skysight-inc/HackerNews huggingface dataset:
Whilst I agree with most of the points, author is making here I cannot help but make a small snarky remark that we, as a dev community, have been talking and dreaming about those talking points since the advent of html5 which is roughly 15ys.

Marketing and availability, i.e. is it within reach when a customer thinks about it, are core problems needing to be solved.
I think your browser is doing some embedding cause I don't see an embedded video...
As the solo founder of a couple of 'popular' websites I get asked regularly if I want to create an app. When I ask them what they want the app to do what a website can't, they can't name a single USP, especially now notifications work on all devices.

And really, who has the time to maintain a website and two apps? Or rebuild a decade old platform in a janky cross compiling solution like Flutter that is always on the brink of being sunsetted?

Not me. I'll spend that time on improving my websites, thanks. I'll let my competitors go bankrupt on trying to monetise an expensive app that should have been a website.
Which is exactly what Hardy said himself.
[YT-X Author] Thanks.Hope you enjoy : ). Though i still feel there is more to be done, i have been adding features so fast that there are inconsistencies here and there. But that's how i like to work anyways features first then clean up.

Cause in the end most people enjoy the features not the code : )
The article and comments here _really_ underestimate the current state of LLMs (or overestimate how hard AoC 2024 was)

Here's a much better analysis from someone who got 45 stars using LLMs. https://www.reddit.com/r/adventofcode/comments/1hnk1c5/resul...

All the top 5 players on the final leaderboard https://adventofcode.com/2024/leaderboard used LLMs for most of their solutions.

LLMs can solve all days except 12, 15, 17, 21, and 24
> I want to use the same authorization policy for resetting the DA lockout counter on login, and also have a long password/AuthValue for resetting the counter manually.

LUKS has multiple "key slots" so IIRC you can use one slot for TPM unlock, and a different one for long password unlock.

Have you considered using that as your recovery mechanism?

> It's just for a personal project,

One of the reasons very few hobbyists touch the open source TPM stuff is there are a number of alternatives that scratch similar itches much more easily.

Need to protect a crucial encryption key by locking it up in hardware? Buy a Yubikey.

Disk encryption password on your laptop is inconvenient? Just use standby when you close the lid instead of powering off fully. Login password is inconvenient? Fingerprint reader, or biometric yubikey.

Unattended kiosk, school computer lab or similar that needs to boot without a password? Just put it in a sturdy metal box and chain it to the wall.

Server in a data centre that needs to boot unattended? Move to a data centre with physical security you can trust. Still worried? Dropbear or Tang so it has to be on the right network before it'll boot.

Home lab hobbyist, working with the TPM for fun? Assess whether you're actually having fun working with the TPM, and you'll probably notice you're not.
Why so?

Surely if normal people can't do a thing, even if only because it's too complicated or inconvenient, normal people aren't going to be a big source of security issues due to that thing.
But the "A" stands for "app"! Is there anything you could call it that would be less confusing (because "PWA" or "Progressive Web App" sure ain't it)?
Lord of the Rings, much like any folk tale, story or even a book you were brought up with, is a considerable cultural and historical artifact, particularly in the UK. Trying to use it to export US culture wars is just fairly short sighted and pretty insulting to the authors creation.

It came from a different time. If you want change, write something new, you know?
From what I know, the state of the UEFI settings is hashed into some PCR registers. Potentially even hardware serial numbers. Sometimes when I modify non-secureboot BIOS settings, Bitlocker complains and enters into recovery mode.

So I really doubt TPM will release the keys on a different motherboard with different UEFI settings.

User changed motherboard and TPM complains:
https://old.reddit.com/r/pcmasterrace/comments/vdvni1/swappe...
> The problem isn't merely that "detecting maliciousness" seems fraught in itself (how does one infer intent reliably?)

Its not detecting "intent" it is detecting that the hash is one vulnerable to the attack, which is extremely unlikely to happen by accident, so if you see it you can assume malice.

