skysight-inc/HackerNews huggingface dataset:
I don't have many things against passkeys for corporate accounts, but I don't think we're going to fully destroy passwords in the personal space. To the hardline Passkey-for-everything advocates, I pose the following situation:

In your sleep, your house has burned down. You have zero devices, and your backup keys are stuck in a building you do not have access to for another several hours. You have made it out of your home with: Your wallet, containing $20 cash, a handful of slightly melty credit cards, an ID that is almost readable, and your keys. The credit cards are fucked and will need to be replaced. Your ID is mostly readable.

This is the situation that I pose for most people to try and get undone from. I then amp it up another notch:

you have no job and are unemployed currently. You cannot make use of any insurance system as you have been deemed "impossible to insure" due to your status. You currently live in a cardboard box behind a restaurant in downtown.

And before you go "why would a homeless person need email", it's required for lots of services, as is a phone number that can at least have voicemail at it (this is a service that Futel^1 provides in some places). You can't assume that physical artifacts will continue being in the possession of a dishomed person. One of the common reasons for losing all your personal effects in this situation is the state literally taking everything down to your clothes away^2.

^1 https://futel.net/ ^2 https://www.realchangenews.org/news/2024/06/05/sweeps-triple...
Researchers discover new ocean predator in the Atacama Trench
Or if all your passwords are in a password manager on your phone
Referenced paper https://www.tandfonline.com/doi/full/10.1080/14772000.2024.2...
"all y'all" is an abomination.
Actually you can go back to the 1922 Special Powers Act, or before that even.
A lot of people recommend the Natural Number Game for learning Lean, but, as an experienced functional programmer, I don't like it when the code is abstracted away from me. This is not a critique of the tutorial, which is fantastic for it's audience (presumably people more interested in theorem proving without a background in programming), but it might not be ideal for people who want to really get the feel of working in Lean.

For experienced programmers who prefer to learn in the IDE, I've found Theorem Proving in Lean 4 [0] to be a wonderful introduction to an incredible language and area of research. Lean 4 has really nice tooling if you use the VS Code plugin.

Functional Programming in Lean [1] also looks great, but doesn't seem to focus as heavily on understanding theorem proving, which, for me, is the entire point of learning Lean.

0. https://leanprover.github.io/theorem_proving_in_lean4/

1. https://lean-lang.org/functional_programming_in_lean/
Considering the entire purpose of the original post is asking people what they're doing, why do you have such a problem with the top voted argument? If the top voted argument was in favour of this tech taking jobs, would you feel better?
From North Carolina originally. "Y'all" is singular, "all y'all" is plural, and "all y'all MF'ers" is when you are angry and it could be singular or plural depending on the connotation.
VERSES Genius Outperforms OpenAI Model in Code-Breaking Challenge
The majority of US voters have spoken out against regulations and in favor of market forces. On to the consequences.
Who says they don't? Interference is being "democratized".
Great work! Easy to integrate :)
> Maybe they were there when you weren't there and they're asking the same question about you?

No.

She complained about not seeing anyone. She had a clear mind and we talked a lot about her friends and family.
Using glp1s for addiction treatment is in active study because of anecdotes like your friends. Hopefully there are some solid results soon.
So: extreme cases (both obesity and powerlifting) are not relevant when we're talking about population-wide averages. And relative weakness is also irrelevant (the original claim was solely about muscle mass -- if you want to talk about that being a bad metric, you're responding to the wrong comment).

You make one specific relevant claim: "obese people don't have more muscle." (Which belies everything I've read on the subject.) So, uh, why do you think that?
The paper: https://arxiv.org/pdf/2411.19826
It's not sexist at all, and anyone who objects to it on those grounds is flat out looking for excuses to be offended.
grammatical number, singular, plural

1st person, ME, US

2nd person, YOU, Y'ALL

3rd person, HE/SHE/THEY, THEY

In spanish we have the distinction naturally: USTED, USTEDES

Another example of genuine language tools dismissed as "Incorrect" is African American Vernacular English's "you be", "he be" tense. I don't know the exact distinction, Steven Pinker explains it well.

