skysight-inc/HackerNews huggingface dataset:
I spent 6 months chasing down a new rear wheel because my freewheel hub had broke and I didn't want to spend twice the price of the used bike on a new wheel set from the manufacturer.

Visited many local bike shops, got a lot of bad advice there (same as online), then finally got told what to order exactly at one online shop because not even their supplier had it.

Maybe the blame is not on the manufacturer here because they wanted to make it less repairable, but if showed me a lesson in non-standard components. (it's an 11-speed Ultegra on a QR, which seems to be very, very uncommon).

But just the amount of "just do X" responses I got showed that there are too many fine details.
It hasn’t been an issue yet, but I’m sure it will come up at some point. If you see a problem please file an issue.
> Unrelated, what are you using if anything to get reply notifications so fast? Are you just manually refreshing?

Just luck. I refresh more often right after commenting but otherwise it's erratic between a few refreshes an hour and several hours between refreshes.
Why would he speak out against this? He will be able to sell much more certificates. I bet he lobbied it.
Anyone can create a certificate with any duration they like. Getting others to trust that certificate is the tricky bit.

These "large companies" put restrictions on what certificate authorities are allowed to do so that they can keep their users safe.
(This isn't necessarily directed at you; just at the last minute thought to look for any top-level posts talking about this aspect. Much thanks for the piggyback! :pray:)

I've nothing but utmost love for Flipper Devices Inc., seeing their approach to PR and as a 1000% happy owner of a Flipper Zero that sits unused 99.99% of the time in my backpack (and boy, am I _extremely_ happy and relieved for the 0.01% when I need it). I would pull the trigger on this in a heartbeat if I had the play-cash.

For those specifically with productivity challenges, it seems to be a good opportunity to remind that there are simple techniques people can try out (even if I find hard to discipline myself to adhere to) like a programmer's anecdote of one of John Carmack's methods[0].

I have personally adapted that technique to buying a $20 (hour-long) sand timer and turning it to its side when I need to pause. Unfortunately, my challenge now is overcoming my reluctance to use it more often, dreading the commitment I am signing myself up for as soon as I start the timer and fear of failure. Alas, it appears that I allow that fear to control me (into shirking responsibility).

[0]: https://news.ycombinator.com/item?id=30801421 (unfortunately, original source no longer has this entry published, and archive.org is still offline, so all I have is this HN post to cite :)

[edit]: https://archive.ph/kcKYY
The only thing I can think of is domain expiry. Someone could get a certificate, sell their domain, then continue using the cert until the certificate expires.
I’d like it to have buttons (the apps Ulanzi mention are view-only).
Does the body of a patient under anesthesia react to (unfelt?) pain by raising blood pressure?
Same reason you cant choose the expiry on your passport or drivers license.
FYI Waymo is typically ~30% more expensive than Lyft/Uber in SF.
> likely in 5 years the number of androids

Why would you ever want an unstable bipedal robot? Alternatives seem way more efficient.

Also are you predicting that Teslas sales will collapse and they’ll lose most of their EV market share? Because that’s a pretty bold take
I'm by no means an expert, but the difference between passwords and certs is that certs can be used without any interaction with the authority.

A leaked password will reveal itself to the authority when used. You have to connect to something to use it and when doing so, can be flagged.

A long lived certificate and key can be used with no interaction with the authority, so how do you know that it is being used maliciously? The renewal is the interaction with the authority which could pick up malicious activity, so making it more regular is beneficial.
You're supposed to use a new private key for the new CSR. There is no reason to reuse the previous key.
Also you can reuse the same key.
mindblowing tool. i've attempted to create a react app to plan meals. each meal consists of several recipes, each recipe of several ingredients. user can edit ingredients with their nutrition values and build recipes from multiple meals etc. then added a navigation bar with multiple pages and a sqlite database. after adding the sqlite database I ran out of free tokens and there were some errors preventing the app from running. but until this point there was a functional app to edit ingredients, recipes and mealplans without data persistence that was created in ~15minutes. pretty cool! i'd love to play more with it, maybe tomorrow if I get some free tokens again.
On the cars with matrix-led's the high-low has been solved very well. It used to be bad and now it's almost perfect.

