MurphyA/hacker-news huggingface dataset:
Show HN: I built ephemeral authentication – no tokens, just vanishing proofs
by emphreal_tech | 2025-11-17 19:10:08+00:00
Show HN: Ephemeral Auth – Authentication without tokens using vanishing proofs

I built a React authentication library that eliminates tokens entirely. Instead of hackable JWT tokens that last for hours, it uses ephemeral cryptographic proofs that vanish after each request.

*The Problem:* Token theft gives attackers hours of access *The Solution:* Single-use sessions that self-destruct after one action

\it is on npm on these link https://www.npmjs.com/package/ephemeral-auth-react *npm:* poof-auth-react

*How it works:* 1. Request ephemeral challenge (one-time math problem) 2. Solve challenge → get ephemeral session 3. Session vanishes after use - hackers get nothing!

*Features:* - No tokens to steal or manage - Quantum-resistant cryptography - Simple React API - TypeScript support

Perfect timing given recent token breaches and supply chain attacks. Would love feedback from the HN community!

Demo: https://www.npmjs.com/package/ephemeral-auth-react
by tomp | 2025-11-17 19:10:12+00:00
Can't talk about others but for me personally, I:

1) always return the shopping cart when it's free (it almost never is)

2) rarely return the shopping cart when it's paid - sorry but I value my time more than €1 it cost to rent the cart, and, well, clearly there's no "social contract" - there's an "explicit contract", which says "you rent the cart for €1 and we refund you if you return it" so clearly not returning it is fine (also, someone could earn €1!)
by bryanlarsen | 2025-11-17 19:10:14+00:00
But is it usefully dispatchable? Nuclear can be made dispatchable but it's not usefully dispatchable because the costs are fairly similar whether the plant is on or off.

Like nuclear, I believe geothermal has high capital cost and low running costs, suggesting that it isn't usefully dispatchable.

But that's too simplistic. A big limitation of geothermal is that rock has poor thermal conductivity. So once you remove heat it takes a while for it to warm up again. If you're running it 100% then you need a large area to compensate. OTOH, if you're running it at a lower duty cycle you likely need less area.

So if you know the duty cycle in advance, then you can likely significantly reduce costs. Yay!

But that also means that you likely can't run a plant built for low duty cycles continuously for 2 weeks during a dankelflaute. It's likely great for smoothing out daily cycles, but not as good for smoothing out annual cycles. That means it's competing against batteries, which are also great for smoothing out daily cycles, and are very inexpensive.
by redwall_hp | 2025-11-17 19:10:25+00:00
Back when I worked in retail, my car was dented multiple times from people not putting carts in the designated areas.

Sometimes you can't park without getting out of the car to clean up after other people, because carts are littering the parking spaces. (Including being pushed from adjacent spots into handicap spaces.)

I've parked near corrals and had people half-ass push them next to it, effectively double parking me until I removed several carts.

I've had to jump out of the way of carts being whipped down an aisle by a strong wind in a storm.

Nobody's talking about bringing carts back to the building, but doing the bare minimum of putting them in the corrals. Failing to do so is saying you value your minor convenience over other peoples' time, property and health. Tucking them on a curb is saying you know you're doing a bad thing but don't really care.
by dngray | 2025-11-17 19:10:33+00:00
> The solution to authoritarian regimes is to not have one

The solution to not being poor is being rich. You could apply that logic to a lot of things. Have this thing instead of that thing. Using your example above of "differential privacy scanning"

Differential privacy is a property of a dataset meaning you can’t tell an individual was part of a dataset. If it’s traceable back to the individual device it’s not differentially private.

I think at this point you're just trying to say "don't have this thing have that thing instead" as a response to anything.
by alephnerd | 2025-11-17 19:11:19+00:00
That's not the controversy based on the article - it's arguing that because the app is Israeli in origin, it may run afoul of local BDS laws thus another reason for AppCloud to be removed from local device, which is notable because the AppCloud app only appears to be installed on African, Asian, and MENA Samsung phones, where the bulk of countries with BDS laws exist.

