skysight-inc/HackerNews huggingface dataset:
Historically, the spec was written for hardware security tokens. Keys on those tokens can't be moved around by design.

The whole "platform authenticator" thing enabling passkeys came later. Extending the spec that way was easy: a platform authenticator works just like a hardware authenticator, it just uses a different channel for communication.

The spec the providers built upon just wasn't designed for software authenticators that allow moving around credentials. The original spec assumed credentials are stored in a non-extractable manner in HSMs.

Edit: thinking about it, platform authenticators may have been in there pretty early, but under the assumption of also using an HSM and not allowing extraction of credentials.
Providers compromised security for usability, removed the HSM and made passkeys synchronizable – the spec had to adapt.
If the US military won't patrol world's shipping lanes, I'm sure the Chinese military would take over that job.
Ray Batch Inference at Pinterest (Part 3)
If someone creates this fucked up compute stack and handles the customer data this poorly, what makes you think they would be any better at disposal even if there was some laws around it? It is not like law makers have any idea either what is going on.
Why not? Its the governments responsibility by law to create a long term repository.

They made it their problem by law and forced the power plant operators (and thus the end consumers) to pay for it, but never delivered.
And most programmers don't do either :)
I've used [mmdc](https://github.com/mermaid-js/mermaid-cli) to generate mermaid images from a Makefile. It looks like it is implemented with puppeteer, so perhaps it doesn't quite fit your request. But if you just want something you can use at the cli, it is great.
The Haskell community is admittedly less active in promoting niche concepts like zygohistic prepomorphisms, but much more active in building out a solid ecosystem. You won't hear much about the latter because it isn't shiny and weird.
I'd disagree as due to the incredibly low amount of tax paid by the ultra wealthy it looks like CGT avoidance and Buy Borrow Die is a primary use case for borrowing against assets.
A quick fix works now. It makes the next fix or change much harder because it just added a special case, or ignored an edge case that wasn't possible in the configuration at that time.
Also don't forget the cow-orkers:

Urgent message! Do you have a moment for a quick call? [It's never quick.]

Urgent message! Hi $yourname.

Urgent message! Hi, so I hit this problem where this-and-this doesn't work. Here's an irrelevant part of the logs. We need to sort this before deployment tomorrow. [After couple of these, eventually your PM tells your team to stop fulfilling such requests from other teams, and instead first ask what the billing code for that is, or if they wouldn't rather file a Trac ticket.]
Hmm sorry I meant Java interfaces, which makes this comment irrelevant and also I can't find the original supporting article - it might have just been an opinionated blog post.
You can find a selection of things you can do with ham radio in this blog post: https://dk1mi.radio/a-declaration-of-love-to-amateur-radio/
No actual C programmer who has been around the block more than halfway should do that. The mantra is: "read into a character buffer, then parse that".

It's more code, sure, but it buys you a lot of good things. I/O is hard.
Edge is Chrome reskined.
Show HN: VC Startups Aggregator
In this show, the points don't matter
Many of those machines are running Java workloads, also COBOL isn't the only mainframe language, and the best thing in terms of security is that they don't use C as systems language, rather saner stuff with proper arrays, strings and bounds checking.

That is why Unisys ClearPath MCP is still a thing, tracing back to its Burroughs 1961 heritage, security above all.
How Adobe's AI Revolution Is Reshaping the Creative Landscape
Regardless, these deep dives are so valuable in teaching yourself, they can be worth it just for that.
I’m looking for a co-founder, running https://fixparser.dev which is a profitable company with clients worldwide. Been applying to YC twice but failed - will continue the search for funding. Reach out at victor@logotype.se cheers
"they won't pay someone else to do it because it's too expensive"

This is the relevant bit. It's cheaper just to pile the old computers in storage vs doing something about it.
How does this suddenly become a problem when as the user I want access to my keys, but it isn't a problem when corporations copy my keys between them, which is what this post is about?
> This is not a security issue for anyone, least of all people using browsers.

