skysight-inc/HackerNews huggingface dataset:
It's doing an extra ECC operation on every connection, but that shouldn't take 500ms on a modern CPU.

The people who have reverse engineered the code say it also requires the command message to be bound to the ssh host key as well, so if the host key is an RSA key then it might be doing an extra RSA decryption operation on every connection as well?

That would probably do it.
For the Python/Jinja world, there is Jinja2-fragments that allows you to return blocks of the template without having to extract it to partials. I am sure there are similar solutions for other template languages. See https://github.com/sponsfreixes/jinja2-fragments.
Grubs install process is a complete disaster. I went to use it to boot Fuchsia on bios systems at one point, when Zircon still supported multiboot chaining.

The "install" scripts and so on are all horribly broken, and extremely badly behaved in terms of grabbing arbitrary stuff from the environment that has nothing to do with your desired target system. Using them for anything other than modifying the current host system is extremely sketchy at best.

I ended up re-implementing the whole process in a pile of bash (it should have been in something else, but I started in bash, and finished there). The slicing up of the bios segment that it does is also unnecessarily fiddly considering how it's all constructed, it would have been far easier to keep those segments in separate files and then you could just write one buffer after another in any language/tool environment you want.

The whole thing seems like an accident of history that no one wants to fix, which would be approximately congruent with all of the tooling in that area of the boot path, partition tools and so on.
The bullshit jobs are allowed by automation, not required. If you had that many bullshit jobs in the old days, everybody would starve because there wouldn't be enough labor going to producing and distributing food.

Many of the bullshit jobs are, in fact, destroying the cost/efficiency benefit of automation by imposing bureaucratic waste on things that would otherwise have become less expensive. If someone is doing a job which is useless, we could just give them a portion of someone else's productive work to do, have them each work less and reduce prices by the same amount and then average purchasing power would be the same but there would be less busy work and more recreation/creativity/entrepreneurship.
I would argue that gitlab.com is a bit more than a collection of static documents that could be delivered over gopher too.
Hard to define, but I was thinking along the lines of taking advantage of the other party, perhaps through means that are (or should be) illegal. A few examples:

- Baiting a prospective employee with lies about the earning/advancement potential [illegal]

- Pressuring an employee to perform work off the clock (this is often done by setting performance standards that are unattainable without overtime work, while simultaneously "forbidding" overtime) [illegal]

- Using information you know about an employee (such as their inability to switch jobs because of personal circumstances) to low-ball their pay [not illegal, just sleazy]

- Manipulating the circumstances around incentive-based pay so that the employee performs the incentivized work but doesn't end up qualifying for the bonus [illegal, depending]

- Interfering with an employee's career growth/marketability so they won't be able to command higher pay [not illegal, just sleazy]

Edit: I suppose the theme here is seeking to capture more of the value of someone's labor in ways that undermine their ability to negotiate the best deal for themselves. It undermines the whole idea of people freely negotiating for a mutually beneficial relationship.
Funnily enough, 4chan's /g/ board got me into learning C when I was around 14. That went into doing my own small projects (like a music player in GTK), doing some PHP and NodeJS later on, and then going into a full blown freelance career. A place like 4chan having such a positive impact on one's life seems like a bit of God's sense of humor.
The US is not unique in having free speech laws. And those laws aren't a complete free for all.
Yes, exactly. And therefore it has the least impact on the individual.

Giving everyone a dollar is the same as giving no one a dollar. -Econ 101

Compare that with say, severe anxiety, inability to take tests, low IQ. Or even just lack of interview experience, and never asking for a raise.

These last two dramatically affect income and are true of a strikingly large number of women compared with men.[1]

Is it possible that women aren't asking for raises because everyone keeps telling them that they need "special" help (implied inferiority)? That they won't get raises, so why bother?

I think it's a factor. I think your argument, while well intentioned, might be causal in preventing women's success.

