skysight-inc/HackerNews huggingface dataset:
Using 1Password as your passkey backend seems like it would solve all the problems you're describing, except that passkeys are (for the time being, at least) locked in to 1Password [1]. It works on multiple OSes (as a native passkey backend on iOS, via browser extensions providing WebAuthN on all major OSes) and isn't tied to your Apple ID.

If you care a lot about exportable passkeys, Bitwarden (and Vaultwarden) can export them. Not sure if any other implementation can import them at the moment, but the data looks portable enough (i.e. it contains the ECDSA private key and all other client properties required).

[1] https://support.1password.com/save-use-passkeys/ mentions that "Passkeys saved in 1Password can’t be exported at this time."
"What is it like to be a bat (or a thermostat)?" is too abstract for anyone to thoughtfully grasp.

Instead try asking yourself "what is it like to be asleep?" or "what is it like to be waking up?" or "what is it like to be heavily sedated?"

We all experience various gradients of consciousness every day as we do things like drift off to sleep or slowly gain consciousness in the morning. You don't have to try to imagine the experience of another primitive life form when you can just recall what there is or isn't to your own conscious experience as you drift between states.
In theory they should work well in food deserts. But they are always overpriced and don’t vary stock from store to store, so can’t cater to varying income levels well.

A family owned dollar store with pharma and fresh grocery would be a good replacement for many of these cookie cutter pharmacies that are disappearing.
I'm guessing it's some thin veneer of bullshit like "well, the patient can still pay $500k directly out of pocket, so we're not technically interfering with the care, just the payments!"
> but they never solve the first problem I have, which is actually constructing the KG itself.

I’ve noticed this too and the ironic thing is that building the KG is the most critical part of making everything work.
I gave up on the Year of Linux Desktop when Windows 7 came to be, and added VMWare Workstation into the mix, now replaced by WSL.

No stranger to UNIX, using it across multiple vendors since Xenix was a Microsoft product, Linux Journal subscriber until its last published days, and still have UNIX/POSIX systems as part of day job.

My favourite UNIX flavours were Solaris, Irix, NeXTSTEP/macOS, and if it is FLOSS, Public Domain, Open Core, Shareware, or WhateverWare I don't really care that much.
Not true for aviation, where weight and volume are both constraints.
A simple url shortner that works
I'm wondering how deep the hack is... it seems sending a frame is just setting some registers and waiting for an interrupt. This suggests (though I'm not an expert!) that they are talking to another layer of firmware that does the actual stuff? Reminds me a bit of the Raspberry pico board which has the main RP2040 SoC but where the WiFi is a separate WiFi/BT module (CYW43xx) with its own Arm cores. Not even the external register interface to the WiFi module is documented publicly, but there is an open source driver (https://github.com/georgerobotics/cyw43-driver/tree/cf924bb0...) so one can infer the specification. However, this driver yet again talks to software running on Arm codes inside the module, the code for which is supplied as big firmware binary blobs by the manufacturer (the blobs are actually in the linked repo, defined inside header files in the firmware directory). I'm wondering how this ESP32 hack corresponds to this?
If there isn't a physical or functional justification for the outfit, yea let people wear that they want. Who cares.
Much of this "bad actor" activity is actually customer needs left hanging - for either the customer to automate herself or other companies to fill the gap to create value that's not envisioned by the original company.

I'm guessing investors actually like a healthy dose of open access and a healthy dose of defence. We see them (YC, as an example) betting on multiple teams addressing the same problem. The difference is their execution, the angle they attack.

If, say, the financial company you work for is capable in both product and technical aspect, I assume it leaves no gap. It's the main place to access the service and all the side benefits.
So, barring any sort of collective action, which seems impossible as you state, what other actions do you suggest? It seems the peaceful avenues of resolution have been captured by lobbyists, billionaires, arbitration forums, etc. What is left?
Did they back off of that? I have an older oculus I can dig out if I can safely walk its data off from Meta
”But even with Apple, I can't sync stuff between my personal and work computer because they use different Apple IDs, even though the underlying true identity (me) is the same.”