It might be a band-aid, and sha256 is certainly a much better solution, but its more robust than it sounds at first glance (since it sounds crazy at first glance)
Need one for cats.
Gitlab CE 2024: A Year in a Nutshell
D&D is old, outdated, the new mechanics are ridiculous. Pathfinder is even more elaborate, overly complicated and therefore useless, out of touch with reality. The whole D&D is a dead thing. And with these brainwashed additions I'm sure Gary Gygax is turning in his grave... someone should cast a resurrect spell on him and let him decide whether to cast a fireball on WoTC or an ice storm.
Same native apps don't even relayout when you change window size, let you change the font size, or let you copy text.
It pulls so many dependencies and the npm situation is frequent topic of conversation here. And the hype makes it attractive target. No idea how MS and Gihub relate to that.
literally just presented some in the post
- Wake up (preferably no alarm)

- Do 1 set of pushups. As many as it takes to get to failure

- Brush teeth

- Fill up and drink full water bottle, 21 oz

- Eat protein bar

- Start reading through emails and creating todo list for the day
> That's why forking is uncommon in open-source code, and even more so in (specifically) GPLed code: The improvements one group makes in its would-be "fork" are freely available to the main community.

Unfortunately, in the smartphone world this just isn't reality. Trying to obtain code dumps is hard enough for major brands, outright impossible for the myriad of cheap clones. And embedded is even worse, almost no one cares about distributing the GPL code of the BSP, mainly due to fear of violating chipset vendor NDAs.
The writer probably meant "faster [than they used to be]" rather than "faster [than native apps]".
Scary. I assume standard memory corruption detection tools would also have trouble finding this, as the write is coming from outside the application itself…
Being a non-profit that does not have a share-price, I'm curious if you have evidence for validity of your assessment of "big swings resulting in compensation packages".
> What domesticated animals were bread for "cuteness"?

Dogs.

> Cats are mice hunters

Cats blur the line between domestication and taming.

> Most popular dog breeds were selected for killing and dog fight

One can breed for more than one thing. (Dog fighting as a selection pressure is very modern and very limited.)

Dogs literally evolved a muscle to make them more appealing to (and help them communicate with) humans [1].

> many domesticated animals can not even reproduce without human assistance

Not an argument against neateny.

[1] https://www.smithsonianmag.com/smart-news/dogs-have-special-...
By influence people behavior I mean for example "make them thinking about spending more than they were spending before receiving the 2k, 6 months after they stopped receiving the aid". And I mean by this impulsive spending, not planning and the like. You will tell me "but they need that, it's not impulsive, etc.". But don't forget we started from the article that "defaults jump to...". This can be due to multiple causes: "people got actually poorer" (not related mainly to behavior, but more to economy) OR "people changed behavior and suddenly they do things they were not doing before" (possible).

To clarify my opinion (hopefully beyond doubt so that you can't imply things I do not think), I think that blaming people will not solve anything, people are not poor due to behavioral issues, people that are currently poor must just be aided (in multiple ways) to get out of the situation. But people do react differently to different ways of helping, and as we don't have infinite resources, we need to discuss how such interventions affect them on short/medium/long term.

If you prefer more to find points in which you disagree (points that were not clearly there or semantic points as "short term help") I don't think I can bring anything to the discussion. I remained without a formed opinion of why the jump in defaults appeared...
CodeFlower Source Code Visualization
> That being said Microsoft know windows is terrible for software development which is why it’s so easy to use Linux inside Windows with WSL2.

What are you smoking man? Don't impose your beliefs as facts upon Microsoft.
Reviewing 1MB of code is a least 100 times easier than reviewing 100MB of code.
Well, sometimes it needs to be rewritten.
https://westcountryvoices.co.uk/challenging-the-myth-that-fa...

Being a farmer didn’t seem to make much difference one you remove other factors like age and education.
CodeCity: Visualize Software as a City with Buildings
> But fast-forward to today, and browsers can do all that.

Browsers can't access all the APIs in iOS.

> Developers pay hefty app store fees

You pay 99$ per year and 15% for each sale. Apple handles VAT, refunds, distribution and so on.

> They’re faster, more flexible, and work seamlessly across devices. Native apps? Not so much.

Enabling iCloud sync for your app is just a single click on Xcode.

