skysight-inc/HackerNews huggingface dataset:
In my opinion, the author understates how good AES-GCM-SIV is:

> The solution they designed is described in that linked paper: AES-GCM-SIV, which is able to tolerate some number of nonce collisions, but under a weaker notion of security that is only really applicable to that use-case (where the data being encrypted is itself random).

AES-GCM breaks catastrophically if you reuse a nonce; but the only thing that happens if you reuse a nonce with AES-GCM-SIV for two messages is that an attacker can see if the messages are equal (since AES-GCM-SIV is a deterministic algorithm, this is pretty much unavoidable). So yes, "weaker notion of security", but still applicable to a lot more than just that use-case. I wonder why AES-GCM-SIV is not used more, since it's so developer-friendly and misuse resistant.
RISC-V must get its messaging right on open standard vs. open source
Then you should articulate the particular issues men face I guess. We can skip the chattel thing but since you didn't quibble with the increased risk of abuse and sexual violence that's a good place to start to demonstrate the equivalence.
Self driving robotaxis will at least help keep car ownership from growing out of control.

We can tackle a lot of the other 90% piece by piece. Cars are one piece. Still, petroleum and friends will not go away; they are needed in some cases.
We have not had success with that unfortunately.
So that it is more inconvenient to use theirs for such purposes... I would do the same.
Understood! As a little update, the PWA got offline mode support in v0.18.0. We're now adding improved file open+save support which should be done by the end of the week.
I didn't know Go reserved some registers for its own use. For libraries that don't use cgo but do use assembly [1], does this mean they have to generate that assembly with a compiler flag that avoids reserved registers?

[1] A common optimization technique, like in the superb https://github.com/klauspost/compress
There's the rather famous AARD Code (https://en.wikipedia.org/wiki/AARD_code), though that is from an era a little before Win32. And, well, it's not a documentation issue for app developers, as much a way to trick OS developers.
[dupe]

https://news.ycombinator.com/item?id=40504228
@ncruces and I are also contributors to wazero, so ask away if you have questions :)
Hey, there's dozens of us! :P

I wrote about my experience with this last year: https://news.ycombinator.com/item?id=35897515

I did exactly the type of diagnosis you're talking about. It was quite good at how it simulated a noisy environment with a bunch of background chatter and then a single voice you were meant to listen to that would repeat various patterns of words with various combinations of lower speaking volume and/or higher background noise.

One thing I wish I'd made a point of at the time was the fact that, despite being an apparently soundproof booth with headphones on, I could definitely hear people talking in the waiting room and another audiologist in an adjacent room. Though I'm not sure it would have materially changed their lack of diagnosis (they'd already detected I could hear into negative decibels).

I still don't have a diagnosis, but I'm increasingly coming around to the idea that maybe it's not that my hearing is bad but that I actually hear too much. What I'd previously thought was my unability to hear people speaking on the radio in the car when everyone else clearly could wasn't because I couldn't hear the radio, it's that I can't hear it over the top of all the tyre and wind noise I'm also hearing and trying to process out. I don't think the other passengers in the car hear the rest of the noise, they only hear the radio.

I bought various types of Loop earplugs and have found them fantastic for live music events. I can now hear my friends when they're talking to me! Unfortunately they greatly amplify my perception of the volume of my own voice when I talk which has the undesirable side-effect of making me talk even quieter so I feel like I'm having to yell when I want to talk to people. I've also not found them as useful as I'd hoped in restaurant-type settings.
Making and transporting gasoline releases more than 1/3 of the pollution associated with cars. It’s a lot dirtier than just what comes out of your tailpipe because flaring doesn’t have a catalytic converter, and they don’t remove sulfur etc until later. https://en.wikipedia.org/wiki/Gas_flare

Fossil fuel use for making electricity has been falling, and cars last 25 years. So over an EV’s lifetime the grid will likely keep getting cleaner. In 2000 70.2% of US electricity came from fossil fuels, in 2010 69.5%, in 2015 it was 65.81%, in 2022 59.77%. Let’s see what happens in 2030, 2040, etc.

