skysight-inc/HackerNews huggingface dataset:
Yes, I suppose that would actually be a way around the consciousness problem. I really like the memory blocker idea—if we assume that it's not 100% accurate and one or two memories can still bleed through, that would be a third explanation for (claimed) past-life memories, beyond reincarnation or them being made up. They're just memories of a previous simulation or real life, not filtered by the blocker.

Sounds like an interesting concept for a story, if nothing else.
How to unify Gemma and Whisper to build a super fast local voice LLM
I agree with your reasoning, but in this case I think the dark area might be because they don't mount LEDs on the center axle.
The phishing site will just ask you for a password, maaaaybe with some text explaining some BS reason why you can't use your passkeys but if it's a website which the user knows they have a password to, the kind of person who's prone to non-targeted phishing attacks likely won't even think to question why the passkey thing didn't trigger.
He worked for some failed startup before we got him. Our project manager who had worked with him there, brought him in and said he was a genius.

I think maybe Java wasn't his first language. But to me, not realizing that Java would have something like System.out.println was a bad sign.
Apple has a password manager? What is it called? I’m a typical iPhone/Windows user and have never heard of it.
I used to always find it _easier_ to drive at night because cars would be like little Christmas lights, and the contrast between headlights & the darkness of night made them very easy to spot; now I'm blinded everywhere I go. Haven't ever contemplated window tints but at this point it feels like I either need to do that, or get a higher vehicle. Or just not drive at night :')
You don't need to say anything. Be present: listen; be curious and caring and compassionate and infinitely patient. Watch TV together; listen to music.
> A pure function by definition is one which returns the same output for the same input.

Yes, and the input includes state. React manages it and sets it before your function runs; your function then reads those values when it calls the hooks, and it is read-only. If I adjusted the React syntax to pass in state as a function argument instead, wouldn't you agree that it is pure? It's the same! Just because it's not passed in via arguments does not mean it is not an input. And a pure function is still pure even if the caller is stateful.

Consider the "rules of hooks" in React: you cannot conditionally use a hook, and hooks must be used in the same order every time. That's exactly the same as regular arguments, making them functionally identical but with better dev ergonomics. That's on purpose: state is an input, but having it passed via function arguments would suck to use.

Question: have you written any React components? This is a basic rule that is one of the first things you learn: components should be pure functions with respect to props and state. They're not even allowed to set state as a side-effect. If you're still convinced it's not pure, can you tell me how a component function's output can change given the same props and state?

> The block of code mutating the value is executed fully before another block of code can read it.

And that's the problem: with arbitrary code, there is no such thing as a distinct "block of code". One function can read value A, set it to B, then call another function, which sees value B, does something as a result, and then it renders. But that's wrong: value B has not been persisted to the DOM yet, so it should not have been read by the second function. Now you're in trouble, because your component is behaving as if both A and B are true at the same time.

This is not possible with React. But to pull that off, they had to externalize state and make it read-only to your component.
Please don't call real events that you acknowledge "urban legends". You demean our cognitive commons with language like that, and undermine your own credibility.
Sea turtle with 'bubble butt syndrome' gets a 3D-printed custom harness
This is an intellectually dishonest statement.
Sanxingdui
The difference you are pointing to is the acausal vs causal description. In Simulink (Causal), you have to describe what causes any changes in the system. For example, to model Ohm's law, you'd write something like I=V/R. Which translates to the current obtained when some potential difference is applied across a resistor. So I is a function of V in this respect and you can say V causes I in R.

In Acausal systems like modelica, it does not matter whether you write V=IR or any alternate formulation. You simply provide the description and it is up to the compiler to obtain the relevant set of equations that can be fed into the ODE solver. The advantage being that you spend less time fitting your problem into the causal framework required by Simulink or alternates where, when you change your model, you end up doing significant rewrites.

TL;DR: Causal descriptions take more time to arrange as compared to Acausal.
I think that the competition is good for the community; it has kept me on my toes since the start!

For these other projects to succeed, they need to figure out how to create value beyond listing servers, e.g. I am doing this now by testing servers in sandboxed environments, running dependency security audits, etc. However, this isn't cheap. So whichever the projects I am competing with also have to have a financial backbone. In my case, I’m building a service—VMs for AI personal assistants—that will integrate this directory. Users will be able to one-click add any MCP to their Glama workspace, etc. Therefore, it made sense to invest into all of this infrastructure. Meanwhile, giving this to the community builds trust and interest in what I do. I see this as a win-win.
What is that based on? You don't know these people, many individuals with their own stories and needs and troubles and drives.
And if you have all my devices? And what if you have all my external security tokens? And what if you also have all my passwords? And what if you have a complete replica of every thought in my head? And what if what if what if what if...