> Why Web Apps Are the Future

On a national TV program in Germany, they talked about an app related to trees in Hamburg. That same day, my app on the App Store experienced a significant spike in downloads. When I looked into it, I discovered that the app they mentioned on the news was actually a PWA! :)

I feel like the author doesn't have any idea about native app development.
> Yes I can guess an ID. So what? I don't understand the threat model here.

can print fake cola codes for infinite refills :) and some other genuine cola buyer will be very angry because their mint-condition bottle already used up.
Also, "one in a million" assuming this tech is only being used by this specific product. if anyone else is going to use the same schema for anything else, numbers will dry up much faster. bringing oats as valid cola bottle is funny. if you add prefix, it'll eat up these sweet sweet bytes

also, 1/million is not that much - you can spam online check api (and you need one with just IDs) to filter out existing ones. All in all 64-bit or so IDs have too many downsides to consider them useful, one simple misstep and the whole model is broken

> Unless the number was copied.

yep, also used up by different device
OpenTofu is doing really well I'd say, and only picking up steam as it's going.

Product roadmap-wise, the team has made some big improvements that have been requested by the community for years, with another big release coming very soon (I believe next week or the one after), here's some of the major ones:

- End-to-End State Encryption - lets you encrypt your state-file end-to-end, either with a key management system like AWS KMS, or static keys.

- Early Evaluation - the ability to parameterize initialiation-time values, like module versions and sources, backend configuration parameters, etc. and keep them DRY.

- (Coming in 1.9) - provider iteration, which lets you use for_each with providers, e.g. create one provider per region, something that currently requires a bunch of copy-paste, or tools like Terragrunt

- (Coming in 1.9) - -exclude flag, which is the opposite of the -target flag, letting you skip planning/applying certain resources.

Probably the best way to see a summary is check out the release blog posts for 1.7[0], 1.8[1], and 1.9-beta[2]. Many of those required non-trivial changes to existing parts of the codebase.

One of the biggest Terraform contributors has also joined Spacelift a couple months ago to work on OpenTofu. All things considered, I'm very confident that the team will be able to handle any feature it sets their minds to, and that those improvements will keep coming. There's a ranking of top-voted issues which is probably the best way to loosely see what will be tackled next[3].

[0]: https://opentofu.org/blog/opentofu-1-7-0/

[1]: https://opentofu.org/blog/opentofu-1-8-0/

[2]: https://opentofu.org/blog/opentofu-1-9-0-beta1/

[3]: https://github.com/opentofu/opentofu/issues/1496

Disclaimer: I am involved in the OpenTofu project and was previously its tech lead.
It's unlikely that they are doing only a plain old LLM query. It's probably a more advanced setup (RAG, Page/LLM Summary Result Querying, maybe even some sort of Summarization validation checking).

Also consider accessibility for low-end devices and development countries.
I am using version
133.0.3 (Build #2016060959), hg-7ed49fe90e84+
GV: 133.0.3-20241209150345
AS: 133.0

with ublock origin.

And it is behaving as expected (correctly, I mean)
A few years ago some guy demonstrated how vulnerable the NPM ecosystem is but NPM chose to shoot the messenger instead of fixing the problem. Makes me think that the three letter agencies want the software to be vulnerable to make their job easier.
Web gaming might be a decent incremental revenue source (< 10%) for big developers or the main distribution channel for small studios that will never make it big.

But it will never be more than that.

1. Game ops is too entrenched in mobile. The entire stack (user acquisition, analytics, monetisation) is tried and tested on mobile. These are difficult problems that seem easy to port to web games, but “devils in the detail”. Eg When you’re waiting on appsflyer to ship an update to properly attribute reinstalls for 6 months and end up wasting 25% of your UA budget during that time.

2. Consumers don’t want web games. The UI just isn’t there yet. You misclick out of a tab and lose progress or get distracted / start browsing another tab. Also to do with the ephemeral nature of a browser tab.

3. Unity’s dev network effects are too large. People who know how to make games use unity. People who want to make games therefore learn unity. It’s a flywheel.

