MurphyA/hacker-news huggingface dataset:
Show HN: Changefly – Rebuilding the foundation of privacy and authentication
by davidandgoli4th | 2025-05-30 20:47:54+00:00
Lukas here, founder of Changefly. For those of you who might remember neworder.box.sk and astalavista.box.sk, I was one of the admin's at a very young age. Fast forward to 2018, I set out to help people regain their privacy. Google invited us into the Google Cloud Startup program which led to the creation of Changefly.

After years of truly challenging work and thousands of iterations, Changefly ID was born. Changefly ID solves the problem both users and companies face on a daily basis... spam, scams, bots, account takeover attacks. At face value it looks like an ordinary code, but in fact, it is an encrypted security code that only the user knows and has access to use (a distributed anonymous authentication code).

Changefly ID has a lot of flexibility -- replace traditional authentication (which you absolutely should do) or use secondary for multi-factor authentication (a good stepping-stone). It also includes end-to-end communications with your users through Changefly (not email, sms, or other unsecured channels). Additionally, the Changefly app data is also end-to-end encrypted as is the local data. We made access to Changefly ID easy and free with our Developer API. Changefly ID really does stop bots, spam, scams, and other threats from getting anywhere near users or their accounts.

p.s. A big thanks to Tom (HN moderator) for their help!
by Firehawke | 2025-05-30 20:48:13+00:00
Right. You're not going to use V-size and H-size to remove the borders because that screws with literally every other use of the TV (other computers, TV shows, etc)..

About the only way to properly calibrate what the borders "should" be is to calibrate the TV to what would be a reasonable approximation for SD TV signals, and POSSIBLY make small adjustments after that point if the computer looks wrong.

Even then, every TV is going to be somewhat different and so there's a huge amount of variance on how it's going to look in the end. Same applies for computer monitors back then, though calibration of an RGB monitor is going to be even harder than composite since you can't easily run a VCR over it to try to get SD TV calibration.
by ryao | 2025-05-30 20:48:13+00:00
Usually, people with higher IQs are the ones who have trouble with such things. There is a logical difference between “before lunch” and “before lunch that day”. This is similar to how higher IQ individuals see the Monty hall problem as having a 2/3 probability rather than a 1/2 probability in the famous version of the problem posed to Marilyn vos Savant. They are often derided as being idiots for not having “common sense”, even when their remarks are correct.

That said, IQ is considered obsolete given the theory of multiple intelligences. IQ only covers a subset of it.
by dzhiurgis | 2025-05-30 20:48:49+00:00
I had some “close calls” with autopilot, but this clearly is drivers fault. Not only he was not paying attention his hands were clearly busy elsewhere.

But I don’t wanna blame him entirely. Firstly not everyone is capable using systems like this, nor everyone should. And obviously system shouldn’t behave like this at all (tho someone looking at data was saying driver deliberately swerved themselves).
by _fat_santa | 2025-05-30 20:49:55+00:00
Ugh I feel like this general topic had been beaten to death, every article inevitably references the same viral moments on Twitter and draws roughly the same conclusions.

But these articles get posted and upvoted cause we developers just eat that shit up (if I’m being honest I do at least, every time I see these kinds of posts I always smirk cause I know what the comments section is gonna be like).
by YossarianFrPrez | 2025-05-30 20:50:13+00:00
This is a cool paper!

Basically, prior to feeding text to the tokenizer people have split the text on whitespaces. But whitespaces aren't exactly meaningful separators. By getting rid of this restriction as the tokenizer is 'learning', some of the tokens end up being 'by the way' or 'in the the long run.' The researchers find that this makes the model much more efficient.
by kelseyfrog | 2025-05-30 20:51:19+00:00
I agree, it feels absolutely true that the strong shouldn't exploit the weak.

But here's the thing, most societies have felt that way about something, and often, the "something" turns out to be radically different each time.

Romans felt it was universally true that honor must be defended with blood. Medieval Christians believed letting heretics speak freely was morally wrong. Victorians were convinced it was immoral not to civilize "savages."

They didn’t think they were rationalizing cruelty. They thought they were being good.

