skysight-inc/HackerNews huggingface dataset:
htmx loads in partials and processes them, you don't pay the price of loading it over and over again
No, we're not doing NAT, but the devices aren't really accessible from the wide web either. In this case "NAT" is just an implementation detail and getting rid of it didn't bring any of the benefits IPv6 promised.
I'm very sympathetic to the message, but I do find it ironic that two seconds after I read this line:

> I now want you to go on Facebook, scroll down, and see how quickly you hit an advertisement.

An advertisement for the author's newsletter popped up.
What the satellites are sending is effectively THEIR orbit, not YOUR location, I think is the point.
https://www.cisa.gov/sites/default/files/publications/fact-s... ("CISA.gov: Implementing Phishing-Resistant MFA")

https://passkeys.dev/

https://passkeys.directory/
raku has a couple (extra) uses for the semi-colon…

- statement line separator;
- loop($i=0;$i++;$i<3){…} *
- multi dimensional subscripts @a[^3;^3;^3]
- list of list literals (1,2; 3,4) eqv ((1,2), (3,4));

to paraphrase Larry Wall “everyone wants the [semi] colon”

https://docs.raku.org/
Why Not Smaller?

Why is this board so (physically) large in size?

You can see how much wasted space, by looking at this photo:

https://bret.dk/wp-content/uploads/2024/04/radxa_rock_5_itx_...
Very interesting answer. Much appreciated.
Discussing is always interesting but I would probably interpret it as him not being able to explain his own abilities like some people just "see" good chess moves or just "know" that there are actually 48 matches on that floor
That’s totally fine, i am not against services requiring phone numbers during registration. I am just against those services allowing sms to be used as an easy 2FA fallback when an app-based 2FA is enabled. Because doing so makes app-based 2FA kinda useless.

I agree with your points, it just feels insanely rate to see a service utilizing phone number requirement for registration the proper way (i.e., the way you describe).
Its funny how you can't work for a secure government agency if you can't get clearance, and that a primary litmus test for clearance is how much debt you are in. (AKA how easy you are to bribe). But then for huge swaths of our infrastructure we have privatized it and left it in the hands of minimum wage employees who probably have auto and student debt and can be bribed for pittances.
No real need.

Python 3.12 without any C is usually fast enough for pretty much anything I do. Most of the bottleneck is latency, and for stuff I was using C for, mainly OpenCV for image processing, pytorch already has all the kernels that can run on Nvidia hardware that are way faster anyways.
i find github.com/explore great at discovery - what specific functionality are you looking for? outside github, i found that oss projects generally get announced at twitter. most oss are full-blown products, so producthunt.
Wow that blog never ceases to amaze me. I was actually thinking about it when I read this post, that it’s exactly the type of post Bartosz could have made. And he had! Those interactive graphics are unbeatable.
Do you know a good article on this?
"45% adoption" doesn't tell about just how poorly IPv6 is actually supported on routers and home devices available to smaller customers.
What happened here is that one member of a couple wanted a divorce, and the other member's lawyers accidentally submitted that person for divorce rather than a different client.

So basically the judge's argument is "those were your lawyers, you paid for them to act on your behalf, so this action they took on your behalf is valid."

It's not a "computer error" except that the lawyer who screwed up happened to be using a computer while doing so. If this were 50 years ago, and the lawyer wrote the wrong client's name on a document, would we call it a "pen and paper error"?
This is the text from the original article.

"For this reason, since PuTTY was developed on Windows before it had any cryptographic random number generator at all, PuTTY has always generated its k using a deterministic method, avoiding the need for random numbers at all."
>You simply asserted that they "shouldn't be further taxed"

That assertion sits in the same sentence that provides the justification
Is an error a “computer error” simply because a computer was involved?
https://archive.ph/Kps6H
Ah okay, after re-reading the message it looks like using the SHA-512 result directly (without modulo) would still have the issue. I originally thought the problem was moduloing by the key, which was approximately 521 bits

> In all of those cases except P521, the bias introduced by reducing a 512-bit number mod q is negligible. But in the case of P521, where q has 521 bits (i.e. more than 512), reducing a 512-bit number mod q has no effect at all – you get a value of k whose top 9 bits are always zero.
It doesn't have to be Google Auth, it can be any 2FA app (1password, Bitwarden, Authy, Microsoft Auth), whatever. It's just a safer way to do 2FA than SMS.