Sure. Whatever buddy. Nothing is truly secure. If they guessed my password as well along with my device I'd be in an even worse situation. At least my PIN just disappears forever after a few failed attempts and requires that physical device.

Needing a physical device which wipes itself after a few failed attempts is more secure than having a password that could be used anywhere on any device however many times they want to guess.

> without distinction only in some scenarios. Namely offline attack to a physical device.

There is a distinction in this domain though, and it's pretty massive. Offline attacks at guessing passwords, if you fail the PIN a few times (three on most of my machines) the PIN gets cleared never to be used again. Meanwhile you can keep trying the password over and over. The account password on the device isn't getting cleared. So I can make the PIN pretty simple and easy to type in while making my regular password very long and complicated. It doesn't matter if its a pain to type in, because its not like I'm typing it in every time I walk away and come back to my computer.
"I don't know if they are just lesser musicians, but it definitely feels forced"

I think the art with that sort of stuff is making a rhythm and melody for the vocal, or lead instrument that feels natural, yet fits over the odd time signature.

There was a (slightly obscure) branch of Jazz funk in the late 80s early 90s called M-BASE that had a lot of this kind of stuff.

This track is called the X Format, by Steve Coleman, and i think it's in 13/8 time. But its always boggled my mind. It must be devilishly hard to play, but it feels quite groovy.

https://www.youtube.com/watch?v=ydjcl65R9Lg
Australian: I've used it in every social context at least once by now and I'd say it's distinctly stayed in the rotation.
You might not need a React Form Library
The service contracts that state you will support the hardware until it reaches EOL.
Funny, the only time I ever got made fun of as a southern kid using y'all was when visiting Toronto suburbs (back in the 1990s).
What qualifications?

"Government showing up at your door" has killed at least millions of people. When it shows up at your door, you should be afraid because of this historical fact.

Are you denying governments have killed millions of people?

> Another way to frame it is that "government showing up at your door" very frequently doesn't end up with billions dead.

It will very frequently turn out to be very bad news for you and/or your family if the government shows up at your door, especially if unannounced, especially if they need to tell you they're here to help. A firefighter will never have to explain to you "I'm here to help"
FastVideo: a lightweight framework for accelerating large video diffusion models
Hugginface model and data link: https://huggingface.co/FastVideo
I tend to agree @tpatek but I’m really too much of a security newb to hold a strong opinion.

What’s the best resource in your opinion for learning enough about passkeys for a lay person to make informed decisions on them?
It may cost more, but it is constant generation, and we should invest in as many carbon neutral alternatives as possible that are feasible. The fact that you have a political opposition to it because of conservative opportunists using it for their own agenda is irrelevant.
When I learned German, I started using “y’all” in English because I got used to using a plural you. I’ve never lived anywhere near the south, but once you start using it, it feels weird not to.
Hallucinations are problematic, and they're hard to defend against, if there's only one source of truth. I was surprised by the creativity that LLMs showed for the simple task of placing footnotes references, as I explain in the post.

.. But there's no harm in trying. At the very least it could be done in conjunction with traditional OCR to check for whole sentences of pure invention.
This is a super cool idea, in fact, its been a few months since I have been thinking on making something like meet.hn + findkismet.com, let the people share in which city they are and make introductions to people from the same city.

Thanks!
A happy Langfuse customer here!

We've been building an agent platform and some of our customers wanted someway to exfil OTEL traces to their own setup. Initially we tried building our own but then realised Languse does exactly what we needed doing. So we offered it as a first class integration, (and started using it internally).

Great product, and hope you guys continue to improve it!
Ciechanowski is likely the best content producer of our time, absolutely fascinating reads. Imagine having such a person as a teacher - he could probably excite students about any scientific topic.

I'd love to spend my time working on such articles when I'm retired :)
Sure, but a short numeric PIN you probably type in several times in a day is probably pretty easy to remember. And once again also far easier to type in many situations than a long complex password.

Or even better yet use biometrics instead of the PIN.
I'd guess this depends on region/demographic, but at least in my circles on the west coast, "guys" is gendered when it's used to describe or identify people in the third person, but it's gender-neutral when used to address a group of people in the second person.

So "the guys" or "how many guys" always refers to men, but "you guys" carries no implication of gender at all. I often hear people address groups consisting entirely of women as "guys", and nobody bats an eye.
so we cant create a standard that can eliminate serde part????
Probably true with a more nuanced definition of "knowing what you're doing". I'm pretty good at writing code, Cursor is faster.
First sighting of 'neutrino fog' sparks excitement, bad news for dark matter?
The notion of kitsch is ultimately an expression of disdain by the elite and the artisan classes that serve them towards common man.

