skysight-inc/HackerNews huggingface dataset:
Except that you'll hit an issue with the automated renewal at some point and it'll likely be when you don't have someone available to deal with it - cue several hours of downtime. A problem could occur with the cert issuer and then you've got all of their customers with hours of downtime - not really a good idea.

90 days is a good compromise between encouraging autorenewal and allowing services to be down for a couple of days without really impacting anyone. It's short enough so that the person who set up the automation is probably still employed and thus they have an incentive to fix any issues.
It limits it for the better.
Or the hassle will push people to use letsencrypt, which is free.
I'm totally with you on the evolution of motor tech because of drone and also personal mobility (scooters and hoverboard motors are a steal for what they can handle).

While high torque motors got way cheaper, especially with MIT Cheetah "clones" getting easily available, they're still at least 200-500 a pop (depending on the torque needed for each articulation) from what I could find.

I might not know where to search for the real gems though. Where do you search for cheap powerful servomotors?
Rule of thumb is:

- never force push a branch

- at least not if someone else could be working on it

- and definitely not without talking to them about it

Personally I force push my branches quite often. It's super useful to rebase my branch on to main/master or doing an interactive rebase to reorder my commits, merge or just change the commit message.

I've been on the other end of someone rebasing and force pushing. I've found that just removing the branch from my local git and then checking it out fresh from origin is the simplest way to go.
It would be OK if browsers treated self-signed certificates a little better. There are lots of contexts where a self-signed, long or non-expiring certificate makes perfect sense. But browsers and security stacks in general react as if the whole application is broken, just because they didn't see the certificate before - even when they have no evidence the certificate is malicious. SSH does it nicely, with a prompt on first use and then detecting tampering after - why has this not been adopted for TLS?
It depends on the use case. If you are looking for a stable model with great voices and very low latency, Play 3.0 mini is as good as or better than 11labs.
https://x.com/_mfelfel/status/1846025183993511965/photo/1
> Given that certificate issuance is the most vulnerable part of the process (DNS hijacking during the validation process), isn't it a bad idea to encourage renewing certificates so often?

If someone hijacks your domain they can get a certificate right away, no matter how long the existing certificate was valid for.

> Asking users to go through some pain of accepting a new self-signed cert every three months, which was already worse than once a year, is going to get almost untenable at 45 days.

Are you experiencing the former right now? I thought these policies had no impact on self-signed certs at all.
Google to buy nuclear power for AI datacentres in 'world first' deal
Tesla does use lidars for validation: https://www.notateslaapp.com/news/2125/tesla-vehicles-spotte...
If not nature.... where do you get diversity from?

It seems such hybris to believe that mere humans have a better handle on what 'nature' needs, than, er, nature.

The embedded idea is both guilt-ridden and egotistic. Amazing destructive humans are harming 'nature' (antropomorphised) but other, good humans are here to redress the balance by doing this or that. At which point, whatever is there is no longer 'nature' but some sort of themed garden.
If he wants to make his 2026 Mars promise, he needs to be ready to go in the next month or so. I'm a bit sceptical.
> Why would there be. If the key is 'revokable' that is a weakness in it self.

What??

This does not make sense. Keys are revocable in most crypto systems.
GP said local / on-device. Most of what you mentioned is cloud shit.
I'd rather read and learn about conkers than another snake oil AI / crypto blogspam.
There are a bunch of these including fst in the R ecosystem. JDF.jl in the julia ecosystem etc.
The opportunities in the digitized business world are vast, but so are the legal risks. Let’s explore together how crucial legal compliance is in the digital world with concrete examples, such as a consulting firm facing fines for failing to comply with the Personal Data Protection Law or an entrepreneur encountering issues for not adhering to the Electronic Commerce Law. As you grow your business, managing risks is in your hands!
3 days is far too short. The certificate supplier could have a crucial piece of equipment or software stop working and 3 days might be too tight a timeline to get it fully resolved which then leads to lots of people having invalid certificates and the certificate supplier would be out of business shortly afterwards.
Fragmentation of the Online Self
> you have a really good microprocessor that works,

and applying this analogy to the current situation: do we?