Google Auth is just one of the earlier popular apps, so it's a common example. It kinda sucks though, cuz if you lose your phone you have to reset all your 2FAs.
You were downvoted, and while I think DEI has some good aspects, your 2nd point is spot on because I've seen it in person at a largish, household name tech company. You see Indian managers who only have Indian engineers working for them and you see Chinese managers who only have Chinese engineers working for them. Go through the cafeteria at lunchtime and you see it pretty much ethnically sorted - the Indians aren't sitting with the Chinese, and vice versa. Now it wasn't 100%, I worked for a guy who was ethnically Chinese from Malaysia and he had Indians and whities like me working for him. But if I saw in internal job listing that looked interesting and the manager was Indian, for example, I'd look at the org chart to see the names of the people working for them to see if it was an all-Indian group. If it was then there wasn't much point in applying.
Its as large as the IO Panel. Also that space is for an M2 drive, no?
I lost my phone a few weeks back and was astonished that I was able to go into T Mobile and get my number switched to my new phone without showing any ID
SHA-512(...)[:521] would still produce the same vulnerability, there would be 9 unchanging bits (assuming the [:521] would pad the 512 bits to 521). Those 9 guessable bits are enough to recover the key from 60 signatures, as the post explained in detail.

A more interesting question (while we are on the 20/20 hindsight express) is why the dsa_gen_k() function did not include an assert(digest_len <= 512).
Right. And we have so few doctors because we artificially cap the number of doctors instead of letting free market dictate how many doctors we can have.
I disagree, calling out Russian influence does not do them a favor. It clears the air. I called out the Greens specifically because they have the gall to call themselves the Green party when they support the opposite. And to probably misquote Linus, "Just because I say I like hotdogs doesn't mean I hate hamburgers." I didn't comment on the rest of German politics, nor should I have to in order to avoid accusations of "doing Russia's work". But yes, a great deal of German politics has been compromised for awhile now. The AFD is self explanatory but the SPD and CDU has their fair share of problems too. Schroder and Merkel both had pro Russian policies.
> It's generally a good idea to not have your phone number stored in a zillion websites anyway, every copy is just another vulnerability for hackers to exploit when they knock over that service.

Are you relatively confident that these sites actually delete removed phone numbers?
Not at all. Boeing required their parts manufacturers to design and build parts for a given budget and Boeing just sat there and glued it together. Sometimes they didn't even do that. They just used their position to bully the smaller component companies into skimping on high quality parts while denying they had involvement. Tesla does most stuff in house
GP is obviously using "them" to refer to the formulas. I understand how it could be confusing; on first pass I too looked back for the first word "them" could be referencing - but GP tricks us by writing out "god" again later in the sentence! Since we know Ramanujan is male and "god" is used again, the only valid noun "them" could be referencing is "formulas".
It's not reasonable to expect people to have Yubikeys. iPhone Keychain is about as good as it'll get realistically, and that somewhat relies on hardware security.
Through a stateful firewall which blocks all incoming connections, completely invalidating "every device accessible" tenet of IPv6 and bringin zero value to the actual customers.
makes a lot of sense from evolutionary point of view
What do you mean? Sometimes when I forget my ATM card, I go to the teller, who can help me after checking my photo ID and maybe some security questions.
Sim swapping is typically "put their phone number on this sim card I control" the point being to bypass any SMS based 2 factor auth / alerts.
Google Authenticator is client side.

It's not the best 2FA app though; it makes it unreasonably hard to transfer codes.
Login.gov is a thing (and over 300 federal agencies use it as their idp as of this comment). USPS provided identity proofing in person for it. All federal gov agencies are moving towards it. The "right" way would be a national smart card ID system like Estonia has (built on cryptographic primitives), but you have a cohort of crazies who think it's the "mark of the beast" and other wild tales. So, we walk when we could run. This problem is at the people/policy OSI layer.

