different Bobs might trust different sets of providers, and that the sets of trusted providers might change over time.
What is your measurement of "success" there?
Changing global new/delete is a non-starter in a reusable library. Allocator is a much more localized change and roughly the same amount of work.
Cracking teacups was a concern.

I visited a fascinating museum with a ceramics collection, and it included an exhibit with a history of ceramics. Earlier ceramics had this problem. Apparently, bone china -- with some bone mixed in -- created a tougher material that was less prone to cracking under the rapid temperature shock. As ceramics improved over the decades, it became a non-issue.

I suspect that letting the heat spread out over a larger area at the bottom of the cup might have alleviated cracking. That's a speculation of course.

I wonder if this is why the Russians drank tea from glasses. My mom has some lovely Russian tea glasses with silver holders.
Thanks for making this point. People who work on Windows may not realize how aggressive and disruptive Anaconda is on macOS. If you open a terminal and run the `lipo` command that macOS gives you to get information about a file, you will be running a version of that command that Anaconda installed, not the one that Apple manages and updates. And `lipo` is just one of many such examples.

Based on limited testing on Windows, Anaconda does not seem to do anything comparable on that OS.
"Gem test" 1 and 2 on john brandenburg 's youtube channel :

https://www.youtube.com/watch?v=hqbOnqZtz3Y

https://www.youtube.com/watch?v=RSRbLA6dhtk
Obviously you have never driven in Florida. It’s downright scary to drive anything under 5000lb there. Biggest trucks and suvs everywhere it’s an arms race you can’t opt out unless you want some 80year old in a expedition max to take you out.
The working couple makes a big difference. If you have the traditional stay-at-home wife a family can much more easily move with a job or for a new job. With two jobs involved its nearly impossible. Also a reason why so many people want to live in bigger cities rather than small places.
At the computer my level of math escalation is the generic Mac desktop calculator.

From there I may shift to a handy emacs scratch buffer.

After that it moves to firing up Slime into CL. The * * and ** variables (which in CL equate to the 3 most recent evaluation results) is actually quite handy. Plus I just have the Slime history and all that.

None of those are RPN, but at this level I tend to not enter long equations anyway, and I have to do just as much precedence parsing cognitively converting algebraic to RPN or prefix anyway.
Yes, though with ZKP you could prove arbitrary logic on the properties, even those that the provider didn't think of nor wants to support.

Eg you could prove that 'either your age is a prime number or that you have green eyes and live in New York'.
You can’t have it both ways:
America even according to the most nationalist was a melange of ethnicities and religious confessions from the founding, often from very impoverished places.

Edit I should note “ethnicities” has this shifting quality. But English, Dutch, German, Irish, etc groups that first came and later Slavs, Italians, etc in the USA often were coming from some place where those differences were very large. Certainly greater than what you’re advocating for with Germany here.
#5 is probably the biggest reason, and the main driver for the previous 4. (housing is too damn expensive)
> PS - I’d love to see better and more accessible monitors or testers for things that your body can’t self regulate as easily, like cholesterol levels.

Not sure if this overlaps with your interest, but you can now self-order tests from mainstream labs. e.g. [1].

Personally I think this cuts into the attractiveness of single-purpose devices. You can order a whole bunch of tests with one blood draw, and selectively only repurchase those that need monitoring over time. You're also likely getting higher-quality data in both the average and worst cases.

[1] https://www.questhealth.com/product/cholesterol-lipid-panel-...