The discomfort comes from realizing that we're not standing outside history, just inside a different historical moral context that feels just as inevitable. The desire to protect the weak might be deeply human, but even how we define "weak" or "harm" changes more than we like to admit.

What if we recognize our certainty is also part of this context, not part of the conclusion?
by ironman1478 | 2025-05-30 20:51:26+00:00
"I became proficient in Rust in a week". How did you evaluate that if you weren't an expert in Rust to begin with? What does proficient mean to you? Also, are you advocating we get rid of air traffic controllers with AI? How would we train the AI? What model would you use? If you can't solve a safety critical problem from first principles, there is no way an AI should be in the loop. This makes no sense.

Cynically, I'm happy we have this AI generated code. It's gonna create so much garbage and they'll have to pay good senior engineers more money to clean it all up.
by maxgrinev | 2025-05-30 20:51:49+00:00
Totally understand - you want clean, unified data for business insights, not another integration tool to maintain. Sequor actually grew out of our Master Data Management (MDM) work where data cleaning and deduplication are core challenges. We focused on API integration for this release, but have mature data cleaning/deduplication components that we plan to open source as well. What specific data quality issues are you dealing with? Happy to share what we've learned from MDM projects and our data quality engine.
by autoexec | 2025-05-30 20:52:08+00:00
> "I want to sell it to a serious producer who either restores it or keeps it locked away"

It was arguments over money that caused the film to be "lost" in the first place. It's a shame that it's still all about money and greed could cause it to be lost again. The best thing to do would be to release it online for free so that everyone could see and learn from it. That way, if others want to restore it using modern methods they still can. I'd rather see it as it is anyway. Before the inevitable re-edited (perhaps even censored) AI "enhanced" version a "serious producer" would shit out and overcharge for.
by gervwyk | 2025-05-30 20:52:14+00:00
It’s for building web apps, including the backend. The latest version also allows to define backend flow logic for APIs but the docs is still in progress.. Sharing this because we’ve building abstraction to yaml for a few years so can look at lowdefy for some ideas.

For us, building business logic in yaml scales really well across projects and teams. We run advanced ticketing systems, crms, call center solutions etc all defined in yaml config.
by doctorpangloss | 2025-05-30 20:52:34+00:00
The invoices stood out to me.

Here's a view of what payments for services, which is 50% of the US economy, looks like:

Payer ====> Giant Corp | SMB / Sole Prop - Recipient: Giant 25% 25% Corp ----- SMB / 25% 25% Sole Prop

75% of payments will involve a party where signals like SOC 2 compliance, having 5 or more W2s, business licenses, business insurance, etc. are meaningless. Like they are an absolute fairy tale.

The invoice cited looks like SMB to SMB. But it could just as well be part of a Giant Corp to SMB chain. An entity that checks the boxes is the one that gets paid, but you know, the people who do the work don't get any value from the compliance fairy tale. They're just going to do the payment and do whatever it is the platform (Mercury) asks for and that's that.

Mercury is taking a big bet and it is paying off.

Another POV is that those stupid SOC 2 startups are selling a holistic experience that basically provides no more value than a Markdown template you can find on GitHub for SOC 2. Guess how I know.

Another POV is that regardless of what US policy is or where it is going, there are programmers in Russia, and for the right price, someone is willing to pay them to do something, and before a certain date, it doesn't look like a problem, and then after a date, it is, and some intellectually honest, sincere, peace loving people seem to be unbothered by this.
by tropdrop | 2025-05-30 20:52:43+00:00
But I'm pointing out that just because NYC fails the claim does not mean that the claim is wrong.

I think there's a goldilocks zone of walkable, at least for the purposes of this "urbanist-I-know-everyone-utopia" feeling – you could have perfectly walkable places that aren't dense enough (people wise), so they won't work. I'm thinking of Gorham's Bluff, Alabama, which is an attempted New Urbanist project. Or, you could have Manhattan, which is also walkable but frankly mind-boggling in its density.

No offense to New York. I sometimes find myself in wordless awe of its sheer power.
by wyager | 2025-05-30 20:53:16+00:00
It's weird to me how it often seems like the US and China are the only countries capable of mega-scale tech infrastructure like this (and even then, only in some industries). Can you imagine Wal-mart's website going down for multiple months?