Apple has recently addressed this. You can now create shared groups, and selectively assign passwords and passkeys to the groups. You could easily create a group with your two identities and move the credentials to that group.

https://support.apple.com/guide/iphone/share-passwords-iphe6...
Well they did.

Then Google did.

Then llava.

The issue is that this technology has no most (other than the cost to create models and datasets)

There’s not a lot of secret sauce you can use that someone else can’t trivially replicate, given the resources.

It’s going to come down to good ol product design and engineering.

The issue is openai doesn’t seem to care about what their users want. (I don’t think their users know what they want either, but that’s another discussion)

They want more money to make bigger models in the hope that nobody else can or will.

They want to achieve regulatory capture as their moat.

For all their technical abilities at scaling LLM training and inference, I don’t get the feeling that they have great product direction.
Who are you to decide if chess is a sport or not? The practitioners think it is, so that's what matters.
Prompts are a great place to look for these, but the part you linked too isn't very important for knowledge graph generation. It is doing an initial semantic breakdown into more manageable chunks. The actual entity and fact extraction that actually turns this into a knowledge graph is this one:

https://github.com/OpenSPG/KAG/blob/master/kag/builder/promp...

GraphRAG and a lot of the semantic indexes are simply vector database with pre-computed similarity edges which does not allow you to perform any reasoning over (the definition and intention of a knowledge graph).

This is probably worth looking at, its the first opensource project I've seen that is actually using LLMs to generate knowledge graphs. This does look pretty primitive for that task but it might be a useful reference for others going down this road.
Smoking a single cigarette could take 20 minutes off life expectancy, study says
I think passkeys are a failed product. Time to give up and start over again.

I don't say this casually. I have been arguing for ending passwords for nearly 20 years now. I'm a software engineer and broadly understand a lot of security protocols. I spent hours understanding passkeys and figuring out how to use them in my environment. The core idea is great! But the usability is garbage.

I still can't use passkeys reliably. The combination of bad implementations in Windows, Chrome, 1Password, and various websites has defeated me. All passkeys do now is clutter up the one login flow that works for me (1Password form filling, as awful as that is.)
I disagree somewhat that that is a "fumble" so much as a symptom of what was necessary to get mainstream acceptance, what a lot of us on HN see as "maximum vendor lock" is also an attempt at building a "pit of success" for average, "boring" users. An "Uncle Charlie" with an iPhone, an iPad, and a Mac that trusts Apple and was already using iCloud Keychain as their primary password manager is going to have an easy time with passkeys and is going to have a harder time accidentally enrolling a passkey they don't understand or know how to use the next time or next device they login from. That's a reasonable "pit of success" for an average, "boring" user.

There's a lot of users that isn't great for. Especially there are statistically a lot of iOS users that use Windows desktop/laptops that Microsoft and Apple are trying to bridge but don't always have the best UX today. Same for Android and Windows users, there's statistically even more of those.

Also, as you can tell from HN comments every time Passkeys come up, HN is full of anecdotes of the craziest mixed device ecosystems people can build. We can be a loud set of users, and we certainly need the most convincing that our "power user" needs are met for all of our complexity requirements.
At one point, a streamer on Youtube asked his audience something like "Spam F's in chat [to signal that you like this thing I just did]"

Hundreds of users got banned by Youtube for spamming.

But they didn't get banned from "Youtube". They got banned from "Google". They lost access to their Gmail, and to their Android login, and every other Google service, meaning they lost their phone text verification system for every other login, and quite possibly their password manager.

Hundreds of identities were stolen and set on fire by an overly aggressive approach to spam management.

I try to remember this failure mode in planning (or being unable to plan) the security of my online presence.