Wipers, dunno, they used to be really bad but I have not noticed the issue in the past few months, maybe they have done something.

That said, I am still agreeing with you on "struggle with basic things", there are phantom breakings in the exact same spots this and other teslas have driven thousands of times. There are occasional cases where it would follow the wrong road-markings into a crash would I not intervene and so forth.
So large companies are now government agencies?
It's not just the bite but the Apple I was first sold for 666$
(Currently) there is no reliable way of revoking compromised certificates.
Summer Eternal: Artistically driven. Creative led. Worker *and* player owned
That's the way you do it.
Greyeax successfully accessed my husband's phone discreetly. We worked together through the email address greyeax@gmail. com, which allowed me to gain entry into my husband's device. This experience has given me a newfound sense of security and peace of mind. For those looking for similar assistance, greyeax can be reached via his Instagram account, greyeax or contacted
> We dont have a really good way of revoking keys after something bad happens.

Why would there be. If the key is 'revokable' that is a weakness in it self.
Nothing is stopping you from using different certificate authorities or one you made yourself. Other than getting other people on board of course.
Apple have been pretty successful with basically the opposite approach.
Facts sprinkled with personal interpretation, a normal, albeit not an extraordinary, blog post?

I admire some of the things Elon Musk has made happen, but the guy has obvious ego issues and acts often like a villain from a child superhero movie. If a blog post is "biased, one sided, bullshit" for calling this behavior and all the accompanying unkept promises, what they are, together with some creative words and interpretation, why do we have blog posts in the first place?
whoever wins the election, Musk is supplying NASA with spaceships for now and the immediate future and next probably will take over Boeing to make self flying personal airplanes
Thanks so much, super insightful!

The way you describe it it’s a big bet wether or not we’ll see QC working within our lifetime. But who knows… I love your optimistic stance.

Re other forms of QCs: what surprised me was that Sabine Hossenfelder of all people became more bullish on photonic QCs. Maybe progress will be faster after all.

https://www.youtube.com/watch?v=4fx_TgvbcTA
I was going to ask what possible motivation this dude had, but you’ve answered that quite well.
> The same private key is presumably used by all certificates and CSRs

That's a choice. Certbot changes the private key with every renewal by default. I suppose in principle CAB might start disallowing key reuse.
Safety at the expense of personal freedom to choose for yourself? What if I do not want the "safety" that these "large companies" claim to provide?
I have an idea, replace the existing cameras with early 2000s era webcams. Since worse technology solves problems, it would work better.

If Musk had gone all-in on every sensor possible and put them all over the cars like strings of Christmas lights, I assume you would be defending that decision with just as much fervor.
Exactly.

The unspoken thing about startups/the mom test is that now the majority of startups try to do it that way.

Well, 90% of startups still fail.

So why do the thing that 90% of the time doesn't work?

Really successful startups tend to be strongly unique and lead by a few years of personal experience with the problem. Perseverance and defiance(to the way things are/problem remaining) can't be bought though and it won't sell a book.
nil certificati sine lucre
So does Tesla FSD use cameras to create point clouds in real time with photogrammetry that they then segment and classify via AI and act accordingly, or is it something else entirely?
Or just small details like: If you already provide a list of what rim and spokes, maybe add the size of the spoke nipples. Or what model of brake pad.
As a counterpoint, German ICEs are just as much of a bullet train as Shinkansen are and they have full dining cars.

It might not actually be profitable, but it sure is sweet.
What's the state of the art for voice cloning in another language (here French)?
There's a simple rule, if Musk founded the company and it does well then it doesn't matter that he founded the company. (SpaceX)

However if Musk didn't found the company and it does well, then that's a very important thing. (Tesla)
The man has weird views on non tech issues. Some are thought provoking, some are plain bad hills to die on. But I don't see how this is something I should be getting up in arms over.

