skysight-inc/HackerNews huggingface dataset:
Just to add to your explanations:

1. Passkeys contain the username and the domain of the service that you have registered with

2. Because passkeys contain the domain, it provides very strong phishing protections, because a look-alike website still has a different domain.

Passkeys are resident keys. They take up storage space, which is a problem for dedicated hardware tokens which usually have limited storage space. A much nicer solution are non-residential keys that get recomputed on the fly based on the domain name that you want to authenticate against.
No and that is actually a key advantage that makes them almost impossible to be stolen or phished.
Do you have a source for this? As far as I know, it's at best a legal gray area. I believe in most cases you'll still be held in contempt of court for not producing secrets needed to access information which the authorities have a warrant for.

Additionally, it's a bit silly in the context of email since the authorities will obtain it from the service provider anyway.

That said, you can still add an encryption key to your phone and you're back to "knowledge based" with the additional caveat a thief would also need the hardware as well.
Also don't leave for later things you can do today.

I lost family members the day after having phone calls, or planning stuff to do together the upcoming weekend.

Leaving something to do later instead of now, that later might be too late.
A grounding in statistics shouldn't be needed to see that taking a scoop of mixed beads is likely to be mixed beads.

A variant of Gell-Manning amnesia arises when real managers see this demonstration, go back to their real jobs, and think "of course, my team's processes aren't as stochastic as that."

But then again, managers are also beads.
Modelica is is in wide use in many industries, just not yours apparently. This is kinda like linking to Java or C++ and then being surprised it doesn’t have a top level intro explaining how to use it.
Cars reveal a lot about this but it's not really specific to cars. Ad-ridden "smart" TVs, etc. The hacker mindset is not really special nowadays as everybody recognizes dumbing-down and cheapening in technology. Hackers used to like having an OS with a `sysctl` for every little tunable for the same reason that anybody should be able to change the spark plugs or battery in your car without spending an hour removing two cowlings and an air intake hose because everything is so tightly packed. My 2014 model car has two separate LCD screens for the driver, yet somehow the interface to deal with a problem is still an idiot light, or wipers waving out codes, and me borrowing somebody's OBD2 scanner. Resetting the battery management system, or the oil change involves obscure codes like pressing pedals or switches in a certain way as if I am trying to open a drug courier's secret compartment, and even then, I do not even have an option of knowing what the oil change interval has been set to. Forget about anything like a live readout, or talkback to my key remote so that I can know that my engine has started. It's these kinds of design issues that are presented as condescending black boxes. It is insulting when Python is taught to schoolchildren now. These things should be performed with care to completion in the face of economic pressure.
I had spotted that, although thank you for pointing it out, it is indeed relevant.

My experience is that support can, under certain circumstances, be over-rated. Depending on your use case, of course.

If it's an Android-based phone with no support, and if you're not obliged to run specific mainstream apps on it, you can still keep them going for years and years with the magnificent F-Droid.

Source: just moved off of the Galaxy J-2 Prime I'd been using for maybe 5 years, and I'm not sure if it was supported even when I originally bought it, around 2019... I was on Android 8, or 6, or something ridiculous, I can't recall now.

With F-droid, and absolutely never logging in to a Google account, and deleting and disabling everything I safely could, and a couple of APKs like Signal, and some very judicious memory usage, I'd a functional phone, and learned a lot too.

Only moved off it because a family member got a new work phone, and was just going to not use the old one. Yoink!
> Other targets are possible, like GPUs. I don't know anything about that, so if you are interested and think you can contribute, please don't hesitate to contact me.

The freestanding macro suggests most of the heavy lifting is done. Stuff the GPU targets will struggle with in no particular order:

- setjmp / longjmp

- signals (if used?)

- threads

- fast alloc/free

- stack will be smaller than chicken expects

I don't know how to do signals. The rest are merely difficult.
I would call the code CHICKEN generates for "direct style" not "natural".
(I know - it is a cop-out to use "natural" in quotes)

Regardless of what we call the style, it isn't simple any more.