The article doesn't appear to take a side one way or the other in the conflict, it's just listing a potential compliance issue.
by mindslight | 2025-11-17 19:11:19+00:00
idk about vertigo specifically (and things laypeople diagnose as vertigo), but yes in that I had a family member who was exactly in this situation. Walking sticks and still very concerned with falling while getting to a cart, then perfectly stable after being able to grab onto something in front of them. Though I highly doubt they themselves left carts around the lot rather than returning them to the closest corral.
by Two_hands | 2025-11-17 19:11:22+00:00
Thats a cool idea, thanks for sharing! It's cool to see other uses for a model I built for a completely different task.

Is there any research/papers on this type of autism diagnosis tools for babies?

To your last point, yes I agree. Even the task I setup the model for is relatively easy compared to proper gaze tracking, I just rely on large datasets.

I suppose you could do it in the way you say and then from that gather data to eventually build out another model.

I'll for sure look into this, appreciate the idea sharing!
by floatrock | 2025-11-17 19:11:22+00:00
Service fees is the counter-tactic here.

If it takes the city clerk multiple hours to assemble and distribute the video clips and time gets billed to $1k/request because it's being done in the most inefficient, asinine way, well, how many FOIA requests really have $1k of urgency behind them?

I don't know enough about municipal billing to know how defensible that is, but it's definitely one of the escalation paths here.
by phantasmish | 2025-11-17 19:11:33+00:00
I’m skeptical of any consequentialist approach that doesn’t just boil down to virtue ethics.

Aiming directly at consequentialist ways of operating always seems to either become impractical in a hurry, or get fucked up and kinda evil. Like, it’s so consistent that anyone thinking they’ve figured it out needs to have a good hard think about it for a several years before tentatively attempting action based on it, I’d say.
by Joeboy | 2025-11-17 19:11:55+00:00
I don't really understand your issue sorry, but my thing basically just writes the audio output to a buffer, and the DMA and PIO "automatically" send that to the I2S output. There's also some messing about with ping ponging between two DMA buffers to avoid gaps between each buffer write audio. I guess things might be quite different on the ESP32.

Edit: Ok I glanced at your code, if I read it right it seems like you're writing sin waves into buffers at "init" time then copying the appropriate buffer at "run" time. Which is not what I'd do, but then I'm used to more luxurious devices. Maybe try using a fast sin approximation rather than the precomputed buffer table?

https://bmtechjournal.wordpress.com/2020/05/27/super-fast-qu... might be helpful there.
by throw4847285 | 2025-11-17 19:11:58+00:00
The fundamental problem is that Effective Altruism is a political movement that spun out of a philosophical one. If you want to talk about the relative strengths and weaknesses of consequentialism, go right ahead. If you want to assume consequentialism is true and discuss specific ethical questions via that framing, power to you.

If you want to form a movement, you now have a movement, with all that entails: leaders, policies, politics, contradictions, internecine struggles, money, money, more money, goals, success at your goals, failure at your goals, etc.
by amarant | 2025-11-17 19:12:03+00:00
"relatively" is meant to be doing a lot of work in my previous comment. Allow me to clarify: Obviously some amount was always there, but it used to be so much less than it is now, and, more importantly, the difference between HN and other social media, such as Reddit, used to be bigger, in terms of amount of dogma.

HN still has less dogma than Reddit, but it's closer than it used to be in my estimation. Reddit is still getting more dogma each day, but HN is slowly catching up.

I don't know where to turn to for online discourse that is at least mostly free from dogma these days. This used to be it.
by assemblyman | 2025-11-17 19:12:12+00:00
I always wondered if there are people who don't have a clear distinction between their private space/home and public space. Whether it's not putting their carts back, or talking loudly on the phone/playing music in a gym or any public space, tossing trash our of car windows, there are some people who seem to inhabit their own inner world so fully that it doesn't register that there are other people around them and that they are using a shared resource.
by abdullahkhalids | 2025-11-17 19:12:13+00:00
If I go to a fast food restaurant, where you order and collect at the counter, and where I don't see the staff cleaning the tables between customers, I do wipe down my table with the provided napkins.

