Hacker Newsnew | past | comments | ask | show | jobs | submit | ultimoo's commentslogin

nice job! i miss using ruby.


reminded me of classic attention test https://m.youtube.com/watch?v=vJG698U2Mvo


Feel Good Inc.


so anyone can log in as you if you receive an email and accidentally click on it?


This is a fair point to bring up.

Most sites will have a confirmation once you click the link that includes the browser version and IP address. I have seen that info only in the email itself too with no confirmation afterwords, but not for some time. Have never seen one that is just a link with nothing else that once clicked allows the other device in but supposes could be implemented that way.

The article itself is about not making them the only option (which is fair), and the OP says if they do it should login the device which originally made the request (which I agree). If the implementation is just an email with only a link, no other information with no confirmation (yes, it's fine to let this device in), then I would have to agree with you it's very risky and could allow anyone to login as you (hopefully no sites are doing this, but...)


Or if your mail client, spam filter or anything else tries to prefetch the link...


If you really want to allow for another browser to authenticate a login request, you can at least limit it to sessions coming from the same IP.

That would let you authenticate your desktop browser from an email you opened on your phone if you're on your home network, but without becoming widely exploitable by phishers.


To be safe the link can load a page with a form / button that says confirm the login.


Some people will still click the button because they expect it will give them more information about why they received the link. You can add text along the lines of “authorize login on $other_device”, but it’s still risky.


simply adding “i think” solves this. op was speculating with gravitas that needs sources


can this be used to convert llm output to json?


“Now with AI outlines, you can quickly grasp the main points or delve into specific details that pique your interest”

is this a nod to pg’s delve blowup on twitter?


Haha,that, or it's a validation of the blowup.


Got it. So smiling and angry faces are part of our pre-training. Whereas making a “thinking face” or “embarrassed face” is part of cultural fine tuning.


apparently certain fine-tunings see a smile as 'threatening' or scoundrel-like


Touching story. You are a good friend and Geof seems like he was an excellent individual.


Thank you.


> it. Listen to Leonard Cohen’s version, John Cale’s version, Rufus Wainwright’s version, and Jeff Buckley’s version. Each version is as beautiful as the other, although Buckley’s version transcends them all

No. Cohen’s is better.


I wonder if it depends which version you heard first. I’m a Cohen fan but find his version dull, where the Buckley version is sublime


This is why music is completely subjective. What some hear as “sublime” others hear as “overcooked”. It’s all fine though, this is all part of what gives life richness and texture.


Quite literally got into an argument with someone about this last night. I said it's his best and worst song, best because it's great, worst because anyone else dare sing it.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: