skysight-inc/HackerNews huggingface dataset:
Show HN: Test your WireGuard connectivity and see global stats, no client needed
Hi HN,

Some misbehaving networks drop WireGuard packets either by accident or on purpose. Commonly the latter is done with simple DPI rules that block the handshake initiation [1], but it could be applied to other message types as well.

We thought it would be great if there was tool for folks to use as a quick litmus test to see if this happening for them, without having to configure a client to send data through a random, functional WireGuard tunnel to an untrusted remote host. So we built probe.sh.

How it works:

- The probe.sh web app is an Elixir Phoenix app that spawns a few gen_udp servers across a variety of common UDP ports.
- When a user visits the app, Probe starts a LiveView process and generates a unique cryptographic token to use for the test.
- When the user runs the script shown, it first sends an HTTP request to start the test, followed by a series of UDP payloads, and finally either a complete or cancel request to end the test.
- The UDP payloads are crafted to resemble real world WireGuard packets and sent with widely available tools like netcat (Unix) and System.Net.Sockets.UdpClient (Win) already on your OS.
- The gen_udp server receives these payloads, and if they match one of the four WireGuard message types by header, it broadcasts test updates to the LiveView process for that test, and the test is marked as success.
- The user is immediately shown the results of the test.

The entire tool is open source at https://github.com/firezone/probe (README contains guide for self-hosting) and you can find a FAQ with more useful info at https://probe.sh/faq. You can also see our tally of global results organized by country: https://probe.sh/stats

We hope you find it useful for testing your network for WireGuard connectivity issues.

Thanks for reading - feedback welcome!

[1] https://x.com/6h4n3m/status/1459462360003919875
VMs generally don't have access to MSRs so they can't exploit this. Also, I would expect larger cloud providers have already patched.
There was a game called Specter Spelunker Shrinks that required arbitrary shrinking and growing. It's more of a prototype than a full game, but I could imagine this exact mechanic working in a more fleshed out setting.

A cool thing about the game is that time also scales with size. So the challenge provided by moving objects also scales with the character's size (sometimes beneficially, sometimes not).

https://www.youtube.com/watch?v=NZ65SWBb1Kg
He's not saying "break realtime into microsecond chunks."

He's saying: run through 4.5 hours of 16 millisecond chunks of time in a second. This is good for regression testing or producing training data quickly.
Base 4 is surprisingly competitive, but of course never better than base 2. Base 5 is the highest base that could stand at the pareto frontier, but just once and then never more.
Maybe in 10 years from now, noone would die anymore. Plenty of time to get back to where you wanted to be :)
Interesting.

I genuinely enjoy thinking hard. I also have a much greater-than-normal tolerance for physical pain. I wonder of those two things are connected?
It is not impossible that this is the case (at least in GP's view). Companies in the space argue between logs and events as structured or unstructured data and how much to exploit that structure. Unstructured is the simple way, and appears to be the approach that TFA prefers, while deep exploitation of structured event collection actually appears to be better for many technical reasons but is more complex.

From what I can tell, Honeycomb is staffed up with operators (SRE types). The GP is thinking about logs, traces, and metrics like a mathematician, and I am not sure that anyone at Honeycomb actually thinks that way.
If you don't actually want a HUD you could just use a Gopro and smartwatch.
Japan braces for potential massive quake after M7.1 tremblor
I almost didn't try langgraph because I had similar experiences with langchain. IMO it is a lot better than langchain; its abstractions are lower level and more appropriate at least for the projects I've taken on. I think it's probably the best toolkit with which to prototype an agent-based workflow right now.

That being said, it's not doing that much. And you still end up having to use some of langchain's abstractions. If this current "make a cyclical graph of LLM agents that send messages to each other" thing has any staying power than I imagine we'll see a more robust option soon. Personally I'd love a way to build agent graphs in a strongly typed language with first class concurrency.
One of the most powerful features of eg Helix is the ability to very smoothly and easily filter inside your existing selections, or to split them.

I think the focus here is on "selections", as opposed to just "cursors".