The Defense Dept already does this: CAC/common access cards [1]. Create a civilian root and do it already. A PIV/CAC can also be used as an auth factor with Login.gov [2].

[1] https://www.cac.mil/common-access-card/

[2] https://www.login.gov/help/get-started/authentication-method... (Physical PIV (personal identity verification) cards or CACs (common access cards) are secure options for federal government employees and military personnel. These cards, with encrypted chip technology, are resistant to phishing and difficult to hack if stolen.)
Isn't modulo the same as truncation when dealing with powers of two?
Both my proposed naive method and the PuTTY implementation are deterministic. The only difference is how the primitives (eg. SHA-512) are combined.
One of the interview questions where I work (we do automotive electronics) is "Explain how GPS works." It's directly relevant to the job, but it's also a neat opportunity to see how someone sizes up their audience, manages time and assumptions, etc.

All those things are neat, but mostly what I've learned is that quite a lot of people, otherwise apparently reasonably smart and competent and toting a whole stack of prestigious degrees, have ghastly flaws in their mental model of what GPS is.
Yeah, I was thinking at the very least changing SIM assignment, given the huge target this is for bad guys, should require confirmation by at least 2 unrelated employees.
The counterpoint is that Hitler wouldn't have been able to seize power so easily were it not for the clear "other" to demonize. That's just human nature. Fascists always need some identifiable enemy to rally against and there was no shortage of antisemitism already in the country to work with. This is why they also picked up on hating Gypsys and homosexuals. Fear mongering is one of the most efficient ways to gain power, but is a double edged sword since you can only ramp up the rhetoric if you want to keep your coalition together, the very force that brings you to power distracts you from your actual objectives.
Humans remain the biggest vulnerability in cyber security.
A 5W laser can't cut steel. You need to be in the kilowatts before you can cut metal (unless it is very very very thin).
Previous discussion:

https://news.ycombinator.com/item?id=20421989 Chronic Schizophrenia Put into Remission with Ketogenic Diet (psychologytoday.com)

July 12, 2019 (14 comments)
This is a really unnecessarily rude way to call out a minor grammar quibble. The sentence was perfectly understandable. Also, whether you like it or not, it is quite common English (at least in the US) these days to use they/them as third person singular. Perhaps we are slowly losing the distinction between singular and plural the same way we lost it for second person. Language changes.
I assumed getting married again?
AI bros, is it over? Did we go too far?
These lasers mean that the watches that Q gave to James Bond will finally become a reality.

LLMs and self-driving cars mean that KITT from Knight Rider will finally become a reality.

All I need is for Webb to discover a planet a long time ago, in a galaxy far, far, away, and my childhood fictions will have been realised.
I want to clarify that I'm not "pro russia" here. I'm "anti bullshit". Every nation has propaganda, don't get high on your own supply.

That said, if you think for 5 seconds there are some blatant recent and ongoing examples of USA and allies invading and killing a lot.
Yes, those are the mounting holes for the M.2 that's connected to the left of the photo (visible in other photos)
What other details do you need?
I'm not a swimmer but that sounds like a pretty reasonable fear. A propeller of any sort will mess you up pretty bad. And if I understand correctly, the larger vessel gets the right of way so if you aren't in a vessel you just go smoosh.
There's a YouTube channel named 'Living well with schizophrenia' in which the protagonist is talking about her own story and suffering with this mental disorder. Recently she announced she'd started her ketogenic diet and so far so good, she's symptom free and slowly tapering off her medication.
I expect future AI models to be like Ramanujan. Has tremendous intuition but can't accurately explain it's reasoning for arriving at a solution.
FWIW in the current time we definitely encounter "wrong physics" in places where science and politics intersect.

