skysight-inc/HackerNews huggingface dataset:
The other thing to remember is the games and the engines built together handle each other - Doom couldn't have a floor above another floor (engine limitation because of CPU limitations) so the level designers created tricks to make it feel like it did.

When you're designing both you can take advantage of features you add but also avoid the ones you can't do well - or even change the art style to "fit" the engine - pixelated angular mobs fit Minecraft quite well, but once they start getting more and more detailed you're in an "uncanny valley" where they look worse and more dated than Minecraft - until you finally have enough polygons to render something decent.
You can change that in settings.
Either you are lying or not good enough to drive car. What about White women? Are they going to take "subway" because there is congestion pricing?

YOU are naive or in for big surprise.
> The ideological bits are: ...

Should we expect Meta doing 180 degrees u-turns every 4 years when another party wins US Presidential elections?
I love how the first example is "use the common interfaces for new code". If only! That assumes there _is_ a common interface for doing a common task, and things aren't just a copy-paste of similar code and tweaked to fit the use case.

So the only tweak I'd make here, is that if you are tempted to copy a bit of code that is already in 100 places, but with maybe 1% of a change - please, for the love of god, make a common function and parameterize out the differences. Pick a dozen or so instances throughout the codebase and replace it with your new function, validating the abstraction. So begins the slow work of improving an old code base created by undisciplined hands.

Oh, and make sure you have regression tests. The stupider the better. For a given input, snapshot the output. If that changes, audit the change. If the program only has user input, consider capturing it and playing it back, and if the program has no data as output, consider snapshotting the frames that have been rendered.
AI responses need a source (lol, I know) or they just can't be trusted. It's that simple. Unless you believe everything you read on the Internet!

They obviously are a step of evolution beyond search in capability.
Tough times. I feel like this is caused by massive capital misallocation over decades. The vast majority of tech companies should not exist, if not for the financial environment propping them up. Now with interest rates going up, there is less cheap money and companies are forced to lay people off and/or shut down themselves.

Reality is that there are too many software developers chasing a small number of value-creating opportunities in a sea of useless or highly inefficient tech companies.

In the meantime, there aren't enough people to produce food, build houses, collect garbage, etc... So costs of essentials keeps going up. It's hard for software devs to transition to physical jobs so it's going to be a tough one.
It’s much worse than that.

Every single example mentioned by the GP isn’t just a statistical measure, they measure of a wildly political (as in, defined by humans in a deeply imprecise manner) issues:

> - whether crime is up or down

Which kinds of crimes? In which political boundaries? In which reporting period? Did definitions change? Is reporting down because of ineffective policing? Is reporting up because of effective policing? That statistical games played with crime stats are criminal.

> - whether the earth is warming or not

There is a reason the phrase “global warming” went out of fashion in preference of “climate change”. Warming up how much? Over what time period? With what error bounds? Assuming which runaway processes? In which areas? Due to which causes? What are the error bounds around the sign of the change?

> - how many people live in poverty

The government literally draws a line in the sand and declares anyone below a certain income level is living in poverty. Who set the level? Why did they set it there? What is the standard of living at that income level? In which areas? How long do people live in poverty? What, if anything, prevents them from moving upward? What is there effective standard of living after government programs and charitable giving is taken into account?

> - what the rate of inflation is

This is literally defined by bureaucrats at central banks. Inflation according to which index? How were the index components chosen? How are the index components weighted? Over what time period? In which areas? Even the concept of “inflation” is highly suspect and basically incoherent.

- how much social security or healthcare costs

Over what time period? How did the demographics change? How about inflation? Where did the cash flows go and how did they net out? Which purchasing regimes were in place? How did the programs change? What was the quality of the services?
Am I misunderstanding something, or are passkeys not actually an alternative to magic links?

