The first time you go to the bank, you do the "trust exchange" (maybe scanning a QR? People sure love that) that verifies future connections, similar to how you acquire digital certificates today when you deal with the government online and similar.
Edit: > Every time you access your bank on different devices normalizes it so that visiting a typo domain would show the dialog and many would just click through.
Show the dialog? What dialog? There is no dialogues here, you cannot login to the bank unless you've verified the connection. You do it with your phone, then you can propagate the trust from there to other devices if needed.
Not all banks have physical locations, not everyone has the ability to get to the ones which do.
You can't walk back from the existing expectation and ease of use we have today. It's just not going to happen, people will opt for the current path because it's easy and seems good enough to them.
Most normal people don't even know this whole thing is going on. They don't know the difference between http and https other than "it's secure".
If we want to improve on this, it has to come with the current level of ease of use at a minimum.
> If we want to improve on this, it has to come with the current level of ease of use at a minimum.
We need to recognise that is impossible. Making getting into a bank account easier for the owner does so for everyone else too. And also makes it easier for the bank to ditch the secure fallback - a building.
And ask why vendor-indepedent trust shops aren't sprouting in every locale. Answer: same security problems.
We are well and truly doomed to living in a scammers' paradise.
And also, how is my bank supposed to safely generate and distribute a key that we can exchange securely if an organisations who's primary purpose to generate these keys couldn't even manage to do so.
I have plenty of other services I use too. Suddenly my phone company, doctors, supermarket has to create and distribute keys for me to go around collecting so that I can securely talk to them and we have to do this in a way that stops anyone from swapping those keys out before they get to me.
I mean the current system isn't perfect, but it's a Utopia compared to that.
It does seem to lean on the physical bank-front being trustworthy (no evil clerks).
If we’re meeting physically to set up connections, we could even use something like a one-time-pad, and be information-theoretically secure. How many bits does your bank really need to send you securely anyway?
Every time you access your bank on different devices normalizes it so that visiting a typo domain would show the dialog and many would just click through.
Ignoring the overly pessimistic and self-defeating overall tone:
> There is no chance that humanity will ever come back to any pre-industry levels within the next 500 years
How could you possibly predict this? We have moments of time in history which are basically "before/after", and no one saw those points coming until they were in effect. Electricity, atoms, nuclear energy, walking on the moon, transistors, internet, LLMs and more are examples of these things, that were short of impossible, and had lots of people claiming "We'll never do that in a hundred years!", up until we already accomplished those things.
What I'd like to know, is what the point is? Why claim "our civilisation wont last 500 years" and similar, what do you wish to achieve with this? What conversation do you wish your comment to spawn, that people tell you you are wrong? Or right?
You are replying to a climate activist. They are not glass half empty people; they are glass half filled with poisonous air people (ignoring the water). They have no dreams, no positivity in life, and think humanity is evil. Many of them even consider humans as cancer on earth. They are pessimistic and have no hope in their lives. It is a pity.
Despite these people, humanity as a whole is amazingly resilient and we will persevere. Our progression rate will not slow down anytime soon. We will conquer the climate. And it won't even take 500 years. Our drill will pierce the heaven.
They're realists. Folks like you hand wave away the 100,000 deaths this summer from a heat wave like its nothing.
Its peak selfishness on your part. You take a "I'm smarter" perspective and condescend about things that are literally killing hundreds of thousands of people.
The privilege is insane. It's sad.
I've seen it throughout my life, though. Once you get hit by a climate event your tune will change. Once a wildfire destroys your neighborhood, or a flood wipes out your family, or a landslide destroys your property, etc, the tune changes.
Welcome to capitalism! Task #1: Figure out a couple of numbers. Task #2: Figure out if it's good when these numbers go up or bad. Task #3: Optimize everything against these numbers, never consider anything else but these numbers, they are your life now.
There are tons of ways people turn into drug addicts. Some of us just get started early, build our (sometimes successful) life patterns around it, and here we are :) Others are trying to treat "damages" they've experienced, in any way they can. Others get it prescribed by doctors, end up stuck in those patterns, then need help to get out of those, my mother experience this "legal drug addiction" with painkillers just some years ago but luckily managed to get out of it. There is probably as many reasons people become addicts, as there are things people can become :)
Guix :) It's a shame its package coverage is nowhere near NixPkgs, because it's so much nicer to read and write. I guess eventually we'll have "Compile-to-Nix" languages, seemingly these sort of languages tend to crop up after a while for languages with lets say "harder UX".
Maybe it would be a good idea to translate Nix packages to Guix automatically via LLMs. Then we could close the gap in available software relatively quickly.
Unfortunately guix currently has banned LLM contributions. Its not set in stone but the developers intent to maintain a human based hacker environment. Nothing wrong with carving out ones own subculture of course!
There may be a sizable enough community interested in employing LLM usage to get together and create a dedicated channel for packages developed with them, or make a soft fork.
That being said, having worked on guix packages. Automated conversation is not so simple. The bottleneck for me is compilation time and cost. even with superdooper intelligence, you have to trial and error builds, fix mysterious test race conditions and match versions.