I think a lot of companies (especially in Europe) have not internalized that, yes, you actually do need to expend apparently exorbitant amounts of money on highly-paid engineers if you want your tech to actually be good. Many countries, including the UK, are simply not wealthy enough to do it at scale. They produce plenty of engineers, but most of the ones capable of holding complicated stuff together probably end up working for US companies that can pay them market rates.
by freejazz | 2025-05-30 20:53:27+00:00
You're missing the point. Your conjecture is false. Sure, you never said it proved anything. But that's a different point.

Your entire premise is just completely made up.

You're not even expressing a leap of faith. It's a leap of cynicism that speaks to your world view, not your faith. Faith is not predicated upon a belief that there is no purpose to which otherwise faith supplies. You're just basically playing word salad at this point. And I don't mean that to suggest religious beliefs or faith is word salad. Just what you have offered here in this brief conversation.
by al_borland | 2025-05-30 20:54:11+00:00
> I want to sell it to a serious producer who either restores it or keeps it locked away, or restores it and shows it to people for studying purposes.

How is someone who "keeps it locked away" even an option if he believes it "must be seen"?

This seems like the perfect candidate for going on archive.org, if the goal is for it to be preserved and for people to see it.

I also find it odd that he's been screening it for friends since the 80s, yet has only shown it to 24 people.
by legitster | 2025-05-30 20:54:30+00:00
The movie was never "lost". All of the original film apparently made some rounds in private viewings and was donated to the library of congress and has been available since last year.

What this guy has is workprint - someone in the production office probably hastily assembled the available footage into a rough draft. So it's true this could be a 1 of 1 copy but all of the source material is still available.
by abracadaniel | 2025-05-30 20:55:01+00:00
If the cost is low enough, that could be the death knell for HDDs. No mention of pricing specifics, but they mention competing on cost when taking into account power usage and reliability. So, it will likely be more than comparable enterprise HDDs. If they can capture that market share, I can’t imagine HDDs last much longer with whatever small consumer market remains.
by palata | 2025-05-30 20:55:19+00:00
> Same reason how signCount is useful in a non-shared passkey.

Again: unless I am missing something, signCount is useless with a shared passkey. If your laptop expects signCount to be "2" and sees "5", it will just believe that your smartphone was used in the meantime. The counter doesn't say "it was used illegally", does it?

> Also, why not.

"Because it's useless" sounds like a good reason to me. Unless you explain why it is not useless, that is.
by hdjrudni | 2025-05-30 20:55:45+00:00
I wish I came across this article a couple months ago.

I was trying to encode and decode some buffers into an arbitrary base, and I eventually came to the conclusion (after far too long) that a carry could ripple all the way down the buffer, which dramatically slows down the algorithm.

Actually, the eventual solution I came up might have some stuff in common with this trick too. I did eventually chunk up the buffer leaving some unused headroom to 'handle carries'. Not exactly though, I just have some wasted bits which uses a tiny bit more storage or network bandwidth but saves on compute. I wonder if I could instead pool up the carries like this and 'resolve' it in a later step. Have my cake and eat it too? Wishful thinking.
by AStonesThrow | 2025-05-30 20:55:56+00:00
This article has given me the impetus to go around and shut off all the "Smart" features and integrations that I accepted in the past.

Lately, Gemini became like Clippy, and I've been blocked by modal dialogs that tell me I've got Free Trials of Gemini in ALl Products. And Gmail was filling with nags to "clean up this message" or expand it or do starry magic on it if I'd only click the keyboard shortcut they're indicating.

This will remove some of the enhancements I appreciated, like event invites in Gmail that show up in Calendar. But I also knew that those were Smart Features, and Assistant/Gemini have been underpinning them.

A couple of days ago, there was another modal dialog that sadly informed me that my free trial was ending. Every day I stared at that Gemini star in my Gmail and wish it would stop taking up UI space and how I could make Clippy ("Glippy"?) go away.