Further, the added capacity to power EV’s isn’t the same as what’s powering the existing demand. The US hasn’t built a new coal power plant in years, but we aren’t going to decommission them early either.

PS: People complain about bird strikes on wind turbines but they forget about incidents like: “Approximately 7,500 migrating songbirds were attracted to and killed by the flare at the liquefied natural gas terminal in Saint John, New Brunswick, Canada on September 13, 2013.” Fossil fuels are even worse than generally perceived.
I happened to go out with a group of workers from a deaf school. It was a particularly loud and annoying bar and it didn't bother them one bit. :-)
It's weird how people assume all sorts of unlikely conspiracies by the "petro industrial complex". It's mostly the same companies that deal with gasoline and natural gas; they would be happy to sell you either. In most US states it's totally legal to convert a gasoline vehicle to natural gas, and at times they have even been sold by major auto manufacturers. There's not much cost savings for regular consumers but fleet use is fairly common.

https://afdc.energy.gov/vehicles/natural-gas
This is a low quality comment, that was already debunked by a google search in a comment below.
Always suspected this - didn't know there was an actual term for it. Thanks!
Volumetric energy density. Either you'd fill up more often or dedicate more vehicle space to energy storage.

Diesel: 10,722.2 W hours / Liter

Gasoline: 9,500.0 W hours / Liter

CNG (3600 psi): 2,500.0 W hours / Liter

NG: 10 W hours / Liter

Source: https://en.wikipedia.org/wiki/Energy_density
25% MFU :( maybe because of the P2P nerf?
My favorite case of this awkwardness:

Other person: *mumble mumble* SOMETHING CLEARLY SPOKEN

Me: I'm sorry, what?

Them: "clearly spoken?"

Me: No, the first part.

Them: "something?"

Me, giving up: *smiles and nods* Yeah!

(quietly hopes I didn't just agree that putting hamsters in blenders or something is a cool idea)
> Extension cords are cheap

You're not having your extension cord from the 12th floor on the right to the middle of the parking lot.

Or through a tower garage up to your car.

Any apartment building with enough density would become a nightmare if people had extension cords dangling from their window.

None of that would fly in most European or Asian major cities.
Solar and wind are enough, and more and more countries are making more and more of their power needs with renewables. Stop spreading FUD.

I have residential solar in Michigan of all places and power our all EV household with it. We can do this at grid scale if we just stop listening to the same old lies the fossil fuel and nuclear industries have been pushing for decades.
"doing thing X work and everyone uses it, so bad actors invest time against things X. While thing Y isn't used by anyone so bad actors aren't spending time to work around it, q.e.d. we prove thing Y is better".

i don't really buy your argument
Once you get to the top 1-3 results, CTR (click through rate) is a much bigger ranking factor. Google knows how long people stay on pages and whether they click and back out immediately. This is important for E-Commerce, because Google doesn't want Site #1 to be mostly out of stock even though they have better links.
Kinda running in circles here man.

1) they are mass produced which was your original point of contention

2) they are growing very fast

3) 1:100 is pretty comparable. Utility storage batteries are only commercially feasible within the past several years. Sodium batteries aren’t a great choice for EVs so those numbers aren’t apples to apples as we’ve largely been talking about utility scale power.

4) the biggest reason sodium is not growing even faster is because lithium is better and cheaply available in large supplies.

And so we are here again. If you have x billion dollars, and you want to remove the most carbon; you would very likely remove more carbon, faster, by building a battery plant of either variety than building a nuclear plant.

The limiting factor of our clean power right now is in fact just hooking it up to the transmission grid tbh
There are no doubt lots of naive idealistic people out there. But who in their right mind puts themselves anywhere near "safe" or "ethical" AI initiatives at any of these companies.
All hybrid engines are considered full EVs in all this statistics.
Less than I do for gas.
I tend to agree with you. Trust and Safety teams make a lot of judgement calls that they don’t want being disclosed because many of those calls are subjective.
Wow. Do you introduce yourself to new people in the real world by peeing on them?