normally you have to sell a product that works first, take the profits and then invest that into improving the components to make more profits. I think Elon has cracked the code: sell the product you don't have to people who would love to have it, and you don't even need to produce a version 1 that works - just move on to solving the problems that you want to. the market will pay you either way.
Keep your head up ;)
If anyone is going to make self driving work, the odds are stacked in Tesla's favor. They have more data and distribution than any of their competitors. If/when that day comes, a decade—or two—of relentlessly pursuing that goal while making hyper optimistic predictions will be entirely irrelevant.

Root for the ambitious… The alternative is to ignore or tear them down. And it doesn't appear to be very fun to be in either of those camps.

I literally jumped for joy yesterday when SpaceX achieved a major milestone along their ambitious path. It's been fun following along and cheering for them.

I feel similarly excited for Tesla when they demonstrate robots with incredible dexterity. Even if they're not fully autonomous. They will still be a game changer for workplace safety. Imagine sending one up an electrical tower ladder in Alaska to replace a tranformer while an operator uses FPV goggles and gloves to control the robot from an office building in Fairbanks over a Starlink connection. Or a robot enabling a scientist to take ice cores in Antarctica from the warmth of McMurdo Station. This scenario would provide enormous quantities of training data as well.

The baseline AI-powered mobility and object avoidance subroutines are enough to make that viable while falling back to remote, human control for 'high resolution', less routine tasks. This same principle applies to robotaxis… And perhaps many Teslas already on the road if they can be retrofitted with the appropriate networking equipment.
> very successful engineer

Do you have any evidence of him ever being one? I mean he’s an extremely successful CEO and decision maker which is almost infinitely more important than just being an engineer.

I mean was Jobs ever considered an “engineer”? And I’d bet he was significantly more involved in the design of Apple’s most successful products than Musk was in SpaceX (and possibly even Tesla if Cybertruck was the result of him going of the reins).
> The second stage failed it’s de-orbit disposal burn.

Official word from SoaceX is that the second stage engine failed to shutdown on time, causing it to overshoot its planned landing zone. It ran 500 milliseconds long.
I think this article does a good job in describing why I always found Tesla's tech demos so jarring.

There's a certain amount of "movie magic" that goes into any tech demo to make it work well on stage but Tesla's demos never gave me a sense that what I was seeing would actually line up with how their cars will perform in the real world.

You have to be ambitious and aim high in the tech industry, but at some point you have to level out and stop getting high on hype.
AGI in 2026: Anthropic CEO
I dunno. The article states that David Jakins has been competing since 1977 and has never won. He was also a Judge, so this game seems to be extremely important to him for some reason. I guess he wanted to win by any means necessary before he has to retire from the sport permanently due to age or physical limitation
>while ensuring they continue to make lots of money from extorting SSL certificate sales.

Which IaaS/PaaS providers are doing this? Most of the popular ones I know (ie. not some shady shared hosting reseller using whmcs solutions) lets you upload whatever certificate you want, or has certificates for free/included in the monthly price. In other words they're not going to benefit from shorter lived certificates. In the worst case you can set up cloudflare "flexible SSL" in front of your site and get it for free.
Ideally, only sufficiently sturdy homes should be allowed in risky areas. The absurdity of the current situation is subsidizing risky behaviors of people who choose to live in hazardous areas and socializing the inevitable costs onto everyone else when FEMA and/or insurance step in to rebuild in the same risky locations with the same substandard construction and expecting a different result.
Maybe Cobol?
I had a hard time figuring out where the cheating comes in. Especially with the metal chestnut. Marking the strings so they break more easily?
The overhead of automation? It's one script that can be set to run each day - exactly the kind of thing that is really easy to do with computers.
If you need to get instant reply notifications and you do not want to refresh manually, you can use KWatch.io: that's a platform that I developed that monitors HN.

https://kwatch.io/monitoring-keywords-hacker-news-kwatch

You can give it the URL of a specific post or comment and it will notify you when new comments are made in the thread.

