skysight-inc/HackerNews huggingface dataset:
> People aren't going to buy little usb sticks

Tons of people walk around with lots of little hardware security modules every day. They've got a wallet full of chipped credit cards, they've got car keys with transponders, etc. What's one other piece of plastic on the keyring? What's one more card in the wallet?

> some phones don't even have usb ports

Practically no smartphone sold today has no USB ports. And besides, we're talking about activating a new phone, so chances are that new phone is going to have a working USB port.

If they don't even own a smartphone and don't want to own one, well, then sure I'd agree they maybe shouldn't use passkeys. But if they're not using a smartphone they're probably not too worried about logging into their iCloud account or Google account or whatever on their dumbphone. So I don't see the issue of their dumbphone not being able to log into the services which aren't supported on the device anyways.

I'm not necessarily arguing they're for everyone, but they do apply to most people in most developed countries. They should be an optional way to access your account.

> on vacation and your phone breaks, who really keeps a second phone around constantly

It's not a second phone, its either the yubikey on my keys probably still in a bag/safe in the room if I flew somewhere or it's in my pocket.

> someone breaks in and steals your backup phone

Yeah, I'd probably want to go about disabling it eventually. But generally, I'm not too worried in the immediate time. You need to unlock the device to get access to the passkeys. If you fail too many times, you're not getting access to the passkeys, ever.

> Effectively my email account is like a second device in the password system

So effectively all your accounts are protected by a single password that's available to have people attempt your password anywhere, anytime, pretty much however fast they want to.

> Sure a second, different email account could get itself password guessed but the chances of that are so small

As someone who's managed email for a lot of people, it's really not that small of a chance if it's just a password to an email account.

The only thing I'd potentially be really worried about is a house fire, but pretty much every important account of mine has backup passphrases in the fire-resistant safe. I do live just down the street from the fire station though, so the odds of a fire burning up all my stuff including everything in the fire resistant safe seems pretty low. Probably lower than your everything in your life email protected by just a password getting hacked.
The author is Kyle Simpson of "You don't know JS" fame. He was, at least initially, very much against Typescript as a concept.
Thanks for mentioning him. I gained some new perspective and felt inspired by looking around at his work and Twitter.
The Ionic 6 is a great alternative for the Model 3
What's so bad about these? Without any experience in riding motorcycles I would expect 2 in the back, in the front to be more stable, like riding a trike.
This is common in other countries, enjoy it :-)
> A certain portion of the population is pro-profit at virtually any cost.

What percent? (Citation needed if it's anything greater than 1%) What does "virtually" mean? This statement has no details and just comes across as political dogwhistling as a result.
I run ollama off a symlink to an external volume. It just feels neater that way, and can run any GGUF off of HuggingFace. I would like to know what configuration I'm missing out on, though.
This kind of reply is what makes me want to quit HN forever. There's always somebody out there smarter who knows better. Why bother to try and contribute anything?
Zip codes are for postal routing, not tax rates.

Items I order at home are subject to a 7.25% sales tax rate.

My neighbor across the street (our front doors are maybe 80 feet apart) pays 6.75%.

We both live in the same zip code. We both live within the same city. We both live in the same school district. We each live in two different counties.

(And up the road a bit, a third county is involved instead.)
Looks like it is open source: https://github.com/FYYFU/HeadKV
By the sounds of it, it's a single additional service that just looks like 1,000 locks.

Additionally, this is to slow down an intruder that's already in the local network, so "might attract more scans and potential hacks" is somewhat moot - it doesn't announce to the Internet that port 22 is open, for example. Although, if the intruder works out they're ghost hosts, then they might assume that there must be gold in them thar hills given the additional levels of protections / obscurity, and thus redouble their efforts in mapping the network and discovering real hosts.