For people interested in the internals of Chicken Scheme (I suspect sctb already knows):

https://www.more-magic.net/posts/internals-gc.html
> American companies and utilities announced 30 reactors. Britain announced ~14.

Lots of projects get announced, they aren't meant to be promises.

> The end result of what we broke ground on is 3 cancelled reactors, 3 reactors which entered commercial operation in the 2020s and 1 still under construction.

So there are three operational reactors and another one almost ready. I'm surprised we got that after Fukushima.

> Today renewables make up 2/3rds of global investment in the energy sector.

So we should not invest in anything else?

> Steam locomotives technically work, but are like nuclear power uncompetitive.

This is a terrible analogy.

> Lately nuclear power has caught the imagination of conservative politicians as a method to delay the renewable disruption of the fossil industry and have an answer to climate change.

People who have been advocating for more nuclear power should stop because it is a conservative issue now?
Back in the day I had my running PB’s and current times in an Excel (financial ey) comparing them with the line of the world records. Worked pretty spot on. Better 5k leads to a proportional gain on the longer runs. Never beat the 50% slower mark on any of my times. Nowadays with VO2-max, HRV and other measures personal predictions must be getting easier. Although my Garmin watch thinks I’m world class VO2-max, which is a joke.
Is there a fallback for when the respective cloud services are unavailable?
Ask HN: Living room video conferencing for older adults
Hi HN - I'm looking for suggestions that will allow me to video conference with aging parents as easily and naturally as possible. Ideal solution would have little configuration, easy to answer, and would allow us to chat using a living room TV and webcam with auto-tracking. Ideally multiple people at each side could participate. Using mobile phones and WhatsApp is getting tiring and isn't a very natural conversation. Thanks for any ideas!
This is neat, but it's weird how such trivial things (in this case "a coroutine has a smaller context switching overhead than a thread, though it often is only relevant in synthetic scenarios with the tiniest quanta") now merit "a paper". Professionally delivered in PDF form with loads of citations.

I think this is a side effect of the arXiv AI-paper explosion where everyone is "publishing" "papers" on such prompt engineering magic as "delimiting my letters with spaces made it count them slightly more accurately", etc, this stunning piece of research having a dozen authors across three educational institutions and two corporations.
When you write for PyTorch and make it go fast it's easy to to optimize the high level model and the architecture towards CUDA and Nvidia chips without even knowing it.

Nvidia has made the choice where everything works with CUDA and is optimized to run CUDA fast. It also restricts their design choices. Unless AMD and Intel make similar commitments, they are always little behind in performance and reliability.
Im not saying the burden of proof is on you. I'm not saying murder is legal.

I'm saying that making sarcastic comments suggesting that MPs deserve to be murdered or threatened isn't acceptable.

Its a completely separate issue from the law theyve introduced, which as I said, I'm not in favour of, and I agree they need to make the case before they remove your toilets, I've already made such a comment elsewhere in this thread.
I’m just a lay person in this, but aren’t we in an era where you can image anything on the surface of the earth and hit it with a missile? Seems like if you are going to use a sub to find a ship to shoot it with a torpedo, you might as well use a satellite to find a ship and have something hit the ship from orbit and not have to send out a sub with 200 people on it to do so. Could do it all from a bunker on shore. Or maybe I misunderstand how easy it is to fire arbitrary missiles or scan the sea with satellites.
Locking people out of their accounts is pretty much a worst case scenario. It's so bad that services with passkeys generally don't want to risk it, hence the knowledge-based recovery options. Which makes passkeys mere convenience rather than extra security.
Nah, it's all a gentlemen's agreement, given Roe vs Wade, if you want it enough you can bend it the way you want.
> Prusa (IIRC) had an interesting solution where you had to break off a physical piece to void your warranty in order to try different firmware.