The FSF has largely failed to garner political/public influence to prevent the enshittification of the digital world. What is there to be gained from a putsch like this? If these people truly cared about the mission RMS set out to achieve they would realize that further dividing the minuscule libre software community (which is already co-opted by corporate interests to a large degree) will only get us further away from making a difference in the areas that actually matter.

Like damn, we only narrowly avoided a future where I can't even browse the internet without a TPM attested bootchain deemed "trustworthy" by corporations, and somehow a 71 year old cancer patient is the hottest issue in the tech world right now? Get a fucking grip.

This all just seems like a toxic power grab by people who are blinded by their narcissistic self righteousness.
I trust things to varying degrees until I test them. Then I trust them more or less.
The Biden administration did no such thing. The Biden administration assumed office in 2021, and the Hunter Biden laptop story was published in 2020.
>drop of blood...

so cool, if there was some startup to give you a full health info with that. Imagine - with your login attempt it comes a proper analysis if you are fit for purpose.
> but once the results started being for ridiculous articles (or similar), rather than the actual documentation I started using bookmarks. Which was sort of why I was curious.

Still works for me. When I search for "Angular signal documentation" I get to the right place (They just changed domain for the brand new version, but .. yeah) That said I also use an ad blocker.

Currently google still works for me.

> If you have the time I’d love to see an example of some random person on the internet giving you a better introduction into using a language library than the documentation itself. Don’t think I’ve ever seen that.

Can't remember a good example right now. Most recent trouble that I search for was the good old classic of centering a div in CSS :) I think I used a mixture of this side [1] and an LLM ( Github co pilot)

Uh, now I found a small example. When I want to know how to sort a stream in java.
When I search for "java 17 stream" go to the official documentation and search for sort I get: [2] more or less it just says "Stream<T> sorted(Comparator<? super T> comparator)"

But when I google "java stream sort" and the first stack overflow contains a great example: [3] or a bit short answer on the same page [4]
Those code examples just work better for my brain :)

[1] https://www.w3schools.com/csS/css_align.asp
[2] https://docs.oracle.com/en/java/javase/17/docs/api/java.base...
[3] https://stackoverflow.com/a/53183266
[4] https://stackoverflow.com/a/40518343
My tinfoil hat says it's about control. Forcing people to return for another blessing from the central authority, more often. The same reason church is once a week, and not once a year.
Good things that help people, but not transformative.
Spin up your own (possibly private) CA.
I was out for a walk yesterday, and kids were throwing sticks up trees trying to knock the chestnuts down, so I don't think it's dead completely.

I never really played it when I was a kid, but knew all about it from The Beano and Oor Wullie.
Azure speech services?
I think it is 13-months, at least that is the maximum I can buy here, GoGetSsl have a description and a list here: https://www.gogetssl.com/wiki/general/multi-year-subscriptio...

This seems to have started around August 2020.

So instead they will sell "subscriptions" where you get a new certificate on expiry. So technically they will still sell you multiple years, but as a subscription.
Don't you have to go out of your way to do that? You can probably choose a weak RSA key as well (ie. one that's 4096 bits but not a prime), but if you have to go out of your way to do that there's little anyone can do to stop you.
Nothing stopping you running your own CA and issuing your own certs.

Your actual problem is that the browser vendors (who decide which certs should live in the root store) have certain criteria which CAs need to meet in order to be trusted.

Why should Firefox / Chrome / etc. have to honour your desire that your arbitrary-length lifetime certs are trusted by default in their browsers? You still have the personal freedom of installing your own CA root if you like.
And passwords expiring every 48 hours…
Sure! I would love to try that too.
I was referring to Tesla. They never had a fully or nearly fully working system that they could iterate on.
> but it didn't magically give them self-driving either.

Perhaps. But isn’t Waymo way ahead of Tesla?
>If the key is 'revokable' that is a weakness in it self.

???