Every implementation of passkeys I've seen has presented me with the option to create a passkey after I've already logged in with some other method. I'll admit that I haven't dug into it deeply, but the UX I've been presented with consistently makes passkeys appear to be an alternative to the "Remember this computer" button, not to passwords in general. Somehow the service has to know that this new device is authorized. I know depending on the provider there's such a thing as passkey syncing, but that doesn't solve the problem of getting the initial authentication done.

The key insight with magic links is that your security system is no stronger than its recovery mechanism. We are never going to get to a world where passkeys are treated as the only authentication mechanism—there will always be a recovery mechanism, and in most cases an automated one via email. Given that that is the case, magic links simplify things by just not pretending that we have a more secure layer on top. By making the recovery mechanism the primary means by which you interact with the authentication flow you're being more honest about the actual security of your auth system.

Edit: filmgirlcw has a link to an article that is much better than this one that explains how the two actually complement each other: https://news.ycombinator.com/item?id=42628226
There are actual micronuclear reactors though, which is why I was initially hopeful lol:

https://westinghousenuclear.com/energy-systems/evinci-micror...

Other names to google: NuScale VOYGR™ Micro (77MW scalable), Oklo Aurora (1.5MW), Ultra Safe Nuclear Corporation (USNC) Micro Modular Reactor (MMR) (5MW thermal, 1.5MW electric), Rolls-Royce SMR (470 MW), HolosGen HolosQuad (3-13 MW), X-energy Xe-100 (80 MW)
I think every developer finds footgun issues with various tools for their aims. Or, I know developers that express similar sentiments towards Unity (or Unreal, proprietary engines, etc.).

When a game team is successful, it can often stem from having picked tooling and workflows that enabled them to be productive enough and avoid enough pitfalls. That’s going to change from project to project and team to team.
Baker's?

https://books.google.se/books/about/Nuclear_Power_and_Energy...
It works fine for me in Firefox on macOS. Many participants. No slowdowns.

Try running it in a Private Window, and/or with all extensions disabled?
I would like to hear more details about your adventure. Do you have a blog post or similar that you can share?
In the Vorkosigan Saga, the "uterine replicator" appears as a minor but persistent future-technology, where the main selling point is Not Dying To Your Stupid Biology, followed by convenience.

> "[The] debate that will fundamentally alter Barrayar's future is being carried on right now among their wives and daughters. To use it, or not to use it? Too late to keep it out, it's already here. The middle classes are picking it up in droves. Every mother who loves her daughter is pressing for it, to spare her the physical dangers of biological childbearing. They're fighting not the old men, who haven't got a clue, but an old guard of their sisters who say to their daughters, in effect, We had to suffer, so must you! Look around tonight, Mark. You're witnessing the last generation of men and women on Barrayar who will dance this dance in the old way."

-- Mirror Dance by Lois McMaster Bujold

[0] https://en.wikipedia.org/wiki/Vorkosigan_Saga
It's funny that Lenovo thinks this is what will sell laptops.

If I had a chance to hands on this abomination, i'd load up a pic of longcat and then decide i've had enough of the quirk.
Thanks for sharing. I never used one before so don't know how good/bad it was. My iBook runs OS X so it is pretty good.

It's a bit embarrassing as the 68k emulation was part of the reason that I got fascinated. But I just want to learn binary translation, not really use them, anyway.

I think Apple in the early 90s threw things on the wall and hope something stuck. Bad for consumers, nightmare for admins but good for engineers who managed to make the throw.
The whole post in tongue in cheek, it just means "features the game you're making doesn't need (like modern graphics with advanced shaders and super high resolution requiring the latest graphics cards)".

If you're making a game that needs those features, obviously you'll need to bloat up. If you're not, maybe this SDK will be enough and be fast and small as well.
May I ask what you’re training? And why not just rent GPUs in some cloud?
I was skeptical at first, but given that it’s such a well known energy company, I’m sure this will be a great product!
The biggest disadvantage of this scheme is that if a malicious actor can trick you into scanning an arbitrary QR code, they can get access to your account (by visiting the login page themselves to generate a QR code, and then sending you the code).