This satisfies the golden rule. I want the person on the table before me to do a reasonable effort to keep the table clean. And I will do it for the next person.
by mike_hearn | 2025-11-17 19:12:23+00:00
How do you lose citizenship of the place you're born without explicitly giving it up?

If you can support yourself off savings you don't need an income, which is why retirees can go to Spain. But you do need to be able to support yourself financially and without much time to do so.

I wouldn't be that amazed, given I've been to Berlin many times. Sure, you can go to big cities and then compete with locals for unskilled work without speaking the local language. You might be able to find temporary jobs where it's not strictly required. Most people don't want to do that.

> though 48% voting for anything it isn't what I'd call a "small"

But we're talking about moving abroad here. Of that 48%, 15% were primarily motivated by the false claims made about economic armageddon.

https://dominiccummings.com/wp-content/uploads/2016/11/scree...

Only about 30% of the population actually supported the EU for any reason (we don't know which ones). If you could go back in time and tell people 10 years ago that leaving would have no impact on GDP, no impact on trade, and no impact on jobs, the vote would have gone to Leave by maybe 65-70% (rough guess, can't be bothered to recompute the numbers with the 9% of don't knows excluded).

> If Texas seceded from the US, their citizens would (probably) lose the rights of US citizenship

This is ultimately a not very interesting debate about the precise semantics of the word "right". In the past I've attended a lecture by a human rights lawyer who argued there might be actually no such thing as rights, because if you try and nail down the term to legal precision it always ends in a mess.

But OK - what rights would Texans lose? Citizenship is a status, not a right. The rights afforded by the Bill of Rights? Probably not unless secession involved rewriting the constitution from scratch. The right to move to California and live there? Unless it was a very nasty split they'd presumably retain the ability to apply for an H1B or green card, like anyone else.

Moving to the EU was never a right in the sense citizenship rights are, because the "right" to move to other EU countries was always contingent on massive monetary payments, and something you have to purchase isn't normally described as a right. A better analogy than Texas seceding is if someone walked into a shop and declared "I have the right to own this expensive watch". It would just confuse people to talk like that and they'd disagree with you, because you'd have to pay for it first. If you bought it and then said, "Now I have the right to this watch" you'd again be talking very unidiomatic English (at best).

That's just one reason the EU isn't a nation and never has been, despite how some people dream of one. A nation doesn't charge you a subscription fee to be a citizen of it. The EU does. It's why EU federalists talk about empires and colonies when they think nobody is listening.
by recursivecaveat | 2025-11-17 19:12:39+00:00
Yeah, I'm kindof skeptical. Another example I found was Kim referencing the south in a TV speech. I think their official position might be something closer to that the war was victorious by virtue of holding off the Americans and/or removing them from the area. Then the atlas doesn't show the south as a separate country because it's more of a Taiwan situation where they don't want to legitimize it as anything more than a rebellious province? At least in the early 2000s when this atlas was made. The language at the time definitely seems to emphasize that the whole peninsula is just "the nation": https://en.wikipedia.org/wiki/June_15th_North%E2%80%93South_...
How might a leveraged perpetual-style model impact prediction market efficiency?
by prophex | 2025-11-17 19:12:43+00:00
Prediction markets and perpetual DEXs both saw significant growth in Q4 2025, reportedly totaling around $35B across the two categories. An emerging model is now blending the mechanics of prediction markets with leveraged perpetual trading allowing outcome-based positions that can be opened or closed dynamically.

This raises several questions: - Does combining forecasting markets with leverage create more accurate price signals, or more noise? - Is there real informational value here, or is it primarily speculative flow? - Could this be a more scalable architecture for prediction markets, which have historically struggled with liquidity and participation?

Interested in thoughtful takes, especially from people who’ve worked on forecasting, derivatives, or market-design problems.
by mtmail | 2025-11-17 19:12:57+00:00
Goal is to get indexed by search engines or LLMs and then show up as first phone number for "$airline customer support" or such. It's been going on for a while, I keep flagging them when I see them in my timezone. I thought it was Turkish.

