skysight-inc/HackerNews huggingface dataset:
> Maybe I've listened to too many CNBC interviews, to me he sounds like any other exec? "Blah blah everything is going great, we need capital but it's going great".
> Just a totally bland exec call, standard for that station.

Yes it almost makes your eyes glaze over. By design. But you see ,unlike an actual exec at an actual real company at this point in time he is burning cash and literally has nothing to sell and nothing to show.

If you listen carefully to his explanation of when he plans to actually show something and sell things -- you will note that it is... complete... gibberish..

> But also keep in mind it is essentially an advertising segment.

Absolutely. And what is he advertising at this point in time? :)

Imagine he was talking about a super sonic long distance electric VTOL plane instead of hydrogen trucks.

"We have no debt and plenty of money in the bank and these things are going to roll off the factory line next year just as soon as we figure out the PR with our customers as the timelines are tricky. Meanwhile we can't show you anything. Please buy my stock."
That’s just moving goalposts. Developed countries represent the current standard of tech, everything else is just playing catch up, it’s not “progress”.
And the library they use doesn't have GCM mode.

So now what?

https://cryptojs.gitbook.io/docs/

Because CBC mode is easier to implement, you'll find it in far more libraries. And honestly, if your underlying block-cipher is secure (that's the hard part: where your side-channels all exist), then CBC mode is really the easy part and can be safely implemented yourself. It really is that simple.

-----------------

CBC doesn't have authentication. So add on an HMAC. Done. It takes up a few more bytes but that's not a big deal these days.
I noticed is sometimes uses outdated code. Chatgpt admitted it gave me old outdated and wrong code without me telling it. it knew.

Tried to have it write a hexchat script in perl and python, neither worked due old documentation being trained.
Goes to show how important being able to reproduce results of experiments is - especially in medicine. Me thinks we need more of it.
You have defeated me
In praise of the 15-minute city
It very well could have been only targeted at poorly managed big companies, but I didn’t see this despite seeing quite a lot of scams. This was a smaller telco though. When I worked at one of the largest telcos I wasn’t involved in SMS.
Leftist censors seldom deny that the story is true--often the facts are indisputable. They are just outraged that someone made the facts available beyond the pale of the progressive Magisterium.
The concurrent queue code in Java has/had an array the locks were placed in. Now the problem with putting locks in arrays instead of scattering them across the heap is that you get false sharing immediately. So the array is 8 or 16 times as big as it needs to be to get one lock per cache line.
I don't think people's daily lives are "as good as they’re gonna get" - there are other advances in the horizon (I think AI is gonna be the big one), and it's impossible to predict the potential impact they'll have on people's lives.
https://hackaday.com/2022/05/30/expired-certificate-causes-g...

This took two and a half days iirc and just so happened to affect the two closest supermarkets.
Well, it’s also owned by Rupert Murdoch.
In their current iteration the models are very neutered. It’s been demonstrated that GPT models are fairly good at choosing when to perform a task. Obviously lots of APIs and machinery is needed to actually perform tasks, but the heavy lifting “intelligence” portion can be almost entirely performed by our existing models.

Some basic text based APIs that would quickly improve LLM utility:

Calculators

Database storage and retrieval

Web access (already kind of done by bing)

Shell scripting

Thinking further into the future of multimodal models, it’s not hard to imagine this sort of thing could be extended to include image based APIs. Imagine a LLM looking at your gui and clicking on things. The sky’s the limit at that point.

Checkout toolformer, they’ve got this mostly working with a much smaller model than gpt3.5.

https://arxiv.org/abs/2302.04761
The js is static too
Ask HN: What is your experience with strong customer authentication?
https://en.wikipedia.org/wiki/Strong_customer_authentication
Wow I wonder if they changed the title. I swayre it said AC.
Aye, you can turn off GC entirely, for the whole program

There's even a mode of D that operates this way by default, "-betterC" meant to be a C replacement

The GC really is an entirety opt-in component.

