MurphyA/hacker-news huggingface dataset:
by vintermann | 2025-06-23 07:36:17+00:00
Any algorithm can be recast as being "self-modifying", "aperiodic" etc. We don't gain any security by doing so. It's just a choice of how to model what the algorithm does which makes it harder to analyse. Sure, it makes it harder for an adversary to analyse too, but only if they stick to the author's way of modeling what the algorithm does - as opposed to finding a more concise description of what it does.
by messe | 2025-06-23 07:37:32+00:00
> V462 Lupi is in the constellation of the Lupus (the wolf), a southern sky constellation which is visible across the whole Southern Hemisphere and up to 35 degrees latitude in the Northern Hemisphere

For anybody wondering who "You" in the title refers to. I don't think I'll be traveling any lower than 43 degrees latitude this summer, so I'm envious of all you who get to see it.
by qsort | 2025-06-23 07:38:28+00:00
It's easier to write code for efficiently computing the inverse in that form, roughly:

int FastExp(int a, int e, int p) { if (e == 0) return 1; if (e == 1) return a; if (e % 2 == 0) return FastExp((a*a)%p, e/2, p); else return a * FastExp((a*a)%p, e/2, p); }

In math competitions where you only have pen and paper, you'd instead turn what you wrote into a Diophantine equation you can solve with the usual method.
by ggm | 2025-06-23 07:38:34+00:00
I had to both administer, and operate on the early X terminals from several vendors they were interesting. Labtam made strides developing boxes using the more novel Intel chips and this may have been what they sold on when they got out of the business and moved to being an ISP in Australia.

I enjoyed using blits and the early dec Ultrix workstations.

Thin X terminals were super cool. But, also really stressed out your Ethernet, and because we didn't have good audio models in X at that time, when multimedia became viable they stopped being as useful. But for a distraction free multiple term, low overhead wm world... super good price performance cost.
by raincole | 2025-06-23 07:39:39+00:00
It's just a typical crackpot paper like those math enthusiasts who self-claimed to prove Goldbach's conjecture or disprove special relativity. If it's not obvious enough, see the author's comment here: https://news.ycombinator.com/item?id=44350876

This post proves an interesting theory though: even the most random thing can get traction on HN as long as it mentions AI.
by chrishill89 | 2025-06-23 07:39:45+00:00
I use Git Notes all the time. It doesn’t look like the article mentions that you can attach the notes to emails you send out with git-format-patch(1) and git-send-email(1). I use them for emails to attach comments on patches that shouldn’t go into the commit message:

I did <insert research notes> and found no other places in the code base where this needs to be fixed.

And as the cover letter for a single patch (if needed/not cowered by the commit message).

And also like a commit message on the iterations on the patches. So for a patch series that go over three versions the note may say what updates where done in versions 2 and 3.

And other than that I use notes for:

- Private notes on how I’ve manually tested the commit

- Link to CI

- A localized changelog for customers (who are not technical)
by mr_mitm | 2025-06-23 07:39:47+00:00
LaTeX is not as stable as people make it out to be.

I don't know how many packages there are for working with tables, but 20 years ago, `tabu` was the most recommended package, until the maintainer stopped responding. Now the package is incompatible with almost everything else, leading to headaches when trying to compile old documents:

https://github.com/tabu-issues-for-future-maintainer/tabu

https://tex.stackexchange.com/questions/470107/incompatibili...

Typst at least has dependency pinning out of the box. If you value reproducibility, you should invent a similar mechanism for your LaTeX documents.

Also, I'm loosely following the activities around LaTeX on Github and Stackexchange and it seems that it's mostly maintained by three people or so (Carlisle, Mittelbach, Fischer), who - no offense - aren't getting any younger. I wonder how well LaTeX will be maintained if these long time contributors have to step down eventually.
by b33j0r | 2025-06-23 07:40:23+00:00
You’re not wrong. I think I initially had higher expectations myself. But as a person who names things, I don’t really find this one to be a huge stretch.

> This is like saying an uninitialized integer has a superposition of all possible values.

Well? Yeah! And I personally like that way of thinking about sets. It maps pretty directly to my understandings of other things in math and physics.
by vessenes | 2025-06-23 07:44:44+00:00
So, in a word: a) there is no ghost in the machine when the machine is a formal symbol-bound machine. And b) to be “G” there must be a ghost in the machine.