Discord implements this feature, and this phishing scheme is extremely common: bots/scammers will message you saying "to access <some desirable content>, please scan this QR code" -- and if you scan the code, the scammers have just taken over your account. It's not much harder than rickrolling someone unless they're savvy enough to be aware of the scam.

Of course this can be mitigated somewhat by putting a big scary confirmation screen that says "don't click continue unless you're trying to log into your account from another device", but 1) users don't read, they just click "continue"; and 2) the attacker controls the narrative before the user clicks the QR code; they can craft the language to make the scary warning screen make sense to the user ("yes, I am trying to log into this discord server that this person sent me an QR code to").
Oh vey! YOU don't know what you are talking about. You are average investment Bankie who claims to make dollars.

Your response is emotional and not practical. Tell me how Congestion Pricing is not a tax on poor and does not take away their hard earned money for no reason? Does it not comfort for rich people who make money on stocks mostly?
I honestly can't tell much difference between expensive coffee and Maxwell House. But in general I've never nerded out over coffee, wine, bread, cheese, whiskey, or any other food or beverage.

I don't add sugar to my coffee either.
Discussions

(556 points, 18 hours ago, 435 comments) https://news.ycombinator.com/item?id=42619139

(123 points, 11 hours ago, 28 comments) https://news.ycombinator.com/item?id=42621332
> Disclamer - I owned a restaurant that gave Pepsi products to customers who explicitly ask for a Coke.

I have in fact heard "coke" used as a generic before. Just like google, kleenex, champaign, cheddar, ...
Pretty much this.

OpenAI poisoned the well badly with their "we train off your chats" nonsense.

If you are using any API service, or any enterprise ChatGPT plan, your tokens are not being logged and recycled into new training data.

As for why trust them? Like the parent said: EULAs. Large companies trust EULAs and terms of service for every single SAAS product they use, and they use tons and tons of them.

OpenAI in a clumsy attempt to create a regulatory moat by doing sketchy shit and waving wild "AI will kill us all" nonsense has created a situation where the usefullness of these transforming generative solutions are automatically rejected by many.
Everyone that doesn't like a new standardized defer is doing https://knowyourmeme.com/memes/no-take-only-throw but as "no forest, only trees"

The explicit alternative for defer is an unreadable mess. And guess what? If you really need to see it, we should having tooling that desugars the defer to gotos. That's the best of both worlds!

- The "master" source code is high level "say what I mean"

- Low level view that is still much higher than dropping down into assembly still exists!

You really should be able to express the required cleanup semantics with "defer", and if you cannot, you can always just replace the original with the low level view and edit it instead --- good luck getting that past code review, however :).
I don’t mean it’s common knowledge among laypeople, just that someone determined enough to spend a weekend reading image gen documentation and the StableDiffusion subreddit can probably figure it out. It’s not like they need to take a months long bootcamp to learn to code first. Once they sign up for replicate (and I guess github for SSO first), all they have to do is find the page for the fine tuning and upload a zipfile of images.
Codementor Client from Hell
Halp!? I have a client from hell who is trying to not pay for his IAC project.
You can get something working quite quickly (especially with things like Unity) - but to get them looking amazing takes extra skill and polish.

Even a "2D" game like Factorio has amazing polish difference between original release, 1.0, and today.

(This can very obviously be seen with modded games, because the modded assets often are "usable" but don't look anywhere near as polished as the main game.)
One little tip I learned the hard way: an applicant tracking system (ATS) can claim to have imported your fine-looking Word or PDF resume, but that does not mean that it has correctly parsed it and populated the key fields (eg skills) that it shows to the hiring manager.

The problem seems to be that ATSes struggle with the "modern" style of resume, much beloved of Word template authors, where you might have a left column with your contact details, github, and maybe some skills and then a borderless table on the right side with your positioning statement and job history.