The old accounts is amazing though. Either somebody really playing the long game or easy guessable passwords?
by ranger_danger | 2025-11-17 19:13:00+00:00
It sounds like a good test in theory but I would say it's actually more nuanced than that.

In my experience, there are certainly reasons that returning the cart might be difficult or impossible (handicap, small children etc.).

If you speak to employees about it, I have been told that they often actually like going outside to get the carts, so to me this is not only increased convenience for me personally, but desired by the employees also as they get a "break" from the chaos inside the store.
by hackthemack | 2025-11-17 19:13:29+00:00
Fair point.

I did not usually see a free roaming cart though. Maybe times have changed. Usually, people would prop them up against a curb, or ditch them into a grassy spot, or they would put them by a low spot in the parking lot next to a drain, or put them next to a column on the sidewalk.

Just my anecdotal experience, it seemed like people would put their cart back if there was a cart corral in the center of every parking row.
by silisili | 2025-11-17 19:13:30+00:00
Same re: grocery work and liking getting carts as a teen.

That said

> But if they just push it into the grass, or out of the way,

One marker of whether something is acceptable in society(or having a functioning brain, at times) is to ask oneself "what would happen if everyone did what I'm doing." This applies to most things...littering, talking on speakerphone or blasting music in public, etc. I think this example would similarly fail this test, imagining hundreds of carts piled up somewhere 'out of the way.'
by bluedino | 2025-11-17 19:13:31+00:00
> a CartManager XD (whose name is extra hilarious to me).

They're made by 'Gatekeeper' which is even better.

You're only supposed to move 25 carts at a time with one of those, and we used to get videos from stores that we serviced where the employees would regularly see how many carts they could get that thing to move at one time...
by mytailorisrich | 2025-11-17 19:13:54+00:00
FUD and rationalising. We do understand the real reason they don't like it.

By the way, in the Arab world (my reading of "some West Asian and North African markets". Nice euphemism, btw) there isn't the same stigma as in the West so they usually don't feel the need to be cautious and say exactly what they mean, i.e. "the Jews".
by GloriousKoji | 2025-11-17 19:14:01+00:00
As someone with a self proclaimed fetish I have to ask if you have ever tried working with the material? I find even the most basic manipulation to be wild compared to other common metals.

I was sanding and polishing a long handled titanium spoon to make it more smooth (slowly) by hand and the friction from that quickly made it too hot to hold. It's thermal conductivity is 1/10th of aluminum and roughly 1/2 of stainless steel.

Another fun thing is to anodize it to different colors. Compared to aluminum it can be achieved without the use of caustic chemicals.
by klustregrif | 2025-11-17 19:14:14+00:00
> EA is about donating your money effectively

For most it seems EA is an argument that despite no charitable donations being made at all, and despite gaining wealth through questionable means it’s still all ethical because it’s theoretically “just more effective” if the person continues to claim that they would in the far future put some money towards these hypothetical “very effective” charitable causes, that just never seems to have materialized yet, and all of cause shouldn’t be perused “until you’ve built your fortune”.
by JPLeRouzic | 2025-11-17 19:14:15+00:00
While not a scientist, I read many scientific articles about ALS (there are ~15,000 per year), most are useless from the perspective of someone interested in a cure, but I think this one may be onto something.

This work broadens the classical TDP-43 narrative; traditionally, TDP-43 aggregates are viewed as problematic because they are localized in the cytosol, not the nucleus. Here, the narrative is that it is problematic because it accumulates in the neuro-muscular junction.

The mechanistic explanation (which is very rare in ALS publications) is that as TDP-43 binds thousands of mRNAs, it suppresses their translation when overabundant, and in motor neurons, which are incredibly long, translation must happen at their extremities. Hence, the neuro-muscular junction becomes dysfunctional.

As for a potential treatment, targeting skeletal muscle rather than the CNS is more accessible and safer.

https://www.nature.com/articles/s41593-025-02062-6
by zzo38computer | 2025-11-17 19:14:54+00:00
There are separate URLs for "https:" vs "http:" although they are usually the same content when both are available (although I have seen some where it isn't the same), although the compression (and some other stuff) is decided by headers. However, it might make sense to include some of these things optionally within the URL (within the authority section and/or scheme section somehow), for compression, version of the internet, version of the protocol, certificate pinning, etc, in a way that these things are easily delimited so that a program that understands this convention can ignore them. However, that might make a mess.