Why?
Also in this case, "safety" can be defined as protecting American companies from lawsuits while ensuring they continue to make lots of money from extorting SSL certificate sales.
Your second point is crucial in my opinion. In most organisations, there'll be a rush to get some new web service configured and an overworked admin is likely to set up the initial certificate. Without a short expiry date, you can almost guarantee that the admin hasn't got around to monitoring, automating or documenting the process and might not even still be working there in 2 years time.
llms arent a flop. they make for great chatbots when adequatly trained with billions of dollars. fish clearly go m000!
chatgpt even has it in the name yet people are blinded by the greed of others...
A mistaken revocation is orders of magnitude less harmful then a failure to revoke. If revocation worked pretty reliably, that would be an improvement over the status quo.
Honest question, considering I have never driven or been in a Tesla, when you say “it would follow the wrong road markings into a crash would I not intervene”, are you not concerned for your safety when driving it.
>Apple, which makes sense considering their stance on security.

How does it help? A lot of cert would expire prematurely and the folks will learn to accept expired cert as a norm.
It does in certain strictly determined conditions + human assistance.

But the point Tesla didn't go through "FSD with ultrasonic + lidar + cameras", and then start to reduce the sensors. They went from "no FSD" to "broken non-working FSD, but now only with cameras". That is not how you strip down a working product to reduce costs.
Unfortunately I am missing a "modern" rim brake bike to confirm I am not going mad, but back in the 90s about half of the time we fixed a flat at the back the shifting was off after that and needed readjusting, and replacing brake pads usually meant fiddling for an hour until everything aligned well again.

Compare to any disc brake bike I have owned (bought later than 2010)... everything is super smooth. I just can't believe both my dad and I (when I was teenager) were completely inept and now as an adult I can magically fix bikes.
If the cameras (or our eyes) are obstructed, you shouldn't drive at all.
The “Live on air!” sign that triggers with Zoom (or Slack) is a very common usecase.

I wonder why it’s not better addressed. It needs to 1. be out of the office, on the door, 2. therefore bluetooth, 3. always on, and 4. it’s simple on/off light!
> Shorter expiration gives more power to the SaaS vendors.

Please explain how.
Lots of PCs poised to fall off the Windows 10 update cliff one year from today
Thank you! This is a nice rabbit hole to go down to. I've previously thought about building one myself, but this is probably way nicer.
> one answer is due to the fact that humans also do this with just 2 pretty bad cameras and a lot of offloading to the cortex.

No, humans do significant sensor fusion.

There's binaural audio: useful to detect and have a rough position of emergency services and/or high speeds cars(it's true that its a relatively unencumbered channel, but that makes it all the more valuables for emergencies)

And there's a working if imperfect IMU (performance can be altered if the power supply is set to an alternate mode) to sense all kinds of acceleration: for fine course correction on acceleration and bearing, for getting the road condition and adjust the driving profile accordingly, etc..
Certs longer than 398 days have been banned since sept 2020
The Cloud Mafia: Pay Up, or Lose Your Homepage
What do you think passports and signed TLS certs have in common? (Hint, it's nothing to do with "the government").
The "original" Chrome is basically the mother of all supply chain vulnerabilities and whenever the inevitable exploitation happens, everyone who thought they were a connoisseur of security is going to get completely pwned.

But I suppose in your clown world security model the big US corporations who have proven again and again that they will act against your best interests are the only ones to be trusted while individuals with a proven track record must be sandboxed at all costs.
Show HN: Chart and Milestone Tracking for Last.fm
I've made an iOS app that detects changes to your Top 50 charts and milestones for every hundred scrobbles.
Agreed. Just sounds like a stressful experience all round.
I have been denounced :(
The one called South, not Endurance?
It's pretty similar in the UK for private dentistry, x-rays ~£10-30, hygienist/scale/polish ~£50-120, filling ~£70-150, root canal/extraction ~£120-300.

Dentist salaries seem to range between £70-200k depending on experience, specialty, etc.
I know video streamers cheap out on bandwidth, but 180Mbps is about four times larger than a full fidelity 4k encoding, no?