Is that a fair summary of your summary?

If so do you spend time on both a and b in your papers? Both are statements that seem to generate vigorous emotional debate.
by tguvot | 2025-06-23 07:44:47+00:00
pagers: long analysis for your pleasure https://lieber.westpoint.edu/well-it-depends-explosive-pager...

israel doesn't use cluster bombs that indiscriminately spreads. it uses single munition that hits specific target.

i'll give you example. at first week israel dumped 6000 bombs. at same time were reported per day ~400 casualties (hamas doesn't separate fighters from civilians). it gives is 2800 casualties in a week.

with simple math it gives is, something like 0.46 casualty per bomb (which can go up to 2000lbs and bring entire building down).

does 0.46 casualty per bomb in supposedly "most densely populated area in world" looks to you as non-discriminate bombing of civilian population ?
by roenxi | 2025-06-23 07:46:10+00:00
I think the problem is that, as far as we can tell, AIs are just more generally intelligent than humans and people are trying to figure out how to assert that they are not. A specialist human in their area of competence can still outperform an AI, but there don't seem to be any fields now where a human novice can reliably out-think a computer.

We're seeing a lot more papers like this one where we have to define humans as non-general-intelligences.
by rsynnott | 2025-06-23 07:46:46+00:00
Sci-fi may be a slightly obvious answer; I think things like Blindsight would probably get tagged as literary fiction except that they are already genre fiction, say. That’ll probably happen sooner than 2200, tho; it has already started happening in edge cases where everyone kinda pretends it’s not sci-fi (Handmaid’s Tale, say).
by _Algernon_ | 2025-06-23 07:46:58+00:00
For me personally, I have yet to figure out how to get a word processor to have text be justified on both sides without inserting big gaps between words. I could use left justified but then the text ends up looking like a saw blade, which is still ugly.

Latex' handling of floating figures and tables is also much better.

And of course math notation is much nicer to work with in LaTeX (IMO).
by herbst | 2025-06-23 07:48:35+00:00
From your examples the libraries are what AI is actually helpful for me.

If I find any API I want to use I let the Claude built an API wrapper for me. Or any other specific issues that typically end up in a Lib.

So a isolated, single purpose file that doesn't depend on any other files where the code base already includes similar files where it can steal the style from.

This is a situation where it does really well usually without breaking anything.
Show HN: passkey-go A Go library for streamlined Passkey (WebAuthn) verification
by aethiopicuschan | 2025-06-23 07:48:50+00:00
Hey Hacker News,

I'm thrilled to introduce passkey-go, a new Go library I built to make implementing server-side WebAuthn (Passkey) verification significantly simpler and more robust in your Go applications.

While WebAuthn offers powerful, phishing-resistant authentication, its specification can be quite complex to implement correctly on the server side. My goal with passkey-go was to abstract away the low-level parsing and cryptographic details, providing both a high-level, easy-to-use API for common tasks and the flexibility for more advanced, step-by-step verification.

Here's what passkey-go offers:

Effortless Verification: The VerifyAssertion function provides a single, high-level call to validate authentication responses, handling all cryptographic checks, origin verification, and sign count validation for you.

Flexible Registration: For registration, the library offers clear, sequential steps to parse attestation objects, extract authenticator data, and convert COSE keys to *ecdsa.PublicKey for storage.

Granular Control: If you need more control, you can use the ParseAssertion, ParseClientDataJSON, VerifyAssertionSignature, and CheckSignCount functions to perform verification step-by-step.

Secure by Design: It focuses on handling the core verification logic correctly, ensuring signature validation, challenge matching, and preventing replay attacks through signCount checks.

Clear Error Handling: PasskeyError types help you map common WebAuthn-related issues directly to appropriate HTTP statuses, simplifying API error responses.

Minimalist Design: passkey-go focuses solely on the WebAuthn verification logic. It doesn't dictate how you store challenges or credentials, giving you full control over your user and data management.

ES256 Support: Adheres to WebAuthn recommendations by exclusively supporting ES256 (ECDSA w/ SHA-256) for robust security.