The point appears to be to slow down an already-intruder, to give more time to lock down the real hosts and remove said intruder. In which case it seems to act as a detection mechanism to notify that there is an intruder attempting to map the network - which could possibly be the most value it brings.
Well it's true. With two views of the same object, one can triangulate distance. The math checks out.
My mother will not learn to use a Yubikey, or remember to carry one. You may not believe that (or simply dismiss anyone who won't/can't as unworthy to join in on modern life), but I can assure you it's true.
Correction: Both the Freakonomics coverage and the book named above were based on an earlier paper, though both that and the book were by Vann.
> My conspiracy theory is that burying the lede on this is intentional because people buying $12,000 Japanese imports wouldn't be buying $60,000 F-150s.

I imagine they're buying the cheaper Toyotas, or Kias instead?
Am I the only one who would respect the effort more if it had instead been written like so?

>We then decided to try using generative AI in a vertical B2B SaaS product, believing we could solve previously unsolved problems this way. We came up with and pitched multiple ideas, but user feedback was never positive enough to give us confidence that we were on the right track to build a huge business.

As is, my first impression is something like: "Jeez, whoever wrote this is firmly embedded in a niche fly-by-night culture that instinctively turns me off, and now can't psychologically shake free even immediately after crashing and burning".
As usual, it's not the tech.. it's the business model.
The principal reason why I can’t see myself daily-driving a kei truck: I’d have to get extremely good at reversing through drive-through establishments. Everything in the U.S. is built for left-hand drive.
I meant that physics uses the term in a different context.
Are you using strict mode?
I'm not an expert on these things, so I'm asking in good faith; what significant anti monopoly policies have been enacted in the US in recent history?
What you're describing sounds like Toki Pona, which ends up very ambiguous because of 120 word vocabulary. Still, here's a contract written in it:

https://jonathangabel.com/2012/lipu-lawa-pi-esun-kama/
Why don't we just ban targeted advertising? (2020)
"Over time, this shaped a deep biological aversion to unnecessary exertion." This is both ahistorical - dancing and athletic competition are effectively human universals - and abiological - wild animals play.
I think https://www.tempolabs.ai/ (YC S23) might be closer to what you're looking for.
Trust me, you got lucky, they "randomly" selected passengers with those kind of bags for inspection due to measures, 1mm above? charged! Emphasis on randomly, because the pattern was simple: foreigners? charged, locals? go on. We've saw a poor guy squeeze the hell out of his backpack to no avail, it fitted the measuring box, still, charged because "you had to squeeze it"; guess what, plenty of room under the seat, the guy could put two of them. On me? bag had wheels, foreigner, automatically selected for inspection, took the wheels away, still charged because "it had wheels first". I've flew a dozen companies, not even Ryanair, the low of the lowest treats passengers like this.
> There’s no doubt about it: The password era is ending.

No it's not. How am I suppose to login to a console of a air-gapped server with passkeys?

> Signing in with a passkey is three times faster than using a traditional password and eight times faster than a password and traditional multifactor authentication.

When you sign in to anything Microsoft, you have to go through four different redirects, sure automatically but not not exactly single page sign-in.

> We don’t let users permanently opt out of passkey invitations, but we keep the messaging friendly.

by friendly you mean Dark-UI to push the user in the corner forcing them to accept as you limit their options one by one with threatening notification and nagging.

> We’re proud to be part of this collective effort and hope you will share learnings as well as you progress in your passkey journey.

Learnings is a grammatical error. Microsoft is proud to be a collective for part of vendor locked in.

The rest of all spunk.
If you're using the iOS built-in storage then it backs up to icloud and syncs to your other iOS devices.

If you specifically want a file you can control you need to use other passkey software, like bitwarden. Which you already mentioned? Huh.
Sure, there’s lots of room for LLMs in helping to do clerical work, HR, that kind of thing. I was actually thinking of the direct management of funds and investments. So yeah, like probably all businesses, the ancillary functions can probably improve productivity using Generative AI with a minimal hit to quality.
Disclosure: I work for FusionAuth.

