skysight-inc/HackerNews huggingface dataset:
Or they could mean "used by engineers who work at Google (for their non-work related projects)"?
What people always forget when they make statements about hashing being one way is that these algorithms are designed to be incredibly fast.

So if what you’re hashing has low entropy/randomness (say a password) then you can totally brute force it.

In fact if there’s not a salt you can look it up in a rainbow table, saving yourself some compute. Googling a hash also works sometimes. If you want to brute force look at hashcat.

Something like SHA256 protects about 128 bits of entropy. If you go much lower than that, you’ll be brute forced. You can look at hashcat benchmarks online to estimate the time and money necessary to perform the attack. Anyone can crack an average simple password using a single round of SHA256 in no time.
> Are you not confusing democratic societies with capitalist ones?

Well, they both are rooted in the idea that individuals are important, which is a relatively new idea, all things considered.

> How about I use the expression "greed driven societies" instead?

You can do, except I think it's not helpful, as you're joining the ranks of the people who misuse the word "society" to mean "how I happen to think about the stuff I don't like in the world".
Why not lock the account for 30 minutes after 6 failed attempts?
1) not easy to calculate
2) the query needs to be run to see the true cost
GP is correct. There is not much value in search itself.

Are you serious about Amazon? I can absolutely find everything I need on Amazon. Who needs exact search when there are better alternatives through recommendation, people also buy etc?

I am curious to know — if you think search on amazon as broken as you think, why do you think people keep buying from Amazon? They have strong logistic network. But, to even start that logistics part, you need to search and buy.
I was just about to say the Remote extension (proprietary to Microsoft so you can’t install it in the VSCode derived editors) is the killer feature.

It allows me to leave my MacStudio at the office and work from a lower powered laptop at home (using Tailscale to connect) and everything feels like it’s running locally (it seems to run a service on the remote machine that indexes your files so the fuzzy file opener and full project search feel as fast as if they were running locally).

I have tried CodeServer on the remote machine (VSCode open-source in a browser) but that seems to get random pauses (presumably GC or something like that).

If anyone knows of something similar available outside of VSCode I’d love to hear about it.
Except, of course, it's not about using it too early, it's about getting rid of what EVERYONE at that point used (USB-A) too early. So they could shave off a few mm of the laptop body as if it were a designer bag and not a device with a "pro" designation.

Same as with the 3.5mm jack on the iPhone.

They, of course, would then sell adapters at a premium because why not.
Related:

Atuin replaces your existing shell history with a SQLite database - https://news.ycombinator.com/item?id=38936102 - Jan 2024 (10 comments)

I quit my job to work full time on my open source project - https://news.ycombinator.com/item?id=38935205 - Jan 2024 (176 comments)

Atuin replaces your existing shell history with a SQLite database - https://news.ycombinator.com/item?id=35839470 - May 2023 (193 comments)

Atuin replaces your existing shell history with a SQLite database - https://news.ycombinator.com/item?id=35688117 - April 2023 (1 comment)

Atuin for zsh shell history in SQLite - https://news.ycombinator.com/item?id=31177943 - April 2022 (1 comment)

Show HN: Atuin, improved shell history with multi-machine sync - https://news.ycombinator.com/item?id=27079862 - May 2021 (9 comments)
I did Techstars in London in 2013 (an early cohort there) after spending a decade in the Bay Area. Back then, it felt like the glue holding the entire program together were the founders themselves and one particularly good Techstars staff member.

I felt proud going through the program until I learned about the branded programs emerging "Techstars Disney" and "Techstars Barclays". It felt like the prestige was vanishing, and I rarely mentioned it on my CV afterwards.