Then I incorporate Elon Musk's recent behavior and recognize that while the profit motive _generally_ constrains the behavior of these firms, it's by no means assured.

For basic social welfare, either this identity stuff needs to be heavily regulated or all of these big companies need to be broken up.
I also wish they'd have started off like that from the beginning.

It might have taken them a bit longer to get the initial implementation out the door, but it would have avoided all of these discussions, which I'm certain are also impacting WebAuthN/passkey adoption across the web (assuming that the views on passkeys here are at least somewhat representative of technical decisionmakers).

But if the choice is between getting to the status quo via suboptimal intermediate steps or not having WebAuthN and passkeys at all, the former seems much preferable.
Examples in both directions abound.

Guns aren't required:

https://www.cnn.com/2018/05/25/us/indiana-school-shooting-te...

https://www.npr.org/2022/11/15/1136617873/buffalo-clinic-gun...

https://time.com/6249944/monterey-park-mass-shooting-brandon...

https://nypost.com/2022/02/01/waffle-house-shooting-video-sh...

https://abcnews.go.com/US/abc-news-exclusive-teacher-hugged-...

Guns (even nearly 400 of them, carried by explicitly trained professionals) don't necessarily help:

https://en.wikipedia.org/wiki/Uvalde_school_shooting
Are you seriously saying there aren’t exploits on non mobile platforms?

The platforms that have famously had many significant exploits over the years, and are the cause of many major data exfiltration operations?

Are you pretending that viruses and worms don’t exist? Why does forwarding through we have things like windows defender or anti viruses then?
Very neat, I've never seen a Rite Aid with an ice cream area.
I did not even use the term fanboyism, but as long as we are using psychological terms to describe behavior, may I suggest you had a Freudian slip?

I am the one being jumped by you and others for mentioning a competing office suite's word processor in a price comparison. You asked me to look closer, so I did and found that the claims being made against Open Office were baseless. You did not like that, so you made yet another unfounded accusation, this time targeting me.

By the way, I use Google Docs, so I have little interest in either project. However, the FUD being spread against Open Office by LibreOffice proponents has damaged LibreOffice in my eyes.
It's absolutely vendor lock-in, first and foremost. It happens to align with security.

I did a project 10 years ago to sign firmware for embedded devices w/ a planned 25 year product life. I spoke with two different HSM vendors. Both said the Customer would be able to backup and transfer keys from one HSM to another. Both also said that was applicable within their products only. There was no mechanism to switch to another HSM vendor (and neither offered a contingency to get the keys out if the vendor ceased business operations).

Apparently this situation has gotten no better in the last 10 years: https://www.icann.org/en/system/files/files/hardware-securit...

> In April 2023, IANA became aware of the decision by the manufacturer of the Keyper PLUS
HSM – the equipment used to store private key materials for the Root Zone KSK – to cease its
production of the device. Furthermore, the manufacturer will offer no successor product.

That's ridiculous.

There should be a standards-based protocol to transfer key material between HSMs. It should be tied to physical access using physical tokens. Make the protocol baroque and difficult. Heck, even make it a requirement the source HSM has to to be physically destroyed to complete the process (to prevent "cloning" attacks).

For USB authentication keys this level of cloak-and-dagger LARPing is stupid. There should be a method to export and encrypted copy of the contents of my USB token and, worst case, import it into another token manufactured by the same provider. ("But cloning!" Fine-- tie it to registering the token with the manufacturer along with real-world identity verification. Make it a premium service with an associated cost, if that's what it takes.)
Wow, that's so very cool! Olimex are wonderful!
Networking, dealing with humans, and all the work involved in building reliable software that solves problems. In the end you still need to think about what you will build and make sure it solves someone’s problems. AI won’t do that for you.
Stores won't let you have cash-back from your purchase when using your debit card if you flash the card. You have to insert the card. Some cashiers don't even know that. I don't feel enlightened by that fact. Newer cars won't disengage the hand-break if parked on a slope and you don't have the seat locked in. I don't feel enlightened by that fact. The list of "rules" goes on and on and technology feels oppressive, not empowering.
Maybe is artificial enlightenment?

