skysight-inc/HackerNews huggingface dataset:
Show HN: ChaCha20nosat, a symmetric cipher that resists being put into SAT form
There has been a recent discussion about the monoculture in crypto, and how ChaCha20 is a fallback to AES256.

All current mainstream ciphers are relatively easy to transform into SAT form. This is a proposal for a fallback for that, using polymorphic constraints between the bits via sboxes that are part of the private key.

Suggested changes to avoid redoing XChaCha20: since the sboxes could be the entire private key, what was the key could be a 256 bits nonce, and what was the nonce could be the counter, and what was the counter could be a stream index: such a modification could be called yadacha20.

Small, self-contained super ugly, quickly written Rust code: this is an initial draft of a work in progress. The goal of this post is to get feedback as early as possible.

Thank you.
When you eat, do you eat because you've decided to express yourself in that way? Does you action to go eating express intentionally?
Theoretically anyway. See LastPass.

Still, the algorithm method requires 3 services to be breached. Those services must be storing the passwords in plaintext or an otherwise retrievable method. The bad actor must put together the fact that your account is the same across all 3 services. Then they must analyze your password and reverse engineer your algorithm.

That seems a lot less likely than your master password getting nabbed.

The attack vector for a PW manager is a lot easier. They're obvious targets for both breaches and social hacks. One person looking over your shoulder at the coffee shop is as or more likely than anything else. They can even swipe your phone in that scenario to beat MFA.

I'm not advocating an algorithmic approach. The average person isn't going to understand this (heck, they don't understand PW managers either). And if they did, most algos would be something like ServiceName! anyway.

On the whole a password manager is a better solution, but it's not without its own trade offs, which don't get nearly enough discussion.
Or they could just figure out how much the labor they are shopping for is worth to them and advertise for that.
I haven't used it, but can't you just say "OK, use that as the new baseline from here on." Or something similar?
In that link

> Hire a TC negotiation consultant with access to comp data. They can get you 20-40% more.

What does TC mean here?
Using the verb ‘stayed’ does tend to imply you slept there and were there ~24 hours. If you had ‘stayed two days’ or more, that really would imply N 24 hour cycles approximately, and at least N-1 cycles certainly; any other number besides 1 in your sentence would mess up your example. You already know the word “day” has multiple meanings, and in some contexts (such as time codes and dates and time measurements, using “day” always means 24 hours). An example using one of the meanings is irrelevant, it does not contradict the other meanings.
Indeed, the perpetuators of "pull yourself up by your bootstraps" are finding themselves short of said bootstraps.
They are only probabilities if you treat them as such. If you always just pick the highest probability option (temperature = 0), it's not random in any way - then it's just a confidence value.

You can use randomness, but it's in no way inherent to the process.
I also use the sharing feature (aka organizations) and maybe I am too dumb but it seems that you can't see or copy the password anymore once you have shared it (even the one you yourself shared with somebody else). Which is fine for when you can use the auto-fill but that just doesn't always work or isn't always feasible.
You're right, and it's exactly what happened here:

https://youtu.be/IS0SItAzEXg?t=437
The word “illegal” applies to both civil and criminal matters. The presumption of innocence doesn’t apply to civil matters. More importantly, labels generally refer to actual facts. You can talk in general about “speeders” or “shoplifters” though obviously the police would have to prove any individual person accused of those things was in fact doing so.
I think the name is pretty generic/bad. Maybe you could incorporate some nordic myth etc since they are adding the new runes api to svelte. One thing that could be nice is using something like Zod for input validation, I see alot of "// TODO: validation" ;) Otherwise it looks really cool and might be something I would use for my next sveltekit project, right now I just run with pocketbase + sveltekit for my app.
> Some portion of the population wants to see house prices continue to increase and they will vote for politicians who will implement policies which will support that agenda.