You should check out FusionAuth if you are looking at KeyCloak. We play in a similar same space (self-hostable, support for SAML, OIDC, OAuth2). I'd say KeyCloak has wider coverage for some of the more esoteric standards and is open source while we have a more modern API, dev-friendly docs, and great (paid) support.

FusionAuth is not open source, but you can self-host it for free and own your data[0]. Or let us run it for you. In the latter case, you still own your data--get it all from our cloud if you want to migrate.

I'm proud that the team wrote an offboarding doc[1]. It's your darn customer data, and every provider should support out-migration.

0: https://fusionauth.io/download

1: https://fusionauth.io/docs/lifecycle/migrate-users/offboard
The copilot had an interesting life [1]. He flew for the CIA during the US’s unacknowledged war in Laos.

[1]: https://www.legacy.com/us/obituaries/seattletimes/name/josep...
Why wouldn't someone just set a timeout on individual port scans such that long responders were pruned from the search? Seems like this behavior is extremely recognizable...
>It might seem like Dish employees wake up every day and say, "What can we do today to screw our customers even more?"

Made the mistake of buying a boost mobile sim this year. It was “expired” upon opening it. Retailer refused to refund it.

Having not learned my lesson yet, I went elsewhere and ripped it open to check the expiration date this time before I bought it.

Well “it’s prepaid for 90 days and comes with 35 gigs” it says on the card.

Go to activate it, it puts a further $100 on my credit card and congratulates me for activating my 30 gig service plan.

Hokey frauds.
From what I understand they are less stable than two in the front and one in the back.
Just knowing wtf an API response shape the app is expecting, or what the shape of a function argument object is... I can't imagine arguing against TypeScript (or whatever thing documents the shape of your data as it moves through your app).
Microgrant Guide – Discover and Apply to Microgrants
> Who is behind this move? What individuals, and what politicians? By what legal means is this happening?

The supreme court. The removal of Chevron Deference this year means that the courts have given themselves huge amounts of power over any administrative decision that isn't specifically regulated by congress (rather than the prior stance which was to presume that agency decisions were reasonable interpretations of the legislation unless there was clear evidence to the contrary).
https://apnews.com/article/supreme-court-chevron-regulations...
It's funny you bring up Schwarzenegger, as his last Olympia win was mired in controversy for being almost certainly rigged.

Did he cheat? No, everyone used a similar amount of steroids. But to anyone with eyes and a basic knowledge of the sport it's overwhelmingly obvious that the organizers and judges threw it in his favor because of the attention it would bring.

Which is the issue when an entity becomes too big to fail. There is a power disparity that is virtually impossible to overcome as the leverage is so much that any opponent can be swat down with ease.

Things such as:

- leveraging economies of scale when dealing with suppliers and resources to the point of starving access to competition

- using lobbyists to write legislation in their favor or blockade opponents

- doing fuck all with no reservations, then pay out lawsuits and fines at an order of magnitude less than profit made and damage done
The URL says: "lastpass-hacked-users-see-millions-of-dollars-of-funds-stolen" (no integer permanent id included), so it looks like techradar is A/B-testing different titles.
A PIN or fingerprint aren’t necessarily less secure than a password (and can in fact be much more secure).

In any case, nobody is stopping you from using a password-secured implementation! I do that myself on some of my devices.
They might as well charge him with fraud, forgery, money laundering, embezzlement, and jay-walking, too, while they're tossing names of random irrelevant crimes around.
I have passkeys. I lost my phone. I did not lose my identities.
> Hey Reddit! I’m excited

Moe, you've either made a copy/paste mistake, or your submission bot is failing you. It might be better to link to either the repo or the website (rather than to a tweet that says even less than your submission)
It's not really feasible to scale GDDR-based designs that big. The 5090 is expected to have 32GB which probably means the workstation variant will have 64GB, but that's the limit of the conventional GPU memory architecture for now. HBM is fast and high capacity but prohibitively expensive, and LPDDR is cheap and high capacity but relatively slow, so there's no free lunch to be had.
It was on HN not long ago. https://news.ycombinator.com/item?id=41325719
I've seen images representing what light looks like with an astigmatism and that's absolutely what I see. Always been like that for me but I've never had glasses. If I ever get a car again I might have to see about getting a prescription for something to correct that.
"lots of false positives"

Maybe this is okay when we're talking about plagiarism and you can review manually, but humans can't reliably identify LLM written text
https://en.m.wikipedia.org/wiki/Executive_Order_13771
This is considered old? And someone thinks it doesn't have enough RAM?