I'm not sure this would hold up to a legal challenge in the USA. "Warranty void if removed" stickers are illegal, for example: https://www.ftc.gov/news-events/news/press-releases/2024/07/...
Are USB, HDMI, and Ethernet really the ports you want for your embedded system?
Grammarly has been having an identity crisis ever since LLMs made grammar checking accessible to every company at a fraction of the cost. ChatGPT is killing a lot of companies and grammarly was the first collateral.

This acquisition is concerning because Grammarly is well known for its bad privacy policy and how it's essentially a keylogger. Now that it has access to probably thousands of companies data hosted on Coda is a huge red flag to Coda users.

However it's high time Grammarly evolves itself into some other product or die trying.
I found this out in October when trying to figure out this complaint.

timcappalli from FIDO Alliance mentioned in that above thread that plain text exports shouldn't be allowed, and that password managers/providers should be blocked if they implement plain text export.

Since that thread, there's a new spec that allows users to securely migrate passkeys from one provider to another, but no way to export to plain text (for debug purposes, or if there's a bug in the export/import and you need to troubleshoot, etc).

For me, threatening to block providers for implementing a feature that I desire is a great way for me to lose all interest in passkeys completely. I don't trust FIDO Alliance to make the right call nor do I trust big tech companies to produce bug-free software.
every time i have cause to go and check the text of a law in my country, i'm always a bit surprised about how understandable it actually is. there's the reputation for legalese, but, for example, this is perfectly legible to me, a person with no legal experience

https://laws-lois.justice.gc.ca/eng/acts/P-21/page-2.html#h-...
Show HN: A better way to inspect and test AI Agents traces
Hi everyone! My team and I just open-sourced a bunch of cool agent dev tools: Invariant Explorer to visually inspect and understand AI traces and a testing framework, building on pytest.
Space-based solar power contains little intrinsic advantage that we can get “only from space.” It looks like a wash at best, and the astronomers would say “don’t bother.”
https://dothemath.ucsd.edu/2012/03/space-based-solar-power/
It should be a non-goal to prevent users from making mistakes in ways which harms everyone.
> once something is no longer being manufactured (hardware) or sold and supported (software), it should be entirely open sourced by law.

There are a lot of practical barriers to this being that simple. A couple of common examples:

1. Third-party dependencies are a thing. Many pieces of hardware or software contain pieces of other hardware and software from other organizations, and the end vendor may frequently not even have the right themselves to open source them.

2. Many products are abandoned when businesses fail, in which case, there may be no staff to open-source them.
I in fact do this with Bitwarden on a daily basis.

It works ok!
Wholeheartedly agree. It bothers me how overlooked it is. Completely insane how well they captured the unique spirit and voice of the comics (read all repeatedly when young).
I don't know what to believe, long or short term; I'm just speculating based on what I perceive to be a majority of software job opportunities and hypothetical immediate impacts.

My basic conclusion is "they seem quite good (enough) at what appears to be a large portion of 'Dev' jobs" and I can't ignore the possibility of this having a material impact on opportunities.

At this point I'm agnostic on the future of GenAI impacts in any given area. I just no longer have solid ground upon which to have an opinion.
FTC Action Against Grubhub for Harming Diners, Workers, and Small Businesses
That is such an admirable and honorable cause. May God Grant you Success.
As a big fan of both the Moon and ciechanow.ski this article is right up my alley.

During the 2024 solar eclipse I was explaining to people how an eclipse must occur during a new moon, and this article would have really helped. The discussion also made me realize how little most people spend thinking about the solar system and the relationship between the moon, sun, and earth. These things fascinate me (I think it's just the sheer scale of it all), and I hope to be able to get more people interested as well. The solar eclipse was great for that!
Setting aside the question of how we should evaluate content for being “in the public interest” and assuming the programming is as valuable as it could possibly be

How many people still tune in via OTA antennae? How does the value of broadcast TV compare to other possible uses of that RF spectrum?
I don’t really like him as a person, or really his political ideas, but yes. One cannot deny that he was willing to make sacrifices for the good of the country.
After 19,314 lines of code, I'm shutting down my project
It’s comparable to and depends on selectivity of the query, like any database index. On a 10TB tpc-ds web_sales with 1:150 selectivity, we see an impressive 95% gain.