Go-Idiomatic: Designed with Go developers in mind, providing clear function signatures and standard error handling.

This library handles the complex parts of WebAuthn verification, allowing you to integrate secure Passkey authentication quickly without getting bogged down in the spec's intricacies.

You can find the repository and more detailed usage examples here: https://github.com/aethiopicuschan/passkey-go

I'm keen to hear your thoughts, feedback, and any suggestions for future improvements. Feel free to open issues or pull requests on GitHub!

Thanks for checking it out!
by Karrot_Kream | 2025-06-23 07:49:49+00:00
Great comment. Even lots of sci-fi shows and movies suffers from the "talking heads" trope you describe, where a paper thin character mouths dialogue that makes no character sense in order to push the plot forward or to dump a ton of lore onto the watcher/reader to introduce the world.

The first few Asimov Foundation novels were notorious for talking heads.
by astrange | 2025-06-23 07:49:56+00:00
> Last as in "works" is a very low bar, they are going to have severely reduced capacity, which also affects performance.

Batteries tend to degrade to about 85% quickly and then spend a long time at that capacity. Couldn't tell you why.

A USB battery is a more useful thing to have, for instance because you don't have to turn off the phone to use it.

> Is this[1] what easy looks like?

For something you'd do every 2-3 years, sure. He's put in some extra steps in that video I think.
by nandomrumber | 2025-06-23 07:50:15+00:00
What makes you think that the set of people prone to snitching-for-profit don’t overlap with the set of people who would intensify enforcement on which ever group you’ve deemed people to have deemed suspicious?

Or that, at the very least, there are likely to be unintended consequences of bounty-snitching that create some other set of strained social pressures you also find unsavoury.
by devnullbrain | 2025-06-23 07:50:23+00:00
It's bad, but it's not impossible. I got an improved offer from one company when I told them I was going to accept another company's offer. And then I accepted the other company's offer, because it was the best move in my career. I've ended up with some surprisingly rare skills that end up being desirable to some niche companies.

So I won the negotiation game with the first company by truly not wanting the job. And I got the rational desired outcome of negotation with the second, by having the right skills and right luck at the right time.

None of us would be feeling pessimistic about our career prospects if we had OpenAI experience.
by RamblingCTO | 2025-06-23 07:51:02+00:00
I understand! But still, I feel like mechanising these things is an issue, especially with the authoritarian people rising (especially in the US) all over the world. I'm annoyed at idling cars (especially taxis here in Germany) as well, but I feel like the pollution is very minor. Still illegal though.

See: https://en.wikipedia.org/wiki/Automatic_number-plate_recogni... I agree with the "slippery slope" theme. I would wish for more rules being enforced more. But not if the price is a technocratic law enforcement machine.
by em-bee | 2025-06-23 07:51:23+00:00
as kids we don't know what is normal. this is the whole insidious thing with any form of child abuse. the bullying i experienced was limited to frequent teasing but i never made any friends at school and at home my parents were not very emotionally supportive (not their fault, they had it worse growing up). i was unconsciously searching for that emotional support all my life, but it took me decades before i finally understood what i was missing and how it affected me. i also don't remember much from my childhood because i repressed memories from that time.
by GoblinSlayer | 2025-06-23 07:51:50+00:00
>Where in that blog post do I try to "get this [sic] statistics from one measurement"?

In the discussion how different people place bets on A and B outcomes of experiment. Well, you didn't state clearly why you believe that MWI doesn't account for Born rule. MWI accounts for Born rule as statistics of measurements, and the discussion of bets is the closest this in that blog post to consideration of statistics of measurements, but that discussion seemingly considers one measurement, that's why it doesn't see statistics.

>Go read up on decoherence, and then come back and describe an experiment that can demonstrate the existence of a fully decohered branch.

It looks like a logical problem to me. You suggest that decoherence both produces and doesn't produce fully decohered branches? Violation of the law of excluded middle? If the law of excluded middle doesn't work, I don't think experiments can demonstrate anything.
by Paapaa | 2025-06-23 07:52:33+00:00
Yes, it uses a very similar algorith as LaTeX. It also incorporates already some microtype features out of the box. So the typesetting quality is very good and easily comparable to LaTeX. Working with Typst is so much easier and faster than with LaTeX so you will be more productive. Many things can be done without resorting to external packages and scripting is a breeze compared to LaTeX.