On that note, "that there rooster" is perfecty valid English as well.
Maybe the university thinks that Ozempic is not a well known brand in Denmark so being vague will get more clicks. 0.4% of them get a Ozempic prescription per year vs 1.7% of Americans per year. Seems crazy when "Nearly 1 out of every 5 Danish jobs created last year was at Novo", but it's possible.

Another possibility is that they don't wanna tarnish a brand that saved the country from recession last year. No point picking fights with industry over some observational study that has no predictive power
But then a contract would never be able to describe modern day inventions, processes or procedures as deliverables lol
We have an English equivalent for "todos vosotros" as well!
I bring this up in PRs, as I know with my own experience I don’t always mean to commit it commented out, sometimes it was just for testing, or it should have been deleted after I was done refactoring.
Authenticating yourself with a passkey cryptographically signs a challenge issued by the site you're trying to log in at, and your WebAuthN client (usually your browser) only signs challenges it knows about.

The important point here is that there is no way for you to have your browser sign an arbitrary (e.g. an attacker's) challenge, since you can't input the challenge at all.

This makes WebAuthN strictly better than static passwords, TOTPs (which are "unidirectional" in nature), and even "enter code 123456 into your authentication device and provide the code it displays"-like flows (which is a bidirectional challenge-response, but a MITMable one).
> Reading the whole thing, I think the author would agree

Yes, I think so too.
If you'd like to read a comprehensive blog post about the intricate mechanisms that make a mechanical watch work, with amazing interactive visualizations, I recommend reading this blog post[1] by Bartosz Ciechanowski, a person famous on HN for his high quality blog posts that explain things comprehensively, with nice visualizations. (the #1 top post on HN right now is his new blog post about the moon [2]).

[1] https://news.ycombinator.com/item?id=31261533
[2] https://news.ycombinator.com/item?id=42443229
There is a ton of code that is sections of massive parallelism interspersed with sections of serial non-hot code. It makes total sense to do some syscall then and continue to the next section.
This reminds me of when they tried to de-gender Spanish and the vast majority of native Latinos hated it, Google still refuses to back down on “Latinx”
Ancient genomes link early Europeans to Neanderthal ancestry
Well, the original post on HN was front page. This one is collecting... barely more than a point an hour.

So if HN doesn't even care...
Interesting. You're using the FP8 version i'm guessing?
How many tokens/s are you using and which software? MLX?
Lowering blood sugar below normal levels is hardly unique to semaglutide or GLP1s in general. Most drugs targetting type 2 diabetes can do so and sometimes need to be adjusted to prevent hypoglycemic events. Insulin in particular poses a significant risk of hypoglycemic events which is why many insurances cover continuous glucose monitors for those taking insulin.
Discussion (16 points, 5 days ago, 7 comments) https://news.ycombinator.com/item?id=42400179
I am viewing this as the Raspberry PI for AI.
> But I still feel strangely compelled to write "Dear Sirs" at the top of letters to strangers, as there's no formal form of y'all.

Be the change you want to see, and start with "Dear Y'all."
"Sexist" does feel like too strong a word. "Gendered" perhaps more appropriate.

"Guys" is certainly gendered, so I understand folks feeling like "you guys" is as well.
but the question was about "you guys" which is a distinct phrase that happens to share a word.
Scryer Prolog Solutions to Advent of Code 2024
IIRC guy part is actually descended from Guy Faux, which in itself is cool.

(edit: fix grammar)
Luigi Mangione indicted on murder charges
I see the same thing here. Also mouthwash is more expensive now than it was when I was growing up. More than inflation can account for.

Edit: Found a really good discussion about it on Reddit. https://www.reddit.com/r/alcoholism/comments/1cyuf2j/drinkin...
Ask HN: How to get out of front end development
I have been doing full stack / fronted for almost 5 years now and am really burned out as well as not interested. I cannot remember the last time I worked on an interesting problem at work and I desperately want to make a change.

The job market is not good now so besides working on side projects that are interesting to me and up leveling my skills, what should I be doing to get out of this?
The shape of the beam is important, not just the angle of it. Part of what differentiates a low-beam headlamp from a high-beam headlamp is the shape of the beam.