Funny though, I raised about $1M through the Techstars program, and over $10M through other VCs. The Techstars VCs were the least helpful (but this could have been the London ecosystem at the time. London, these days, is quite good when it comes to early stage, especially some of the syndicates like Ventures Together. I digress).
does anyone run production code with 'go run'?
I am not sure actually, there is this but it doesn't seem to support C++ or Python in the way build_cleaner does, which sounds like it would indeed be kinda annoying: https://github.com/bazelbuild/bazel-gazelle
JFC

> Responding to prior criticisms made by economist James Hamilton, John Williams explained in a private phone call that Shadowstats does not actually recalculate BLS data, rather, the Shadowstats CPI merely adds a constant to the officially reported numbers.[25]

>> I’m not going back and recalculating the CPI. All I’m doing is going back to the government’s estimates of what the effect would be and using that as an add factor to the reported statistics

Same article says he charges $175/year/subscription since 2006.

I'd love to get paid that much to do a high school level introductory programming assignment. The business logic is literally a one liner X-D
Ruby is slow. Very slow. How much you may ask? https://www.techempower.com/benchmarks/#hw=ph&test=fortune&s... fastest Ruby entry is at 272th place. Sure, top entries tend to have questionable benchmark-golfing implementations and are highly sensitive to hardware config, but it gives you a good primer on the overhead imposed by Ruby.

It is also not early 00s anymore, when you pick an interpreted language, you are not getting "better productivity and tooling". In fact, most interpreted languages lag behind other major languages significantly in the form of JS/TS, Python and Ruby suffering from different woes when it comes to package management, publishing, static analysis on big problems and overall trying to graft type system on something that wasn't designed with one in mind. I would say only TS manages to stand apart with being tolerable, and Python sometimes too by a virtue of its popularity and the amount of information out there whenever you need to troubleshoot.

If you liked Go but felt it being a too verbose to your liking, give .NET a try. I am advocating for it here on HN mostly for fun but it is, in fact, highly underappreciated, considered unsexy and boring while it's anything but after a complete change of trajectory in the last 3-5 years. It is actually the* stack people secretly want but simply don't know about because it is bundled together with Java in the public perception.

*productive CLI tooling, high performance, much more expressive and FP-style than Go, works well in a really wide range of workloads from low to high level, by far the best ORM across all languages and back-end framework that is easier to work with than Node.JS while consuming 0.1x resources
https://archive.is/20240213030908/https://www.bloomberg.com/...
Search is not working. Also, I seem to get shoes for anything I search. Did you hardcode it by any chance?

Are you open to collaborate with others? I might have an automated method of curating products. Please drop a line to
comp [dot] turkey [at] gmail.com.
Was all chatGPT affected? If one uses chatGPT for enterprise and build a product feature around it, is that version freezed or did it also return garbage?
I would like the clarification of the situation when my manager would explain that using AI for auto responses in team communication is allowed.

That would be a no-brainer for me: Today is the day to leave the team. Or, if that's needed to do that, the company. Who would like to stay in such an environment?
Yes, we're currently down. Working as fast as possible to get our search API back live. Really sorry about that, server crashed a few hours ago.
That sounds like a good use case for GPT. A GPT that automatically highlights such corporate speak and hints “WARNING: bullshit ahead”. I’m 100% sure it’s technically very easy to engineer such a model.

Do you think OpenAI’s superalignment will ever allow you to make such a model?
Ask HN: Do you know any application that uses webtorrent?
They are close to finishing New Glenn, their next rocket that is better than ULA's Vulcan in pretty much every way. They will probably launch this year. Currently they are testing the launch hardware. There is an update from today:

https://www.blueorigin.com/news/blue-origin-debuts-new-glenn...

Yes, ULA will have finished Vulcan about a year earlier, but otherwise Blue Origin seems way ahead of ULA in terms of technology. ULA didn't even develop the Vulcan first stage engines, the most complex part of a rocket. I really don't see what Blue Origin expects to get out of ULA. Blue Origin doesn't need Vulcan, they will soon have something that is better in every way: New Glenn will have a reusable first stage and a higher launch mass.

> In 24 years, they haven’t gotten one gram to orbit.

ULA has launched a lot, but mostly with over 20 year old rocket designs that are based on even older rockets.
$13 it's damn expensive, by comparison you can get a decent meal (nothing fancy, but not fast food level) at mosts restaurants in Spain.
Mario Kart 3.js
> I never understand this arguement. I hear it in the form "we should just regulate cars to be safer", why dont you just buy a safer car?