I hope it is useful.
Nothing that happens in the future can negate the fact that he promised autonomous driving would available in Telsas by now (actually long before now), and it isn't.

Tesla can never be the first to large-scale autonomous driving since Waymo is already delivering it. Sure, Tesla will probably deliver it eventually. Whether they can overtake Waymo's rollout is the open question.
Their phone numbers all had 666 in them, if I recall correctly.
For completeness, this article indicates: [1]

> Roberson's ex-girlfriend, as well as her daughter and one of her nieces—ages 10 and 11, respectively—testified that Roberson would shake and spank Curtis when she wouldn't stop crying. Roberson's ex-wife from a past marriage also testified that he physically beat and abused her. (Roberson's lawyers argue in his habeas corpus petition that the witnesses were biased, were not credible, and contradicted each other, and that the accusations only came out well after Roberson's arrest, following prodding and leading questions from police.)

and:

> "The condition of Nikki's lung tissue cannot be reconciled with the conclusion that her death was caused by blunt force head injuries, inflicted or otherwise," the lung pathologist, Francis Green, wrote in the habeas petition.

> The radiologist also concluded that there were not "multiple impacts" to Curtis' skull, as a doctor testified at Roberson's trial—just a single, minor impact that was insufficient to cause her death.

[1] https://reason.com/2024/08/12/texas-might-soon-become-the-fi...
>Do you think there should be a law limiting the lifetime duration of an SSL cert to 45 days?

No such law is being proposed. The cops aren't going to bust down your door for generating a 3650 day certificate using openssl.
OpenSSH does it “nicely” for you maybe. I’ll maybe even accept “for most users of an SSH client”. This behaviour implemented in a browser is utterly unacceptable. The average user is orders of magnitude less technically capable.

You are not the only user of the software that you use.
That he met Steve Jobs is the most important detail, justifying these aimlessly meandering ramblings.
The study didn't plot the entire state space. It's simply a map of the end state of a limited space of parameters (specifically, the mass of the objects is fixed, two of them are in a particular orbit, and basically only the angle and timing of when the third object approaches is varied). The plot just shows which object gets thrown out of the system for each initial configuration.
https://liftoff.energy.gov/advanced-nuclear/ high chances it'll be more expensive than ap1000 overall /kwh
sounds like ChatGPT.
> What is the problem with long lived certs?

Privilege escalation and Dev Ops rot. Long-lived certs often get compromised when privilege escalations happen and someone gets access to an account or computer that has private keys on it.

One example scenario for privilege escalation: let's say a hacker gets access to one of your employee's or vendor's machines and associated accounts using a zero-day, or phishing, or some other method that goes undetected for some time. The attacker, as part of this attack, successfully gets access to your cert's private keys through some way or another without drawing attention to themselves.

Some time later, your firm makes several security updates. When doing this, you unknowingly patched the attacker out of your network. The attacker is now in a race against time if they want to do something with the cert before it expires, and in this kind of situation, the sooner that cert expires, the better, because the attacker gets less time to do something with it. In a perfect world, the cert expired exactly when they got patched out, but because we're not guaranteed to know if there's an attacker in the first place, "keeping the expiration time as short as is reasonably possible without impacting service reliability" is what things seem to be moving towards, to limit the blast radius during access leaks.