Saturday Night Live, 2015: https://youtu.be/EpWbTogEEhg?si=01fyKCh_AUKoGgGY
by singron | 2025-05-30 20:56:25+00:00
I think this also requires user (i.e. unprivileged) namespaces since you have to manipulate traffic control queue disciplines (tc qdisc). You normally need to be root to do this, so it's only useful as an escalation if you can do it within a namespace or you can convince some root daemon to do the qdisc manipulation for you (I think unlikely?).

User namespaces opened up an enormous surface area to local privilege escalation since it made a ton of root-only APIs available to non-root users.

I don't think user namespaces are available on android, and it's sometimes disabled on linux distributions, although I think more are starting to enable it.

Relatedly, kernelCTF just announced they will be disabling user namespaces, which is probably a good idea if they are inundated with exploits: https://github.com/google/security-research/commit/7171625f5...
by CKMo | 2025-05-30 20:56:27+00:00
There's definitely a big problem with entry-level jobs being replaced by AI. Why hire an intern or a recent college-grad when they lack both the expertise and experience to do what an AI could probably do?

Sure, the AI might require handholding and prompting too, but the AI is either cheaper or actually "smarter" than the young person. In many cases, it's both. I work with some people who I believe have the capacity and potential to one day be competent, but the time and resource investment to make that happen is too much. I often find myself choosing to just use an AI for work I would have delegated to them, because I need it fast and I need it now. If I handed it off to them I would not get it fast, and I would need to also go through it with them in several back-and-forth feedback-review loops to get it to a state that's usable.

Given they are human, this would push back delivery times by 2-3 business days. Or... I can prompt and handhold an AI to get it done in 3 hours.

Not that I'm saying AI is a god-send, but new grads and entry-level roles are kind of screwed.
by wrs | 2025-05-30 20:57:41+00:00
I can buy that stars and star formation processes evolve in this universe.

The only thing I'm complaining about is that if you want to explain the apparent fine-tuning of the parameters of physics, you have to explain what that varation/reproduction process is. Which is the "reproduce through black holes/big bangs thing". That part has to be more than a "story" if you're trying to have an evolutionary theory of universes.
by hn_throwaway_99 | 2025-05-30 20:57:44+00:00
This is so true. We had a (admittedly derogatory) term we used during the rise in interest rates, "zero interest rate product managers". Don't get me wrong, I think great product managers are worth their weight in gold, but I encountered so many PMs during the ZIRP era who were essentially just Jira-updaters and meeting-schedulers. The vast majority of folks I see that were in tech that are having trouble getting hired now are in people who were in those "adjacent" roles - think agile coaches, TPMs, etc. (but I have a ton of sympathy for these folks - many of them worked hard for years and built their skills - but these roles were always somewhat "optional").

I'd also highlight that beyond over-hiring being responsible for the downturn in tech employment, I think offshoring is way more responsible for the reduction in tech than AI when it comes to US jobs. Video conferencing tech didn't get really good and ubiquitous (especially for folks working from home) until the late teens, and since then I've seen an explosion of offshore contractors. With so many folks working remotely anyway, what does it matter if your coworker is in the same city or a different continent, as long as there is at least some daily time overlap (which is also why I've seen a ton of offshoring to Latin America and Europe over places like India).
by geraneum | 2025-05-30 20:57:56+00:00
> Humans are not familiar with exponential change

Humans are. We have tools to measure exponential growth empirically. It was done for COVID (i.e. epidemiologists do that usually) and is done for economy and other aspects of our life. If there's to be exponential growth, we should be able to put it in numbers. "True me bro" is not a good measure.

Edit: typo
by dataflow | 2025-05-30 20:57:57+00:00
Hold on, before attacking me. Say we have this Java program, and assume the semantics of the common JRE/JVM everyone uses. Do you believe it has a data race or not? Because the variable is accessed atomically, whether whether you mark it as volatile or not:

class Main { private static String s = "uninitialized"; public static void main(String[] args) { Thread t = new Thread() { public void run() { s = args[0]; } }; t.start(); System.out.println(s); } }

And I sure as heck have not heard anyone claim such data races are impossible in Java. (Have you?)
by jajko | 2025-05-30 20:58:26+00:00
In some topics yes (not just any man, male close friends), but not in some others.