I don't understand your argument. Do you expect every potential car buyer regardless of tech literacy to go to a dealership with an SDR setup on-hand, asking if they could test-out the key fobs, capture some signals, try to figure them out and look for common vulnerabilities on the new models? Do you expect the seller to explain the technical details of the key fobs at a depth you can be sure there's no vulnerabilities?

Determining that the key fobs were implemented securely is not something the buyer or even the seller will be able to determine. I would imagine a regulator has the ability to inspect them as they're being designed/built.

> if you go to buy a car you should have some simple considerations [...] Is it common for this car to be stolen?

By the time vulnerabilities are found and people start stealing them, there should already be plenty sold and roaming the streets.
ITT: Security through obscurity is easy. Actual security is hard.
I've written and given a lot of references to attacks, countermeasures, fighting the compilers and even non-cryptographic side-channel attacks to uncover someone's Twitter identity:

- https://github.com/mratsim/constantine/wiki/Constant-time-ar...
Maybe. It's open to interpretation, which is the problem.

If the author of Atuin maybe sees this: While this not (yet?) a commercial project, it is highly problematic to advertise your product like this. You cannot just put the logos of companies on your front page without permission, even with that carefully worded caveat in front. At the very least, this can lead to a C&D.
You have to do that work anyway... Why not encode it in your build system?

(Admittedly I have never tried this with a modern build system. My real world approach for that would be a janky phony rule in a Makefile, with a bunch of MAKE_VARS the user has to set on the cmdline/in the environment to set up the toolchain/serial port etc. But in principle I have always believed it should be possible to make this process as easy as compilation)
> I guess people working there believe in magic.

I've been thinking about this recently. Personally, I've yet to see any compelling evidence that an LLM, let alone any AI, can operate really well "out of distribution". It's capabilities (in my experience) seem to be spanned by the data it's trained on. Hence, this supposed property that it can "train itself", generating new knowledge in the process, is yet to be proven in my mind.

That raises the question for me: why do OpenAI staff believe what they believe?

If I'm being optimistic, I suppose they may have seen unreleased tech, motivating their beliefs that seemingly AGI is on the horizon.

If I'm being cynical, the promise of AGI probably draws in much more investment. Thus, anyone with a stake in OpenAI has an incentive to promote this narrative of imminent AGI, regardless of how realistic it is technically.

This is of course just based on what I've seen and read, I'd love to see evidence that counter my claims.
Compress the texts and find the distance between the results
My wage in terms of dollars have remained the same for the last 5 years despite earning double. It's not ruining my life only because it takes longer for prices to increase here -- but they are definitely increasing.

Japanese people also don't like talking about wages and not everyone compares what they are making to the dollar. I have heard plenty of colleagues, friends, and family complain. It's more about how the number of diapers in a bag has decreased steadily from 72 to 56 than boy my life is getting ruined by weak yen.

The more prevalent complaints are from fellow mortgage borrowers. Variable rates in Japan have been steady for nearly 30 years, meaning a substantial number of borrowers are watching the central bank's moves like a hawk and are terrified of even any talks of rate increases.

TLDR: We are just not loud complainers (and frankly, if any Japanese person you know is hopefully very lucky, they might be earning just enough to not notice it all)
Those who use youtube as TV, what do you watch? Is there a way of consuming YouTube that is more like consuming Netflix, where the 1% (or 0.001%) that is "professional" content is curated somehow? I mean I have no interest in scrolling videos of people eating detergent, I just want to watch shows/films/content that I heard people recommend to me (not algorithms - people). How do you even start doing that on youtube?