[1] https://www.weforum.org/agenda/2018/04/women-are-still-not-a...
It adds interactivity and dynamic features that would be pretty slow or very challenging to implement in pure HTML/CSS.
ASCII is overkill anyway, nothing's wrong with 6-bit. ECMA-1 already had Escape, Shift-In, and Shift-Out as standard control characters.
We should. However in this case, isn't it a bit of a stretch to assume they didn't put just about everything in the training data?
Do It Yourself Project: Seiko 7S26 for Novice Horologists
Here’s what I don’t get: why the many layers of obfuscation in the build phase? (I understand why in the binary linked into ssh.)

Once the first stage, extracting a shell script from one of the „test“ data blobs, has been found it was clear to everybody that something fishy is going on.

It’s inconceivable that I’ve would have found the first stage and just given up, but then it was „only“ a matter of tedious shell reversing…

They could easily done without the „striping“ or „awk RC4“, but that must have complicated their internal testing and development quite a bit.
Oh, sorry, thanks! Think i rewrote it due to autocorrect three times but apparently I slipped nonetheless!
Sure. But sanctions are fundamentally a tool to incur costs. China doesn't have an unlimited budget. If chips becomes a priority, something else will lose some funding, be it military or e. g. other industry subsidies.
America doesn't notice its declining birth rate because it's relatively recent. Japan's birth rate collapsed about 40 years ago. [1] By contrast the US' decline is only trending towards dangerous levels quite recently. The graph in the link includes both the US and Japan and is quite enlightening! Fertility is an extremely lagging indicator, which is why places like Japan (and soon South Korea) are essentially mirrors into the future that awaits the West at large as well, if things don't change.

Immigration isn't a solution. Japan is losing about 0.5% of their population per year - including immigration, and that rate is accelerating. It's unclear where their equilibrium point will be, other than substantially worse than that. In the US at even "just" a 1% annual decline, you'd need 3.3 million migrants per year, forever, to maintain population levels. And you don't want random uneducated individuals who don't even speak the language, or you risk destroying the very thing that motivates people to want to migrate. You want skilled, educated, English speaking individuals who are capable of and motivated to work. For some contrast in 2022 we admitted a total of about a million people, and only 270,284 of them were for employment. [2]

[1] - https://data.worldbank.org/indicator/SP.DYN.TFRT.IN?contextu...

[2] - https://www.dhs.gov/sites/default/files/2024-02/2023_0818_pl... (page 18)
Which "ideological narratives"? This is such a vague description that you could interpret it to mean anything, especially since the NYT has been getting blasted from all directions lately. Conservatives think it's left-leaning drivel, and progressives think it capitulates too much to viewpoints on the right.
Yeah and being nostalgic around people who don't share it is difficult, since if you talk about it then they will find you insufferable.

Unrelated but I can remember when a friend of mine came back from a long, glamorous trip and suddenly stopped sharing in our usual moments of nostalgia. They acted like they were embarrassed. It sucked because it made me believe that they were ashamed of who they used to be, and I felt sorry for them. This person has since made great efforts to adopt a newer, more glamorous persona. I miss when they were genuine. I miss my friend.
There does seem to be a little sleight of hand going on, since much of the work that you do in react is rendering, and with HTMX you’re just shifting that to the server.

Is a lighter client and heavier server a good thing? Not always… look at Web3 for example, where many apps can be written against a blockchain and no server at all.
I already have an L-1 at the company I work at, but that doesn't allow me to work elsewhere. Does make anything easier?
Why are teens eating so much sugar?
Not sure about WSJ, but in some cases the extension fetches the content from archive today and inserts it into the displayed website tab.