All in all, I am most open to her from whole mankind, but thats also due to the fact she is not same as typical women are in these aspects. It took me some time (and painful breakups with other women) to realize who I am, what and whom I want next to me and then find her.

Still, some topics are simply not built for women, and thats fine, some are not built for men.

Is it really so hard to understand this?
by giantg2 | 2025-05-30 20:58:28+00:00
Seems interesting. However, 2 years of data is nothing when evaluating equity patterns, so users beware (recommend this as educational only). I'd personally want the performance data correlated with things like interest rates, inflation, unemployment, international trade data, etc so that equity performance data has more context.

But if it does work, let me know the next moonshot since I'm about to be fired.
by Lerc | 2025-05-30 20:58:36+00:00
While training something on TinyStories one of the early stage outputs was

"Once upon a time, in a small town, there was a huge town"

Which I thought was the brilliant start for an interesting story. Just that slight deviation from expectation provides a excellent scaffold for your imagination to take hold.

Of course the rest of the generation was utter rubbish, but if you could on-demand deviate from standard at key points while keeping the majority internally consistent then it would be great.
by siraben | 2025-05-30 20:58:42+00:00
Fractran is a cool esolang that looks impossible to write any programs in at first until you systematically trace through some examples. A while ago I wrote an assembler in Haskell with an optimizer so you can write programs in assembly-style.

λ> pretty (sumTo 10) c += 0 n += 10 while n >= 0 { c += n n -= 1 } λ> runAssembler (sumTo 10) -- Program length: 31 Right [847425747 % 2,13 % 3,19 % 13,11 % 3,11 % 29,31 % 11,41 % 31,23 % 11,23 % 47,2279 % 23,59 % 301,59 % 41,67 % 413,329 % 67,61 % 59,73 % 61,83 % 73,71 % 61,71 % 97,445 % 71,707 % 89,103 % 5353,103 % 83,109 % 5459,5141 % 109,107 % 103,113 % 749,113 % 19,131 % 113,29 % 131,127 % 113] λ> runAsm (sumTo 10) [(Prime 97,55),(Prime 107,1)]
by 8note | 2025-05-30 20:58:54+00:00
whats the benefit to you though?

youre going to be incarcerated in an even worse kept old folks home, and anything you actually try to spend on will be both spied upon - you getting a nurse to type in the secrets for you, or confiscated an sold before yoy could enjoy the results.

i think you'd be better off trying to tackle the problem directly, and get legal changes to how guardianship works, since itll still screw over your crypto assets
by AnthonyMouse | 2025-05-30 21:00:12+00:00
> LFP at the cell level is below $100/kWh, 5000 cycles means $0.02/kWh out of the cell (maximum since after 5000 cycles battery is still at 80% capacity so the real price is even lower).

The cells are by far not the only cost. You also have land, installation, operations, taxes, insurance, etc. Most of these costs also have to be paid upfront even though you won't actually hit 5000 cycles for more than a decade, so then you have to add time value of money.

It's like saying "it's really cheap to own a home, just get lumber in bulk for like $100/unit and it'll last for decades."

> Also about near $0 or below $0 prices, they exist only because we don't currently signal those prices to consumers. Anyone with electric car (parked 95% of the time) or batteries at home or business would charge them at $0.01-0.05/kWh no question asked and price would never go to zero or negative.

That's what happens for the first few hours of peak generation, but then the batteries are all fully charged and you're still generating in excess of demand because it's still a week with clear skies in the summertime.

Also, a lot of reason for the zero or negative prices is that you have more generation at that time than there is transmission capacity in the grid. You can't sell it to someone because you don't have the capacity to deliver it, and expanding the grid for something that only happens a fraction of the time (and is only relevant when the price is low) isn't cost effective.

And actual zero isn't really the point anyway. If the wholesale price is $0.01/kWh instead of actual zero on the day when solar is at peak generation, it's still selling below cost on the days when it has the most to sell, and only getting a fraction of the premium during supply shortfalls because the shortfalls are caused by solar being unable to supply more power then.