I have used youtube since it launched, but I still haven't found more than one or two "channels" that I enjoy (is that what it's called? Interesting people who make interesting videos?) but I haven't bothered logging in or subscribing to one. Should I have? Does it help consuming in any way?
Having done a Techstars program myself, I was also surprised at some of the companies that were allowed in.
I think one of the most unexpected words in English to be named for a person is "guy"! From Guy Fawkes. The word went from meaning an effigy of Fawkes, to any doll, to a person.
Perfect, finally I can delegate that lengthy hours spent reading HN fantasies about AI and the laborious art of crafting sarcastic comments.
People with Me/Chronic Fatigue Syndrome May Have an "Exhausted" Immune System
No, it is because you are too smart.
Sushi is waaaaay cheaper in Japan. Always has been, now more so.
Zeiss is bottlenecked by the workforce. Not enough of them. Tricky to scale that.
Could you please stop posting unsubstantive comments and flamebait and otherwise breaking the site guidelines? You've unfortunately been doing it repeatedly.

If you wouldn't mind reviewing https://news.ycombinator.com/newsguidelines.html and taking the intended spirit of the site more to heart, we'd be grateful.
Did you read the article? Or even just the headline?
https://archive.ph/2024.02.21-194117/https://www.scientifica...
Linkerd leaves stable open source behind to fund innovation
Digital Slavery
a bunch of useless processes, if only.. they started using Scaled Agile (or SAFe) a few years ago, which slows down software development by a factor of five or more and adds non-productive fulltime roles such as 'Release Train Engineer', 'Scrum Master' and 'product owner'.
> hide Shorts for 30 days

Is there a name for this fucked up dark pattern of giving users a "choice" only between accepting and accepting couple days or weeks later?
- Did not work on firefox for me (start conversation and nothing would happen, I would not hear the voice)
- on chrome it would not allow to change my microphone so had to open my macbook.
- Also on firefox, when I first logged in, clicking on he "try now" button would send me back to the landing page, I had to go and click on the playground

With that out of the way, it's really interesting. The challenge I suppose is how narrow / wide the API made by the developer is. A narrow case, like "booking a dentist appointment", might feel like a step down compared to an online form, and most likely would fail short of satisfying someone calling, because if they're calling they had some deeper needs.

On the other hand, a wide API, like if you gave access to pricing information of the dental practice, info about the doctors, a way to reach an actual human being, health advice and post op advice, generate documents from past appointments etc, and you have a higher chance of hallucination, misclassification of what the user wants etc.

I'm still not sure if the best approach is just to leave the AI to deal with that, or to represent the user intent etc. with some sort of State Machine. Maybe a case by case etc. But the more you add in that logic, the slower the machine is.
I just guess the HASH's bytes, not the KEY's.

To be practical: my first guesses are:

0000...0000

1000...0000

2000...0000

...

f000...0000

I discover that c000...0000 takes slightly longer. Then, my next guesses are:

c000...0000

c100...0000

c200...0000

...

cf00...0000

Now I discovered that c700...0000 takes slightly longer...

And so on.

At the end I have the full hash.

Getting the plaintext key from that hash is a different problem.

UPDATE: damn, I understood what you mean now. Sorry. Yes, it will take a lot of computation to generate the good hashes.
You can't get much information from a single human as there are no encyclopedically educated humans anymore. The best way to gather information is to download our internets and books.
fuck. I have an idea just like this one. I guess it's true that ideas are a dime a dozen.
Diffusions bear a remarkable similarity to backpropagation to me. I thought that it could be used in place of it for some parts of a model.

Furthermore, I posit that resnet especially in transformers allows the model into a more exploratory behavior that is really powerful, and is a necessary component of the power of transformers. Transformers is just such a great architecture the more i think about it. It's doing so many things so right. Although this is not really related to the topic.
I see you haven't seen the Gemini debacle: https://twitter.com/alexthechick/status/1760331428133253312
There's not going to much meaningful pushback on this comment because any (ex-)ASML employee is going to be super hesitant to share anything. So feel free to think what you want.
Cherry picking the ONE counter example is not proving your point.
I think it's the COCK in cocktail.
Apple: “Anything you do to salvage your phone that isn’t buying a new one isn’t a good idea.”
Would that most likely be an artifact of not enough in-flow/supply of startups to choose from?