I had also defined a "hashed:" scheme for specifying the hash of the file that is referenced by the URL, and this is a scheme that includes another URL. (The "jar:" scheme is another one that also includes other URL, and is used for referencing files within a ZIP archive.)
by lunar_mycroft | 2025-11-17 19:15:18+00:00
> It's fine to disagree on the costs/benefits and where you draw the line on supporting the removal, but fundamentally it's just a cost-benefit question

If browser makers had simply said that maintaining all the web standards was too much work and they were opting to depreciate parts of it, I'd likely still object but I wouldn't be calling it bad faith. As it stands however, they and their defenders continue to cite alleged security problems as one of if not the primary reason to remove XSLT. This alleged security justification is a lie. We know it's a lie because there exists a trivial way to virtually completely remove the security burden presented by XSLT to browser maintainers without depreciating it, and the chrome team is well aware of this option. There is no significant difference in security between "shipping an existing polyfil which implements XSLT from inside the browser's sandbox instead of outside it" and "removing all support for XSLT", so security isn't the reason they're very deliberately choosing the former over the latter.

> This seems overly dramatic. It's a small streamlining of an important software, by removing an expensive feature with almost zero usage

This isn't a counter argument, you've just repeated your point that XSLT (allegedly) isn't sufficiently well used to justify maintaining it, ignoring the fact that said tradeoff being made by browser maintainers in the first place is a problem.
by danwilsonthomas | 2025-11-17 19:15:25+00:00
Imagine you have users that want to view an XML document as a report of some kind. You can easily do this right now by having them upload a document and attaching a stylesheet to it. I do this to let people view after-game reports for a video game (Nebulous: Fleet Command). They come in as XML and I transform them to HTML. Now I do this all client-side using the browser support for XSLT and about 10 lines of javascript because I don't want to pay for and run a server for file uploads. But if I did the XSLT support in the browser would make it truly trivial to do.

Now this obviously isn't critical infrastructure, but it sucks getting stepped on and I'm getting stepped on by the removal of XSLT.
by system2 | 2025-11-17 19:15:45+00:00
I watched many Cart Narcs episodes. Always the same, the people look uneducated in every single one of them, mostly "Karen" types. It is about respecting society, and these people don't. In the EU, they respect and care about their society. It is all cultural.

ALDI solved this problem, even in the U.S. Their carts only work with quarters, so people go back to the cart area to get their quarters back. Maybe we should get the dollar coins circulated more so every cart in the U.S. uses those to encourage people to move their carts back. Quarters might not work everywhere in the U.S.. They probably would justify leaving their carts even more now because they will think: "Hey, next person gets a free quarter, it is better to leave it, I help someone to make money now".
by red-iron-pine | 2025-11-17 19:15:48+00:00
> You can observe that sort of thing on this very forum.

remember that 1) this forum skews to a very specific sort of person, and 2) that person notwithstanding, there is an incredible, shocking large amount of bots active here, owing to the fact that the people from 1) are also AI worshipping futurists (and/or techno-fascists)
by Herring | 2025-11-17 19:15:56+00:00
Athenian democracy ran into two successful coups because of those internal flaws, and ultimately didn't last that long. It's better viewed as a "v0.1-alpha" than a final version

I wouldn't quite say "democracy requires equality". It's more accurate to say "inequality is corrosive". The amount of damage done depends on how much inequality and for how long and what countermeasures are taken (eg redistribution of wealth, expansions of rights, safety nets etc).
by tyfon | 2025-11-17 19:16:03+00:00
I suspect the apparent reduction in price on these devices is a lot less than what they earn from the slimy stuff.

But the premium devices (especially TVs) are starting to do this too now via software updates. I had to turn off a bunch of crap in the settings on my LG CX TVs some time ago. Now they are just off the internet and can only connect to my NAS.