So for example, you can select all occurrences of X (say, usage of some global variable), then say "for each of these selections, select the whole function", and then say "select the name of the function".

And bam, this is a (somewhat artificial and forced example), but you assembled a list of all functions with a specific property in a few button presses without ever leaving your editor. This is very close to stuff I do all the time in Helix. This is a godsend when it comes to manipulating (for example) a huge array of JSON data.

Maybe this is all obvious to you, but this seems like the kind of thing that probably still feels like black magic to a lot of programmers, and which certainly hasn't reached all editors yet (most are not focusing on selection editing as a first-class usecase).
.local is already reserved for mDNS.
How to Drive Fast on Drugs While Getting Your Wing-Wang Squeezed
> Metroidvania game where you lose abilities as you progress

This is brilliant. It solves the inherent tension of metroidvanias wanting both ever-increasing power and ever-increasing challenge. Rather than unlocking new areas, each time you lose abilities, it changes your relationship to existing areas. But the knowledge you gain — room layouts, enemy placement, hazards, short cuts, etc — becomes way more helpful when you can't just fly (perhaps literally) across the map.
Why are short form videos a money sink but not long form? The cost are the same and you can have higher ad loads with short form
i’ve come to believe that we’re more terrified of a situation while we’re not in it. once in there, and especially when there’s no way out, our bodies make the necessary adjustments for the new normal. and soon our minds/being follow. it’s often characterized as extraordinary strength by onlookers when in fact the person going through the experience had no way out. in my mother tongue, we have a proverb which roughly translates to ‘bravery is situational.’ therefore there are no cowards, just people without the necessary conditions to demonstrate bravery. if you’re lucky, you find it.
This effect is very interesting.

Veritasium covered this effect in a video [1] for the interested.

[1]: https://www.youtube.com/watch?v=aIx2N-viNwY (2016)
My main rig is a 3600. It’s plenty fast and powerful. The fact that they won’t fix is unacceptable to me.
This won't do much to stop the flow of information into Russia, but might hamper the flow within. I don't think it's meant to just affect the battlefield (and in that case it could have just been regionally limited.)

It's more likely to be a preparatory move. I have a feeling that the risk of a nuke being used just went up.
OK, but... if a malicious program has ring0 access, isn't it game over anyway?
They should absolutely be for profit.

How else would the skills and information needed be obtained and maintained?

Doing these things is not cheap! Just tooling can surprise one thinking about this activity.

In fact, the more for profit repair centers there are, the better.

Back when things came with some expectation about service, one could find shops all over the place able to do services.

I learned a lot about how to repair and setup CRT Televisions from one back in the 70's when...

I WAS A 6TH GRADER IN PRIMARY SCHOOL!

No joke. The shop was right across the street. Before high school I was reflowing circuits and boards, testing and replacing tubes, other components and could do a basic bring up on a new CRT.

Skills I used in high school for date money.

It is crazy how far away from that we have come.
I also don’t like OOP, but what does that have to do with digging through a large data abstraction? Sometimes it’s unavoidable, and the problem your solving naturally lends itself to a recursive data structure that ends up being very deep (basically any kind of tree data structure). A query language would be great for that, and trees are very common in all code, regardless of paradigm.
I'll put InfluxDB right up there as well.
To be fair, the first heading and section of TFA says no one knows what the terminology means anymore.

Which, to GP’s point, is kind of BS.
A wonderful coincidence or an expected connection: why π² ≈ g
Urchin Software Corp: The unlikely origin story of Google Analytics (2016)
Book Review: How the War Was Won
No, might as well not try it.

Please review my post history on why, the most upvoted is perhaps https://news.ycombinator.com/item?id=40038893
OK, that's your view. The "all information is public" view is not the law and will never be the law. But you do you.

> we should seek solutions that provide for authors while also allowing

Weasel words. We should seek solutions that let us fly airplanes without having to pass that bothersome test, too.
Loading Tables from S3 at Lightning Speed
Commit masks remind me of that time I couldn't run a Java app because it assumed a specific classpath order, but the classpath order is random on each boot, and my randomized classpath makes the app crash.