Just try it out. It is free, open source and very easy to setup. Just install the extension Tinymist on VSCode, that is all you need.
by kookamamie | 2025-06-23 07:53:31+00:00
Here's the algorithm described without the quantum nonsense:

1. Analyze Rules: Extract valid patterns (modules) and their compatibility rules (adjacency constraints) from input or define them.

2. Initialize Grid: Create an output grid where each cell initially contains all possible modules (maximum uncertainty).

3. Choose and Assign: Select the cell with the fewest valid modules remaining. Randomly assign one compatible module to it.

4. Propagate Constraints: Update neighboring cells by removing modules incompatible with the newly assigned one. If a cell loses all options, a contradiction occurs.

5. Handle Contradiction: If a contradiction arises, either backtrack to a previous choice or restart the process.

6. Repeat: Continue from step 3 until all cells are assigned a module or an unresolvable contradiction occurs.
by smcleod | 2025-06-23 07:53:40+00:00
I'd argue that a huge portion of the working population have for a long time exhibited an inability to think - probably in part due to the meaningless, widget churning work they're tasked with - I don't think that'll change, however being empowered to learn and try things beyond your individual grasp by leveraging AI as for example a coding parter can unlock whole new ways of thinking in domains they'd otherwise not have the time to investigate.

See also https://smcleod.net/2025/03/the-democratisation-paradox-what...

Watch out horses! The motorised carriage is going to do away with your ability to gallop!
by fsflover | 2025-06-23 07:54:04+00:00
> Anything can be compromised.

This sounds like security nihilism: https://news.ycombinator.com/item?id=27897975

> Even if you build from source, your compiler might be compromised

This problem can be solved by the bootstrappable builds: https://news.ycombinator.com/item?id=41368835

> or you buy a cool new usb peripheral and plug it in- boom! Compromised.

This is why Qubes OS has been developed (my daily driver). It isolated the usb devices into a separate VM.

> Your sniffer and firewall? Compromised.

Try security through compartmentalization: Qubes OS. Last time a VM escape in the modern Qubes implementation was discovered in 2006 by the Qubes founder: https://en.wikipedia.org/wiki/Blue_Pill_(software)
by illiac786 | 2025-06-23 07:54:37+00:00
It's not yet the end, a rust decoder is on the way:

https://github.com/mozilla/standards-positions/pull/1064#iss...

One day, people will wonder why it took so long, and I'll smile =)

That's the decoder: https://github.com/libjxl/jxl-rs

(why they couldn't use jxl-oxide, I don't know)

Also good to know, the ff nightly feature for jpeg xl currently does NOT use the aforementioned decoder, it uses something else, hence it's worthless for testing at the moment...
by ElFitz | 2025-06-23 07:55:10+00:00
I’d add to that that classical music was made at a time recording and listening whatever you want, whenever and wherever, wasn’t a thing.

Many pieces were intended as a whole, and optimised for specific settings.

I’ve long thought I wasn’t an opera person. I listened to pieces of some on my iPod, or on the tv in music class in school. Then, years later, some friend told me he had extra tickets for the opera.

It hit very, very differently. It is likely the experiences I had gone through since school helped the opera’s theme and songs resonate with me. But I’m pretty sure listening and witnessing it, from beginning to end, in a room carefully crafted for this specific purpose and left little room for distractions contributed immensely.
by rurban | 2025-06-23 07:55:34+00:00
And re-enables CVE-2019-0155?

Intel researchers discovered that Intel graphics processors allowed userspace to modify page table entries via writes to MMIO from the Blitter Command Streamer and exposed kernel memory information, resulting in possible privilege escalation and information disclosure vulnerabilities. A local user could use this issue to escalate their privileges on the local machine.

It's i915.mitigations
by pjmlp | 2025-06-23 07:56:14+00:00
True, however that goal is not yet available today, it doesn't even run on Windows natively.

And for those that care, Julia is available today on different hardware brands, as there are other Python DSL JITs as well.