A powerful $5000 build server plus another several thousand per year for
The electricity cost would go a long way to speeding up this process.
Old second hand computers are not viable because the electricity cost for constantly building software on them is not cost effective.
It makes me kinda buthurt when some racist rich people can raise millions for some crappy arch skin distro soft fork, but serious, novel, from the ground up projects have to scratch around in the dirt for pennies.
The project may not have truly demonstrated it's worth to justify replacing nix, but I feel it's unique and special enough that it is deserving of some money falling from the sky. It's 1 of only 2 of this style of functional packaging distribution.
Guix being ideologically opposed to supporting macOS is what keeps me using Nix on my daily driver box. My NixOS box is there to run Steam, which I suspect is something Guix would also regard as anathema.
If the Chinese government has anything to say about it, which in China they typically do, they won't be able to close everything down since the official stance is to be more open than closed.
Not really. The official stance is likely to be the dominant supplier of hardware and models to run on it. And the models will need to be refreshed every so often as world evolves, especially if it evolves quicker. Global south will be buying Ascends soon. And EU will eventually follow as well or bleed money to US. Selling hardware to run freely available models in itself is sufficient and way easier to enforce than that someone won't pirate the model. Can't pirate the GPU.
First, adhering to the principle of openness and win-win cooperation while boosting innovation-driven development. Xi highlighted the importance of encouraging open-source, openness, collaboration and sharing to facilitate technological innovation, industrial development and scenario-based application of AI.
(This is also widely reported in mainstream western media.)
I'm sure there will be a shift in tone/direction if/when Chinese models gain a substantial lead over the US models, but at least for now, this is the official stance.
You could divide "your future" into two paths, conservatism (not the US amalgamation) and "missing the times that'd been", or continue move forward and adjust as the world change, which it always will, both in positive and negative directions. Things are changing, this is hard to disagree with, even if people disagree how things are changing, most people probably need to rethink a lot of their assumed perspectives, as I too had to do, faced with what I believe to be new realities.
I don't feel like it's patronizing to remind people about achievements they've accomplished and that they're still a capable person. Nothing we say to each other here on HN should be taken as "This is how you must live you life" but more like "Here's is something I hope helps you, if not, no worries", as we hopefully assume good faith out of each other.
It really is a idea-rabbit hole though, and kind of hard to stop yourself from wanting to create N new projects based on every new idea and perspective you come across.
Self-hosted $whatever, managed your way. CI/CD doesn't have to be dog-slow or ever go down when you need it, only when you do your upgrades yourself, as god intended it.
I personally use Forgejo + their built-in Actions stuff (mostly GitHub compatible), have one old Linux desktop as a server which runs Linux + Windows runners, one Mac Mini for macOS/iOS builds, using NixOS so I don't have to remember how things work, and it just keeps running 24/7, always there when I need it.
There's something to be said for the social availability that github brings. I'm far more likely to submit a pr for a bugfix to a project on gh than a random self-host site.
You can do your own ci/cd runner system, but you still rely on webhooks or triggers, when you aren't hosting the code.
> There's something to be said for the social availability that github brings. I'm far more likely to submit a pr for a bugfix to a project on gh than a random self-host site.
Yeah, that used to be the single favorable argument for GitHub, nowadays I think it might be the opposite, at least personally. If the contributor can't be arsed to join the community proper (and maybe get a sign-in code to their email, or whatever login you use), I think I prefer life without their drive-by PRs.
Here is the thing, we have self-hosted runners running behind our firewall and even those go down for these kinds of outages. All the jobs just sit in the queue and are never sent to our self-hosted setup at all.
> we have self-hosted runners running behind our firewall and even those go down for these kinds of outages
Sounds like it's not as self-hosted as you think, or you have some other unnecessary dependency on something here? As long as GitHub isn't the sole place for your SCM, why would your self-hosted CI runners go down just because GitHub goes down?
I see, you're still using GitHub for SCM? Then I understand why it stops working :P When I said "Forgejo + their built-in Actions stuff" I meant you use Forgejo for git too, not just self-hosting runners but then connecting them to someone else's infrastructure.
If you're already hosting the runners, why not host git too? It's even simpler than running your own workers/runners.
Not to mention your friends still enjoy receiving custom made knitted stuff as presents, or your neighbors if you see someone struggling. Or donate it somewhere, or put it in a display shelf to be reminded what you can actually do. Maybe in the future, programs and custom made hardware might be the same :)
> Maybe in the future, programs and custom made hardware might be the same :)
One step closer to the matrix. Send the white rabbit over, I've got your floppies ready to go. No ai, and developed without an active internet connection, so you can listen to music safe in the knowledge that your music isn't listening to you.
Edit: > Every time you access your bank on different devices normalizes it so that visiting a typo domain would show the dialog and many would just click through.
Show the dialog? What dialog? There is no dialogues here, you cannot login to the bank unless you've verified the connection. You do it with your phone, then you can propagate the trust from there to other devices if needed.
reply