Bike lights, at least as-sold here in the States, seem to generally be built from flashlight parts. And unlike car low beams, flashlights project a circular beam.

With a circular beam, it is really hard to illuminate the path ahead with any meaningful brightness without blinding others.

A better beam pattern, ideally with sharp cutoffs, can illuminate a pathway and the obstacles that may be on it without unduly blinding others.

---

I happened to buy one such light, just by chance, several years ago. It's a "Schwinn Intensa 100" from Wal-Mart, part number SW80251WM. It kind of sucks in terms of overall illumination and is no good for high-speed rides at night, but it does light up the path ahead and provides a sharp beam cutoff to avoid blinding others. (So actually, it's pretty excellent for casual riding.)
Find your phone: https://www.icloud.com/find/

Scanning a QR code: https://support.apple.com/en-us/102680

The time investment could even be worth it, since "Signing in with a passkey is three times faster than using a traditional password and eight times faster than a password and traditional MFA", according to the article.
yinz needs worsh. it'll cool y'off.
The situation is totally different. First of all, it's not comparable with the Recall crap that's going with Windows at all. Second, if they really try something fishy, you can just switch to Debian or any of the other distributions.
As for hardware, there is plenty of stuff that doesn't cause any troubles at all.
Just do some basic research.
The much bigger problem is that you also need to enroll a second Yubikey into every service you use, but also safely store that backup key somewhere, ideally outside your own house. That's just not realistic.

Yubico had some ideas around "paired Yubikeys" which shared the same root secret, but I believe that model won't work anymore with FIDO/CTAP2 due to some counter value that was added there over U2F. (It might be possible for them to just not have a security counter; I'm not sure.)
Fun litmus test, if the person challenging this assertion happens to be a straight male: "how many guys have you slept with?"
Yes, and abstaining from alcohol is guaranteed to stop alcoholism! It is a scientific fact. It is physically impossible to be an alcoholic if you cut alcohol intake sufficiently.

It's so simple, really.

(See the problem here?)
The cases of NAION observed post-Ozempic usage in Denmark is 150 (up from 60-75) out of 424,152 patients, for a rare ailment that already affects patients specifically with diabetes. Sorry to say those taking it as a "shortcut" in your words are even less susceptible.

As someone who's been fortunate enough to be fit and able to work out their entire life, not sure how there are people like you who shun and shame those trying to gain a semblance of control over their weight in a world where it does have a real impact whether they get serious medical attention or not. Your likely skewed thoughts on vanity be damned, bigger people are treated worse across the board and GLP-1 is a genuine salve.
“And still, after all this time, the Sun has never said to the Earth, "You owe me." Look what happens with love like that. It lights up the sky.”

― Rumi
Meh, might as well try to bring back the Segway. If it's not cool, it won't catch on.
It happens to have a good level of stickiness. People also use blue nitto tape, and tape used for fixturing on dicing saws. I think basically anything could work, it's just that people use what's lying around.
> In Jakob Grauslund’s study, the researchers divided the patients into two groups: those who were treated with Ozempic and those who received other treatment. In the statistical analyses, age, gender, blood sugar and a wide range of other conditions were also taken into account.

They are comparing patients with diabetes in both groups
Yes, this is that study:

“Patients with type 2 diabetes who are treated with the drug Ozempic have an increased risk of developing damage to the optic nerve of the eye.”
You might just look for work on HfO2
Donate it to a computer museum instead. It’s an interesting machine, from a dead lineage.

Or sell it on eBay. HP/UX boxes tend to be expensive, for reasons I can’t really understand
I will try that, thanks.
All of this makes me realize that availability is my biggest risk. My passwords are all 30 character random alphanumerics and I have none of them memorized.
Individual scales are concrete examples of diatonic scales, pentatonic scales etc.
Nice. Then my only problem would be my side mirrors. They don't tilt or have a prism, so I'm boned there. But I can just move my head to the side until we get moving again.
I remember Konfig. Sorry you couldn't find fit, but great work nonetheless.