Sorry for the rant.
Perhaps I've missed it but my number one request for these tools is to support time series data and analyses (or other data "structures" in general). The focus on beautiful visualization and easy graphical interfaces is great, but thinking outside the tabular box would be very helpful.
This is actually the first project I've seen that is actually doing any kind of knowledge graph generation. Most are just precomputing similarity scores as edges between document snippets that act as their nodes. People have basically been calling their vector databases with an index a knowledge graph.

This is actually attempting fact extraction into an ontology so you can reason over this instead of reasoning in the LLM.
Those people typically don't tell you ahead of time. I wouldn't do this with my close friend group either, we know each other. I think we can all agree on "hey this is touchy for me could we please not" and it works as a filter for people who get upset about it.
Presumably you've had different experiences, but from my personal D&D experience I've had zero people who abused the "distress signaling" and seen multiple cases where people were a bit uncomfortable and didn't really say anything other than snarky jokes (e.g. a player's backstory culminates in them graphically torturing an NPC to death while everybody else at the table is weirded out).

"Don't play with them" strikes me as impractical advice compared to communicating. If you're 6 months into a campaign as opposed to establishing a protocol to be able to say "hey this is kinda much for me, could we take the gruesome details of this offline?"

Communicating a tone for the setting early would have also helped.
I've had a lot of success with Cost Plus Drug as well.
Target is just CVS pharmacies in store. They sold off their pharmacy business.
Didn't re-read, of course
That’s a slippery slope that I don’t think holds up.

When designing the schema, you keep performance and security in mind.

You need to do the same for REST APIs.

Just because some nodes don’t have edges that connect to some other nodes does not mean you’re back at REST.

The main benefit of graphql in not creating super rigid contracts between the frontend and the backend or between services is maintained.
You literally don't leak memory in safe rust, that is kinda of the whole point. If you use smart pointers sure you can leak but that is not only rust, any ref counted abstraction has that.

Drop IMO is preferred over defer because you can't forget to call a free. If you encapsulate your unsafe (which you should), you can guarantee it will be freed. I much prefer that. If you want to free early just call drop manually, after that if the memory is not freed then that on you to set an allocator basedon your needs.
You need to be far more specific than x86, x86 is just the instruction set, the actual architecture can vary massively with the same instruction set.

In general though there is no penalty for interleaved operations.
Show HN: Learn Japanese Kanji, no silly mnemonics
This would require local HOA boards to register as beneficial owners. I think this bill is poorly worded.
We need devices fully under control of users. Neither Apple, nor Meta should be able to sniff aground once the device lands in costumer's hands
The whole thing with Chalmer's hard problem is pointing out that reduction doesn't get you very far. But here he formulates a reductive panpsychist proposal (though only "in theory"). What part this piece plays within his broader thought - I am not sure.

Nonetheless, it is far from compelling even as a "weak-problem" hypothesis and is an abstract angels-on-hairpin musing that truly puts experience outside of the bounds of investigation. Because, after all, if experience is an empty epiphenomenon which exists for any, anyhow-delineated physical system out there, where does that get us? We've made an assumption we cannot prod scientifically, yet it hides behind the scientific veneer of reductivism.
Hehehe. Smh. It’s also what is said to people who think the earth is flat. Some people just have beliefs that are ignorant of the things they can’t see. It seems like you just did compare borders to slavery, to complement your bogus comparison between borders and racism.

You can keep trying to poke some sort of specious logical hole in my arguments as long as you want, and it still won’t demonstrate anything, since I’m not arguing for borders and you’re not demonstrating any understanding of my points here. You seem unable to articulate any specific reasons, or even a specific goal. I’m not even sure what you’re proposing or arguing against. What do you want here? HN points? An actual discussion? Gain some realistic and practical understand why border policies exist? What?
I can't agree with this stance at all. US shootings and crimes will not be stopped or declined by stronger invasions of privacy and increased searches. US's high crime problems boil down to poor socioeconomic factors. Poverty, desperation, lack of economic mobility and opportunity, draconian law enforcement, poor social services and safety net.