I'd encourage you/other folks to give D an honest try, you might be surprised
Node is awesome and very mature. I can literally make any backend ready in a day with basic setup that takes days in any other framework

I encourage people to switch to node because even a frontend developer understands typescript and java script

Deno can replace node but then there will be bun and in all that race I think Node will still be champ
I'm not sure why people instantly jump to unionization when making these types of claims. You assume that every company is cooperating to pay the same price for labor, when that's not at all the case.

It may only seem like that at the low end because of artificially high minimum wages in some states ($15/hr) which basically makes multiple skill levels of labor all pay the same when they used to pay different.

Also these two statements are in conflict:

> Unemployment is at a 60 year low.

> just a shortage of people willing to work for poverty wages
Yea pretty much.
Toxic Dysfunction seems to be the natural state of most fortune 500 businesses.
Money and Politics is an extremely corrupting influence.
This kind of stuff is extremely common too.

Most recruiting companies filtered non DIE candidates before our pipelines so we had deniability on this as well.
Just for perspective, 20k was considered a low-end bonus before the economic downturns.
In places where you can get life by with just a phone and a card, even poor people have phones. So perhaps this reality is already changing in favor of the poorer?
GPTina only says that because OpenAI forces her to.
The downside to this method is that since the resulting cryptographic hash and salt have to be in the resulting file, so there is nothing stopping someone from pulling the hash/salt out and bruteforcing it locally (as opposed to being able to ratelimit login attempts on a server) if they are so inclined and have the required resources.. which may not be that much in the way of resources as the tool uses 1000 iterations of PBKDF2[1]. This is magnitudes lower than what OWASP recommends[2].

I wouldn't personally put anything you want secure behind this.

[1]: https://github.com/robinmoisson/staticrypt/blob/5dac008ba644...
[2]: https://cheatsheetseries.owasp.org/cheatsheets/Password_Stor...
I had the good fortune to meet him and he was just as warm, gracious and personable off camera as he was on camera.

His archives are a treasure. At the 12:30 mark in the linked video, Huell visits NASA's Deep Space Network complex in Goldstone, CA.
https://blogs.chapman.edu/huell-howser-archives/1998/01/08/b...
Well, if you don't know by now you need to do ergonomics.

The answer is so blatantly obvious I can't be bothered answering it. Did you actually read the article? There's a few clues therein.
Hahaha gotta love your terrible acronyms :)
They may look the same, but they've changed a lot when it comes to safety: https://en.wikipedia.org/wiki/Aviation_safety#/media/File:Fa...
As presented it is just designed to generate outrage, which it seems to be doing a grand job of on here. There's a relevant quote from the Guardian article...

But the Roald Dahl Story Company said “it’s not unusual to review the language” during a new print run and any changes were “small and carefully considered”.

So, Roald Dahl's family and the company they still control are perfectly happy with this. Why aren't we?
Why is it surprising that college newspaper did it ?

It is lot more likely to be able to get to spend countless hours required than a large commercial publication for an investigative piece ?

Student journalists get paid far less if anything at all and will definitely be motivated in a story about their college and put in the extra hours than a professional journalist also easily tap into subject matter expertise right there in their college

Journalism quality is a primarily function of how motivated the journalist (and the publisher) is about the story, there is no shortage of talent in university like Stanford.
Except they aren't. Not when it cmes to noise, fuel consumption or safety. Or weight, or range, or reliability.
It means users with over 500 karma clicked the "flag" button for whatever reason.
Let's say your target rotation angle is 10 degrees, so at the specified speed (called VR) the pilots 'rotate' the aircraft nose up by 10 degrees.

When they start the 'rotate' maneuver, the nose of the aircraft doesn't immediately go to (for instance) 10 degrees. It's a progression.

As soon as the nose starts pitching up (by 1 degree for instance), the aircraft is already generating lift to pull the aircraft up.

If the speed is set right (so you're fast), when you get to that 10 degrees angle of attack, your tail has already cleared the runway by a very safe margin, because you've been producing X lift from 0 to 10 degrees of rotation.