If the query fetches out most records for e.g, then gains will be lower
> What makes you so sure that none of the resoundingly non-crap that you have reviewed was not produced by LLM?

From the post you're replying to:

> Obviously we can't sample from unknown-authorship … nor am I; I'm sampling problems that I and others run through an LLM, and the output thereof.
Btw, glad I am not the only one making a mental note of someone being a "ferengi". It is such a perfect description somehow. And our industry is full of them.
Rust is a lot better than Python to run ML in production
Python Docker images with CUDA, Python, Pytorch,... are 5GB to 10GB of third-party code. Here is an example of bringing this down to 1.13GB thanks to WasmEdge, 10MB of LlamaEdge API Server [compatible with ChatGPT] and 1.17GB for TinyLlama.
32.9% not voting against you doesn't mean the remaining approve of you.

https://projects.fivethirtyeight.com/polls/favorability/dona...
You guys just saved me a lot of trouble. Amazing work everyone wow.
From the HN pushback I think this will end up like IPv6. I get to have nice things and some others likewise - many people get to repeatedly say "Nice things are impossible" and roll their eyes. I guess they're having fun in their own way?

It's nice when we build a non-brainer technology which gets adopted at scale by default, as happened for TLS 1.3, or even when other motives overwhelm the instinctive conservatism (e.g. Let's Encrypt) but that can't always happen and it looks like for WebAuthn the conservatives are going to stick by passwords "From my cold dead hands" etc.

One problem with HN in particular is that there are a lot more decision makers here, so more people whose conservatism means they're going to build, promote and demand worse solutions since the better option is in their minds impossible. That's unfortunate, it means there's a good chance that over the next years I'm going to be using more important services which have terrible authentication on account of somebody senior said "Passwords are good, we should require passwords" and anybody disagreeing was hushed or worse fired. So that's not great, but it is what it is.

Anyway, for the few people who get why this is a good thing but understandably don't trust Microsoft (or Apple, Google, Facebook, I dunno, Epic Games?) I have a suggestion: All of this technology also works fine with a Security Key, which is a thing you can buy from Yubico (or several other outfits, but Yubico is easiest if you have no idea what you're doing) for like $25. And if you - like me - use Security Keys those "But what if I lose it?" questions can be answered by Technology Connections' favourite: The magic of buying two of them.
Yes. Indexes are integrated into reads, with (near) standard SQL for managing them
So they couldn't convince everyone to give up their privacy and use Facebook or Google to track our logins to other websites via "Login With", and this is a new way?
Some people have different views on what’s an embedded system, but hardware serial, USB and Ethernet are tablestakes for interfacing with any most industrial hardware or for robotics uses.
A friend described software engineering as wizardry, in the D&D 5E sense - you study the arcane systems that underpin the modern world, learn how they worked, and then learn how to manipulate them to affect the world in the way you want - and described lawyers as clerics: you learn how to appeal to the gods (courts, cops, the myriad powers of the state) to cause those powers to intercede on your behalf, mostly by learning the phrases and chants that impel those powers to act.

(And I suppose in that taxonomy, sorcerers are the wealthy: either by birth or by some form of ritual they have gained a power that causes things in the world to happen the way they want them to.)
X-Ray View into Your Software Application and Underlying Functions
Excited to hear about Hardcover! I like StoryGraph but the lack of API frustrates me - I want to be able to sync back to my general notes store (Obsidian). Hopefully Hardcover works better with that.
The theory was that the numbers were issued sequentially and they only kept them around because there was some "prestige" around having a low number. Not sure if that's true, but they did end up changing to a regular Visa card not long after. These cards only worked at that retailer and were originally issued long before the Internet.
>> Everything else you listed are right wing conspiracy theories.