I've also seen some development teams rely way too much on IDE plugins to get anything done. Horrible software architecture with a 45 minute start-up time, I shit you not. They paid a shitload of money on software licenses for a special JVM/IDE plugin combo that allows them to hotswap almost everything to avoid ever having to restart the app during development.

Oh, it's also pretty much impossible to launch the development version of the app with a stock IDE due to the sheer amount of runtime code modifications from IDE plugins the development version depends on. Great times.
there's also usage: https://usage.jdx.dev/spec/
Thank you for your thoughtful suggestions. They are actionable and practical. Much appreciated.
I have no information that conflicts with what you posted but none of that indicates that the CPU gets written to.

Consider that even things like CPU microcode don't get stored on the CPU, it's simply doesn't have persistent storage. CPU microcode is often applied early during OS boots and loaded into memory or CPU cache.

What you have quoted indicates something similar, perhaps the main board or other device with storage of some kind is being written to or perhaps an attacker could write a payload that lived entirely in the bootloader on the main storage.
Meta is apparently working on a pair of AR glasses that might have everything you want: https://www.roadtovr.com/report-meta-ar-glasses-orion-connec...
Pathfinder is great for my needs.
pocl (Portable Computing Language) [1] provides a remote backend [2] that allows for serialization and forwarding of OpenCL commands over a network.

Another solution is qCUDA [3] which is more specialized towards CUDA.

In addition to these solutions, various virtualization solutions today provide some sort of serialization mechanism for GPU commands, so they can be transferred to another host (or process). [4]

One example is the QEMU-based Android Emulator. It is using special translator libraries and a "QEMU Pipe" to efficiently communicate GPU commands from the virtualized Android OS to the host OS [5].

The new Cuttlefish Android emulator [6] uses Gallium3D for transport and the virglrenderer library [7].

I'd expect that the current virtio-gpu implementation in QEMU [8] might make this job even easier, because it includes the Android's gfxstream [9] (formerly called "Vulkan Cereal") that should already support communication over network sockets out of the box.

[1] https://github.com/pocl/pocl

[2] https://portablecl.org/docs/html/remote.html

[3] https://github.com/coldfunction/qCUDA

[4] https://www.linaro.org/blog/a-closer-look-at-virtio-and-gpu-...

[5] https://android.googlesource.com/platform/external/qemu/+/em...

[6] https://source.android.com/docs/devices/cuttlefish/gpu

[7] https://cs.android.com/android/platform/superproject/main/+/...

[8] https://www.qemu.org/docs/master/system/devices/virtio-gpu.h...

[9] https://android.googlesource.com/platform/hardware/google/gf...
Maduro should respect the results of elections, and get out of office in Venezuela. When I say that, I am not bullying Venezuela - I am supporting it (or its people, anyway).

I have some hope that this may indicate that Maduro is feeling enough pressure to make him uncomfortable. I just hope that it's enough pressure to make him leave.
> “It's just you who see an unusual questions and interpolate that you should answer as if you were in therapy with deep and personal answers.”

The article gives the number one reason to ask these kinds of questions as “recall an emotionally charged memory (positive or negative)” and the number one thing to avoid “providing canned responses to questions”; that says to me that you are supposed to answer with deep and personal answers.

If you respond with shallow impersonals, how is that “getting to know someone”?
This looks fantastic! I've been using aider and had my own scripts to automate some things with it, but this looks next level and beyond.

I wanted to try this out (specifically the web UI), so I configured the env file, adjusted the docker compose file, ran `docker compose up` and it "just works".

It would be great if there was a basic agent example or two pre-configured, so you can set this up and instantly get a better sense of how everything works from a more hands-on perspective.
That just sounds like they can install a rogue bootloader, bypass secureboot, or hide from the operating system by operating on a higher privilege level than it. I don't see how it can infect the CPU itself, or how the infection can persist after swapping out the hard drives.
No. There’s just a lack of raw talent.
Jesus, that's catastrophic. They weren't kidding. "No fix planned" isn't acceptable.
Cuts are done by the editor of the film, usually but not always in consultation with the director.