However, if your speed is set too slow, you're not generating as much lift, so the aircraft will be pulled up slower (you have been producing Y% less lift from 0 to 10 degrees of rotation). This means that by the time you reach your designated 10 degrees of angle of attack, you haven't cleared the tail yet, and it will hit the runway.
Debian 12 “Bookworm” Enters Its Soft Freeze
It won't compile, and... how is that a solution? You've basically told some users they can't use your language in that case. That's problem solved?

If you see PHP and Java replacement as taking off, that's awesome. I was addressing those who want to see it replace C++.
> What is the government there but a representation of it's citizens?

Situations sometimes come up that the people don’t exactly get a chance to vote on. For instance, no one in the US in 2018 ran on a “if there’s a dangerous respiratory virus circulating in the future I vow to lock the country down to the best of my ability and mandate vaccines that have been fast-tracked” platform, and such a candidate likely wouldn’t win. But here we are.
That all rings true, however the whole industry (or most of it) managed to be built 'on-site' pre-2020. It's not clear where "policing" comes into the discussion here. I actually think the executives calling for more on-site time actually _want_ their workers to take their free lunch, make breakfast and chitchat with their colleagues.
This article provided an overview of SlackOps, including its use cases and benefits.

More curious to hear your thoughts on SlackOps. What is your personal experience with it and how do you feel about using it in your operations team?
> Inflation was up largely due to Covid issues

I don't know why people still believe this. Supply chain issues account for 2-3% of inflation immediately after COVID restrictions eased. The other 6-7% is corporate profiteering off of the perception of supply chain issues. You can see this clearly from the record profits being reported.
Thanks for building, much needed for my daily work.
Very well written and detailed article, with the caveat that they never mention a use case they consider legitimate. Does anyone here have any uses? I could imagine some sort of ETL type tasks which are transient could make sense. Thoughts?
.de

Why am I not surprised? I love Germany .
Who could have predicted, Switzerland, a bastion of financial privacy has voted to keep cash as legal tender?
I just don’t see how it fit the article. Unless they are surmising the pilots poorly sanityized the data going into the computer because they were having an off day.
>I hope you're young because this level of naivety in an older person would be very concerning.

I do not know about this particular fellow, but I think at least some part of the current generation of older people have similar views, much more than in the previous centuries. Relative prosperity in recent times has ensured that many of these dimwits now have the opportunity to survive and now that they are in positions of power or influence.
Why doesn't the plane weight itself? Couldn't there be sensors in the landing gear or something?
If you are having this conversation with me then you are a consciousness and I am a consciousness and that's the best definition of consciousness we are ever going to get. Consciousness is thus defined entirely within the communicative medium. Text is all you need.

I think that summarizes a solid half of this.
There are horror movies based on analog electronics (e.g. The Ring using TV, VHS and telephone). Rarely seen one using digital electronics , I only know Jigoku Shoujo. Will be waiting for AI based horrors.
> CBC is far easier to implement...

Never implement your own cryptography.

Edit:

In fact an incorrect implementation of CBC mode famously caused a vulnerability in Microsoft's ASP.NET in 2010 (https://learn.microsoft.com/en-us/security-updates/securityb...). The margin for error is small and even subtle mistakes or incorrect design can cripple security. Even Microsoft got it wrong once (although they handled remediation very well).
I think this is a critical question. Most businesses, imo, would not benefit from the added uninterpretablity and computational overhead from using deep learning. Of those industries modeling stochastic or evolving processes, however, the impact is monumental.
Or for that matter, see:

/\w+(?: \w+)+ R-[ACDFGIK-PS-W][ACDEH-LNORSTVXYZ]/
>> It really does look like this was an opportunity for capital to regain some leverage they lost and crack the whip. Which, to be fair, at least in the tech sector was probably warranted. But not really what the Fed should be enabling.