To be fair, nobody wants to see their home value drop except in terms of tax liability. If you buy your house for 400k you don't want the value to drop to 350k
"If you want to hide something, you should not be doing it in the first place"

Eric Schmidt, then Google CEO
That's a completely different architecture than current lipid nanoparticle mRNA vaccines. It would be obvious to anyone with even a modicum of knowledge that the linked paper is not relevant.
> IMO (and you can fight me on this one) military families embrace duty, leadership, and hard work. If you can hire a vet or their spouse, you're going to get more out of them.

Any data on this (specifically the spouse). Experience says otherwise, TBH.
Yeah, the extension data loss issue is especially bad, I save often to avoid it (it's also a bit weird to create a profile for a new site instead of saving entered data)
I just want one of these things to have Majel Barrett's voice...
> If a company feels the need to reveal their trade secrets in court to make their case, but ultimately wants to maintain protection over the trade secret itself, what option would you provide them?

They can present their evidence in open court, or they can lose. That should be their option.

Their "loss" of trade secrets is not the law's, the government's, or the public's problem.
The purpose of AI is to replace any hope of employment those students had.
My issue isn't fully with them rolling out slowly, my issue is never knowing when you will get the feature or rather not being told when you do get it. I'm fine with "sometime in the next X days/months you will get feature Y", my issue is the only way to see if you got feature Y is to check back daily.
> It’s not fair to call OpenAI a cult, but when I asked several of the company’s top brass if someone could comfortably work there if they didn’t believe AGI was truly coming—and that its arrival would mark one of the greatest moments in human history—most executives didn’t think so. Why would a nonbeliever want to work here? they wondered. The assumption is that the workforce—now at approximately 500, though it might have grown since you began reading this paragraph—has self-selected to include only the faithful. At the very least, as Altman puts it, once you get hired, it seems inevitable that you’ll be drawn into the spell.

From https://archive.ph/3zSz6.

Of course there is much more evidence - just follow OpenAI employees on Twitter to see for yourself.
I've seen the word "said" used for the same job, at least in British English.
This doesnt pass the smell test. Washington post as the arbiter of truth?

Hunter biden laptop?
Pee dossier?
The problem with PAM isn’t (IMO) that it’s written in C. The problems are that the entire design is horrible, the configuration abilities are horrible, the maintenance seems pretty bad (not much changes these days), and the ability to actually interact with PAM during authentication is quite weak.

The latter is a functionality weakness (e.g. doing anything useful using PAM when accessing a system over SSH or HTTPS or really anything else is a mess and not terribly useful, but it also makes the fact that PAM is written in C be less of a problem: there is so little untrusted input available to PAM that it’s not a very easy target.

What PAM needs is a redesign. A different language would just be icing on the cake.
Fortunately it's not like StackOverflow has been used as training data for LLMs, right?
Give people more credit. If you're using an AI these days, you have to know it hallucinates sometimes. There's even a warning about it when you log in.
Are you sure it's profitable to build 1million units in Soma (or whatever portion isn't protected historic houses limited to 3 stories) ?
>Not knowing isn't an excuse

True, unless you are a police officer:
https://www.theatlantic.com/national/archive/2014/12/when-co...
Show HN: Solve the best fantasy team with MiniZinc
It's the rugby world cup at the moment, and there is a fantasy game for it.
Someone started posting the best possible team after each round and I thought "how could I automate this?".
I recalled a post I read here (https://www.hillelwayne.com/post/np-hard/) and that's where I found a reference to MiniZinc.
I gave it a go and although it's not that easy to learn using only the docs, I was pleasantly surprised that I managed to make it work in less than a day.
Pretty fun to play with the constraints to get different results and develop an understanding of what matters to pick a good team.
The constraints are the following:
- only 3 players per country
- can't exceed a maximum budget based on each player cost
- players have to be picked in their official position and there is a different number of slots for each position (8 positions, 15 slots)
Happy to get some feedback and perhaps it can inspire others!
This whole thread is full of software engineers incorrectly mansplaining mechanical engineering.

Titanium is not stronger or stiffer than steel.
> The same work should bring the same payment, period.

