skysight-inc/HackerNews huggingface dataset:
Even limiting the scope to MP3 at the same bitrates modern encoders are much better than what we had back in the 90s.
No, you don't understand the definition of "eye contact". Contact, by definition, is when my eyes meet yours directly. It takes two to tango, and to maintain eye contact, it is necessary for both of us to cooperate.

The camera is the eye. Anyone seeing video of me is seeing me through the eyes of a camera. Therefore, to "make eye contact" I look into the camera, not into arbitrary pixels. In videoconferencing, it's wholly irrelevant where my audience's eyes are located, whether they're even visible. In videoconferencing, our cameras are the eyes, and that's how to make eye contact, because when I see you on the screen looking into the camera, your eyes are directed towards mine seeing the screen.

For over a hundred years, any subject of a camera has known that if you look into that camera lens, then your gaze will be perceived as "eye contact" to any viewers. Where do you look when you're taking a selfie? Or a wedding photographer is taking your photo? Do you look in the photographer's eyes? Do you stare at his flashbulb? That's fucking nuts!

Why is this so hard to understand?

If AI is directed to help us lie about a particular, very human, interaction cue, then is it any surprise we're a world full of autists and Asperger babies?
There's a Discord where people are sharing ideas on sourcing and modifying the kiosks. https://discord.gg/ZNXy722W5t
Priorities. Games need content and performance. Give game developers more budget, and they will work on making the game faster, fix game breaking bugs, and add content rather than make the game less exploitable.

And cheats do not always rely on exploitable bugs. A bot using screen capture and input device emulation works at the OS level and in other contexts (ex: accessibility), it would be a legitimate thing to do.
You do realize that this is exactly the kind of feedback that people who are tired of the 'vote blue no matter who' refrain have been giving for years, that has been ignored.

Like the people who are getting voted for need to actually turn around and justify the vote we're making for them. And they've been failing to do that, and pointing to the thing that is clearly worse as a reason why they don't have to do better.
It can happen in days sometimes.

0: https://www.ign.com/articles/final-fantasy-14s-latest-raid-s...
Julian,

I know that on the Internet the demand for sources can be a preemptive concern when structuring an argument.

However—please—there is no need to resort to large language model applications in order to support your subjective claims.

You can do this on your own, son. If the machine can find it, so can you! Take your time, think things through. What you're saying would sound more reasonable in your own words.
Look at what Germany did to itself. How long will that damage take to repair?

The anti-nuclear wind/solar proponents are dangerously wrong.

We need to clearly explain why wind and solar are not enough, and why nuclear is complementary. We need to explain it so everyone can understand it.

We must not allow what happened in Germany to happen elsewhere.
As someone who was archiving a doomed website earlier today using wget, I was reminded that really need to get ArchiveBox working...

I used to rely on my Pinboard subscription, but apparently archive exports haven't worked for years, so those days are over.
> They're terrorists so nothing applies.

"Nothing"? So not even basic human rights? Or what are you saying?

Also both Hamas is de-facto the government of Gaza, and Hezbollah is kind of a "state within a state". They do terror attacks, yes, but a lot is also just about the boring business of running a bureaucracy.
The PS4 and PS5 have been jailbroken numerous times, but...

1) Their secure boot implementation has never been broken, which means you can't upgrade from an exploitable version N firmware to a non-exploitable version N+1 while persisting a backdoor like you could on older systems like the PS3. You're stuck at version N until another exploit is found.

2) They rotate the crypto keys used for online play with every new firmware so they can easily lock those old exploitable firmwares out of online play for good, even if they try to spoof their version number. There's no getting around not having the new keys.

Meanwhile the Xbox One took a decade to get even a limited jailbreak that allows arbitrary code execution inside the game sandbox, but can't escape the game sandbox to take over the kernel, and the Xbox Series systems have yet to be jailbroken at all on any firmware.