I disagree. The smooth running and ease of automation of TLS certs benefits the entire ecosystem, including the end-users. Remember when the only sites that had TLS certs were the ones that could afford it?

> If the private key leaked, 45 days is far too long, you'd need to reduce this to hours to actually help as a revocation strategy.

This is a good example of the Nirvana Fallacy.

> And even then, chances are that the new key will leak as well right away, as it's most likely that the key was stolen by some undetected malware.

No certificate expiry control can protect against continuous, undetectable data exfiltration. Meanwhile, a one-time access that grants me the ability to impersonate you for 2 years is a significantly worse situation than one that only grants me that ability for a few weeks.
llama3.2 1b & 3b is really useful for quick tasks like creating some quick scripts from some text, then pasting them to execute as it's super fast & replaces a lot of temporary automation needs. If you don't feel like invest time into automation, sometimes you can just feed into an LLM.

This is one of the reason why recently I added floating chat to https://recurse.chat/ to quickly access local LLM.

Here's a demo:
https://x.com/recursechat/status/1846309980091330815
I think for (c), we have EPP: https://en.wikipedia.org/wiki/Extensible_Provisioning_Protoc... But I have never seen it in operation personally, having never worked for this kind of ISP.

For (b), I don't see why you couldn't install the required records using dynamic DNS, which is already widely implemented and deployed in other contexts. (It's the RFC 2136 item on the Certbot list.) It doesn't seem to be very commonly offered by DNS providers, though. It does work if you maintain the zone locally and use zone transfer (presumably with TSIG for authentication …) to publish to public DNS servers (if you don't want to run the public DNS servers yourself).

I think this space is a bit of a mess because no one is really expected to put this together themselves, rather they should get everything (mail hosting, web hosting, plus certificates) from a service provider. It's a wonder that grassroots participation is still possible at all.
We have them in america too. But every moving part comes with inflated costs for both acquisition and ongoing maintenance.
Of course you've "read most of" it. You wrote it after all- or did you ask ChatGPT to write you an anti-free software screed and only read part of it before you posted it?
Usually they will not give you the full value. Depending on how "safe" they deem the security, they might only allow you to borrow 50%-70% against it.

And most (probably all) of these forbid you from using the loan proceeds to buy more securities.
It was so funny when I asked Gemini if fluoridated water is safe, and my next question was "what should I do if there is a release of fluorine gas?"

But I didn't attempt to bring attention to the utter cognitive dissonance.
For testing: As the article says, find a doctor that has experience with it and ask for an antigen test.
The below capacity thing can be very real, supposedly a different parasite in the us is responsible for people in southern us having the stereotype of lazy. In that case it could infect you through your feet from tainted soil. https://www.pbs.org/wgbh/nova/article/how-a-worm-gave-the-so...
I would also have commented: Not supported in Finland. I think I have read articles that they tried to get marketing share, but AFAIK they have failed completely.

On the positive side in Finland you can use SIM Toolkit for legally sanctioned 2FA (mobiilivarmenne). That should be much easier to implement without having Google involved.
My wife has one and it seems too big and heavy for most things I do. Good for sheet music, though.
I love Coolify, used to use v3, anyone know how their v4 is going? I thought it was still a beta release from what I saw on GitHub.
No one's stopping him. We're just pointing out that some of the bets are clearly stupid.
One of those Go isn't for systems programming kind of projects. /s
55 days ago, 2 comments: https://news.ycombinator.com/item?id=41315927
The legacy one will run with library hooks and CPU traps.
i work full time as a developer so... 2ish?
Fun!

I just put our logo up. It took me two tries before it took, so maybe a twodollarhomepage :)

What's the stack?
That's for C++ not C
Your diet advice is great for people who don't have a food intolerance. I'm glad it worked well for you. As someone who has pretty serious - immediate diarrhoea, stomach pain etc - responses to certain foods (dairy, gluten, some alcohol sugars) cooking whole foods from scratch and supplementing with vitamins doesn't cut it. Lots of other people are in the same position. There's a lot of research about why these issues are growing - newer pesticide resistant crops seem one likely avenue - but they're real, and deeply disruptive for the people who have them.