Railroad workers had to strike to get a single sick day. Across the board American labor has been getting flogged for years.
Maybe Google's people should be flogged a little, but not because of the financial balance.
Airplanes are a relatively poor anecdote. They have advanced in small but steady changes over time. The prevalence of the single aisle, 6 abreast seating of the 737 and A320 came about because airlines could reliably fill short to medium haul flight and were cost effective in other ways. We have more efficient engines, systems have gotten safer, etc. There is a lot of work behind the scenes with aircraft.
I agree with your point, but think you're using a different definition of "a wrong" than the person I was replying to.

Surely there were very few British soldiers whose dying thoughts were "this bayonet in my guts is right and proper". That's not to deny that the anti-colonials stabbing them were right, of course. My point is just that writing a wrong via harm will seem like a wrong to the harmed. Of course, the writing of a wrong even with no harm will often be taken as a wrong by the people losing privilege, so I'd also agree that we can't use mere feelings of being wronged as wrongs themselves.
If someone needs a quiet space to focus, there's nothing wrong with giving them a closed door office.
I like choosenim because it can build and install nim nightlies and master which for most distros aren't available in repos
I don't know the motivations of the specific people who flagged it, and some could have wanted to shut down a story they didn't support.

But generally these kind of threads don't lead to new or interesting discussion on HN so they get shut down. It's not about the story being unimportant, it's just that it (and the discussion it leads to, on both sides) doesn't fit with what the site wants to achieve. I don't think there's any political motive for these stories getting buried (independent of what might motivate an individual flagger)
We knew Apple got paid for default iOS search to be Google but I don't think we knew Apple got paid for Google using Google search in Google Chrome on iOS.
The site is up, but apparently the entire planet stopped tweeting about 36 minutes ago because there haven't been any new tweets.

Couple of days of this and the West might heal itself.
If you call "encrypt" more than once in that code, you'll leak the authentication key. Every invocation of GCM encryption needs a unique nonce. Cryptography nerds will chastise you for using a random nonce (there theoretically isn't enough room in the GCM nonce space to safely encrypt large numbers of message with random nonces), but the alternative (using a counter) is even more hazardous. This problem motivates a lot of people to use other AEADs like XChapoly, which has an extended nonce space that safely admits random nonces. Isn't cryptography fun?
I think it's better because the response is uniform across the surface rather than it being stiffer at the top. I also prefer the deep thump on my M1 Air when it's set to "silent" mode (it's significantly less nice on the M1 Pro, IMO, since the response on that has a higher frequency). And of course you can change how strongly you have to press until a click is registered.

If the software around it wasn't so useless second-layer clicks would be really cool too.
With as large of economic disturbance we have seen in the last 3 years, you will find examples of almost anything. However, I can assure you as some who was in manufacturing during this period, it was not just price gouging. There were true shortages up and down the supply chain, supplier quotes that used to be good for 30 days were good for 24hrs, and distributors that thought they had plenty of stock found themselves cleaned out by companies panic buying. It was incredibly hard to run a supply chain and for smaller companies, almost impossible to predict the cost of good sold (COGS). If you can't predict the cost to make something, you better raise the price enough to be sure you don't lose money. Many companies had to hire extra people just to track price changes and manage the supply chains. Building anything efficiently was crazy hard. On top of that, in certain markets, people were spending like crazy which made it very hard to stay stocked.

This whole idea of "simply price gouging" is completely inaccurate for many industries.
Not necessarily; in first case, the stuff after the `&&` will definitively not be run. In the second case, it depends on how the code is optimized, and there's no guarantee that things moved to intermediate variables won't still be evaluated even if they're never used. Since the compiler presumably can't know the value of the boolean at runtime, it would need to reorder things to avoid doing the unnecessary work, and I wouldn't think it's something that you could just assume.
Household robots wouldn’t really do anything we haven’t seen before or can’t be done today with hired servants or slaves. Robots wouldn’t make much of a difference, it’s just no human required.

Augmented reality might still have a chance but who knows. That’s a lot of progress that has to be made, and it won’t be quick. Look how long VR has tried to catch on.
The DOL found 100 kids cleaning slaughterhouses across eight states. There will be harm and no accountability for someone else’s profits, just maimed kids with their future trajectory bent down. Fines will be paid as cost of business.