Hypothetically being able to break anything with physical access doesn't count for much in practice if the thing you want to physically attack is buried inside a <7nm silicon die, doesn't trust anything outside of itself, and has countermeasures against fault injection attacks. The Switch may well be the last big victory for console hackers, the writing has been on the wall for years now.
This is entirely within the realm of the judge to do. They do it fairly frequently as punishment to people who bring bad law suits and lose.
Ahh, okay, glad to see they've updated the process. Previously you had to call and find your way through a maze of disinterested people putting you on hold.
In many of the enterprise orgs I've worked in, the two tech teams that are chronically understaffed are 1) info sec, 2) DBA/ data architecture/ data science. I'm lumping those 3 together on purpose, because they're always understaffed and typically not empowered to build anything.
I recall reading that in early versions of Maclisp, taking the CAR or CDR of NIL worked differently: Taking its CAR would signal an error as you would expect, however taking its CDR would return the symbol plist of NIL, as internally the operation of CDR on the location of a symbol would access its plist, and that's how it was commonly done before there was a specific form for it (and it actually still worked that way into Lisp Machine Lisp, provided you took the CDR of the locative of a symbol).

Apparently the behaviour of the CAR and CDR of NIL being NIL was from Interlisp, and it wasn't until the designers of Maclisp and Interlisp met to exchange ideas that they decided to adopt that behaviour (it was also ostensibly one of the very few things they actually ended up agreeing on). The reason they chose it was because they figured operations like CADR and such would be more correct if they simply returned NIL if that part of the list didn't exist rather than returning an error, otherwise you had to check each cons of the list every time. (If somebody can find the source for this, please link it!)
"A lot" is really subjective, so I'll link this chart instead:

https://assets.solar.com/wp-content/uploads/2023/01/Carbon-f...

I'd say 1-5% of coal is pretty good.

Also as we make the power grid cleaner and switch to electric vehicles, the CO2 used in manufacturing goes down.
One gotcha to add:

Remember to turn off the AVP between charging it at home and using it on the flight. You do this by "choking" it, i.e. pressing both buttons physical for ~10s, to bring up the "Power Off" dialog, so it's really not obvious.

I once had my AVP completely discharge between charging it one night, and wanting to use it on the flight <24h later. I'm guessing that the motion from the packing and trip to the airport was constantly waking it up, draining power.
Since you're still working on it, have you considered this edge-case with floats: if a float is added long after the last breakpoint, and the current line grows long enough that it (with the float) reaches the right edge, do you take that breakpoint (and thus the float that came after moves to the next line due to the rule that a float cannot be put higher than its occurrence in the flow), or "defer" the float to the next line, freeing more space on the current line? All the browsers I've tested recently seem to do the former, but if you read the CSS rules for floats carefully, the rule that says floats are to be placed as high as possible suggests that deferring the current float, and thus possibly allowing more content on the current line, may result in future floats being higher than if the current float was not deferred, despite the current float ending up at the same height.
You would need to ban random people and see how many of them report it to estimate the real amount of such errors.
I get your point, but the issue with PH’s new algorithm is that it tends to feature only certain products, regardless of effort. Simple Lister isn’t about making things easier, it’s about giving everyone an equal chance to be seen, no matter their resources. It’s about fairness, not lowering the bar.
Same here. I use the Honeywell Saf-T-Fit masks, with the exhaust, either N99 or P100. They have a soft cushion where it touches the face and I find it's far superior in comfort on long flights to masks without the soft inner part. A little more expensive, but I'll never fly with a regular N95 again.

https://www.amazon.com/Honeywell-14110404-SAF-T-FIT-Particul...
> regulatory body straining at the limits of its remit

The FTC's establishing laws make "unfair or deceptive acts or practices in or affecting commerce" unlawful and give them power to regulate that. It doesn't seem to be straining at the limits of remit to rule that making it hard for people to end a subscription is unfair/deceptive.
For this to be practical, there needs to be a way to enroll non-present devices. Which is technically feasible, but there's no real support for it yet in the standard or in the available implementations. (e.g. with SSH you can have a list of the public keys of all your devices). That would make e.g. passkeys on a HSM more feasible, since you could enroll your backup in a safe whenever you create an account with your daily driver one.