'Cuz that's about the level of social grace you've demonstrated here.
Interesting. This should also shed some light on the [Dispilio Tablet](https://en.m.wikipedia.org/wiki/Dispilio_Tablet) - which seems to feature some kind of archaic script (the oldest yet found, if the dating is correct) They have not yet published though.
I think you might be right, it happened again, but this time it's wasn't something that looked like an ad.
New earplugs won't amplify the sound of your own voice
Okay, I can't tell if you think that's what I'm proposing (it's not) or if you're just taking the moment to rant?
What isn't working for you? :)
Curious, is that your first pair of phonaks? If not, is the use use of bluetooth + app hurting your soul?

My current pair are about 6 years old, working fine still, thankfully... But in a recent visit to audiologist, they had me test out a newer pair... but they had a single button instead of rocker + button, and bluetooth/app was touted.

I dread the touchscreen phase of HA as a young person with functional fingers (vs elders with dexterity issues) and a preference for physical buttons (a la my 2009 car).

The idea of autoswitching the programs outside limited cases (direct audio input cables and increasingly-rare telecoil situations are the only things I would accept) also doesn't sound great! :)
My daily driver is an ‘89 4Runner that gets about the same milage. That sounds bad in this climate, but for 35 years and nearly 300,000 miles I have not had to spend the energy/resources/carbon to build another vehicle and dispose of this one.

From my experiences Toyota tends to over engineer on the reliability side rather than optimizing for fuel efficiency. It’s all trade offs. You can tune the engine that may not be as fuel efficient but it may last longer.
The problem that Toyota has and will have increasingly is that they released their "first-gen-tech EV-only car", the bZ4X in 2024, which is much later than other EV makers did.

And that's probably why most think that it's a very bad EV. The competition is several iterations ahead and seems set to remain so.
Parallel Bets, Microsoft, and AI Strategies (2024)
Making videos of politicians doing goofy things. Say, Donald Trump scoring a goal in the UEFA Champions League. Or 'deepfakes' involving their pets doing something funny.
The government is making it more difficult to track private aircraft travel
Looking at subj cheatsheet, I immediately see `git add .` described as adding ALL untracked files and unstaged changes. But deleted files will not be included, unless you pass -A / --all. But wait, that's just my memories, since git now does include removed files, according to my tests today and https://git-scm.com/docs/git-add#Documentation/git-add.txt--.... It's hard to tell if that changed in the past decade or not, cause the manual never mentions neither a version not that -A is default now in a section corresponding to -A. I still have -A in my bash aliases and it was 2017 when I finally got frustrated enough to create them.

And this complexity was literally from the first trivial thing I checked, I wasn't looking for it for hours to gaslight anyone here. Git is nice and fast as a core program, but its ui, documentation, compat and informational ecosystem are just poor.
Spend more time wasting the time of others: https://news.ycombinator.com/item?id=40511868
Hybrids are not EVs. Even plug in hybrids spend most of their lives burning gas.

The Solterra is the same car as the Toyota bZ4X and Lexus RZ450e. It is a very mediocre EV, far behind its competition in efficiency and charging. It demonstrates as well as anything Toyota's absolute refusal to take EVs seriously.
Your comment would make sense in, say, 2015. It's nearly 10 years later and Toyota has exactly one (not well regarded) EV in their roster.

No, Toyota is all in for fossil fuels. Even hydrogen cells (while they burn clean) are only generated from nat gas currently (and even more limited than EV charging stations).
I don't like how it doesn't explain how it works.
That’s just not how any government has ever thought out a problem. Nations don’t snap their fingers and everyone leaves at once. Emigration is slow, even in apocalypse heat waves.
What does that even mean? Your structural setting changed your success potential? China would disagree.

Besides… Blue origin? Boeing? These are not state owned or “invisible” yet are failing.
I am not clear about the intent of your comment. People should be free to sell their labor to whoever they want. And people should be able to buy labor from whoever they want.

All businesses at all times are subject to losing their employees to another employer who is willing to pay enough for them.
Indeed.

But little neons are getting scarce (they aren't dear -- they're just much, much less common than they used to be). And working fluorescents (with magnetic ballasts that actually run at line frequency) are pretty much that way are too.