How do you reward good job performance?
We, IMO, need a progressive tax system for every home controlled by an entity that isn't their primary residence. You don't want to hurt small individuals trying to build up wealth, but we need to stop allowing large corporations to turn basic necessities into investment vehicles.
I share your concerns about the corrupting influence of money (and the importance of this space), but wanted to point out that Anthropic announced two relevant things last week regarding corporate governance:

First, that it has arranged to be controlled by a Long-Term Benefit Trust: "an independent body of five financially disinterested members with an authority to select and remove a portion of our Board that will grow over time (ultimately, a majority of our Board)". (https://www.anthropic.com/index/the-long-term-benefit-trust)

Second, that it also published and committed to a Responsible Scaling Policy: https://www.anthropic.com/index/anthropics-responsible-scali...

Disclaimer: I work at Anthropic
LoL! languages that support short-circuit evaluation will exit the conditional evaluation as soon as they reach a condition that is true, without evaluating subsequent conditions

... it also makes branch predictions more accurate
> the greater problem is the ability of large companies to buy up whatever is on the market, which they then immediately turn into a rental

Homeownership rates haven't changed by more than a couple percentage points since the 1960s: https://fred.stlouisfed.org/series/RHORUSQ156N
What's the ecological footprint of a human doing the same job? Especially when you factor in 18+ years of preparing.
Depends on if you count a command line tool as a desktop client or not [0]. I personally just use the browser extension instead of the desktop client (the GUI one) since it was a bit slow and the extension is fine.

[0] https://bitwarden.com/help/cli/
seemingly often ostensibly for reasons of fairness.

Nah, university presidents are just greedy and wanted to play with that money themselves.
Did anyone force all those students to take student loans?
I'm sure more than 50% of voters believe that not every job should have the same salary.

Of this whole tangent is mostly a non-sequitor because that's not what the law requires or is an attempt to enforce.
Generally speaking, people become uncivil only when under extreme stress (e.g. of poverty). Most people are inherently civil in their nature, hence we have a civilisation that reflects this fact.

Contrast Portugal, with almost no crime, vs the US, with well documented crime problems. Certainly punishments are no harsher in Portugal than the US, if anything the reverse. However in Portugal people aren't as financially stressed as in the US, not least as everyone has access to healthcare, justice, democracy etc regardless of ability to pay.

See also the concept of 'policing by consent' in the UK.
China’s AI boom depends on an army of exploited student interns
Thanks! Unfortunately, though, this very much depends on one's overall setup and is not possible in our case. :(
"There are a lot of services here if you're sober so I suspect they swooped in and found her."

That's what is important. If someone has just had a run of lousy luck,there must be services to help them get back on their feet.

The mentally ill, the junkies? You need services that give them a way out, but you cannot force them to use those services. If they won't accept help, then all that's left is "tough love": Force them out to out-of-the-way places, so they don't mess up everyone else's lives, and let them do whatever they need to do.
>Among my friends seeking to buy houses, the greater problem is the ability of large companies to buy up whatever is on the market, which they then immediately turn into a rental. It’s nearly impossible to compete with a company who will pay $50k over asking price, in cash, for the house you’re trying to get. Comparatively, immigrants don’t have the purchasing power to compete, so saying they’re the problem is a weird conclusion to draw.

While I bear zero animus towards immigrants, this seems obtuse. Why are those companies willing to pay so much? Because they predict they can charge enough rent to make it profitable anyway. Why would they think that? Because immigrants can compete down at the level of rents.