(The added bonus security feature being you could revoke your daily driver if you lose it, while retaining access to your backup. But again there's no actual support for this kind of thing)
It's just a specific case where Discord refused to comply with a second subpoena from a particular Korean company. The article's title makes it sound like a general thing.
> a student was caught cheating on their project, admitted to such, was punished, and now the parents are suing the school in an attempt to salvage their child’s academic reputation

To be fair, the question is whether the student handbook's definition of cheating covered using AI.

Of course, the kid is almost certainly already rotten, given his parents couldn't find a better way to resolve this.
They didn't add a comparison to Qwen 2.5 3b, which seems to surpass Ministral 3b MMLU, HumanEval, GSM8K: https://qwen2.org/qwen2-5/#qwen25-05b15b3b-performance

These benchmarks don't really matter that much, but it is funny how this blog post conveniently forgot to compare with a model that already exists and performs better.
I'm wondering if the country he was living in doesn't do an endoscopy + biopsy when checking for celiac?

He should have come back negative on that.

My wife and son have Celiac, and I've been tested that way after an incident 15 years ago a lot like the patient in the article.

At the time the doctors were absolutely saying they wouldn't use a negative blood antibody test to determine a negative diagnosis, they wanted the biopsy.

I got tested for Giardia too. My symptoms started after a hiking/biking trip.
Ask HN: What are the rules on age verification for websites?
Are there spelled out rules for how to do age verification or what's necessary to have a user agree to. It just seems like every site except HN asks your permission for cookies. I have a site that is 21+ themed, but nothing for sale and not adultxxx. Just pictures of (legal for me) plants. I've tried to google it and I have found some answers, but I am reluctant to trust the AI answers I found. Any guidance is appreciated.
I think we should go back the early web idea and just fractionally charge for email.

E.g. $0.001 per email, paid to the recipient

Insignificant at personal scale, but a deterrent to sending low-value emails at mass scale, and double-painful when an unbalanced flow (i.e. a spammer who receives no organic email coming in)
Linux on laptops is lots of fun, last one was getting UEFI to even acknowledge there was anything Linux related on a SSD.
So I'm getting these emails from the KamalaHarris campaign. They're signed by the domain as well. I've never given money to the organiation, I'm not connected with their party, I've never signed up for the campaign, or interacted with them. However, I'm constantly being put on their mailing list soliciting for donations.

I've seen how the campaigns pass around email addresses without consent. (Mostly from ActBlue) So I'm concerned about validating an email address via unsubscribe.

I've reported this to abuse at sendgrid, and now sparkpostmail. They're shopping for email services.

Proof of org spamming:

Authentication-Results: mx.google.com;
dkim=pass header.i=@e.kamalaharris.com header.s=ak01 header.b=kJamWIyP;
spf=pass (google.com: domain of bounces@bounces.e.kamalaharris.com designates 168.203.32.245 as permitted sender) smtp.mailfrom=bounces@bounces.e.kamalaharris.com;
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=e.kamalaharris.com
> GP misunderstood

I don’t think it’s fair to claim the weights are available if you need to hammer out a custom agreement with mistral’s sales team first.

If they had a self-serve process, or some sort of shink-wrapped deal up to say 500k users, that would be great. But bespoke contracts are rarely cheap or easy to get. This comes from my experience building a bunch of custom infra for Flux1-dev, only to find I wasn’t big enough for a custom agreement, because, duh, the service doesn’t exist yet. Mistral is not BFL, but sales teams don’t like speculating on usage numbers for a product that hasn’t been released yet. Which is a bummer considering most innovation happens at a small scale initially.
They're perhaps not required to gather explicit opt-in consent, but my understanding is that they'd be required to disclose what information they collect/store.
So if they are dumping data out of old crufty databases and into Palantir's datastore, which one is the active database going forward?
In 2024.
It's not particularly impractical for SSH: have a text document with the public keys of all your devices, and copy it into the authorized keys for any system you want to log into. Passkeys don't have an analog for this, though.
Waiting in line is not the problem.
Why pay for the game when you can go to an onion site that will sell you hundreds of compromised accounts that own the game for a fraction of the price?
> This still leaves you wide open to cheaters using mobile data tethering and proxies