LEDs and resistors, though? Bright, cheaper than chips, and ready for all kinds of modern digital shenanigans.
> Legacy auto makers claiming that ICE hybrids are EVs is very disingenuous.

Calling a traditional ICE hybrid an "EV" is disingenuous, completely agree. Calling a PHEV an EV is 100% totally fair.

I drive a used 2017 Chevy Volt (a "legacy auto makers" PHEV). I am fortunate enough to have a regular garage with a standard (120v/12a level 1) outlet + charger, and I only charge the car in at night while I'm sleeping. The car records all usage on all fuels for it's entire lifetime. Over the past 78,000 miles, my lifetime MPG on the vehicle is like 145mpg, despite the fact that I take a few long trips (multi-states away) each year. The vast vast majority of miles all end up being electric-only.

Yes, some people buy a PHEV and then never charge them, and yes, this defeats the whole point. But it's perfectly fair to call a PHEV an EV. Under normal regular intended usage, they're running on electricity-only anywhere from 50% to 80%+ of all total miles driven.
Any website you visit on your home network could do a portscan on the local network and figure out what you're hosting. Hackers are creative. Chrome has some mitigations against this but unfortunately not Firefox last time I checked. Do you have any IoT devices? Smart TV?

It's always a good idea to lock down everything you can and avoid unsafe defaults. If podman causes any friction there's most likely a good reason behind it. For me there are none and I've lost count of the containers I'm running.
I think pi-hole (Adguard home) is useful dns level ad blocker which can be used on network/router level. But it is limited, UBO provides you more flexibility to block cosmetics and certain ads that cannot be done via dns. There will be overlap of course but it is worth it. I agree that adguard here seems redundant and UBO itself recommend against using another ad blocker to avoid interference and websites adblock discovery.

However you might end up using

1. pi-hole on router

2. Adguard as device level DNS

3. UBO on Firefox (android only)

It is possible but not recommended and wasteful. 1/2 and 3 is enough.
The point is that once you depend on a supercharger, the price of the EV is not that attractive anymore.
Show HN: I made a web color palette generator/editor to simplify color harmony
Hi everyone,

I have just finished my free color palette generator that uses your brand colors and creates unlimited palettes based on various color harmonies, that you can then edit and export for use in your projects.

I have built it because whenever I would need to select all the shades of different colors for my designs, they never looked quite right.
The app is based on the Oklch color space, which means that all different colors will match their lightness.

It also groups colors into Accents, neutrals and grays, and comes with features like color contrast checker and colorblindness preview, so you could easily make sure your color palettes are accessible to everyone

Check it out here! : https://www.palettemaker.io/create

Also, I would appreciate your feedback on what I could improve in my app

Thanks,
Justas
“We’ve investigated ourselves and found no wrongdoing.”
This is a cool idea! A few years ago I did a (short) presentation out of a Notion doc for some radio-related prototyping and the format was a hit - scrolling works really well for certain topics.
Yeah, the difference between "train on this data" and "these interactions might be collected and aggregated across sessions to be included in a future training dataset" is a difficult one to message to most people in software, let alone consumers without that background. By the time you're done explaining how most data is largely garbage, labeling and curating data is difficult and time-consuming, and updates may make things worse such that a rollback is forced, etc. you're up to several paragraphs of explanation and most people won't read that.
The counter starts from an initialization value (IV), which does not need to be secret. What should be ensured (to prevent forgery attacks) is that each possible (key, initialization value) pair is never used twice.

There are two standardized ways (from NIST’s SP 800-38D) of ensuring unique (key,IV) pairs:

1. Use either a random number generator to make a nonce for the entire IV, or
2. Construct an IV by concatenating two fields, one field for the most significant bits set it to zero and increment it every time the key is used, the other is simply a fixed at zero.