About the code - would you be willing to add an MIT License? I don't see the code being used without a permissive license.
Hi everyone, I'm building a directory of Google Analytics alternatives. I'm genuinely not a fan of GA and, as a side-project, I've compiled about 60 alternatives so far. I'm deep into researching them now, gathering features, user feedback, and specs. This is very time intensive.

If you're building a new analytics tool that you would like to see included, please submit it!

Also, if you have suggestions for features that would make this resource more useful, please let me know.
> These cyclists unfortunately need to just point their headlight downward […]

On well-lit urban streets, you probably don't need more than ~500 lumens, as the road is already illuminated and the light is mostly about other people seeing you.

Also, having it flash in a consistent manner (and not some kind of "random" cycle) is best, as it's easier to track a simple on-off pattern with a deterministic frequency.

(If you're riding on non-lit roads or trails, then certainly more lumens and further throw is useful.)
If I'm the manufacturer, what is my incentive to declare that, rather than to stay silent and still act in a way indistinguishable from that?
A forEach that could handle async/await would be nice. But for ... in is almost as good.
Thanks for the comments and nice words. Very happy to see testimonials in our launch at HN!
thou is the singular intimate. (compare the tu- form, in french).

You could be singular or plural, but it was always formal. (compare the vous- form, in french)

Knowing this puts a whole new spin on things like the KJV, since as moderns we hear "thou" and think "fancy old timey speech! very formal!" and it is exactly the opposite.

Quakers/Friends chose the thou- form as the preferred form to address everyone; this was part of their scandalous behavior at the time, because it was heard as being entirely improper. (For their part, Quakers figure we're all equal before God, so why pay too much attention to social status? -- and that's not a bad point, really!)
Yep, just "youse" by itself feels like an intentional regional quirk.

"What do youse want to do?" <= you're from the NY/Phila/I-95 axis

"What do youse guys want to do?" <= you've some exposure to American dialects

"What do y'all want to do?" <= you're an American or playing one in a movie
So you're willing to just brush off a large groups complaints with a phrase entirely meant to address groups?
Doing some dead reckoning translation work from the Chinese news source, this seems more like reheating Huawei's Nearlink for the broader Chinese market than making a new technology.

Also good chance Star Flash's actual name in English is SparkLink.
is there a list of public companies like this that are good candidates for shorting?
it's not second person. it's not addressing anyone directly. it's addressing the audience in a specific context.
This was circa 2002 FWIW.
The argument is that service providers will not accept the reduced availability and so will deviate from the pure passkey way into some patchwork of security theater.
(maligned)
No, that's not the case - there's a standard to how protoc exposes plugin options as CLI options that doesn't require the compiler to know about each plugin. It's obtuse, annoying, and badly documented, but it's there :)

The whole situation is extra confusing because some of the core codegen plugins are built into protoc. That's a distribution and version-matching strategy from the Google team rather than a requirement of the plugin system. I'd very much like Google to ship the built-in plugins as standalone binaries, even if they're also bundled with protoc.
> NAION is damage to the optic nerve of the eye caused by a sudden stop of blood flow to the optic nerve.

Sounds like it's related to blood flow also.

(Didn't read remainder of article)
Any examples of hoax videos that you can name? I’m having a hard time placing any.

I really find the threat to be overhyped.
At the moment, export/import is not part of the "Passkey" standard. The FIDO Alliance has a draft of the Credential Exchange Protocol that would allow such actions. Allowing the trivial export of a passkey would end up defeating the cryptographic protections they offer.

https://www.bleepingcomputer.com/news/security/new-fido-prop...
Thank you for sharing! Big fan of Bartosz's articles and somehow didn't think of looking him up on other platforms
Modern usage of language has really blurred the lines, and it is confusing.

You are confusing 'State' vs 'Nation'. A nation does not need a legal entity to exist. 'Kurdish', 'Jewish', and 'Burman' are the literal names of the nation.

Belonging to a nation is amongst the other members to determine, not me. If the Irish people consider an assimilated German to be Irish, so be it. A German who does not assimilate, would likely not be considered an 'an Irish person' but rather an 'Irish Citizen' or more correctly, 'A Citizen of Ireland'.
Both, actually. Without accessor methods, laziness couldn't be implemented.
So a Yubikey is not an electronic device that you need to carry?

iCloud Passwords don't run on an iPhone that is an electronic device that you need to carry?