I agree they will get there, now the question is will they get there fast enough to matter, versus what the mainstream market cares about.
by ur-whale | 2025-06-23 07:56:26+00:00
Anything claiming that AGI is impossible and wants to be taken seriously should first and foremost answer: what makes a human brain any different than a device belonging to the class under investigation.

He does touch upon this in section 3, and his argument is - as expected - weak.

Human brains apparently have this set of magic properties that machines can't emulate.

Magical thinking, paper is quackery, don't waste time on it.
Show HN: A CLI tool to transcribe and clean YouTube videos with Whisper and LLMs
by itsmevictor | 2025-06-23 07:57:18+00:00
Hi HN,

I built a simple command-line tool that quickly transcribes YouTube videos into clean, readable text. It uses OpenAI's Whisper for transcription and leverages the LLM of your choice to intelligently clean up the transcripts, removing filler words, correcting grammar, and improving readability.

Some highlights include:

- Automatically downloads audio directly from YouTube.

- Supports multiple output formats (TXT, SRT, VTT).

- LLM-driven transcript cleaning tailored for presentations, conversations, or lectures.

- Easy setup and straightforward CLI usage.

My main motivation to build this is that I read faster than I listen, and it is not rare that I'm interested in only a short segment of a (long) video, so it's easier to just cmd-F and jump in to that section in the transcript.

Feedback welcome!
by CharlieTrip | 2025-06-23 07:57:57+00:00
Hi, cryptography researcher here!

I'm sorry, but not having a mathematical formulation makes it extremely tedious to look into the protocol and get a feeling if it is secure or not (or if what you are doing makes even sense). If you plan to do some additional work, focus on clearly defining what you are doing for a (maths-)cryptography audience. This would definitely help!

But, I can try and give you my 2-cents after skimming the code: as far as I understand, the primitive is intrinsically sequential and encrypts chunk by chunk. Depending on the "type", you either use a stream-cipher or some OTP-like (with pad related to the hash of part of the message). You have a public way to decide (from the current chunk ciphertext?) which encryption method you use for the next chunk. Am I getting it correctly?

If this is the case, I have to admit that the OTP-like part looks weird and definitely would be the first place where to look into. Especially how the secret key is effectively expanded for the different "rounds", and if there might be some weird property for when the encryption scheme selects twice the same path.
by Paapaa | 2025-06-23 08:02:02+00:00
Typst is fully open source licensed under Apache-2.0 license. It is not a mix of any kind. Don't confuse the web app with Typst engine. The web app is a similar service to Overleaf and that is closed source. It is not mandatory, you can use Typst fully on your local machine. The team tries to make money and cover development costs with the web app. But the actual typesetting engine is fully open source and free.
by yorwba | 2025-06-23 08:02:48+00:00
They kind of address this in section 3.4, where the argument seems to be that if physical embodiment or some other single bottleneck prevents automation of a large fraction of all tasks, then removing this single bottleneck will enable the automation of all these tasks all at once, leading to explosive growth.

I.e. they don't predict explosive growth starting now or even in the near future, but that if automation reaches 100% at some point, there will be explosive growth in the final period leading up to that point. But somebody is probably going to misinterpret it as a statement about the transformativeness of current technology.

I think the weakest part is actually section 3.6 where they sort of admit that GDP growth does not capture many things people intuitively would consider growth (e.g. greater quantities of free stuff). They claim that this doesn't matter since they don't care about GDP per se and just use it as a proxy, but fail to address that their model predicts explosive growth even in this case, i.e. their model of GDP doesn't behave as GDP would, i.e. they picked the wrong model.
by ciphernomad-org | 2025-06-23 08:03:34+00:00
That's the key distinction. This isn't just a complex function, but a programmable machine that enables new capabilities.

For example: verifiable, time-locked proof of computation on a secret program. A standard hash or ZK-SNARK can't prove the when or how long of a simulation. Our model can.

The execution of the secret program leaves an irreversible "scar" on a one-time-use Labyrinth. The final state of this scarred structure is a commitment to the entire computational history, which is then time-locked by a Verifiable Delay Function (VDF).

The proof isn't just an output; it's the final, mutated state of the Labyrinth itself. An adversary can't find a more concise model because the history of the computation is inseparable from the proof.