I still run a Bulldozer 8150 from 2012 as a full time server. RAM is dirt cheap so it has 64 gigs. This isn't even an old server by my standards, but it's the oldest server where I'm running the same kinds of things I'd usually run on newer hardware (SearXNG, Akkoma, qemu with multiple VMs, et cetera).

It's trivial to max out memory on old systems with a small spend on eBay, and lots of us have had VMs with ancient JVMs to deal with shitty, insecure IPMI that requires Java from the turn of the millennium.

It's funny how old servers, like my AlphaServer DS25, have no problems doing things correctly - yes, the OOB management can be made available via the network, but by default it's accessible via serial. I personally don't want a system that defaults to insecure if the CMOS battery dies and default settings are loaded. But unfortunately, most IPMI is both insecure and defaults to on. So, for these reasons, I'd trust an AlphaServer, but I wouldn't trust most newer machines with IPMI, particularly ones old enough to possibly have a CR2032 that could be nearing end of life.
>Is there any benefit, from Starlink’s perspective for them to sell ‘reseller kits’ for a single ground based antenna to serve a neighborhood? Or are Starlink’s radios so efficient that it doesn’t really matter?

I think their antennas can go to half a gigabit or maybe even higher, but in practice the speed will be limited by how many customers are served by each satellite. You can see some medians like 80-120 Mbps[0]. Also seemingly there's an option to buy a big "Starlink gateway" with speeds like 10 Gbps[1] - that could be nice for small ISPs.

>Also, I wonder why Starlink wouldn’t have more demand-based pricing based on consumption? With a very finite service window at least for the next 10 years, seems like each allotment of time talking to a satellite is worth a highly variable amount depending on its location.

What do you mean by "very finite service window at least for the next 10 years"? Starlink satellites are designed with a lifespan of 5 years, so every Starlink sat that is now in the sky will be replaced by a new sat relatively soon (surely by an improved model). There are more Starlinks in the sky each week, the sats launched today are more powerful than older sats, and Starship will be launching even bigger sats for less money.

Right now the prices vary by country (120 USD in USA, 80 USD in Poland, 50 USD in Zimbabwe), and they have "regional savings"[2] and "congestion charges"[3] in specific areas. Anyway, cities aren't really a market for Starlink (too many customers per satellite, so there can't be many customers per capita, and it's expensive so no one would buy it if it was even more expensive), only in moderately populated areas Starlink starts making any business sense, but there's still competition from other ISPs, so prices can't be very high. In sparsely populated areas, you have all the bandwidth, but customers may not have any alternatives, so there's no reason to have very low prices even where the demand is very low. For ships the price is 250 USD, because the only alternative is another satellite service, but much slower than Starlink.

[0] https://www.ookla.com/articles/starlink-hughesnet-viasat-per...

[1] https://www.starlinkinternet.info/community-gateway (That's not official starlink.com, but https://www.starlink.com/community-gateway redirects to it, so it's not a fake website)

[2] https://www.starlink.com/support/article/efa87a10-aa1d-783a-...

[3] https://www.starlink.com/support/article/63d885d3-c269-21f9-...
The point here is when you pay for a tour, the guide or docent says something about the 12 calibre guns and some neckbeard up the back says "actually.. they were 11.27 calibre, the foundry in charlottesburg had a bad ruler" you know it's gone downhill.