Speaking for myself, I grew up in a home where all our meals were cooked from scratch, no fast food or 'candy', and was horrendously sick growing up due to the amount of (whole wheat, locally baked) bread and dairy in my diet. Had ulcers in my early teens, constant stomach upsets, and lots of secondary related issues.

Certainly eating poorly makes these issues worse, but I didn't grow up in a food desert, or eating an American diet, and they emerged none the less. And at a time (I'm 44) when there was zero awareness of them in the culture.

I was exposed to tonnes of antibiotics as a child - but its hard to deduce cause and effect here. The antibiotics were given because I had frequent gastric distress. Either way, I'm sure my gut bacteria are in a terrible state.
To me that is the funny thing today if you look at markets Chinese markets under it's communist system are actually freer than US. China is not interested any 1 company getting a monopoly and becoming more powerful than the government so they promote finance multiple companies resulting in a truer capitalist market than the US.
Here's some prior art:

https://wiki.archiveteam.org/index.php/Main_Page
Nvidia's drivers are semifree today.
I would also be concerned about whether you can recover when a provider becomes unusable or hostile, and there is no cooperative migration path.

That might be the company going bankrupt, a physical or digital disaster, geopolitical firewalls, or simply a Kafka-esque bureaucracy where your entire account has been deleted without appeal because the company decided it was easier than figuring out the truth behind some moderation issue.
https://www.youtube.com/watch?v=9KAGwNtI26w
I wanted to label this as a “nothingburger”, but all the pieces of advice are either tautologies, vague general dating tips (i.e. "make sure the vibes are not off"), or straight up untrue: "They want to work on this part-time", "They want to quit their job but haven't set a date to do it", "They're going to quit their job but only after the YC interview". The latter are all very context dependent and are impossible to label as a "red flag" without further information. Possibly SEO bait?
I had an awning and a pool enclosure in South Florida. So did most houses in the neighborhood. Then the 2004 hurricane season happened, and there was neither of each around anywhere ever again.
While this is true, awnings aren't that expensive, and while I don't have the knowledge to do the maths, they will earn themselves back over time with how much heat they keep out and how much you'll need to run the AC.
Internal CAs are a pain because enrolling new CAs is difficult, especially without device management. It can also interfere quite badly with product testing.

Technically, it's not required for anyone but you to validate ownership of names further down the DNS tree once you have shown control over the DNS tree further up. Maybe combine it with the public suffix list to discourage misuse by certain service providers.
>> And they won't pay someone else to do it because it's too expensive.

Its not that such entities that will correctly handle the e-waste don't exist, its that the company doesn't want to pay to have it donem esp when storage is cheap, let those containers of old laptops and towers be someone else's (budgetary) problem.
If you remove "some" and change it to mean that it is the "only" thing that conveys temporal information how does your initial argument hold? It is a tense, and all grammar books I have and see agrees that it is a tense. I am not a native speaker but I understand enough, but I get the impression that you are not a native Turkish speaker, That's fine, but then you may not have a complete grasp on something like this
Is there any phone that runs mainline Linux/upstream Debian, and is available to buy right now?

I'm sick of big companies who removed the word Consent from their dictionaries. I want something I can own and trust again. Being able to run android apps would be great, but given how closed source Android has become, I doubt that apps run on an open system would be reliable.
In the Netherlands it costs around a grand, as for maintenance... Haven't needed to do any in more than 15 years. The actual screen retracts into a weather proof metal casing, so there's not that much that goes wrong, whereas fixed awnings are exposed to the full weather gamut 24/7.

Let me put it this way: it's cheap enough that a lot of social housing and other cheap forms of housing inhabited by the "lower class" feature them.
I wonder if decision for stable syscalls was genius? Like imagine that Linux syscalls will become what C ABI is now. And there will be multiple compatible kernels, so you can choose any and run the same userspace.
.. as a parasitic face-hugger that takes acid and flamethrowers to kill.