If not, a mechanism to let the other participants anonymously vote and rate and comment such things, and then administrators can look at that data - and see what specific admin(s) was/were responsible for inviting them in, and then address the issue as close to the core as possible might of helped?
If you are averse to seeing links to paywalled articles you probably shouldn't use HN
If you want any recommandation subscription is needed. I use multiple profile to separate things like more learning focused vs gaming or whatever.

Never watch a silly random video in one of those profile.
I have an old note named the same as this blog post:

cat /dev/sdb > backup.img # make a disk image

cat /dev/sdb > /dev/sdc # clone disk

cat ~/Downloads/* # play Russian roulette with your terminal

cat > file # minimalistic text editor, ^D to exit saving, ^C to exit erasing the file

cat << wq > file # nearly complete emulation of ed

grep -r bongo . | cat # shorter than typing --color=never

cat -v file # cause 20 points of damage to wizards of bell labs

cat file > file # empty a file without removing the file

cat meow meow > meows # duplicate file contents
One of the faults is that for every version of morality you can hallucinate a reason why cocktail is offensive or problematic.

Is it sexual? Is it alcohol? Is it violence? All of the above?

For example, good luck ever actually processing art content with that approach. Limiting everything to the lowest common denominator to avoid stepping on anyone's toes at all times is, paradoxically, a bane on everyone.

I believe we need to rethink how we deal with ethics and morality in these systems. Obviously, without a priori context every human, actually every living being, should be respected by default and the last thing I would advocate for is to let racism, sexism, etc. go unchecked...

But how can we strike a meaningful balance here?
LOL none of that remotely explains the massive fertility gap between atheists and theists.

You can talk about the general population until you're blue in the face. That doesn't change statistical facts.
Here's the video for anyone curious: https://www.youtube.com/watch?v=Z3dSkkEr-wk

tl;dw:

First, he searches the exact name of the video on YouTube: it shows a fan-made animated skit of it, the wrong videos but from the right channel, and several re-uploads with only a few hundred views.

Second, he adds the channel name before the name of the video in the search bar. Same results.

Third, he tries searching for a famous line from the video: still no luck.

Finally, he sorts by view count and it shows up, but still not as the first result.

Is this some obscure video from some obscure channel? Nope, the video has 15 million views from a channel with 3.91 million subscribers that uploads videos regularly. He has a verified account which was created in 2006.

I just tried doing the same search as he did in an incognito window, and it also didn't show up for me until I sorted by view count.

I ran it on archive.today, and while it has slightly different results than what I got, nowhere in the search results does it ever show the original video with 15 million views. https://archive.ph/ksZhq
This is a company with over 40,000 employees and a market cap of over $100b. Surely they would have opened offices in different countries if Dutch culture was holding them back.

They are just a domestic flight away from Eastern Europe. And just a train ride away from London.
The problem is that as an attacker sending requests to the server, what you control is the API key, not the hash of the API key. To test a specific hash like "c000...0000" you would need to find an input to the hash function that will yield this output. Cryptographic hash functions have a property called preimage resistance that means this is prohibitively difficult (see e.g. https://crypto.stackexchange.com/a/1174).
Doing a security analysis of a car is a complex task that most laymen cannot do, so the argument for laws and compliance among specialists is quite reasonable.

Put it another way: if it's all market based, your choices in buying just get 2x more complex. Is this car easily unlocked? Do the brakes often fail? Can it resist a collision?

Or even another thought: since most people don't think about security, companies will flood the market with insecure cars. Want a secure car? That would be niche and cost you double.
Bluetui: TUI to Manage Bluetooth Devices
At no point does this article mention the minor detail that iPhones haven been completely waterproof for generations now.
Just make a filter to remove the shorts insert.
It’s funny that the ransomware attacks are 100% enabled by crypto.
And aside from some bros gambling with crypto, cryptocurrency means nothing to 99.999% of the world population. Speaking of laughable.

Cryptocurrency only makes sense if you don’t understand society.
I agree. But it’s better than nothing. I wish I could also just disable it everywhere.
The padding is useful for mobile/tablet I assume.
Helpful makefile directive...

run_%:
cd ./cmd/$* && \
go run .