skysight-inc/HackerNews huggingface dataset:
If an attacker can perform discrete logs over EC, and a collision attack is found on SHA-3, then an attacker can encapsulate a malicious secret in Kyber, which when hashed with the 3 ECDH values force the session keys for communications with that attacker to be attacker-chosen values.

In the context of Signal, this means that in a case where an attacker would know the session keys anyway (being one of the parties to the handshake), if ECDH and SHA-3 are both broken, then the attacker could force the session keys to values of their choice.

Certainly there would be cases where this could be a problem, but in the case of Signal, the most disastrous attack I can think of would be maybe some kind of backward MitM attack where two users think they're both talking with the attacker, but they're actually talking with each other. C.H.A.O.S. gets the NSA and GCHQ on a chat where they both think they're trying to exploit C.H.A.O.S., and then when they accidentally exploit each other and establish a persistent compromise, C.H.A.O.S. goes in through the backdoors that the NSA and GCHQ have set up, quickly before either the NSA or GCHQ realizes they've exploited the wrong target?

Maybe an attacker colludes with a third party where they arrange encryption keys ahead of time, and then the third party could more easily eavesdrop on communications between the innocent user and the attacker. However, in that case, why doesn't the attacker just leak the session keys to the third party after the fact rather than agreeing beforehand? I could contrive some situation where you've got malware infiltrated into a very locked-down environment where Signal is the only communications channel back out of the environment, preventing two-way communication with the malware, but I feel we're getting pretty far into contrived situations there.

What am I missing? Yes, the proposed key derivation function ads negligible overhead and looks sound. All else being equal, it's strictly better to not allow the attacker to force the session keys to a attacker-determined values if both ECDH and SHA-3 are broken. However, in this context, the risks associated with a larger code change seem to outweigh the risks of an attacker being able to choose session keys, particularly as it seems a security proof of the proposed key derivation function still seems to be a work in progress.
That’s a very strange argument.

When was the last time you heard of MDMA-fuelled crime sprees?
Fans. Possibly misters near the fans if you want to splurge. There's a lot of restaurants with open-air sections here in New Orleans that do this.

You do need some sort of shielding from the sky, heatstroke is a thing, so's an absolute drenchpour that lasts about twenty minutes, usually in the afternoon.
>namely that a subset of men should be allowed to disregard women's boundaries and consent with impunity.

What?
I have a hard time coming up with a worse decision in the history of game industry.

Why did it come to this? Just more profits? I mean the landscape is highly competitive with free tools getting better and Unreal Engine eating all the highlights. Unity's stock price was even before this decision a third of it's all time high.

I mean there must've been a dramatic cultural twist quite some time ago. That would've lead champions to leave and the codebase comes crashing down. This will be a great lecture material for business schools, goes in the same bucket as Nokia.
We agreed on that two posts ago, so maybe there's nothing further to discuss.
A human driving buddy can make up a lot of stuff too. Have an interesting conversation but don't take it too seriously. If you're really researching something serious then take a mental note to double check things later, pretend as if you're talking to a semi-reliable human who knows a lot but occasionally makes mistakes.
Portland recently passed legislation to allow infill of 2- and 4-plexes. There is new construction (corporate and residential) going up everywhere. Your agenda is showing.
> Once you reach the level of technology that can provide for everyone, what need is there to make more?

Because you can never reach that outcome no matter what your technology is.

Your premise is so vague as to be useless. Provide what for everyone? How much for everyone? Who decides how much for everyone? Based on what? Elected by whom?

If you actually dig into any of that what you'll find is that it's impossible. Unless you use a hyper violent authoritarian model that dictates every minute of every person's life. Otherwise, one person will always have different needs than another person, without exception (and that's so varied we could be here all day listing the differing ways, from freak health situations to genetics to activity choices).

And that's just on matters of basic needs. Then we get into luxuries, any and all things people want beyond basic needs. And then you have to debate the extent to which people require some manner of luxuries beyond basic needs in order to actually continue to exist in a healthy manner. And then you have to get into who decides on that, who dictates which people get which luxuries, if indeed it's decided people require some level of luxury in their life.

And that's just scratching the surface at a minimum for why the premise: once technology has provided for everyone - entirely implodes upon any inspection at all. It never can, it never will. Human desire is infinite up to the point of expiration. That includes the desire for new experiences (can people live without new experiences? doubtful, certainly they'll live horrific miserable lives without such), which is a gigantic envelope of things unto itself, beyond the basic needs category. Who decides what new experiences everyone has access to? How much allocation to that? And on and on and on it goes.
Sadly, no. There certainly are lots of novel keyboards out there that can be googled up, but perhaps the kinds of features that would make a vim/modal-type keyboard be interesting and useful on mobile require further API hooks into the standard text-input controls (to be able to do things like find word and line boundaries, perform complex selections and replacements, etc).