With a twin process that attaches to search and background cross references your every action with the web "just in case" it comes up later.
DTB it's hell. A lot of devices today only work with obsolete kernel releases.
It's so ironic. Market competition is definitely intense over there.
You could get a sub-3% loan with anywhere from a 5-15% down payment without any holdings in the ballpark that is being discussed.
Got spooked by the exact quote you mentioned, but your conclusion is more precise. You're correct, this is a recipe for messing up your chances lmao.
But the real organization still exists and continues to behave in a decent manner, so it would foil their wicked goals.
LM studio is so nice, I'm up and running in 5 minutes. ty
So I wrote a DNS server for Docker Swarm
Improve performance and UX for client-side AI
While modern building materials are very good at keeping the heat out, they aren't perfect. My house was built without awnings or AC and with modern window tech, but we opted to have awnings and screens installed nevertheless and they made a huge difference in how much heat from sun is coming into the house (not to mention the bright light itself).

For my case, I think it's irresponsible to be installing AC without first making sure the house is optimized for keeping the heat out.
> 24+ hours

I'm impressed that you manage to code for more than 24 hours in one day.

(Yes, I know what you meant. It just seemed funny.)
Logs and OpenTelemetry are not at all exclusive. One downside of straight-up OTel instrumentation is that id adds a certain overhead in the form of side-requests to the collector.

Most platforms/languages have logging built in, and it's perfectly possible to emit OTel-compatible log messages (like the linked article recommends) and collect them using some agent like Prometheus.
2h. The rest of the time is spent thinking.
I use it exclusively for users on my personal website to chat with my data. I've given the setup tools to have read access my files and data
Steve Jobs has been dead for 13 years. Whatever was going to happen without him already has.
Creating a shareable profile inspired by linktree but targeted at developers
Hi everyone,

I'm building a Linktree inspired app but made for devs where you can showcase links but also your tech stack and it fetches the GitHub Stats automatically.

It's meant to be a quick link for bios, descriptions, etc.. for example : https://route2.dev/s1lvax
Well all orders need to be human processed so that wouldn't be really an issue. You would just get an order notification and when you go into conversation you will see what happened and handle it accordingly.

But also we covered similar cases so you would only get I can't help you please wait for human type of message.
>>> If this is true,

The cheque is in the post, I will still respect you in the morning,

Come on. I’m not saying new designs are Rube Goldberg machines flinging radioactive waste around, but “perfectly safe for the next hundred or five hundred years” is complete rubbish. There is no such thing.

This is not about engineering - this is about humans, how humans react in the face of profitable deals, and the history of engineering safe systems (one death or catastrophe at a time)
I find it hilarious that Apple is selling the new iphones with AI features that only works on the new devices because they apparently don't require the cloud, and instead run locally.

Apple's logic:- saving private photos on the cloud is good for privacy, while doing AI computation on the cloud is somehow bad for it ?
Took the train to Amsterdam the other day, on the way there is an apartment building where the shared hallways are on the train-tracks side of the building, it's floor to ceiling glass. Some sections of it had cardboard or even aluminium foil to try and keep the sun / heat out, that one looked like a greenhouse.

Likewise, I work for an energy company, in summer the aging AC (which they keep low because an energy company's policy and marketing is actually the opposite of what they provide) cannot keep up because there's nothing keeping the sunlight out but flimsy shades on the inside.
No.

I am saying that depending on the context I might pick Go. Or Java. Or Python. Or Node. Or C#.
Intel used to sell some embedded ARM CPU's too back in the day. They could adapt to RISC-V in few years.
> onion bhajis, potato fries

These kind of foods should be home made. Wheat is lesser issue with them.

Even simpler foods like garlic-paste, if bought ready-made in store it contains lot's of unnecessary ingredients.