As for Dev Ops rot, speed has a tendency to change requirements in favor of automation. Generally, certificate rotations tend to be a pain point - they break management panes, they take down websites, they throw browser errors, they don't get updated in pipelines, and other woes happen when they expire that demand people keep track of a ton of localized knowledge and deadlines that's easy to lose or forget. However, paradoxically, the longer the time between rotations, the more painful they tend to be, because once rotations are sufficiently fast, it becomes unmanageable to do them manually: demanding speed forces people to build anti-fragile rotation systems. Making the requirement be shorter is in some sense an attempt to encode into managerial culture "you need to automate this", as a bulwark against swapping your certs out being anything besides automated or one click rotations.
you can land a job in NL in IT ok with a bit of a portfolio. once you have that you can get an proof of your working level to get admitted to other educations if you like but imo its not needed.

i got mbo and work in IT at a decent level / wage. Theres a big need for people with actual skills in IT here.

maybe if you want a more chill job try something like TNO. if you can prove your skills (via resume/portfolio) they can drop their requirements and take you on as programmer/researcher. such a place is a long way away from corporate hell. theres not the best startup culture here but theres some decent startups where you can also apply to get out of corporate if that doesnt do it for u. startup culture is usually hard work but more chill on a people level.

try to work at places 2-3 years so it doesnt hack up your resume. but its normal to change jobs until you find a place right for you. dont worry about being you :) theres a good place for everyone.
I'm one of that 'too young to be a millennial, too old to be a zoomer' cohort and we definitely played it in the '00s, I vaguely remember the rumours of it being banned encouraged its popularity quite a bit. They also banned British bulldog around that time so we renamed it 'hot dog' and carried on!
I've never been charged by a swan, but I have been knocked into a ditch by the slightly smaller but no less aggressive Canada Goose while biking. No broken bones, but I did have to straighten the alignment of the wheels on my bike.
> it's nothing to do with "the government"

The depends where you live, and what the government means. In some places the validity of a passport is written in a law, voted by the parliament; in other it's a operation decision by the government (e.g. the ministry of the internal affairs).

Where I live it's a law voted by the parliament.

Also TLS fingerprints and biometrical data are "hashed" data, if that's what you mean about having in common.
Sounds like you didn't read the article.

The idea has nothing to do with creating artificial competition and it is actually designed as a form of collaboration.

Some work requires concentration and the defensive team is there to maintain the conditions for this concentration, i.e. prevent the offensive team from getting interrupted.
Google purchases nuclear energy from Kairos Power SMRs
The post considers rebasing the fork. It seems easier to do only merges. You can merge specific upstream commits, or the entire upstream branch. That way you only need to merge in the changes, and not resolve the same conflicts for each downstream commit, every time the upstream is changed.
> Name one modern real non-market socialist state that exists today that has not failed, and I'll be willing to consider your last statement.

Your focus on the false dichotomy between state action and private action makes me want to go tongue-in-cheek and name France. Definitely a non-market socialist state.

And for the record, I do agree that everything will get progressively worse, for ideological and for material reasons. But in both cases for different reasons than you suggest. The unholy marriage of extreme concentrations of wealth and the reemergence of fascism has been blessed with many children, but the Musks, Murdochs, Kochs and Thiels of this world will have little recourse against an economic reality wrecked by climate change, the drying up of fossil fuels and the bitter demographic outlook.
It's like when I researched whether an electric toothbrush is better: All the studies say it's not, assuming you're a good brusher. You're probably not. For bad brushers and people that can't manipulate the toothbrush properly for whatever reason, an electric toothbrush gets them to the same performance.
>Do we have good data around the lead time between someone’s signing keys being compromised and their use in an attack?

Given how fast it is to set up a phishing proxy, such "lead time" is probably measured in hours rather than days. Even something like a 1 week expiry will provide security benefits.
Side note, if you were playing conkers in the 00s are you still too young to be a millenial?
The myth is the game being a health hazard, not if it was banned (or not).
because 1 - 1gw of solar capacity isn't the same as nuclear, even 3gw of solar isn't the same as 1gw of nuclear (to get a proper perspective, look at germany's grid yesterday& how much overcapacity of solar/wind they have and how much was actually generated/imported). 2 - vogtle unit 4 was 30% cheaper than unit 3, proving positive learning curve, meaning (in theory, according to https://liftoff.energy.gov/advanced-nuclear/ ) new builds should be significantly cheaper
Both the Valeo SCALA and Luminar LIDAR sensors are in the $500 ballpark (at volume). Even a few times over, this seems like a petty cost to forgo on a $50k car.

