treesknees

Why not link to the English version? It seems intentionally misleading.

https://www.kimi.com/user/agreement/userPrivacy?version=v2

There are many people who believe everything must be a grind to get rich. I wish more people stepped back and did things online because they were fun or educational, not because it was monetized.

Something I didn’t see mentioned was that this unequal memory access time also affects pcie I/O. If your thread on CPU A needs to get data in or out of a nic on CPU B, your throughput/latency will be impacted.

We have to explain this to customers of our software all the time, it’s something that’s easy to miss.

ZeroSSL – free 90-day certs via ACME, also has a web UI for cert management

Google Trust Services – free ACME certs, requires a Google account for registration

SSL.com Free DV SSL – offers free 90-day certs through ACME

You can sort of do this today with iCloud. Add a custom domain and enable the catch-all forwarding, and you can receive anything@domain.tld and it’s forwarded to you.

What you’d lose is the reply-to forwarding feature.

I have over 300 so far. In addition to knowing where spam is coming from, and being able to block it, it also helps prevent correlation across accounts and websites as data leaks occur.

This exactly reflects my feelings lately. I have a specific coworker who has gone somewhat overboard - every single code review, answer to any question on email or Teams, every new story, even their personal opinions during a design or ideas meeting, are all direct AI output with no massaging or human touch or review. They're working on planning out an upcoming project, and I just get verbose and long documents to review, and based on the issues I find I doubt they are even looked over first beforehand.

I understand that the information may be accurate, even helpful at times, but feeling like I'm constantly talking to an AI chat bot all the time gets tiring. And I don't appreciate having to double-check everyone else's AI generated responses for them.

GitHub Copilot refuses to do any security testing or proof-of-concepts for exploits. While I understand why, we pay for Enterprise and I’m working on our proprietary code base. It’s incredibly annoying.

I’ve actually had luck taking the analysis from GHCP and pasting it into our M365 Copilot and getting a useful poc to stick into my bug reports.

Location is used for tracking distance/speed for certain activities and measuring VO2 max levels, and for finding a lost ring.

I was stuck between the two, Oura won for its better sleep tracking and battery life.

I suppose one option would be to enable data syncing to Apple Health, and periodically delete/create new Oura accounts to purge historical health data. Not a great workflow, but would let you benefit from E2EE with Apple Health while using Oura (assuming Oura’s “delete account and all data” does what it claims)

Microsoft was effectively paying Anthropic for thousands of seats. Switching to internally-developed tools eliminates that cost while strengthening Microsoft's own AI product portfolio

This is just shifting the cost around. At the end of the day, whether developers are using Claude models through Claude Code or Copilot, Microsoft is still paying Anthropic.

For the price, they could buy an exact replica bare metal server and still save money.

Don't post generated comments or AI-edited comments. HN is for conversation between humans.

https://news.ycombinator.com/newsguidelines.html

I don’t think it’s API costs. Their Sonnet 4.6 is just 1x premium request which matches the 1x cost of the various GPT Codex models.

You’re not locked into vscode. There are plugins for other IDEs, and a ‘copilot’ cli tool very similar to Claude Code’s cli tool.

I also wouldn’t say you’re locked into Microsoft’s ecosystem. At work we just have skills that allow for interaction with Bitbucket and other internal tooling. You’re not forced to use GitHub at all.

I thought, good thing I've already hit my 5-hour session limit.

Because systemd isn’t an operating system. It’s just providing a mechanism for the OS to store/lookup the user’s birthday. It’s up to individual distros to do the verification (should the law stand and OS vendors choose to comply)

In what context are people saying this? I’ve never heard anyone proclaim that electronic devices are more reliable than mechanical devices. See for example how people desire cars with “no computers”.

I’ve used it quite a bit, but just as a natural language frontend to their search engine. I don’t see it as a true alternative to generic chat bots like Claude or ChatGPT, and certainly not a coding tool. I would likely not subscribe to Assistant.

Maintainers of "small web" servers are not being forced to use TLS. If you want to put a plaintext HTTP server on port 80 on the Internet, you can totally do that today with no issues. Sure, modern browsers like Safari and Chrome will show a "Not Secure" message in the address bar, but users are not prevented from getting to the website. Perhaps your site won't be listed on Google, but I think for small web that's acceptable.

That said, there's more to the web than just blogs and recipes. If I want to run a small web forum for enthusiasts of some hobby, I think it'd be irresponsible of me as a webmaster to run that from a microcontroller if it prevents my users from being able to securely authenticate without their password being revealed to prying eyes.

It could be a move to have parity with TikTok, where they claim it’s for safety reasons. I’ve been seeing advertisements for Instagram touting their child/teen protection features. Seems like they’re really trying to beat the allegations that Instagram is bad for children’s health.

https://news.ycombinator.com/item?id=47241817

It’s not all about the government contract itself. By being labeled a supply chain risk, other companies cannot use Anthropic products if they want to work with the government. So it’s worth having that distinction by a judge, even if it takes some time to get it.

It’s essentially a middleware between Bing search API and a (custom?) Claude model.

I’ve been using the Kagi Assistant with various models. It’s more of a glorified search summarizer but it’s essentially free with my existing subscription.

I completely agree with this. I'm playing through Leaf Green, and I'm around 8 hours in with just a single badge. I don't think I'd get through it without the boost of nostalgia for the GBC/GBA games. The newest games are nothing like the slog we went through as kids.

In my experience many middle eastern companies tend to only operate out of the Middle East AZ’s. They’re not backhauling their data and customers to us-east-1. If the goal is to severely disrupt middle eastern rivals, then you don’t need to hit every possible AWS datacenter.

I’ve read the article. Sounds like you don’t understand the difference between MQTT and Bluetooth.

It’s been like that for several years.

We have one internal IT team who leaves things on non-standard ports, like https 8443 with no redirects on the standard ports. Drives me mad.

And so what? Security is important, sure, but there’s nothing wrong with an experiment or side project with full disclosure upfront about its known limitations.

People should be empowered to share and tinker, without feeling like they need to setup a bug bounty program first. Not every GitHub project is a vendor/customer relationship.