Apparently this isn't:

"Just seven electric-vehicle charging stations have begun operating with funding from a $5-billion US government program created in 2021, marking “pathetic” progress, a Democratic senator said on Wednesday."

https://nypost.com/2024/06/05/business/democratic-senator-bl...
It was not intentional.

> when you're in public, you are the provider

I see.

I think we should draw a distinction between information provided on purpose or not. And other distinctions based on who is in the information. So I see your point now, but I think the calculation goes differently because my argument is not nearly that simple nor entirely focused on that specific aspect.

You have control over your likeness because it's your likeness. If you provide someone else's likeness, you deserve much less control. If they want to control it, you deserve even less.

> The provider of the information being collected should generally have some say in how that data is used; and if we want a respectful and kind society, we should respect those wishes so long as they are not unreasonable.

I'd give a lot more leeway for going against the wishes of the provider in particular. I don't think they should get a very privileged position. It's not burdening them, and it's not their personal information. They can ask but I don't think polite society requires agreeing in this case. It's nice of them to be worried about other people's safety but it's a pretty minor safety issue and the person walking around is the one who gets to make the decisions about their own safety.
> Of course their information is biased, but an intelligent person can cut through that and take just the raw information, which has value.

You may be intelligent as an individual but your adversary has teams of PhDs, decades of psychological research and tons of personal information on you, now parsed and analysed by AI to target you. Thinking you can see "raw information" is very naive.
"If you don't do X, I won't do Y"

That is a threat in the broadest sense.

the more useful comparisons are

law != violence || threat of violence
threat != violence

unless youre just equivocating the 2 meanings of threat to construct an argument?

So as law isn't equivalent to violence, why is it acceptable to bring violence into it?
ChDB seems super underrated. I wonder if there exists a way to use only CHDB in your client and only use S3 for storage.
The technically savvy do. The others don't but not because they don't want to--they don't know they exist. Everyone I know carries around NFC devices--either work badges or credit cards. I don't see how having an extra NFC device in addition to the multiple ones you already have is a burden.
Giving legal advice when not being a lawyer is illegal, it’s probably very unlikely that this already counts as legal advice though.
> The problem comes later, when many people casually modify their devices and then expect original customer service to get it back to the original state.

So design the hardware to make that (i.e. factory reset) easy and have the customer try it before any RMA.

> Prusa (IIRC) had an interesting solution where you had to break off a physical piece to void your warranty in order to try different firmware. People were up in arms about it, but I think it was the smartest way to handle this conundrum.

Sort of. What the customer is reasonably going to want is to have a separate warranty for the hardware and the software and void the software warranty. If someone replaces their firmware to fix a software bug and then their screen independently develops bad pixels, the customer is rightfully going to be upset that the company is using it as an excuse to deny a warranty replacement of their faulty hardware.

This is also how you get customers lying to you about replacing the firmware. If you try to deny unrelated warranty claims over that they feel like they're being ripped off.

But if the alternatives are "warranty void if firmware replaced" and "closed firmware" the first one is clearly better.
For context, Coda's last valuation was $1.4B in July 2021 and Grammarly's was $13B in November 2021. Grammarly's revenue is likely taking a hit with the rise of LLMs and they were always at risk of being a feature by not owning the document editor itself. An all-in-one approach to compete with Notion (and Google Docs, Confluence, Sharepoint, etc) makes sense, but time will tell if this merger works.
Wouldn't the third parties be subject to the requirement as well?
Depends what you're doing with it. You can just glue this dev board in to your hobby system, or if you're making an interactive kiosk, maybe you want a usb webcam & hdmi screen. If you want to debug, those ports can be pretty handy, you can have a monitor and keyboard on it. If you do your own pcb integration, you can decide what ports you want on your board.