Those electronic devices that you mention don't each store the keys in a proprietary format and you can't access them without the vendor's cooperation - i.e. vendor lock in?
Y'all is the American informal second-person plural pronoun

Spanish: "ustedes" (formal) and "vosotros" (informal in Spain) or "vos" in some regions

French: "vous" is the standard, but informally there's "vous autres" in Quebec French

Portuguese: "vocês" formally, but "cês" informally in Brazilian Portuguese

German: While "ihr" is standard, some dialects use "ihr alle" or regional variants

Italian: "voi" is standard, but some southern dialects use "vujatri" or similar variants

Greek: "εσείς" (eseis) formally, but informally "εσείς όλοι" (eseis oli)

Russian: "вы" (vy) is standard, but "вы все" (vy vse) is used for emphasis

Arabic: "أنتم" (antum) is standard, with "إنتو" (intu) in dialects

I am most fascinated by Y'alls', a double possessive or possessive plural contraction which is common in Southern American English and AAVE (African American Vernacular English) which would otherwise be constructed more awkwardly in common American English as "all of your" or "your all's."
Modern fanatics don't care. They are eager to destroy everything for the sake of "protecting children".
The origin of genetic code: Study finds textbook version needs revision
Old English had dual pronouns too: https://oldenglish.info/pro3.html
Can you be specific? I'm curious.
And it's going to be hard for OpenAI to do that again, now that Google's woken up.
exactly this. it’s why i’m having trouble getting too worked up about the notion of AI replacing all the jobs (though i think it will end up, for a time, reducing the number of early career jobs available, which has its own social ramifications.)
There's no reason not to trust it. It's strictly better than passwords in almost every regard. Of course if you manage your passwords well, you don't get more security with passkeys, because your account is already safe enough. But for someone, who used to write his universal "Johny1987" password on a sticker at his display, passkey provides security and usability benefits.

Passkey is just not supposed to solve all the problems in the world. It's supposed to replace login and password and that's about it. Authentication.
Referenced paper: https://www.pnas.org/doi/10.1073/pnas.2410311121
Seems like the "Theseus' ship" approach to RIIR worked wonders compared to a full rewrite.
Not necessarily. You can securely use PINs over a protocol like SRP, as long as the backend can be trusted to perform rate limiting properly.
It's neat and all but I can't help being skeptical that, beyond certain narrowly specific use cases, volumetric displays like this will measurably increase actual utility enough to be worth the increased cost, size, weight, power and complexity. I'm assuming "utility" here to be something like "usefully actionable increased comprehension of a 3D object or terrain".

My reasoning is that the human visual system already has a bunch of neural wetware that's evolved to be really good at turning visual cues like highlights, shadows, reflections, specularity, depth of field, etc from a 2D scene into an internal 3D representation. When you add extra cues over time like object/light source motion, moving POV and parallax it gets even better. And all those cues are already "free" with common 2D displays + motion. Adding a bit of additional hardware to 2D commodity displays enables things like stereo binocular views from 3D glasses, head tracking and interactive control which further deepen scene comprehension at only slightly more cost, space and complexity. That's a lot of pre-existing, cheaper, easier alternatives that are as good as volumetric displays for most use cases and nearly as good for the remaining use cases.

Beyond a few specialty use cases, research labs and military trials, I suspect the majority of these displays will be deployed as a novelty to attract attention or as social signaling (eg trade show booths, high-end retail, corporate hospitality, etc). Unfortunately, those kinds of use cases tend to have a shelf life only about as long as the novelty and high early adopter prices last.
I just came across this article after reading what's new in SystemD v257

It's a miracle how simple NetBSD still is, a few foo=NO in /etc/rc.conf and a check with ps auxc after rebooting, that's all.
passkeys stored in a password manager aren't any more secure in practical terms than random passwords stored in a password manager

It is my contention that this statement is:

1. Categorical,

2. False, and

3. Categorically false