If there is no mirror on archive today, the extension cannot insert it.
Ask HN: Roast My Website: Rewrote the Copy
Hi guys,
I was having trouble with a lot of people not understanding the key points my product seeks to address. Can I ask you to roast it?

https://fastmonitor.io

Thanks!
Why is it important that the wood decomposes before you die?
Since they sued OpenAI for copyright infringement I actively avoid them. I don't find them reasonable anymore.
> The whole thing seems like an accident of history that no one wants to fix

I can’t really speak to Fuchsia systems, but a lot (most?) Linux desktop distros use stub or systemd-boot bootloading these days. And if you want to get fancy, there’s rEFInd.
Is it possible to clone it instead of only downloading current version or viewing history?
Sure. Opportunity cost is there, I am sure China would much prefer to freely buy Western equipment. However, in case of escalating export controls, it clearly makes sense to further invest in domestic capacity. The 'opportunity gain' is more jobs for Chinese workers, more inward investment that would otherwise have gone into foreign countries.
Beyond the Padlock: Demystifying TLS – Part 1
The little padlock – a familiar sight in your browser. But what does it truly symbolize?
This article takes you beyond the icon and into the heart of TLS, the technology that secures your online interactions.
Learn, in a clear and concise way, how the TLS handshake establishes a safe connection, protecting your data during every visit to an HTTPS website.

Bonus: Dive even deeper with a live Wireshark demo showcasing the TLS handshake in action!
Actual replacements like Start11 are not blocked. Buggy apps using undocumented apis that break with every update are being blocked.
Indeed. Second mover advantage should be well known by now
> replying with a 1100 word long email is a mood.

What mood?
I opened the Google app on my phone to read the news feed, 9 out of 10 articles were unreadable under the cookie popups, floating videos I didn't even click to start playing, and other helpful offers getting in the way. It's shit, utter shit. Why don't they have "reading mode" to show only the text, I bet they are afraid of getting sued if they supported clean text like the HN app I have installed. On the laptop I always use ad blockers and don't see the whole scale of the disaster.
I think you’re missing the balancing that needs to happen that’s internal to each party’s books. That’s where an expense account would come in, using the accounting equation:

∆ State = ∆ Change
↓
Assets - Liabilities = Income - Expense

For example you had:

> 3. The employee submitting their expense report (invoice) to the company for reimbursement (liability to the company, asset to the employee)

So looking just at the company’s books:

$0 Asset - $100 Liability = $0 Income - $100 Expense
-$100 State = -$100 Change

Then in step 4:
> The employee getting paid by the company for the incurred expense (company converts asset into a discharge of liability, employee converting receivable into cash)

The company’s books would be:

-$100 Asset + $100 Liability = $0 Income - $0 Expense
$0 State = $0 Change

So the net impact on the ledger would be (putting these entries together):

-$100 Asset - $100 Liability + $100 Liability = $0 Income - $100 Expense
-$100 Asset - $0 Liability = $0 Income - $100 Expense
-$100 State = -$100 Change

Which is exactly what the company’s books would have recorded if they were using cash accounting instead of accrual. They spent $100 on an Expense.

So I think it’s super important to make a distinction between Liability and Expense Accounts because they’re on different sides of the accounting equation - State and Change. The same distinction applies to Asset and Income Accounts. [1]

[1] https://fragment.dev/docs#design-your-ledger-ledger-accounts
What a Healthy Relationship Prioritizes
Let's say we would have definite proof that this was a Chinese op. Then what? No other government is gonna complain too hard because they know that their own agencies are doing the very same thing too.

Additionally, creating fake identities in other states is base level spying.
> They don't have a right to harangue

And why is that, exactly? They do have this “right” and they exercise it.
Peak crank torque of the Zero DSR/X is 229 NM in the spec sheet, with a gear tooth ratio of 90/22 gives about, so 936Nm of torque. A 170/60-17 rear wheel is 0.318 meters radius, so 2943 Newtons of force where rubber meets the road trying to move 247kg of motorcycle.

Acceleration is force divided by mass, so theoretical maximum the DSR/X can accelerate at 11.91 m/s^2, or 2.25 seconds 0 to 60. That's assuming absolutely no power losses, that it sustains peak torque throughout the entire run, that the rider has 0 kilograms of mass, and that there's no risk of a wheelie.

I dunno, but I'd lean towards either BSing or hasn't actually taken a measurement with accurate equipment.
In Firefox for Android Nightly, you can (since recently) sideload extensions via the hidden debug menu (tap the Firefox logo in the About section a dozen times). This will add an "Install extension from file" option to the main settings menu.