Over and over and over again throughout history, harsher law enforcement and invasion of personal privacy has failed to appreciably reduce crime or violence or murder. At best you merely create divisions in society between the privileged and the desperate that hides the problems from the privileged and wealthy so they can ignore it until eventually it boils over because the privileged and wealthy members of society are shielded from actually seeing the systemic problems that everyone else is dealing with.
> because LLM won't solve any real problem,

LLMs in their current form are very useful tools for many people. Most programmers I know use them daily. I have even friends who aren't tech savvy who paid the subscription to ChatGPT and use it all the time.
Is this evidence of a bubble predicated on suppressed wages though?

When lending costs were near-zero, housing was doing "great". That doesn't mean it's a smart or sustainable policy, even if we had gotten used to that as the norm.

I sometimes wonder if the same applies to restaurants. Consumers got used to lower prices predicated on lower labor costs. Many got used to eating out very often and to a certain extent the economy responds with more restauranteurs. But it couldn't sustain that once the service cost "bubble" popped. Maybe those low labor rates are not the norms we should accustom ourselves to.
On second look, it seems like you've already rejected a PR trying to add local LLM support: https://github.com/getzep/graphiti/pull/184

> We recommend that you put this on a local fork as we really want the service to be as lightweight and simple as possible as we see this asa good entry point into new developers.

Sadly, it seems like you're recommending forking the library instead of allowing people to use local LLMs. You were smart enough to lock the PR from any further conversation at least :)
There are a lot of basic features missing from the flagship llm services/apps.

Two or so years ago I built a localhost web app that lets me trivially fork convos, edit upstream messages (even bot messages), and generate an audio companion for each bot message so I can listen to it while on the move.

I figured these features would quickly appear in ChatGPT’s interface but nope. Why can’t you fork or star/pin convos?
I’d be fine if a third of the total compensation was diverted to a fund that all but takes a minimum of 50k per person per job /gives 100k minimum tax-free per affected citizen in the lowest LCOL, both adjusted upward for locality. To make people whole, that fund would cover citizens in the job market from 2003 onwards that specialized in anything with exposure to the various programs that disincentivized citizens. Then have it apply irrespective of job status.

If you want the best and brightest, pay for the damages created by badly formed policy.
ChuGL: A unified audiovisual programming framework built into ChucK
This is not about dress code--it's about inconsistent enforcement and the letter of the rules. Zaven Andriasian was wearing jeans on the same day. Nepo was fined for wearing a jacket [0].

FIDE confirmed that his outfit was appropriate and the arbiters did not exercise discretion. Essentially, it's an argument between the spirit and letter of the rules. Magnus agreed he'd made a mistake, but wanted to change for tomorrow rather than in-between rounds so he did not lose concentration. He was removed from all pairings for not changing immediately.

The other aspect people have been citing is that Magnus wants to play Freestyle Chess and faster time formats. But FIDE has been very unsuccessful in trying to hold a Freestyle Chess tournament. FIDE is very reliant on Magnus to draw in sponsors, and yet he does not seem to be getting what he wants regarding WCC changes (see his 2014 letter), Freestyle Chess, or faster time formats.

0: https://x.com/lachesisq/status/1872736455132676251
Interesting! Can you point to a good model that shows demand constrains first and ahead of availability crunch? I never saw anything approaching that result, liquid fuels are hard to replace, no?
Yes it has, unless your definition of "stop" is limitd to "after people have been killed", and your definition of "only" is limited by current public policy in the US.
Art Forms in Nature / Ernst Haeckel 100 Plates 300 Dpi Scans