I wonder if ultimately, the advantages of a "stay on the home row" philosophy like vim has just don't really manifest when there's no longer a physical keyboard as the underlying HMI. But the core idea of doing something modal and separating movement/selection from input does still feel valuable.
The mechanism is simple. Publish some very good news (a fraudulent enterprise should have no difficulty manufacturing those), do buybacks, raise the share price, get them margin called.

For half the ZIRP era it was so easy to get shorts margin called (as it was done by people who had no business shorting), that shorts accidentally did it to themselves with by misusing options. Obviously overvalued companies were among the best investments imaginable (Beyond Meat, Kodak, Gamestop, etc.)

As for the risk of brokers doing it, yes it's also real. But if you suspect foul play from your broker, you could move to a different brokerage. If you mistrust the exchange you trade trough a dark pool if you want to. Can you change your regulator?
That's really sad.

We wanted GameFace to be something that we kickstarted and then donated to the community to run with. That's still the case.
Is there anything else new or interesting going on in the Moo/Mu* space right now?

A while back I wrote a MU*-style system in Ruby, using js as the scripting language. It has a web based tool that gives object owners a URL for each object, which lets them edit the attributes and code in a better way than just line oriented editing. It also lets external services call back to that object to trigger actions.

I never did anything much with it though.
> made Revolution

.... which fell far short of his claims, and bombed.
>The LLM concept can only take you so far, and we're approaching the limits of what an LLM is capable of.

You don't know that. This is literally just an assertion. An unfounded one at that.

If you couldn't predict how far in 2017 the LLM concept would take us today, then you definitely have no idea how far it could actually go.

>believes we are approaching the limits of LLM size for size’s sake

Nothing to do with thinking they wouldn't improve from scale.

https://web.archive.org/web/20230531203946/https://humanloop...

An interview from Altman later clarifying.

"6. The scaling laws still hold
Recently many articles have claimed that “the age of giant AI Models is already over”. This wasn’t an accurate representation of what was meant.

OpenAI’s internal data suggests the scaling laws for model performance continue to hold and making models larger will continue to yield performance. The rate of scaling can’t be maintained because OpenAI had made models millions of times bigger in just a few years and doing that going forward won’t be sustainable. That doesn’t mean that OpenAI won't continue to try to make the models bigger, it just means they will likely double or triple in size each year rather than increasing by many orders of magnitude"

Yes there are economic compute walls. But that's the kind of problem you want, not "innovation".
You must subscribe to the idea that the employees can change the culture of a company from bottom up. I strongly disagree. Company culture is dictated from top down, and only rarely does the bottom get to make substantive changes. However, I'm willing to have my mind change with examples of companies changing their culture based on employees changing the minds of the execs.
What to do with historic buildings too close to a courthouse?
There is no one open source, but various open source licenses.

Nintendo Switch and Playstation and titles from Sony and Nintendo incorporate BSD-licensed open source code, so it is obvious that “open source is banned” is not true. It’s only GPL and other viral licenses that lawyers argue is too risky, because it might require disclosing proprietary source when linked.

Same goes for Apple App Store as well

https://news.ycombinator.com/item?id=12827624
> You'll have situation where in year 2078 someone will ask why are we still having tokio when everyone is using telepathy lib?

Agree. This is why I refuse to use solar panels on roof. Science clearly tells sun is gonna burn down all its fuel and implode and at that point my solar roof will be useless deadweight.
>Why remove it in the first place?

Because that would get in the way of Pocket.
But as an end user, it's made using applications based on (or even tangentially using, as I learned first-hand a couple of months ago) Python highly problematic due to extreme version incompatibility.

I now try my best to avoid anything that involves Python.
>> This implies a lowered ability to think critically.

This does not necessarily imply a decreased ability to think critically. Instead, it suggests that they excel in mimicry. Having been immersed in the internet from a young age, they socialize extensively in this environment. They quickly learn that expressing unique or open opinions can lead to conflict. This realization often occurs at a particularly impressionable age. The pervasive culture of cancellation is not counterbalanced by lessons in rhetoric. Consequently, they learn to silence their opinions, keeping them private. They might believe that maintaining social connections will provide a sufficient reward as a trade off.
We have been using wave apps for the last couple of years. Do you have a comparison page?
Any source for pixel phones that were promised 5 years, only getting three?
I've had the original Mini since it came out.

Other than damaging a prop from it hitting a blade of grass on landing it is in perfect shape. Yes, they are so fragile I landed very smoothly in the grass and soft grass is enough to damage the props!

I don't fly it as much as I used to. These new ones are certainly an engineering marvel with how much they have added and still kept it under 249g.