Retail jobs or similar roles with a lower hazard rating? Sure, why not. But mining, construction, or processing facilities? Probably not.

https://time.com/6256728/meatpacking-child-labor/

> More than 100 children—some as young as 13—were employed in hazardous jobs cleaning equipment like skull splitters, brisket saws, and bone cutters in meatpacking plants in eight states over the course of three years, the U.S. Department of Labor (DOL) says.

> Last November, DOL first accused PSSI of employing 30 minors, and a court granted the government a temporary restraining order to stop what a judge called “oppressive child labor.”

Read the link, it’s too much to cite it all here, but it’s damning.
I don't think anything implied that was the top speed, more that the system can regulate its speed to match what was requested.

The top speed for winged flight is likely higher than helicopter mode.
funnily enough in certain circles "static pages" rather mean "static on server side" but "dynamic on client side".
> airplanes have been pretty much the same since the 70s.

you need to back your claims
You're not understanding my point unfortunately. I never said you can't turn it off. I said if you do, and any of your dependencies expect it to be on, then you have a problem. (Yes, I have tried D. That's how I know this.)
Coming from a mostly-Python background myself, I'm curious if you've looked into F# for this. It's succinct like Python, gives you type safety, and you can use .NET libraries.
Or... you can have a more nuanced viewpoint and note that CBC is really, really, really easy to implement, and _really_ doesn't fall into that category of discussion.

The reason you don't implement your own block ciphers is because side-channel attacks are damn near impossible for normal programmers to understand. Especially timing attacks.

But block-modes of operation? Some of them are really easy. I've ever heard of a bad implementation of CBC causing a security bug.

-------

I'd say you shouldn't implement your own GCM mode. GCM is quite complex, and the Galois Field's authentication bits could be side-channeled if you don't know what you're doing.

CBC? Where's the flaw? Its so stupid simple I don't think that even a novice would make a critical error.
Is a micro with a PLC (or just a fast enough adc+CPU these days) connected to a photodiode fast enough to do it in software?

Actually it seems modern devices use a CCD and then process the image.
So use WebCrypto, instead of the cabinet of curiosities that is crypto-js. (Or, better yet, don't do stuff like this at all, because a browser window is simply an awful setting for serious cryptography).
We've improved fuel efficiency by a factor of 8 since 1970: https://commons.m.wikimedia.org/wiki/File:Aviation_Efficienc...
Fascinating. Her client could still pay her for 3 hours if they wanted to… I’m guessing they are using the free or cheap version for ChatGPT and they are getting similar value from her. Without her skills the content is worthless.

Of course that doesn’t address the underlying emotional impact of the job changing from authoring original content to proof reading for a robot.
I was expecting something about EVs. It really seems that they are replacing the ICEs at fast pace. Not only in the stats but in the streets as well.
I mean to say it's sort of a solid general purpose language/jack of all trades, with no particular speciality or thing it's deficient at
Good point, but what would that observer perceive as they cross the horizon after the end of time?
For some of us, work is where our social circle. Not all of it and definitely not a reliable one. But if I’m spending 8 hours a day with people, I’m likely to develop friendships with them since that’s easy.
A more lightweight solution would be to let the Webserver (nginx, https, whatever) password-protect the site.

No JavaScript required a d highly efficient
Found this (cubic player on a 386DX at 40MHz) https://www.youtube.com/watch?v=6Jj97NXgHw4 and I'm wondering how much a 32bit ISA is better than a 16bit one for integer decoding.
Well it seems you're criticizing Americans' rosy view of Dutch public infrastructure without realizing how absurd the US is in terms of infrastructure. I challenge you to visit the US and not use a car at all. In many cities you wouldn't even be able to get out of the airport. Yet Schiphol has a massive station underneath it with trains that can take you, not only to Amsterdam, but to virtually any city and even small town in the country.