This seems like the same mistake people make about "luxury housing," but on the other end of the market. Building housing at the top of the market does indeed make things cheaper at the bottom of the market, and bringing in people at the bottom of the market does indeed make things more expensive at the top.
El Pais is the most read newspaper in Spanish online. Spanish is one of the most commonly spoken languages in the world (2nd or 3rd)

It would be like being surprised someone outside the UK reads the Guardian
This is known well enough to have its own Wikipedia page:

https://en.wikipedia.org/wiki/Illusory_truth_effect
Yet somehow police don't have to know the laws they are enforcing. Why do we allow good faith excuses for people carrying guns enforcing the law but give no favors to the general public. Do you know every single law you are subject to at the given moment? Even the US government does not know how many laws it has on its own books.

https://blogs.loc.gov/law/2013/03/frequent-reference-questio...
I don't know who Ray Peatis but there are cranks on both sides of any issue. To point to one example that you may have seen and use that to discredit all others isn't doing anyone any good.

I ate keto for a couple years and still generally fall closer to that bucket, though I'm not dealing with any health issues and started eating some breads and carbs again. All the researchers, dieticians, and excercise/fitness coaches I learned from are all still agreed that sugar is bad for you as far as I'm aware. I haven't heard any of them pivot towards saying there are benefits from any meaningful intake of sugars.
I believe that a lot of companies offer stock options for two reasons:

1. Software engineers have come to expect it

2. It provides a very cheap incentive for the engineer to remain at the company for the N number of years required to vest

And in the end, they may still end up being worthless
What are these fan matrices used for? Are multiple small fans with holes between them better or as good as bigger desk fans?
I know, but on some level not all interventions Germany was involved in had the background of stealing other people's oil. And as I said, the whole relocation thing was the final deal breaker, there were other reasons for me not to sign up as well.
>Window management is a software problem

I think it's more a user problem, personally

I can manage to be as productive on a single physical monitor but with relatively-judicious separation of tasks via applications and windows/tabs in them as my coworkers who have 2, 3, or even 6 screen setups

Software can help .. but if you have an inefficient personal workflow / mental process, all the software in the world won't help :)
The creator of Ansible is doing just that but in Rust:

https://news.itsfoss.com/ansible-creator-new-rust-platform/
Been running caseless for the past 4-5 years and it’s not been an issue, even with the larger models in my decidedly average sized hands.

In my case at least it’s been a matter of making a habit of paying attention to grip so it happens subconsciously (no mental effort) and favoring pockets where risk of falling out is nearly nonexistent (e.g. front jeans pocket instead of hoodie front pocket).

It’s been nice to not have to deal with the bulk added by even thin and light cases.
> 2. Health insurance is something I expect to be there, regardless of the monetary value.

I hear what you're saying, but man, I really wish employers would be banned from offering healthcare benefits. They have zero business offering healthcare benefits.
Took me awhile to get there, but my ideal mono-tasking "typewriter-like" setup is:

- iPad Air

- iA Writer iPad App[1] (or: Simplenote)

- TwelveSouth Compass Pro, for use in portrait mode[2]

- Standard Apple Bluetooth Keyboard + Apple Pencil clipped on side[3]

Also, I might be old-fashioned, but when I need to type outside -- which is often -- I just bring my laptop! Lenovo X1C (excellent keyboard) with a great matte screen[4]. Since that's Linux, I usually use vim + goyo, Typora, or Simplenote.

[1]: https://apps.apple.com/app/id775737172?platform=ipad

[2]: https://www.twelvesouth.com/cdn/shop/files/CompassPro-sectio...

[3]: https://ibb.co/3kNZmy1

[4]: https://ibb.co/wJLmLwK
It isn't even embarrass, it is backlash at lies, hypocrisy and contorted justifications that they are ultimately making. This judge has no business presiding over this case.
Voice assistants have always been a half complete product. They were shown off as a cool feature, then they were never integrated so they were useful.

The two biggest features I want are for the voice assistants to read something for me, and to do something on google/Apple Maps hand free. Neither of these ever work. “Siri/ ok google add the next gas station on the route” or “take me to the Chinese restaurant in Hoboken” seem like very obvious features for a voice assistant with a map program.