The principle reason that the phenomena of kitsch -did not- occur in earlier eras (where we certainly had elites and servant artisan classes - painters, architects, musicians, ..) is that their yet existed a shared cultural context (in the widest sense including religious and ~metaphysical beliefs) between the ruling and subject classes. For example, Michelangelo's David afforded everyone access at some level to the work.

As the elite and the common man diverged in their existential outlook, this manifested (naturally) in the high culture artifacts. There has been a great deal of effort over the years to herd the unwashed :) to appreciating the art of the new masters but the peasants at most have acquiesced to respectfully holding their caps as they silently march through the galleries.

So it is important to have this periodic 'shaming' articles.
Most phones are waterproof and if your toilet holds your phone, laptops/desktops, and recovery keys it’ll also take your password vault because it’s an actually a black hole.
The endlessly repeated truism that "these studies don't prove causation" isn't really saying anything, as the same could be said for every long term human drug study. This line of thinking was the reasoning behind ignoring the link between cancer and tobacco products for decades, because the studies establishing that link were and are observational studies, considering that a controlled experimental study on humans establishing the same would be completely unethical.
It drives me nuts when these things say stuff like "doubles your risk" w/o giving the original risk. Risk doubling from 5% to 10% is not in the same universe as risk doubling from .02% to .04%, which I believe is the actual risk in this case.
Announcing Our Semgrep Rules Repository
> Does comfort beat out detail? It seems like AR, of any stripe, can do better.

No. AR is limited to one focal plane (HUD instead of full 3D), unless you want to round-trip the entire image through the goggles.
Osbert Lancaster managed to sum up kitsch interior decor well in his cartoon book "pillar to post"

Of all people, Barry Humphries "dame edna" wrote about great Australian Kitsch: sauce bottles shaped like koalas climbing branches, the innumerable kangaroo and boomerang mantel shelf decorations, and of course the "big things"

https://louellakerrbooks.com.au/book/barry-humphries-treasur...
Repo is at https://github.com/fullstorydev/semgrep-rules
Hah. Yes, --init-directory is very useful.

I think Doom is a fantastic way to get started and know what's out there. I do suggest folks to eventually dive into building their own config. Having that much control over your work surface is where Emacs and its users can really shine, I think. It's a commitment though.
Eating is 100% guaranteed to cure starvation.

Not drinking is 100% guaranteed to cure alcoholism.

Buying a house is 100% guaranteed to solve homelessness.

It's really that easy.
For mainstream people uninterested in such things, this isn't a solution, but since the question was posed to "me", one way back into digital life that is not passkey specific is https://dangerousthings.com/product/apex-flex/
presumably, it should be illegal to record a movie with with an inbuilt camera. capturing the data in such a way that an identical copy can be automatically be reproduced brakes the social contract around the way those works are shared. the majority of media is produced by large companies that are ultimately not harmed by such activities, but individual artisans that create things shouldn't be subjected to this.

we can take this a step further: if your augmented eyes and ears can record people in a conversation, should you be allowed to produce lifelike replicas of people's appearance and voice? a person can definitely imagine someone saying/doing anything. a talented person with enough effort could even make a 3D model and do a voice impression on their own. it should be obvious that having a conversation with a stranger doesn't give them permission to clone your every detail, and shouldn't that also be true for your creations?
This is one of my biggest takeaways from reading Frank Ostaseski's book "The Five Invitations". He runs a hospice center and has lots of experience helping the dying and those around them. He talks about how being present is often what is most needed.

He also has a great talk with Sam Harris that's worth a listen.
As a v0.1 it seems great. Reminds me of the jaws ad in Back to the Future 2. Mall advertising is probably the only thing it is suitable for now. As it gets higher res I could see it replacing TVs.

>It seems like AR, of any stripe, can do better.

Only if everyone in the group has AR goggles, I could see this being better for group activities where everyone can be around and reference the same "thing".
Odd that you're examples have nothing to do with firmware.
Tangentially related, but the old Official Secrets act (1920) made this exception for Journalism:

5 (5): "Nothing in this section shall apply to postal packets -addressed to any office where any newspaper or periodical is published, being postal packets in reply to advertisements appearing in such newspaper or periodical."

(the rest of the section mandates recording the origin of post or telegrams delivered or forwarded by any business)

I've always wondered what caused that exception to be made, but I've not found any historical evidence about it.
I have 3, yet having two pretty important systems where only one (a single 1!) yubikey allowed to be registered or only support phone app based MFA. (having the misfortune being made to work with about two dozens of web services, it is soooo twentyfirst century putting everything into the clouds regardless if it is a good idea or not)

I ended up disabling MFA in one case - with the most terrible flavour of implementing MFA - because f you!, they ask me to re-login on my stationary main home computer repeatedly for 'security reasons' (idiots) and I too many times end up the particular MFA gadget being somewhere else than at the reach of my hand, obstructing my efforts and workflow too often. Using computer systems are wasting efforts nowadays rather than helping, with the forcing through of cutting edge advanced 'solutions' without thinking about the broad picture (the curse of single-mindednes).