EG - a scientist can easily get smacked down for being "a climate change denialist" or an "antivaxer" or a similar unpalatable label way before the merits of their effort are evaluated.
aka /sdcard on most phones
Probably expects Vardag's client to sue them for losses. Honestly, accidentally filing for the divorce of a client you were supposed to be preventing the divorce of is pretty bad. It may be a huge firm, but that ought to lighten their pockets quite a bit, and someone will probably lose a job.
All I'm confident about is that they certainly won't delete them if you leave it as a 2FA option.
The role of the embedding is enabling similarity search.

You need to use the same embedding for indexing and retrieval. Beyond that, you want to select an appropriate embedding; optimized for indexing the kind of content you have.
Mixture of Experts is not just 16 copies of a network, it's a single network where for the feed forward layers the tokens are routed to different experts, but the attention layers are still shared. Also there are interesting choices around how the routing works and I believe the exact details of what OpenAI is doing are not public.
In fact I believe someone making a visualization of that would dispell a ton of myths around what are MoEs and how they work
I'm sorry that you need to work around the inability to run a simple Windows service because of some mistakenly bad corporate policy trying to micro-manage which Windows services are allowed to run. I don't think the long term solution should be "shadow IT install an older app just because it pretends to be a GUI rather than a Windows service", but I'm glad it is working for you in the short term.

If you need ammunition to encourage your corporate IT to allow you to run the proper ssh-agent service to do your job instead of increasing your attack surface by installing PuTTY/Pageant, you could collect a list of vulnerabilities such as the one posted here (look at the huge count of affected versions on just this one!). There should be plenty of vulnerability maintenance evidence on the Microsoft-shipped version of an open source tool with a lot of eyeballs because it is "the standard" for almost all platforms over the "single developer" tool that took at least a decade off from active development (and it shows).
This is Vannevar Bush's Memex in action using the cloud
Where is your source that, e.g. LFP grid scale batteries only last at most 10 years?
>The graded space for the rails already exists, and that is arguably the hardest part of building a railway.

Connstruction is easy. It's the multi-stakeholder approval process that's fiendishly difficult. You still have to go through that even if the graded space is already in place. Lots of stakeholders trying to get what's theirs, whether rent-seeking or stopping the work altogether. https://www.nytimes.com/2022/10/09/us/california-high-speed-...
I am familiar with vendors that provide a similar service, but none quite as you described. Which one do you use?
I stand corrected. Thank you for linking the relevant paragraph in your sibling comment.
The website does not make it clear - what does SIM protection do? Does it put a waiting period on changes? Requires a website login first?

What happens if I legitimately need a new SIM?
I hate how people keep pretending that only Google does calendar and mail. These things have been standardized for decades for a reason.
What happened to Ovio. I haven’t heard from them in years. Is it still active?
It's actually unbelievable how often SMS OTP is used, when it's public knowledge that it just replaces one attack vector with a worse attack vector... Cracking a password or breaking into an encrypted database is 10x harder than getting a sim swap.
historically true but no, CNN was displaced by a second DeepLearning method called Transformers; Transformers enabled LLM. Since Transformers replace CNN, CNN did not truly enable LLM.
Maybe a mixture of both?

I think both projects were super useful, grateful for them. There is a lot of utility tucked away in both projects.

A year ago,I started using LLM APIs in non-Python languages and realized that sometimes building from scratch is better.
> I hadn't even imagined this constituting "brute force". Is my phone using "brute force" to find the WiFi router? At some point it's not really "Brute force" it's "There are a handful of options, try all of them" and GPS seems past that point especially on modern hardware.

Your phone only needs to listen to the WiFi router on one channel at a time in operation, and the signal parameters are well enough defined that they can be scanned quickly. A GPS receiver requires at least 4 parallel channels to achieve a position solution, and there are up to 32 possible codes the satellites could be at. Scanning 6 channels across 32 codes, and then also sweeping phase and doppler shift to lock them , just to 'discover' if there is a valid signal there takes time, and this is what older receivers had to do. Modern receivers tend to just 'brute force' this by having an entire receive pipeline dedicated to every possible PRN all the time, and possibly even correlate multiple doppler shifts simultaneously as well, so they effectively have 32 (or more) receive channels, despite only ever expecting a maximum of 12 birds being visible. The extra channels are necessary more or less exclusively to reduce acquisition time, so I think it's fair to call them 'brute force'.
Ok I just stopped and thought about it, and concluded that this is BS.