4. Something psychological about downloading an app and seeing it on your Home Screen leads to retention.

Source: 7 years game dev and each studio I’ve worked in has been paid multiple tens of thousand dollars to port a game to web. Metrics were never anywhere near as good.
Yeah they’re all funded by Google, so by your explicitly stated principle you can’t use any of them
Mozilla is like that ADHD child that will do anything except to work on what made company successful in the first place - browser.
My bank just exports to CSV, which is trivially importable to Excel, Sheets, Pandas or whatever else you need.
Nobody’s taking about Georgia joining the euro
In a day of Illusions and utter confusions, we base our conclusions on our delusions. -Peter S. Ruckman
How's LineageOS with WhatsApp, Signal and random banking apps these days?

Or let me put it another way: anyone running LineageOS but struggled to run any essential apps? (I don't care about games or whatever, I mean the apps you need to get around in life).
This move makes sense for Firefox adoption, as Chrome has AI features built in now such as Lens
Sure, but my point above is that even with more transparency you won't catch people who are good at hiding.
What a wonderful article, well worth the long read, that's an understatement.
Offering beta services for free is industry standard and legit, as are free capped tiers, I do not see an issue there.

Honestly, I'm all on board for a privacy-minded company like Mozilla to offer paid services like VPN or email aliases. They have earned their trust, and if paying means contributing to the sustainability of their mission and the open internet, than that's even sweeter.
Purest bigotry.
Interesting product, very relevant in our time and age.

My guess is this could be useful to many "knowledge workers" who constantly have to crawl, translate and find the meaning of the sugar coated landfill that has become most of the web.

We are right in the middle of the Tower of Babel story.

Seriously if it works reasonably well on legal fine prints I am in.
Scientists believe they have discovered the real reason Stonehenge was built
> But sure he put solar panels on the White House.

Which were not photovoltaic and leaked like a sieve.
In the 8 years since Brexit millions who voted for Brexit have died. Nobody under the age of 26 voted for Brexit, and more above the age of 26 voted remain than voted leave.
I don't think this accurately describes the state of iPhone forensics today.
I watched some of those movies - my god they were terrible. I'm pretty sure Willis filmed his parts in front of a green screen because he was never in shot with other actors.

Knowing the reason why though, I don't blame or fault him for doing it.
We're building Thymer [1] for this, which is end-to-end encrypted, offline-first and optionally self-hostable. It's like an editor but you can organize anything into custom database views, we hope to get it ready soon.

[1] https://thymer.com/
Are you sure that the game will not run on a 1080 Ti? I recall Nvidia implemented Ray tracing in a compute shader for a number of 10/16 series cards:

https://www.tomsguide.com/us/ray-tracing-gtx-gpu-driver,news...

I ran Quake II RTX on Linux on a GTX 1080 Ti with RTX on back when I still had one. Of course, the performance was bad, but it ran. Some sites have benchmarks:

https://www.thefpsreview.com/2019/06/08/quake-ii-rtx-perform...

The RADV driver apparently did the same for ray tracing on Vega.
On a side not, I like how we have electron apps that are 100s of mega that just access a website. Just as much of a waste.
There are other platforms than iOS.
The blind test at lmarena.ai does give it a higher Elo than GPT-4o (API), Claude, and Gemini 1.5 Pro. It seems that people do enter real-life scenarios in the arena.
Maybe in the future we will agree on using only standardized, verified, shared software so we can really trust software?
It used to be dirt easy, i remember my s5 was just "fastboot oem unlock" and flash the new image...

Sure you'd lose knox, but nobody really uses it anyways... But from what lineage is saying, it seems Samsung made unlocking impossible on North American devices.

I'm not sure what the law side of things is like for this, because I recall it being mandated that phones could be sim unlocked after contracts expire... someone should try seeing if there is a legal requirement for unlocked bootloaders.