And then we did not even talk about my bank, completely different animal giving no shit about third party physical keys, yet another different way to get blocked if not done exactly as those particular fellas dreamed of in cheerful company meetings not caring collaborating on generic approaches.

MS is particularly bad and not to be trusted with their "insightful design" (it is told this way in the article, HAHAHA, funny guy) solutions f-ing up two things while pushing a marginal one through. With important ones the ratio is higher.
Yes agreed. In most regions/groups in America, "you guys" does not carry the same meaning as "a group of guys"
It depends. Are you attracted to guys?
Founding fathers on today's America [video]
> And that seems valid to me: the average quality of software today seems to be worse than 10 years ago.

You don't remember Windows Vista? Windows ME?

I think you have that view because of survivor's bias. Only the good old software is still around today. There was plenty of garbage that barely worked being shipped 10 years ago.
Been using it. Happy customer. It gave me sanity into otherwise very complex LLM infrastructure. We spend 60k+ every month on LLM calls, so having the backbone to debug when things go haywire has helped a lot.
I grew up in Texas and lived in Ohio for a year during middle school. So of course I said y'all. I'll tell you what - kids that age will laser in on anything to cast someone as an outsider, and for me that year it was that word.

Soon after moving back to Texas I regained confidence in saying the word. I think these days the only people that draw any attention to the word are non americans, so maybe it's proliferated a bit more in the last 2 decades.
Ironically, just about the only sites where it makes sense to do this as a user are... those from the financial industry, who in their infinite wisdom frequently decide to prevent autofill. There's otherwise basically no reason to ever open the password manager or to know any of your passwords.

In any case, if you have a KBA recovery mechanism, then anyone who would go dig through their saved passwords to put into a phishing site will also just enter the recovery info into a phishing site and enroll an attacker's passkey.
> This ignores that most password managers check domains/origins the same way browsers do.

No, it doesn’t. Most password managers allow you to fill passwords for other domains and all of them allow copy-paste. The people who support those users know that phishers can convince people to do that which is why they’re encouraging adoption of WebAuthn.
> A PIN grants you access to the service

Incorrect. The PIN does not grant access to the service.

If all you have is the PIN, you don't get access to the service. Therefore, its not the PIN that grants the access.

If you know my keepass database passphrase, but don't have the actual database file, do you have access to the services contained within?

And as acdha mentioned, the entire login workflow is radically different with security keys / passkeys. Its a radically different implementation of authentication with different guarantees.

Do you leave SSH open on port 22 with only password authentication? It's just the same as using SSH keys, just a difference in implementation.
You might want to learn about the "demographic transition". If it really is only about culture, what do you suggest we should do? Ban contraception? Require women to have at least two babies each? Endoctrinate the youth into wanting to have children? I can't think of a single thing that is not f'd up.
Better by design: Why human choices matter for return predictions via ML
Canadian laws are written in fairly plain language. This is partly for accessibility purposes, and partly because they must be duplicated in both French and English and mean exactly the same thing.

Where laws and regulations get complicated is when they are referring to other documents. The Canadian Parliament has done a wonderful job creating a user interface for the different iterations of bills, and linking them to video and text of the debates and votes. https://www.parl.ca/legisinfo/en/bills
What makes it better than any other rotating LED matrix POV display?
This is only true if you think that every voter hinged their votes on road safety, or were even aware of their candidate's stance on regulations.
On an embedded system out in the field? Depends on the use.

On your prototype devkit? Absolutely.
People in some parts of the UK say "yous" for second person plural. So it isn't quite gone.
There's several directions you could take.

I was a full stack engineer most of the 2010s then took some time off to pursue my own venture. Now I'm working as a backend engineer. It's a nice change.

If you have any interest in app development, you could pick up Swift or Scala (or whatever is used for Android development) and move in that direction. Conversely, Mac/Windows/Linux desktop apps is an option.

You might look at changing into more infrastructure roles.
Do you recall that definition or have a link to the doc?
Apple has had a password manager baked into iOS for 11 years now. It was initially called iCloud Keychain and buried in the system settings, now it's been broken out into the "Passwwords" app as of iOS 18. There are extensions for Chrome to use the app on Windows PCs as well.

https://support.apple.com/en-us/120758
That’s why I didn’t use it that way. I used it to describe your belief that law and medicine are arcane primarily for the purpose of gatekeeping.

“Wild” is the most generous word I could come up with, sorry!

Is software engineering arcane for similar gatekeepy reasons or is that for more legitimate reasons?