I went from zero callbacks to 80% after I junked Word and rewrote my resume in a much more old fashioned, linear format. I used Overleaf (LaTeX) like it was 1999 and exported to PDF.
Are there Merkle hashes between the rows in the PostgreSQL CT store like there are in the Trillian CT store?

Sigstore Rekor also has centralized Merkle hashes.
"Secure" Boot is great at enforcing DRM against consumers, but it's no good at actual security. Why is Ars shilling for it?
The first thing I thought when I read this is how can the author make the specific criticisms of links/otp codes and then suggest passkeys, which have pretty much the same issues x10. Like if using a OTP from your phone or copying a link from your phone when using a work PC to visit a website is a pain, how much easier/better/same is it to try and have your work computer work with your personal passkey from a laptop or something?
I think this is really great as a response to 404's post last week. I love 404 but I'm as annoyed by Magic Links as OP for the same reasons they mention.

Ricky Mondello wrote a really great blog last week[1] about how passkeys, as OP alludes to at the end, can be used alongside Magic Links, that I think is worth a read.

[1]: https://rmondello.com/2025/01/02/magic-links-and-passkeys/
If you have a halfway competent security team they will never ever let this fly. You are begging your users to get phished.
>excited to practice his rusty Russian

He's a native Russian speaker who grew up in Moscow. Zelensky is also a native Russian speaker.
Religious Leaders Experiment with A.I. In Sermons
I agree and I am sure physicguy also agree but, alas, those who manage the grants system frequently don't.
This is smart and I don’t see anything wrong with it. They are familiar with malicious compatibility, though usually from the other side.

Props for one of the rare times they apparently thought a UI through.
https://archive.ph/BQY85
Yeah, that's an interesting problem.

I've worked in planning for a bit, mostly for robotics. I can honestly say that the _planning_ side of making interesting behaviors is really simple. It's the world representation that is hard. In the real world it's hard to build up a good enough representation to do smart things. Most robots can't reasonably see longer than 50 yards/100 yards. In games is hard to build up a bad enough representation to match the partial information in the real world - running just about any planner on the map will just work and probably look too good.
I think the gist of it is humility: as a newcomer, you don't really know what's out there and why, and there are often good reasons for things to be how they are. Not always, but often enough for avoiding being too original to be favored. This doesn't imply relinquishing on "good engineering habits" either.

Now, once you have a deeper understanding of the codebase, you'll know when and why to break away from existing patterns, but in the beginning phase, it's a good habit to start by learning carefully how things are designed and why.
Even on Android that behavior is the bane of my existence.
As someone that does this for a living, 100%. Email OTP is a great alternative that splits the difference of magic links vs passwords.

Agreed with some other folks that Passkeys is not a replacement for email verification.
This is a fair point to bring up.

Most sites will have a confirmation once you click the link that includes the browser version and IP address. I have seen that info only in the email itself too with no confirmation afterwords, but not for some time. Have never seen one that is just a link with nothing else that once clicked allows the other device in but supposes could be implemented that way.

The article itself is about not making them the only option (which is fair), and the OP says if they do it should login the device which originally made the request (which I agree). If the implementation is just an email with only a link, no other information with no confirmation (yes, it's fine to let this device in), then I would have to agree with you it's very risky and could allow anyone to login as you (hopefully no sites are doing this, but...)
This is honestly the real "hacker news". $250 for what was likely millions of dollars of visual design and global household name recognition
Well, the Kensington dock at work did not work (for delivering power to the phone and letting keyboard and mouse be used) - in fact it did none of those things. But ordered this cheapie from Ali:

https://vi.aliexpress.com/item/1005007015739540.html

which does claim to work with various smartphones. We'll see.
For 3, if you haven't seen snapshot tests, like those using the insta crate, it makes it very easy to detect when values change like this in tests/ci.
Great info! That answers my question entirely.
"Continuously sending proprietary code and related IP to a third party"

Isn't this... github?