Edit: I wish apps would also stop whinging about unofficial OSes or devices being rooted... banking apps, mostly.
My intuition is that with very small microbatch sizes you're very likely to end up in one of the two modes: either the vast majority of the samples are aligned and thus pruned away, or they are not aligned. Thus effectively you're dropping a fraction of the samples but without the advantage of removing the variance between samples that belong in different microbatches.
It's not going to be 100MB of code.
What are the most obvious downsides to this approach?
Waiting for PostgreSQL 18: Add UUID version 7 generation function
Reddit is already full of these...
BYD must be all over Starmer to build a plant in the U.K. … wonder why he is holding out I would much rather buy a BYD than a UK screwdrivered car now Musk has ruled out UK plant
FirstVersion-Rebuilding the first versions of great products with AI
Multispectral imaging through scattering media and around corners
I use comic mono currently but switch on a semi regular basis with fira code and jetbrains mono depending on mood.
This should be auto posted as first comment on every post about a new technology / platform
H-index means nothing when there's always a name under authors that didn't do anything ;)
I don't want AI features in my browser. I want to browse the web with it.
Oh look, small world!
Toy Neural Net Visualiser
source code:
https://www.github.com/attentionmech/tildnn/blob/main/projec...
Thanks for the interest! I use aisuite (cf link) to manage what LLMs to use. You should be able to switch from one provider to an other quite easily (even hugging-face if you want). I don't know if aisuite supports local LLMs tho, might be a good thing to check.

aisuite : https://github.com/andrewyng/aisuite
Agreed I’d rather spend more time on itch. But from a dev perspective poki has a chance to monetise while itch monetisation is near zero at the moment.
While the web platform is catching up due to the continuous supply of abstractions by modern browsers, once you must deviate from those abstractions, you quickly find yourself needing to implement something yourself that is much less efficient than a native implementation.

I wrote about developing my own block editor from scratch[1] using C++ and QML after finding that Notion (and so many other web apps) are extremely slow and inefficient - in terms of CPU/RAM/battery life.

I detailed a comparison between native and web block editors, and the difference is huge. The fastest web app (MarkText) is 60x slower at loading texts and uses 3x more RAM than my native app. Also, all web apps couldn't handle loading a very large text file (they were all hanging).

Modern computers are blazing fast and efficient, there's no reason a text editor couldn't load large files. This is why, in my view, web apps aren't really the progress people make them to be. We're going backward, not forward, with web apps. This need to change.

[1] https://rubymamistvalove.com/block-editor

[2] https://rubymamistvalove.com/block-editor#8-performance
And don't brag about your crimes after the fact online, or anywhere else either.
They are pretty diverse with all technologies. Browsing Alibaba it's amazing the range of stuff you can get.

It's almost a free for all without too much worries about regulation whether cars, nuclear, viral gain of function, high speed trains etc.
Why Khanmigo Will Fail
I've honestly never run into any problems with apps not working in the last couple of years of using it.
Show HN: A remake of my 2004 PDA video game
My background project for the last two years has been re-implementing my 2004 C++ shoot'em up game in TypeScript + WebGL, and it's finally done (just in time for the 20th anniversary!)

Play the game online: https://nicollet.net/blog/darklaga/darklaga.html

Technical article about the remake: https://nicollet.net/blog/darklaga/remake.html

I have tested Firefox, Chrome and Edge on desktop and mobile (no access to a device capable of running Safari).

It's amazing how much difference 20 years makes: the hardware is so much more powerful, the web as a deployment platform is so much easier than side-loading onto a PDA through a serial cable or sharing .exe files through e-mail, and my experience as a professional developer makes almost everything so much easier... but at the same, it didn't feel that the language, editor or debugger (TypeScript on Visual Studio Code) were significantly better than good old Visual C++ 6.

Repository with the code of the remake: https://github.com/VictorNicollet/Darklaga (sadly, I cannot provide the video and audio assets themselves under any open license).
Peems.
Beijing denies involvement in US treasury cyber-attack
At least, I’m not feeding Google directly with my every keystroke, so that’s a plus. At least in my eyes.

Sometimes we have to be pragmatic, especially if being pedantic is detrimental to our aims.

Happy new year.
A Billion Pixels a Second: Inside Apple's iPhone 16 Camera Labs
Your first quote is very misleading because it followed this:

> apps had unique features like notifications and offline access.

Browsers can do those things. If you're going to offer "Browsers can't access all the APIs in iOS" then, at the very list, provide one or two examples of what you're referring to.