Is latency going to be good enough on mobile data (especially if they're also using proxies) for a FPS, though? Sure, they're using cheating software, but I wouldn't be surprised if the software gets the information it needs to cheat too late often enough for it to be useful.
Good thing that two decades before the Gauge Act there was the standardisation of the imperial units in the Weights and Measures Act. In the 20th century then the whole yard/feet/inch shebang got longer by a very minuscule measurement and then got redefined in meters.
Did you notice how closed captions generated from videos became really good? Did you notice that machine translation became usable for everyday tasks? Did you notice that you can direct your phone at an inscription in a language unknown to you, and get a translation put at the same spot on the picture, and an explanation of it read aloud to you? Does it make your very real life easier?

All this stuff used to be high-end research with unstable and hardly usable results like 10 years ago.
The Metadata Anonymization Toolkit (2012)
Now run that in comparison to building and decommissioning a nuclear power station
Where did you get the email addresses from?
It is by necessity; at the very minimum, you’ll need an OTP via email, since you need an out-of-band method of identifying the user during the registration.

I actually built a small web application that’s entirely passwordless, and it works really smoothly. I don’t get the antipathy towards Passkeys.
In the 13 years since your experience, airport security around the world has had time to be extremely blasé about most electronic devices.

That said, security rules vary from airport to airport. SFO with TSA Pre is practically a no-op, but CDG security requires that you remove from carry-on any device with a >20cm dimension!
Her big funders are pushing for Khan's removal (e.g. Mark Cuban). The big issue that these people have against Khan is the blocking of mergers that's a big source of bonuses for Wall St.

Obviously Khan is out if Trump is elected.
How is Zscaler an underdog of the day? This doesn't seem fair from the start.

https://finance.yahoo.com/quote/ZS/key-statistics/
How do you propose political engagement could work if nobody were willing to provide contact details?
The FTC has the power to make rules about "unfair or deceptive acts or practices in or affecting commerce." All the lack of Chevron deference means is the courts are more willing to step in to decide whether or not a rule falls under that. So in this case it makes it harder for FTC to fight a hypothetical NYT lawsuit, but far from impossible.

In practice abolishing Chevron deference mostly means rules will follow the politics of judges rather than the current administration. TBH I think this rule is far enough from the culture war that it will probably stand anyway. Unless the NYT happens to buy the judges a lot of vacations...
I think they're just a usb-c monitor, so no reason it wouldn't.
TFA: "But doctors never definitively diagnosed Johnson with celiac disease. His doctors wanted to do a biopsy to get a definite answer, but that would require eating gluten again, something Johnson wasn’t willing to chance"
> Of course here the modification is extremely simple so some concludes this is a nothing burger

But still a modification.
It's really unfortunate that they decided for an ios variant instead of a macos variant for the vision pro. Even if the power of macos (a real filesystem and the software library) is hidden behind a 'expert mode' or some shit.

I want to replace my macbook, I don't want to replace my ipad. I can't work properly on my ipad unless i'm using it as a dumb terminal. And at the price point of a macbook that's what it should be replacing.

People may point out that i can use it to mirror my macbook screen.. but now i'm paying 2x to replace a screen. I think this is a primary misplay in he vision pro strategy.

Give me a windowing system that lets me place windows, not in a little box that is essentially a virtual monitor, but wherever i want in my immediate vicinity. Let me put my goland/ide window front and center, let me put a terminal to the left, and my music player above.. whatever.