Companies and people are doing this all day every day. LLM APIs are really no different. Only when you magic it up as "the AI is doing thinking" ... but in reality text -> tokens -> math -> tokens -> text. It's a transformation of numbers into other numbers.

The EULAs and ToS say they don't log or retain information from API requests. This is really no different than Google Drive, Atlassian Cloud, Github, and any number of online services that people store valuable IP and proprietary business and code in.
If you don't have something to hide, your life is lame. LOL

Seriously, though, what would the HIPAA violation be for location data? Knowledge of someone going to a doctor's office doesn't sound like a HIPAA violation. AFAIK, violations only relate to what is communicated between doctors (and other healthcare professionals) and patients.
Wait, so what is the bit about Morrowind and Half life? Doesn't seem to be mentioned anywhere.
> Truly this sounds to really complicated that a phone which is indeed a computer cannot do computer things

An iPhone with USB C supports most of the standard protocols you would expect - video, Ethernet, audio, external storage (USB 2 speeds on non Pro models and 10Gbps on pro models), and wired keyboards and mice.
I could be wrong however I believe all listed games can be run in full screen at modern resolutions.
> Putting "Doomsday book" in the context of crisis management explains why this document exists.

Really? They could hardly have picked a worse name; the Doomsday Book is, very famously, a register of who owns what. It has absolutely nothing to do with emergency response or crisis management.

But the document that the name implies it should be, a register of who owns what, is not at all an unlikely thing for the Federal Reserve Bank to have.
The engineering behind the San Antonio River Walk
I get that you absolutely hate Trump, but it's causing blindness.

To my point, your narrative doesn't fit reality.

A lot of these people were riding with Trump in 2016. Zuckerberg was already friends with Dana White and spotlighting MMA before endorsing Trump.
Have seen people who disagree over issues like climate change or the Israel/Palestine conflict? The disagreements are not just over policy, but over what is even real.

Or, if you have 15 minutes, this video clip examines how major media outlets cover (or do not cover) two different atrocities:
https://m.youtube.com/watch?v=s8mP2jN6bJI
UPDATE: API looks like it's back up! Hopefully it'll last longer next time.

Didn't expect the hug of death with this haha
Against what, microbes?

There’s a reason surgeons disinfect their hands with more than a skylight. Sunlight is a shitty disinfectant.
I really liked this:
"as a general rule, large established codebases produce 90% of the value."

People see the ugliness -- because solving real problems, especially if business practices are involved, is often very messy -- but that's where the value is.
> Because no-one, including you, is an expert on everything.

As I said, god forbid I forget my place and use my mind in the domain of my betters.
It's also available in emacs with packages like gptel which let you send the content of any buffer to your LLM of choice.

I think emacs + LLM is a killer feature: the integration is super deep, deeper than any IDE I've seen, and it's just available... everywhere! Any text in emacs is sendable to a LLM.
I don’t understand how folks think the economy will survive the advent of AGI. Imagine if you could spin up white collar workers at whim for a fraction of the cost… how do we think the economy is going to work if that happens?
Why doesn't sending an OTC to an email and marking it verified if they put in the code also work?
Adding to the article:

I seriously HATE magic links. My email inbox is barely better a social network's time suck. Lots of urgent, little important, wrecks any flow I had.

Forcing me into my inbox is highly likely to cause me to forget about the reason I was there (to get into your app). Or, at best, it slows me way down and nearly always breaks my flow.

Perhaps this is acceptable for the security boost (?) for the average user, but man, when I get forced into magic links I sometimes just abandon the app altogether.

Disclaimer:
1. I have/pay for a password manager, which helps with the forgotten password problem a lot. It also allows me to have extremely hard-to-crack passwords.
This is fantastic, actually. I love that this will let us create games in the late 90s FPS style but with all the niceties of modern hardware. Now if only I had any skill in 3d modelling...