I'm glad that all these businesses exist, so that I can specialize in a particular kind of work, and they can specialize in doing things I don't do, and then I can transact with them using a standard medium of exchange to trade my special skills for theirs.

None of that has anything to do with "the weaknesses of human nature" or laziness, or false urgency, or an impeded ability to distinguish value, cost, and need. It's just a trade of my time for theirs, on terms I find acceptable.

There is nothing fraudulent about any of this. The coffee shop I bought my coffee from this morning and the restaurant I bought my lunch from this afternoon did not fool me, I just enjoyed drinking the coffee and eating the food they prepared, and considered their prices fair. No semantic legalities or double speak or meaningless words required, I just wanted some goods and services, and was happy to purchase them.

That's honest, not thievery.
One thing Samsung does to reel you in is to make ridiculous offers to existing customers. I'm not sure if Apple does the same or not.

For example, they'll often list a phone for say $1000. Then offer you $800 trade in on last years model, and maybe $500 on a two year old model, both objectively much more than the phone is worth. Pair that with EPP discounts that almost everyone qualifies for, RetailMeNot sitewide codes, credit card rewards, and random Samsung offers - you can often upgrade every year if you want for very little money.
The old antitrust laws weren't, but they've been narrowed so much over time through court decisions that they're no longer effective, as evidenced by all the industries dominated by less than a dozen major companies.

The first sale doctrine is the thing the industry keeps chipping away at with anti-circumvention laws and ebook licensing etc.

Telecoms are probably the textbook case of regulatory capture. You should be able to start a phone company by installing Asterisk on a VM or installing a cellular base station on your roof and filing a form to get permanently assigned a block of phone numbers for a nominal one-time fee. Needless to say that you can't and the incumbents like it that way.

A lot of aspects of airlines are actually not that heavily regulated, it generally operates as a fairly competitive market. The parts that are the most regulated are the parts where the 737 MAX kind of things are happening, and then we're back to "incumbents like the rules that way because they make it cost prohibitive for smaller competitors to exist."

Food safety is the thing where this happens:

https://www.npr.org/templates/story/story.php?storyId=529811...

Also, things involving Monsanto in general.

Transportation safety is pretty thoroughly captured by automakers. Tens of thousands of people die in car crashes every year, it's one of the leading causes of death, and we make dumb responses, like fining people who don't wear seat belts (no effect on automakers) instead of actually effective responses like building more housing near jobs so people drive fewer miles or don't need as many cars (obvious negative effect on automakers).

Environmental safety rules don't seem to apply to oil companies.

Fish and wildlife rules are commonly structured to give large incumbents the right to harvest the disproportionate share. Also, this is one of the cases where the industry wants the rules, because over-fishing is a harm to them rather than an externality their industry imposes on someone else.
For personal inference, llama.cpp can run some MoEs on CPU.

So like that.
Google auth is not the only authenticator that supports TOTP. Any time a site tells you to use google authenticator you should be using a better service like 1password, bitwarden, lastpass, etc... to scan the QR code and store the TOTP code.

I'm flabbergasted every time I switch jobs and some jamook in IT or Security says we have to sue google authenticator and that other authenticators aren't allowed. Then there are constant lockout events generating tickets for those teams when people delete the app or get new phones.
I don't know, what's rationality's current reputation?
We always enjoy the finality of legal process until we are on the losing side. I don't know why UK law is made that way, but nothing should be final, for precisely this reason--clerical errors can happen.
Reading this story and doing some googling sadly makes me pretty confident that this linked one (about boat jousts) is fake. The ending details an explosion and there is no news article of that anywhere in the specified time period (which he says is a few months before the invasion of Iraq). Would love to be wrong though.