I'd take a vision pro with much of the compute hardware stripped out but that I can tether to a macbook via usbc/thunderbolt as well.. just not an ipad strapped to my face.
Presumably it (would have) been re-uploaded after a scrub.
The Meta Quest 2/3 finally fixed that a few months ago [1], where you "tilt" the horizon of the entire OS [2]. So it doesn't matter if an app doesn't support it -- you can lie on your bed and watch a screen directly above you even if it was only designed for horizontal use. It's a game-changer if you have back/neck problems.

Does the AVP not have something equivalent? To be honest, I was surprised it took Meta so long to get around to implementing it.

[1] https://www.engadget.com/you-can-now-lie-down-while-using-a-...

[2] https://www.meta.com/en-gb/help/quest/articles/headsets-and-...
In one of the things that I do in my job, I run the auth system for a fintech, and passkeys are an incredible step forward for the typical user. Being able to migrate your passkeys between providers is a great step forward, I'm glad this is being implemented.

Lots of complaints about passkeys and "big tech paternalism" in the comments here, and frankly I don't think ya'll deal with the middle of the bell curve user base that much.

I've got users who, by literally no fault of their own, are being social engineered into reading back their SMS OTP codes to fake tech support. State of the art in industry is basically trying to understand every action that is happening on a device (via mobile phone network providers, location, their actions across multiple other sites, etc. etc. through vendors providing this type of intelligence... by vacuuming up all your data) to understand if fraud is happening by seeing if you can even trust the device that is getting the SMS. Every time we make a step forward in privacy, this gets harder and harder (fingerprinting devices is basically pointless now, so how do I tell if this should be a trusted device or not) so there is a driving force against improving user privacy coming from these vendors.

Passkeys are the first positive step in auth I've seen in a decade that the average user will pickup and use, it helps them login and helps them not try to set a weak password they shared with multiple sites, and they can't read it back to a scammer who is fake tech support.

Would I like passkeys to be more like ssh keys? um, maybe but I don't care about it one bit in practice. I use passkeys for everything I can and I've never once seen friction. The average user does not want to deal with backing up their passkeys or even thinking about them, heck most of them don't. If anyone in the comments doesn't like the implementation of webauthn, suggest changes to the spec and do the work to get it implemented instead of complaining about it in the comments.
I very much liked this essay, and the HN comments are clarifying too. Recommended.
P2G isn't actually horrendously expensive compared to nuclear power, it's just horrendously expensive to regular old natural gas.

Power to gas for the "worst case scenarios" would also be the last thing you'd do to transition a grid from 97% carbon free to 100% carbon free.
At this point the benchmarks barely matter at all. It's entirely possible to train for a high benchmark score and reduce the overall quality of the model in the process.

Imo use the model that makes the most sense when you ask it stuff, and personally I'd go for the one with the least censorship (which imo isn't AliBaba Qwen anything)
Be Using an RSS Reader
The same thing has happened to me with political donations. Every day I receive an email from a different candidate. It is like whack a mole.
I think GP's last line covers it. It's the same reason why DRM is ultimately ineffective, and why even companies that work hard and spend time and money to secure their infra still sometimes get popped: the game devs have to be perfect 100% of the time, but the cheaters only have to get lucky and find a flaw once.
Almost all tech acts as surveillance. Anything that records an IP address or GEO data is surveillance.
I think you and I fundamentally differ on this point then.
> My personal code isn't licensed, so there is nothing that stops you from doing that if you get your hands on my hard drive

This is not true. You can't redistribute someone else's IP without a license from the owner.
If you generate 25x more images, you can afford to cherry-pick.
Not arguing against you, but - as can wind and solar at times of excess generation.
Have you (and I wonder the same about archive.org) considered making a Merkle tree of the data that gets archived? Since data (including photos and videos) are getting easier to fake, it may be nice to have a provable record that at least a certain version of the data existed at a certain time. It would be most useful in case of some sort of oppressive regime down the line that wants to edit history. You'd want to publish the tip somewhere that records the time, and a blockchain seems to make the most sense to me but maybe you don't like blockchains.