The other is why can I tell Siri to bring up the Wikipedia page for George Washington but I can’t have Siri read it to me? I am in the car, they know that, they just say “I can’t show you that while you’re driving”. The response should be “do you want me to read it to you?”
> If I want to use NOTIFY in postgres? I googled "SQLALchemy notify listen postgres" and I find a few unanswered stackoverflow questions and a github gist that has some code but no context.

Author here. I would say that my post is less targeted at someone like you (application developer, presumably) and more targeted at library developers.

I don't think it's ideal for everyone to be implementing bespoke, Postgres-backend (or any other queue for that matter) background job workers in their applications. There's a lot of nuance and implementation details to get wrong with background jobs, and for that reason I think background work should generally be done by more comprehensive, dedicated libraries or frameworks.

If every Rails application didn't have Sidekiq/Active Jobs and instead had bespoke background worker implementations, Rails applications would likely have a much less rosy reputation on account of their unreliability.
Not really - just now you'll be negotiating job title instead of salary.

Instead of negotiating for another $20k, you'll be negotiating to add prefixes like 'Senior' and 'Staff' and 'Architect' to your title, which will be worth $20k each.
Not only building new homes is unnecessarily complicated and expensive, single family homes are an incredible waste of space and money, had the US and it's big cities invested in apartment buildings with better amenities or forced developers to build shared neighborhood amenities Americans in general wouldn't be so incredibly against it.

It's insane to me that my hometown of 1M people in Brazil has more tall apartment buildings than Philadelphia, with incredibly better amenities.
Thanks! We do include speaker notes on some pages (but not yet all[1]). We would love to expand this and PRs are very welcome for this :-)

I think videos will end up being made by someone other than me since I feel it takes too much effort when you don't have the right setup already. We have an issue and I'll update it as soon as I hear more about videos.[2]

[1]: https://github.com/google/comprehensive-rust/issues/1083
[2]: https://github.com/google/comprehensive-rust/issues/52
This seems a somewhat dramatised account? The Malayan emergency response had the solid backing of the west and was essentially just a continuation of the cold war across the region at the time, it's definitely a lot deeper than just zoning laws and is rooted in a decades long civil war with communist insurgents.

There's absolutely no reason we in the Anglosphere couldn't emulate the HDB system and bringing up cold war incidents from 60 years ago isn't really relevant at all to how it works on the ground today.

Tangentially: Singaporean HDB owners have been harping on about oversupply for years now and the government is foolishly listening to those with a clear vested bias for increasing their own asset prices: https://www.todayonline.com/singapore/govt-careful-calibrati...
Surprisingly, I have never heard of this.

How does it compare to system rescue cd?

* https://www.system-rescue.org/
I’ve watched videos on YouTube only to see it reached the front page hours before.

For certain genres I’m absolutely sure there’s a signal reaching me from HN crowd
I can honestly wait. I am excited for 5 and 10 years from now. I really am. This is going to be amazing. If I miss out for a week or a month in the meantime I don't mind.
Pure Python is a very slow language compared to Rust, with significant differences in orders of magnitudes of expenses. I would not expect information about Python performance to be particularly relevant to Rust without further evidence directly from Rust.
In year 2078 you'll have a different language, so that's not an issue
Why would Apple ever be "truly committed" to something which gives them less money? They have no reason to encourage people to use old technology.
And thta is just about rteadable to modern eyes. Old English like Beowulf is another language but does have some words that are still in Modern English. Old English existed by 800AD
also it’s 60%, not 66% like they said
Huh, more negative than I expected. For some reason I had Bitwarden as an HN darling in my head. Not sure where I got that from. I pay for premium for $10 a year. Not sure what I actually take advantage of with that honestly but I just really like the product. That said, it's not based on a lot of competition searching. Am I missing out on some big benefits in other managers?
>Question: why isn’t Anthropic using Google Cloud, given who their past investors include?

They also have a fiduciary duty to their other investors, and going all-in on Google cloud would be a pretty big risk (relative to other cloud providers) given the uncertainty about whether it'll still exist in 5-10 years.
Do we know why internet search was disabled? Any idea on when it’ll be back?