Some directors also edit their films but that is the exception.
Why is the audio player askew? It's mildly disconcerting until you know that's the issue. Is that the point?
I am still running a 3600X. Zero reason to upgrade, the CPU has not been a bottleneck on anything I can throw at it. And if I do need to upgrade, that means new motherboard and memory too.
Squatters get bulk discounts. This is a missile strike straight to the bottom half of the economy. Squatters and big business owners will shake this off like a rounding error. VCs will hand over $10k to squatters for whatever wacky mispelled 3-10 letter word is available. Learners and entrepreneurs will dig through the scraps with their one-more-cut of inflation.
Universities have their own problem such as no one attempting to replicate each others work [1] and keep on publishing or they won’t get promoted. We should fund replication trials in universities . Also , cancer is not some kind of monolithic problem nearly every cell has some mechanism to mutate so it becomes cancer. For example new cancer techniques come from mRNA research [2] . The problem of solving cancer isn’t some monolithic problem that throwing any amount of people will solve and even if they tried they would probably get burned out which is why they work for Wall Street or Adtech in the first place. One of the people that developed the research in mRNA got her career torpedoed to work for John Hopkins University [3]

[1] https://www.science.org/content/article/more-half-high-impac....

[2] https://www.cancer.gov/news-events/cancer-currents-blog/2024....

[3] In 1988, Karikó accepted a job at Johns Hopkins University without first informing her lab advisor Suhadolnik of her intention to leave Temple, as recounted in Gregory Zuckerman's 2021 book A Shot to Save the World. Suhadolnik told her that if she went to Johns Hopkins, he would have her deported, and subsequently reported her to U.S. immigration authorities, claiming that she was "illegally" in the United States. In the time it took her to successfully challenge the resulting extradition order, Johns Hopkins withdrew the job offer. Suhadolnik "continued bad-mouthing Karikó, making it impossible for her to get a new position" at other institutions, until she met a researcher at Bethesda Naval Hospital who "had his own difficult history with Suhadolnik".
In the Meta-CVS project, I carried a copy of asdf.lisp in which the package was renamed to zxcv, to isolate from the ASDF churn and be able to run my version of ASDF possibly with my fixes even in a Lisp that has ASDF preloaded.

ASDF is the only build system I know which broke on me when I tried to fool it with a link farm (lndir command) into building in a separate directory. It resolved the paths using the truename function which eliminates symbolic links, and then calculated the .fas file names from the canonicalized paths, thereby depositing compiled files into the original directory rather than in the symbolically linked tree.

ASDF also depends on symlinks for external organization. .asf files are often symlinks to the real location, and without these symlinks, things don't work.
I still have an i5 2500k chugging along being able to do everything that isn't a heavy workload with ease. This kind of exploit for a CPU that is only 5 years old not getting a fix is embarrassing and shameful.
Wonder if you ever tried these:

- QSpace (https://qspace.awehunt.com/en-us/index.html)

- Commander One (https://commander-one.com)
The Puzzle We Call Being: Walt Whitman on Listening to the Song of Existence (2015)
I would be curious to know, what's the ratio of AWS bill to programmer salary in J random grocery delivery startup.
>I wonder if my bolo tie qualifies as a similarly non-smart AI device.

you'll never know unless you go out and buy some googly eyes
Isn’t the problem here that your code is crashing and you’re relying on the wrong tool to help you solve that ?
> Logs are independent. When you can not store every event, you can drop them randomly. You lose a perfect view of every logged event, but you still retain a statistical view. As we have already assumed you can not log everything, this is the best you can do anyways.

Usually, every log message occurs as part of a process (no matter how short lived), and so I'm not sure it's ever the case that a given log is truly independent from others. "Sampling log events" is a smell that indicates that you will have incomplete views on any given txn/process.

What I find works better is to always correlate logs to traces, and when just drop the majority of non-error traces (keep 100% of actionable error traces).