Also, if anybody else was pushing this bandwidth on Azure it'd bankrupt them. I presume Microsoft are giving themselves an anticompetitive advantage (instead of making their fees fairer).
there might be some privacy implications

This is a staggering understatement. It would be instantly banned in Europe for a start.

it feels like it would probably tip the balance far more in favour of the prospective employee than the employer for once

The majority of job applicants are already employed. Publicly declaring they are applying for jobs elsewhere would be career suicide.

Ghost jobs would be easily spottable, since no one would be marked as 'hired'.

You give way too much credit to companies. Most companies are terrible at keeping their own internal Applicant Tracking Systems up to date as it is.
It should do pretty good. You can try it here https://play.ht/playground/
>Given that certificate issuance is the most vulnerable part of the process (DNS hijacking during the validation process), isn't it a bad idea to encourage renewing certificates so often?

I don't get it, is the domain extra susceptible to misissuance during the renewal process? If not, I don't see how this is a relevant point.
no, it probably wouldn't. if people are doing it for fun, they don't want to sit in meetings with strong personalities telling them how to do it. they enjoy coding, they enjoy thinking through interesting things, they don't enjoy taking orders and doing things a certain unfulfilling way just because somebody else prefers it that way. usually you have to pay them for putting up with that kind of thing.
I'm puzzled as well, what the heck the article is talking about and why it's posted here?
The current generation's interest is indeed quite understandably focused on, pardon the simplification, data-driven correlation engines and the results have been nothing but spectacular. Let it be clear that I do not reject the idea(s) behind the bitter lesson. On the contrary, I think it is spot on, yet I feel there is in a great many instances a false, mostly unspoken, dichotomy being imagined behind those words: there is either A) raw probabilistic association lacking any and all structure or B) full scale good old fashioned symbolic AI containing nothing but highly specific, human, knowledge.

The text of the bitter lesson itself provides an interesting case, on the topic of computer vision: "Early methods conceived of vision as searching for edges, or generalized cylinders, or in terms of SIFT features. But today all this is discarded. Modern deep-learning neural networks use only the notions of convolution and certain kinds of invariances, and perform much better."

To me this proves the necessity of proper measurements devices - in this case "convolution" and "certain kinds of invariances" - to render data as intelligible as possible utilizing as little moving parts as required. What I don't see in this is: "we need to drop all preexisting notions of structure and just focus on finding pure correlation only". The fact that we have moved to more fundamental search operations - from "cylinder" to "convolution" - does not IMO fundamentally alter the general strategy. In short, I think the lesson is being stretched beyond its limits.

The lesson shows us: "We want AI agents that can discover like we can, not which contain what we have discovered" and I couldn't agree more, yet we seems to disagree on what it means to "discover like we can". I happen to believe that raw correlation is just one of the key ingredients. In fact Kant has the notion of "community" that, and I might be sorely mistaken here, appears to capture the associative power of cognition in much the same way.

I, of course, lack any sort of credentials to further my point. I only imagine it might possibly be of slight interest to someone to squint upon this topic from a skewed angle.

PS: Your point on pragmatism is well taken. I'm sure we are all quite excited to see what happens over the next couple of years, yet I cannot help but hear an ominous violin crescendo beneath your "if the predictions are consistent and reliable".
An operating system that self replicates Doom on a network [video]
Passport/ID document expiration dates are decided by law. Therefore it is in fact "the government." Do you think there should be a law limiting the lifetime duration of an SSL cert to 45 days?
Humans also have only legs instead of wheels. The whole point of having cars (or any machine) is that they're not limited to my biology build.
> conquer countries 10x your size

> invent 20 sports the entire world plays

I mean, the two are kind of related, causally...
> blatantly being unwelcoming to a lot of religious people.

It's maybe a clever tactic to keep religious extremists away.

>as a Christian I would say it is appropriate to refuse to do business with someone using such images

Send from a Iphone ;)