The big one to me though is the wind resistance. 10.7m/s is 23mph. The original specs 17mph. It is hard to say at which point it starts having trouble, but 23mph is a non-trivial improvement, it probably means 2x as many days you can actually fly.

Now the things that suck about DJI, and I wonder if they are actually at all improved with a new drone:

- Geofencing sometimes locks you out of legal flights, no way around that unless you can jailbreak

- Some legal flights require you going through an unlock process, and if the DJI web infrastructure is having a bad day you also get locked out of flying in a legal place

I would probably buy from another competitor, especially a US one, just over the unlock experience with DJI.
Let's hope this thing is compatible with DJI's own goggles. They seem to be getting better about this, but for a while they released drones that weren't... a real disappointing WTF.
RIP PostScript. (Not to be confused with PostScript RIP.)
US competitor to DJI in what? Consumer marker or technology?

If it's consumer marker where less cost matters a lot, there won't be a US competitor. DJI has home-turf, scale, and first mover advantage there, and a US competitor can maaybe match DJI in price.

In technology/autonomy? Skydio beat them years ago (https://www.skydio.com/). They launched as a consumer drone but I guess recently realized how consumer market in west isn't as profitable as enterprise/defense market so they shut down their consumer division. Skydio founders were pioneers in autonomous aerial vehicles, and it's not surprising they beat everyone else in autonomy. When they launched their first drone a few years ago, they were doing outdoor vision based autonomy for drone using on board compute only - it's an insanely hard problem, especially when you want to do in reliably in a product and not in a lab setting for nice videos. They did it and blew everyone away. DJI fan boys will say 'oh but DJI had autonomy too'. No they didn't, at best they had feedback based obstacle avoidance.

I often tell my friends, one of my biggest regret was not signing up for an internship at Skydio back in 2018. They came to UIUC for recruiting, and they didn't realize their product yet. Back then I was a dumb first year grad student, I didn't check the founders background, and naively thought it was yet another dumb drone company trying to get some VC money by pitching something they'd obviously fail it. I've never been so wrong.
What is the primary login method? Because I'm using SSO, and it still requires a master password.
I don't think Google will like this... :)
He would just fold it under "X" so he can claim to be closer to an "everything app". I'm sure he's annoyed that "Xbox" is already taken.
That’s an overly specific exclusion.

Highway strip is a real thing, but obviously the US doesn’t need 20% of all highways to be useful in this way. https://en.wikipedia.org/wiki/Highway_strip

The stretches that qualify are tracked as useful military assets and worst case alternatives by the FAA, but you need to avoid overpasses etc, not just have a long stretches of strait road.
But Google probably have a lot of data about their competitors that they would like to present to the judges. Making that data public would make it look like Google is smearing the competition, I can see why a judge would agree to keep that secret.

For example, Apple maybe had an auction to bid for default search spot on their platforms. Google bid the highest as we know, but we don't know what the competition bid and Google probably want to present that as evidence that this was just a normal auction similar to bidding for advertisement spots. For example, if Bing bid 90% of the current Google bid, then it is pretty clear that Google wasn't paying Apple to keep competition out but rather paying Apple for a premium spot in a fair market.

Nobody argues that Apple is anti competitive when they pay Google to put ads on top of certain search results, so why would Google be anti competitive when they pay Apple for a premium spot? They don't pay Apple to keep others out, just for the premium spot, you can still use other search engines.
Would be nice if they detailed the received feedback.
You misunderstood me. The subject of his statement, the "fun sounding word", that I don't think is fun sounding is "enshitification".
There's a lot that we force the market to do that's not a market derived solution. Slaves are very market efficient. Racketeering can be too. You can make choices of long-term benefits of not choosing a purely free market solution.

What I meant though is that the veto may be simple opposition to the idea, or it may come from having a special interests of tech corps influencing that decision - given popular acceptance of the proposed law, that would make it corrupt regulatory capture.
The mini is pretty damn quiet. At 50ft of altitude people don't hear it. AT 100ft of altitude people don't even see it.

I've flown one hundreds of times and other than other drone owners no one has ever said a thing or noticed. The drone owners notice and come over to talk drones.
I had the same thought seeing the hero videos on this page displaying beautiful mountain scapes and vistas - I wouldn't want to be the person disturbing this space with an intrusive drone.
Innocent until proven guilty does not apply in civil trials.
Why do you suddenly need so much additional housing in the first place? Was there an earthquake I missed? Or a sudden population explosion?

And which regulations are you talking about specifically?
Socialism did not threaten the preservation of the United States as a political entity. Or the power of the state. It threatened specific interests.
https://www.ebay.com/sch/i.html?_from=R40&_nkw=the&_sacat=0&...