I don't know whether this also works in the standard version of Firefox for Android.

It is good they reenabled this feature. Since it is/was very short-sighted of Mozilla to make their centralized addon store the single gatekeeper for extension access on user devices. As if they never thought about power dynamics in software.
Show HN: G'MIC, an Open-Source Framework for Image Processing
I've been working on this project during the last 15 years.

G'MIC is an open-source framework for digital image processing, distributed under the CeCILL free software licenses (LGPL-like and/or GPL-compatible).

It provides several user interfaces to convert / process / visualize generic image datasets, ranging from 1D scalar signals to 3D+t sequences of multi-spectral volumetric images, hence including 2D color images.
We can use playwright for these type of tests and still stay almost entirely in Python.
Thanks for answering the question.

With regard to the show, I didn’t want to pile on, but here we go:

There weren’t that many talks (the primary thing I was interested in), the trade show section was pretty small, and there wasn’t really much for newcomers to explain why this old hardware deserves preservation.
> The original patent holder shelved it because they were unwilling or financially unable to meet the FDA's testing requirements. So no human trials to confirm efficacy or side effects. (There was excellent efficacy and no short or long term side effects in rat studies.)

> There is no publicly available info about Lumina (street address, phone, financing, key personnel, facilities, etc.)

> Lumina is headquartered in Próspera, on the tourist island of Roatán in Honduras, South America. While the city is known for crypto, it is not known for the high tech pharmacological manufacturing and expertise that BCS3-L1 would require.

> Próspera is not subject to Honduran laws, taxes, (or FDA), because it was, for practical purposes, sold to billionaire Peter Theil and his investors . Because of a sketchy area of international law, Theil, et al, are able to sue (and are suing) Honduras for wanting to get out of the bad deal Honduras made with him. I.e., there could be resultant production issues for companies in Próspera. (Look up "ZEDE" and "Investor-State Dispute Settlement" if you're up for a major rabbit hole.)
I wouldn't trust this based on some online reviews. i would want to see clinical trails. Reviewers, if not straight up bought, will probably be very sensitive to placebo effects.
Companies already do that anyway. But they still need to hire people in the same timezone more or less.
I worked for a startup in the beginning, and we as a team were developing lots of adapters for large scale databases that needed lots of foundational work to be able to correlate those datasets into a graph database. We also developed lots of web scrapers for weird seemingly internal websites of companies that looked like they were not really public.

Think of it as database dump pages similar to how sqlmap works when it pipes/passes through the data with dozens of SQL injection requests on an input field.

Took us a while to realize our tech stack was being used by Palantir Gotham and other high level projects in the end.

Quit my job right after realizing I was working for the personification of the devil by any meaning of implication of the word.

Lavender, the codename of the IDF "AI" that is being used to mass target rocket strikes on guilty-until-proven-otherwise-by-association-only civilians in gaza is literally the system I worked on, and I desperately regret ever working for them through a defense contractor.

If anybody from Palantir reads this: It's possible to get out, if you need help, shelter, migration, or anything, contact me.
> I would expect he majority of old Japanese men to be super-wise ...

I'd argue that nationality says the least about a person. Some people are nice and some are painful to deal with. It's the same everywhere.

> Why wouldn't they gradually enable flow of immigration from ethnically close nations?

Conservative government and lack of competent liberal opposition.
Oh ok I guess we are making a fuss about nothing then.
No, they're orthogonal terms.
Homomorphic encryption is encryption where a specific operation on ciphertexts (e.g., ×) translates into an operation on the underlying plaintexts (e.g., +). With fully homomorphic encryption, there are even two such ciphertext operations (and corresponding plaintext operations).

Post quantum crypto is cryptography that cannot be broken by a quantum computer. This is rather nebulous, since we haven't yet discovered all possible algorithms that can run on quantum computers. Before you know it, someone comes along and finds a new efficient algorithm for quantum computers that breaks something thought to be post-quantum. Which is what is happening here - if the results stand up under scrutiny.