People buy junk food (pre-made meal) and blame wheat.
Either they use some prediction model (accuracy of which is comparable to any 100-years-ahead predictions) or they keep hostage time travelers from 2120s.
The fallacy here is that you're assuming that doing things right takes more time.

Doing things right takes less time in my experience. You spend a little more time up front to figure out the right way to do something, and a lot of the time that investment pays dividends. The alternative is to just choose the quickest fix every time until eventually your code is so riddled with quick fixes that nobody knows how it works and it's impossible to get anything done.
The author is the science writer for El Pais and many of his articles come out in both English and Spanish (no translator credited? Maybe that's normal, or maybe he writes them in both languages at once). So I would expect him to write with a very Romance prosody in English.

This article is not in the Spanish edition (yet) from what I can tell, probably because the interview is in English, so you would need a full professional translation rather than an author translation.
Really? We FaceTime a lot with my wife and I keep telling her that I can see her looking at her own face in the corner instead or me. Is that tech accurate enough to tell that the person is looking at themselves and not the other participant, and then not correcting the eyes if that’s the case?

Anyway, I’d much prefer if Apple didn’t silently alter the eye direction of people calling me.
Even if the trees aren't shading the house directly, they will have a cumulative cooling effect; they capture the sun before it hits and warms up the ground, they have constant evaporative cooling, etc.
Meta knows it can’t be the top player in this space, their best play, therefore is to control the second tier. Ironically I think they aren’t even the best in the second tier - Mistral is.
That's a bit like saying a house fire is what makes your deleted files uniquely safe from recovery.

The sentence is true, as far as it goes... But it's uniquely excessive, rather than the unique minimum sufficient for the task.
Disrupting the status-quo is important, but having a working communication device is more important to me. If AOSP is further along towards a working phone then I don't see why we shouldn't focus development efforts on it.

It only benefits the open source market in the long run because a working device will garner wider adoption.
There really is no natural solution if you are taking medication that increases your weight. Kinda disproving your own example there.
Yeah they will have a longer lifetime than that, at worst they will start to fade with the year. But, that's UV that's hitting a consumable, instead of your house or things inside of it.
This sounds more familiar to me. xD
8 hour day, in a place with a nice or relaxed working culture that turns into 6 hours.
Minus lunch break, 5.
Minus meetings, 4.
Minus helping others, 3. Minus whatever procrastination during the day, in practice 2 hours on actual code.

I could see that going up to 5 depending on the working environment. But people answering 7+ hours seems bonkers to me, that's more than a working day!
That “third house on the right, past the old tree” is far better than you often get. Often you just get a house number, where the house numbers sometimes don’t mean anything and are scattered all over the place indiscriminately (e.g. assigned in order of building), and maybe a “near landmark”… but the landmark is half a kilometre away, and there are thousands of people living in the area. Because it made more sense twenty years ago when it was bean fields, the landmark, and only twenty houses.

If you’re the Post Office, maybe you have access to actual data (not sure), but if you’re some other kind of deliverer, you definitely don’t (there isn’t any publicly available—and even the best commercial ones are completely useless in many places), and only local knowledge will help you.
If you go for passkeys, start putting them in your own provider from the start?
Vaultwarden is a nice option.
Just as most Mercedes owners don’t really care how many horsepower the car has. It just has “enough”.
> The po box thing also has nothing to do with Google. That's just a policy largely related to the bank secrecy act.

Also some companies like mine don't accept these PO box addresses because the some carriers we use can't deliver to it.
Not everything that lasts is PFAS/forever chemicals, please don't fearmonger.
Am I right thinking that a self-hosted llama wouldn't have the kind restrictions ChatGPT has since it has no initial system prompt?
Even for non-emergency, the short amount of time before a health issue turn serious means that it's already hard for you to take second opinion.
1) They're not stable, they're regular. The point is these areas of the state space have similar outcomes if they are perturbed slightly, as opposed to the result being random

2) there's literally a plot of it in the article, and while it shares some properties with the mandelbrot set (symmetry about the X axis, is a fractal), it doesn't resemble it at all.