With the second option, some new limitations exist to maintain the constructed IV’s uniqueness. The first being how many blocks of data you can encrypt in an operation (2^(size(fixedfield)) because you don’t want to overflow into your key-reuse field. The second is being the number of times you can reuse the key is now limited to 2^size(keyreusefield).
https://www.universetoday.com/145006/there-could-be-meteors-...
On first read I was thinking Evan's approach sounds pretty similar to Y.js but there's a callout at the differences:

"... what I implemented is similar to what Yjs does. Some high-level differences are that a) Yjs doesn't store delete sets explicitly and sends all of them all over again each time syncing starts and b) Yjs gives each insert an additional rightward pointer for resolving ordering between children with the same parent."

My hunch is that the winning strategy in this space is going to be a CRDT version of a Piece Table (the data structure that VS Code uses). Big advantage is that you can separate content (text buffer) from the ordering.

I also hope there's more energy spend thinking about how to adapt these data structures to popular databases which is the biggest hurdle in adopting them. I'm personally invested; trying to create the best first party solution for Triplit.

A researcher at CMU has been thinking about this and got his sequence CRDT working with Triplit among other database systems. https://mattweidner.com/2024/04/29/list-positions.html
It is a claim unless there's a clear definition how is being calculated. And I don't see any besides the website saying "according to sources of our data"?

Still, I don't understand how you could have double the marketcap but actually doing ~2x worse than what you compare against. I find it a bit puzzling.
Life on Ukraine's front line: Short of ammo, 'worse than hell'
If Toyota were serious about apartment life, they would be doing like BYD and offering a series-hybrid with a lot more range (BYD offers 2k km, I think 1k km would be fantastic).
I won't use it. I am pushing back on your belief that it has figured something out about anything, because to me it looks like Kagi takes Google's results and then makes them worse. I have total shit ranking #1 on Kagi and Google. On other pages I am struggling to break into the top 10 where I should be right under wikipedia in a just world.

I think many people whose lives don't revolve around these things (as in your finances/mortgage are not dependent on google search) get weird magical views about search engines where it's sorta like a modern delphic oracle where the magic works as long as you believe in it. Of course I have the opposite problem where Google is angry chthonic god to be supplicated/scorned.

Oh well, I do know I will not be worshipping a new god that cannot even destroy the abominations sitting at the top of the rankings.
Same thing. Did a test and the audiologists comment was that I would be the best hearing tested all day or all month and come back in twenty years.
Sounds amazing! Have you heard of/checked out Gleam which compiles to Erlang/JS?

Asking because if I was in your shoes, I'd spend all my time to invest in that ecosystem. I got a taste of it in my 3 month semester break where I was able to work on a lot of Gleam and Rust side projects. (Nothing to actually publish, but purely for fun and my own enjoyment).
What Google search?

You mean the specific hearing aid searches?

It was a general comment on the state of health care in the US (not just hearing aids).

Before the new legislation, we couldn't just go to the corner drug store, and buy a hearing aid off the shelf. It needed to come as part of a package, including many tests and appointments with ENT folks.

But I cede the point. It was a low-quality comment that is likely to trigger folks with certain political views, and I apologize. Won't happen again.
Great application. The should have functionality to mute one person as well. http://jayaprakash.page
I've taken to wearing bone-conductors waaaaay to much, and I'm impressed with their flexibility for stuff like this. They keep my ears open, but when I need to hear the headset more clearly (like if I'm in a crowded area and taking a call) I can plug my ear with my finger and that both improves the audio quality of the bone conductor (it creates a speaker cabinet in your ear for a much fuller sound) and blocks out the outside noise. If you need full headphone-quality you put in ear-plugs. And they're pretty small and discrete.

They're not perfect, but the fact that I can move smoothly from "I need my ears open but still want to hear my headset" to "I need to block out sound and hear my headset perfectly clearly" with just a finger or a pair of earplugs is great.

Stick a shotgun mic (that's the term for a mic with tight directional cone, right? Not an audio guy) on the side and this would be really cool.
Without comparison to the accuracy of crowed sourced blocklists it's not that valuable.
Maybe there is a group of hopelessly overworked blocklist maintainers/contributors, that I'm not aware of. If so, their cries for help don't seem to make the HN front page.
From a user perspective, blocking banner ads feels like a basically solved problem. I think the real pain point here is that for large chunks of the web, there is no distinction between ads and content.