Sidenote: it may turn out that any crypto scheme which supports some operation on ciphertexts that translates into an operation on the plaintexts is quantum-resilient (or, vice versa, quantum-vulnerable). But tgat would require a fornal proof.
Unless The Verge has updated the screenshot, they are in a clearly marked section Recommended
Well I was giving away our coffee table. A very interested lady who was going to pick it up have held us home for better part of the day with half-hour postponements and then said it's too much trouble.

Relisted it for $20 and the next week it went painlessly.
Visualizing Roberts-Chebyshev Theorem [video]
Based on working hours Israeli is likely

https://rheaeve.substack.com/p/xz-backdoor-times-damned-time...

There are other countries on the same time zone, but only Israel has history of using and selling hacks of this level.
Bad architecture is harmful to the people who have to interact with it.
I gave up after watching the cake loading animation for 2/3 minutes. Might be a HN hug of death or something
> But why make it look like they are doing evil because of small, negligible mistakes?

Narcissism.
Regardless.
Automated Vehicles
It would be more impressive (and cleaner, btw) if it was fed with fan-fiction books and not the original books. Then we can see what it can make out of the context and what it "borrows" from the training data.

Why fan-fiction? Well, fan-fictions are not famous enough to be included in any training corpus, I believe. But fan-fictions of Harry Potter are numerous enough to test the context limit. There are also similarities and distinctions from the originals, which require correct recall to distinguish between them. That would be a good test, isn't it?
I was making a poorly informed assumption that signal's popularity must hinge on a key exchange process that can be MITM'd by authorities with enough privileges on the network to setup a persistent interception operation that spans every access point on the target's network partition.

So for instance, if you are using signal to do an outreach and support operation for a human rights group operating in China, it might be reasonable to assume that some Chinese intelligence orgs can view your plaintext. The strategy would then be to not transmit any information that would allow a decisive action against the group. The opportunity cost of revealing the surveillance has to be greater than the utility of acting on the intelligence. But obviously this would compromise the scope of assistance you could provide.

And the risk is iffy, for a few reasons that I've thought of since seeing your response:

1) PGP key exchange has the same problems when done over the network. Doing foreign outreach via PGP has the same problems.

2) I don't know of any examples of Signal MITM attacks stemming from weak key exchange. Worse, I don't actually know how key exchange works on signal

4) Key exchange problems are more of a universal nitpick against all crypto systems, not a full compromise

I'd be curious about your feedback - even if it's a chastisement.

I am also curious if you feel signal has any REAL issues which keep you up at night, if not key exchange.
I am always wondering who these people are who point to HN guidelines. Do you work for HN?
The problem there is figuratively with the posts. Screwing a board to a metal U is easy. Nicely joining 4 wooden legs to the board is not... I have also done the former multiple times, with custom-made lower parts and it is very painful to see highpriced cr* like the one in the link popping up everywhere, where it could easily be made custom (even in relatively High-CoL locations) for nearly the same price. The thing above is 30€ for steel, 2h of manual work (where the non welding prep of sawing metal pieces can be done by anyone... I did this for a trapezoidal shape of my own design...), next to nothing for painting (powdercoat would be nice, but likely not done...) and then a plank of some random wood from Ukraine (30€, 200€ if you construct it custommade from planks). I gather the main problem lies with the availability of designs and likely this could be solved by providing those (for example by an IT platform selling plans and matching suppliers with customers).
Works on Chrome and Firefox but not on Safari.
Interesting to read how in English it says "advocates claim that the technique helps to improve soil fertility, water retention, and soil warming" while in Spanish, instead, it gives it for granted ("Este proceso mejora la retención de agua del suelo, aumenta su temperatura y su fertilidad...").
I use KDE and the application launcher will show software that is not installed on my device.
Yes, to the extent that “muppet” is now common British English slang for a foolish person - e.g. “some muppet has parked badly and blocked the pavement again”.
You develop tools that cannot be scaled with such shitty tools and then you curse these tools.