> When you can not store every event, you want to drop randomly at the whole trace level.

Yes, this.
Not offering an opinion either way, but it depends. If you can exploit the kernel, you can probably do whatever you want. But if you manage to exploit the CPU firmware, you can do what you want even after the system is completely wiped.

Whether you think someone is motivated enough to find a kernel exploit that can trigger this issue and then go through the trouble of exploiting not just the kernel but this very specific CPU issue that exists on certain processors is up to you. Is it likely? I'd say no. Is it possible? Yes. Should you care? Yes. Should you lose sleep? Probably not.
UK: Tech giants could be required to suppress posts even if they are not illegal
The Gen Z Founder of BeMatch, Japan's Newest (Not-Just-a-Dating-App) Dating App
You are correct. It's just that, Javascript wants to re-do backend and Rust wants to rewrite everything these days.
got any pictures?
Why? I'm anal about security and this barely registers with me but not as something to be angry about.

Somebody with ring 0 privileges (a prereq for this) on your CPU already has root and you have to presume they've already had the ability to write to your BIOS and VBIOS, and this is just confirmation of that. If you're actually worried about this stuff then how can you be sure that someone hasn't paid Microsoft to put stuff into your firmware?
Two causes that Seliger believed in, that are after my own heart, are:

Removing FDA restrictions, to speed up drug discovery:

https://news.ycombinator.com/item?id=40894632

https://news.ycombinator.com/item?id=40746156

And removing regulatory restrictions on housing, to build more homes:

https://news.ycombinator.com/item?id=41125739

https://news.ycombinator.com/item?id=40942621

https://news.ycombinator.com/item?id=40746156
Yes, but generally speaking they can be removed if you wipe the system.
I also think it’s probably more effective. Every time hand-crafted tools are better than AI but then the model becomes bigger and AI wins. Think hand crafted image classification to full model or hand crafted language translation to full model.

In this case, the model can already do the OCR and becomes an order of magnitude cheaper per year.
Honestly, I wouldn't worry much about it. Even if LLMs can technically replace junior developers (which they can't, at least right now), junior developers are necessary because they eventually become senior developers.

You just need to do what has always been necessary: keep tabs on what skills the market is demanding, and make sure that you are constantly updating your skillset to match the needs of the portion of the industry you want to work in.
Trained on TPU4, not GPUs. The only GPUs involved are on Apple Silicon.
The horse-shoe theory of web development:

In the end, it bends back to HTML5, CSS, JS with Jquery, and PHP + MySQL :D
> Calling 3900 “very old” is stretching it, but they’re certainly “old”.

No, I will contest <5 years old CPUs being called "old". This perspective is warped by the marketing teams of computer hardware companies. There are many 3000 series processors which are perfectly powerful enough for powerful modern software.
Could this be used for doing team visualization dashboards - like metrics displays for a team with KPIs? Or is that outside the ambit? I'm asking because I feel like there is a gap between the easy set up and configurability of something like Geckoboard and the extensibility and power of something like Grafana. That aside, the idea of team spaces/boards with a dashboard feel that is as easy to use as Notion is neat. And the UX looks really nice. Good luck!
Great question! The answer is two fold:
1. Not like a vector database, in addition to searching, VolansDB also store the files (pointers) directly in the table. So you are able to manage files (RBAC etc.) as table cells, apply batch data processing jobs easily with SQL, and even unstructured data lineage & pipeline.
2. VolansDB is columnar so it's optimized for analytical use cases rather than for product DB access patterns.
My point is that if the rewrite is not able to be classified as a refactor, it wont work. It has to be entirely invisible to the user (and product side of the org). Otherwise, it is never going to be completed.
> Think about how difficult it is to make a significant contribution in your particular field of expertise that is not about to be done right now anyway because the time is right. Very difficult indeed.

The absolute opposite of my experience. Every one of the fields I've gained expertise in over the years indicates to me that more human effort would pay not just dividends but increasing returns. Particularly so with research. The biggest thing I learn when I gain expertise is just exactly how much we don't know.