Anyway, Tesla have supposedly recently bought a massive pile of Luminar sensors, so I expect them to be in one of these vehicles soon.
6 months ago. 192 comments: https://www.infoq.com/news/2024/04/meta-threads-instagram-5-...
Waymo is hardly large scale.
It's likely that I'm wrong, I need to look deeper into it.

But isn't the paper-mache cow case solved by simply adding that the evidence for the justification also needs to be true?

The definition already requires the belief to be true, that's a whole other rabbit hole, but assuming that's valid, it's rather obvious that if your justification is based on false evidence then it is not justified, if it's true by dumb luck of course it doesn't count as knowing it.

EDIT: Okay I see how it gets complicated... The evidence in this case is "I see something that looks like a cow", which I guess is not false evidence? Should your interpretation of the evidence be correct? Should we include into the definition that the justification cannot be based on false assumptions (existing false beliefs)? I can see how this would lead to more papers.

EDIT: I have read the paper and it didn't really change my view of the problem. I think Gettier is just using a sense of "justified" that is somewhat colloquial and ill defined. To me a proposition is not justified if it is derived from false propositions. This kind of solves the whole issue, doesn't it?

To Gettier it is more fuzzy, something like having reasonably sufficient evidence, even if it is false in the end. More like "we wouldn't blame him for being wrong about that, from his point of view it was reasonable to believe that".

I understand that making claims of the absolute truthfulness of things makes the definition rather useless, we always operate on incomplete evidence, then we can never know that we know anything (ah deja vu). But Gettier is not disputing the part of the definition that claims that the belief needs to be true to be known.

EDIT: Maybe the only useful definition is that know = believe, but in speech you tend to use "he knows P" to hint that you also believe P. No matter the justification or truthfulness.

EDIT: I guess that's the whole point that Gettier was trying to make: that all accepted definitions at the time were ill-defined, incomplete and rather meaningless, and that we should look at it closer. It's all quite a basic discussion on semantics. The paper is more flamebait (I did bite) than a breakthrough, but it is a valid point.
It probably betrays more about my contempt for how peoples biggotry is exploited to make them believe things that are not true. When that is not enough then show them some tits with the message and they will tell you all about how pigs fly.
I think you may have been pwned.
Seriously, who gives a cheat?
I never paid for any of the autonomous upsells, so for me this is a lane-keeping functionality and I treat it as such, meaning it helps me but I am still fully responsible for my own safety.

It happens rarely enough, and as I mostly drive on the same roads, I know where it happens as well, usually I disconnect the thing before it gets to the problematic place.

So no, it's so much stressful as annoying. But it does remind me that the claims of self-driving is just horse-shit.
Why would it matter whether he technically founded Tesla? He basically built it from scratch regardless.

Also What does that have to do with him (supposedly) being a talented engineer? He’s a brilliant strategist/visionary/CEO obviously but Cybertruck was a product of his engineering decisions then.. yeah.. probably he isn’t.
Why does the link meant for https://community.kde.org/28th_birthday link in a circular fashion to this very ycombinator submission?
Could a moderator please fix this?
Vaporware hype.
In eu France is the biggest net exporter in the EU while Germany with huge renewable capacity net imported 20+TWh this year. Look how Germany's generation was yesterday to get a sneak peek
I find it interesting that all of the arguments seem to be about the merits of whether pushing this on everyone is good or not, and they all take for granted that personal freedom does not matter anymore.

I dislike not being able to choose my SSL lifetime for the same reason I do not like a web browser deciding for me if I can use my own CA. In both cases choices are being made for me, whether I like them or not.