I have literally experienced this going round a bank IT centre in the 70s. Guide says the printers to about 2000 bills a second printing. kid up the back says "It's 2500 I read the brochure"
The solution is easy. Give no politician any airtime or print space for any reason whatsoever. The haters feed on media attention, so starve them of their fuel
We do! I'm in Japan right now, taking photos of as many markers as possible that I'll add into the app when I get back! We're also releasing a 'submission app' in early 2025 that will let you submit markers and get them added into the app so we can expand into more places!
The Thinking Game [video]
He's so incredibly personally offended and passive-aggressive, it's wild. Especially when he can only accept SOME of what he's read after apparently pretending half of it was his idea!

Just reading the actual content of his (minimal) replies, he constantly avoids addressing the content of what anyone said over acting personally hurt and calling everyone "sensitive" and acting like it's arbitrary and unfair anger.
I feel like that says a lot about microsoft, and a lot of Corporate types in general...
That's a non-sequitur unless the question being considered is specifically whether a data hoarder like Google should build in estimated sales tax in their store vs "a random shopping cart from a retailer I've never interacted with before".
Hi there, and sorry for the late reply!

This is my first product and my first post on Hacker News, so I truly appreciate you taking the time to share your perspective.

I completely understand your frustration as an interviewer. My goal with Applyvite isn’t to hack or cheat the hiring process—it’s to help job seekers navigate a process that can often feel disorganized and overwhelming.

Many job postings aren’t always clear about what they expect. Beyond cover letters, some require additional essays, like explaining why a candidate chose a specific company or why they believe they’re a good fit, on top of everything else. While these tasks are understandable from an employer’s perspective, they can add a significant burden on job seekers, particularly those who are unemployed and urgently need to pay bills.

I built Applyvite based on my own experience. I’ve applied to over 300 jobs, spending countless hours on applications, only to get five interviews, none of which progressed to a technical stage where I could showcase my skills. As someone from Cuba, I can’t help but feel that my accent may have played a role in those outcomes.

During that time, I realized I was repeating a lot of steps in every application. That’s why I created Applyvite—not to game the system but to help people streamline their efforts. The app keeps all job applications and tailored documents in one place and provides tools to customize each application. My goal is to help job seekers land interviews, which is what really matters.

I understand that separating thoughtful applications from poorly considered ones is a challenge you face as an interviewer, but that’s already part of your role. For those of us still searching for a job, tools like Applyvite can be a lifeline. I hope this gives some clarity on my intent, and again, I genuinely appreciate your feedback—it helps me improve.
I'm aware but I'm one of the like 5 people that bought the overpriced MyQ-HomeKit adapter and it's still working to provide HA control. If it ever dies I'll be going ratgdo or opengarage for sure
Steve has a great review: https://m.youtube.com/watch?v=oU3H581uCsA
It's largely been replaced by tedious factional infighting. Particularly from younger Linux users.

Waaay too many folks (particularly in places like Mastodon) make "using Linux" the majority of their personality. They live and breathe Linux. Fighting to ensure that "Winblows" users understand that Arch Linux is *THE ONLY WAY!*

God forbid if you use a distro they don't then you're subjected to endless pithy criticism from on high about "well you wouldn't have this problem if you just used my distro!"
I'm waiting to see one with Montana plates, which for those not in the know is generally used as a tax dodge for luxury vehicles. Montana will let non-residents register a vehicle that isn't present in the state under an LLC. Once a plate is issued, the other 49 states have to recognize it. Considering the ridiculous pricing of road legal SxS UTVs it should still be cheaper to go through that process on a kei truck.
Decline in teen drug use continues, surprising experts
That’s not the (entire) point of passkeys/WebAuthN at all!

It’s a pretty powerful/complex spec allowing various use cases, from a modern way to store SSH keys on hardware credentials to a more usable and less phishable password replacement backed entirely by software.
Is this more or less status than Warhammer? Personally I'd say higher status, you're in company with Presidents and Lords in castles. The real pros get the local yokels to run around in the fields with the giant arrows, re-playing the battles of yore so they can watch from the turret (this is a joke so old, it's basically in Tristram Shandy)