That searches for "the" including the description. Not sure if a better filter exists.
- Cooking and baking

- Troubleshooting car trouble
It’s their M.O. Relentlessly cut “power user” features. Relentlessly undermine the user’s wishes and redirect the user to Google’s preferred results.

I don’t know why we continue to put up with it. Boiling frogs I guess.
DJI Mini 4 Pro vs. DJI Mini 3 Pro vs. DJI Mini 3
Knowing how Google shortlives their products time after time, I'll pass, thanks.
It isn't clear to me that there is a reason for a US competitor to exist in the pro-sumer market. There are plenty of US firms selling their own parts/BNF kits for the hobbyist market and plenty doing commercial.
Thanks for this info. I see what you're saying. To clarify, I meant a _little_ satanic. As in, "giving satan" vibes. Not some truly evil ritual.

> I kinda hate to quote Wikipedia here

I don't mind wikipedia but it has some weird branches. Recommended reading, start here: https://en.wikipedia.org/wiki/Christian_ethics

From the top of that page:

> Christian ethics, also known as moral theology, is a multi-faceted ethical system. It is a virtue ethic, which focuses on building moral character, and a deontological ethic which emphasizes duty. It also incorporates natural law ethics, which is built on the belief that it is the very nature of humans – created in the image of God and capable of morality, cooperation, rationality, discernment and so on – that informs how life should be lived, and that awareness of sin does not require special revelation.

> awareness of sin does not require special revelation.

Then jump into https://en.wikipedia.org/wiki/Natural_law

The link you provided highlights the word "Hamartiology" which I just learned is the study of sin. I've never heard of this study before but I have studied some Buddhist teachings. Buddhists teach that when you steady your attention on a mental object, that object grows (for example gratitude). To me, it follows that studying sin leads to increased sin.

I think many modern Christians understand this and, therefore, sin is no longer such a central tenant to the faith.
You can replace DJI with any other consumer electronics manufacturer. It's hard to compete with China's vertical integration + cheaper labor. Skydio (Californian startup) used to manufacture consumer drones but recently exited that business to focus on enterprise, probably because of the higher margins.
Thanks for checking us out! We measure factual consistency using a NLP task known as "natural language inference". We then compare 2 sentences to know if one is an 'entailment' of another (for example - if "there are 3000 oranges in the supermarket", an entailment would be "there are oranges in the supermarket" - which would get a high score whereas "there are no oranges in the supermarket" would be a contradiction. We use the score of the entailment class to get a measure of how factually consistent it is.
We provide a high-level summary in the documentation (https://docs.confident-ai.com/docs/measuring_llm_performance...) and will be sharing an in-depth blog article on it soon!
I don't know? I googled for the term and didn't find anything relevant.

But am glad if it exists.
A big part of the problem is that the Apache foundation has become sort of a dumping ground for OSS projects where the corporate sponsor doesn’t want to be responsible anymore. They pull the full time developers and donate the project. In this context it’s not surprising that these projects “die”, because they’ve lost most or all of their contributors.
I don't know. The other day I was asking about a biology topic and it straight up gave me a self-contradicting chemical reaction process description. It kept doing that after I pointed out the contradiction. Eventually I got out of this hallucination loop by resetting the conversation and asking again.

It's smart but can also be very dumb.
We had a 2003 Toyota that only lasted ~125,000 miles, with multiple major repairs needed before then, head gaskets, transmission issues, etc.

Finally, the catalytic converter bit the dust around 120k miles, the car was driven for a little bit more and then traded in, since the cost of repairs exceeded the value of the vehicle.

The first 12-13 years of the car were great, but the last 5-6 were terrible. Maybe we got extremely unlucky, but I just don't see where the legendary reliability stories come from. Seems like they are survivorship bias in the other direction.
Was just telling my friend I was a bit surprised at how rapidly consumer drones advanced in the late 2010's and have slowed down ever since. Seems like a lot of these features haven't really improved all that much in the past 5 years.
Jobs Are Good
I’m afraid you’re being intentionally obtuse. I already gave one example of how debasing coinage is a different operation than issuing more IOUs, with considerably different consequences for participants in the respective systems, and your only response is a libertarian platitude about printing money and a statement about fiat that isn't particularly germane.

There has been a historical case of actual monetary inflation in a commodity based currency system and that was in Spain. The treasure fleets brought back so much gold that there really was too much money chasing too few goods and services. It should be obvious that that kind of inflation is operationally a very different thing than currency debasement and much closer to issuing new fiat.
> I love these conspiracy theory level claims that groups like the ADL are massive power brokers with far reaching influence that can just dictate the advertising spend of multi-billion dollar companies without warrant.

The country of Iceland dropped plans to ban male circumcision after the ADL not-so-subtly threatened to, ironically, defame the country and tank its tourism industry https://grapevine.is/news/2018/03/22/american-anti-defamatio...