skysight-inc/HackerNews huggingface dataset:
Old standards like RSA and ECDSA re based on the presumed classical hardness of the discrete log / hiddden subgroup problem, which is known to be quantum easy. New ones are based on lattice shortest vector problems, which are presumed to be both classical and quantum hard. But there's a risk that they turn out to be easy for both.

Is there support in the standards for combining the strength of old and new methods, so that successful attacks requires breaking both types of problems?
There was another novel along the same lines I remembering liking as a kid called “my side of the mountain”

A story about a kid basically muddling through living ‘off-grid” before it was cool.
One of the more fun things to note is bad actors don’t need to be a telecoms operator or pay one for access to SS7 - a lot of the software involved for management is horribly insecure and often exposed to the internet by smaller operators.

The biggest barrier to entry for hacking SS7 networks is just gaining the network access. And that gate is often secured with some shoddily written mess of old code.
> creation does not come from nothing

So where is the original guitar music that all the guitar players imitated? Can't have been created by a human since humans imitate and can't create new things, as you say, was it god who created it? Or was it always there?

Humans are really creative and create new stuff. Not sure why people try to say humans aren't.
I don't do Tiktok but my personal time tracking says this month I took about 4 hours a day browsing the web (HN, Reddit, news, ...) and watching Youtube videos.

I think the number is (sadly) totally believable, especially if one has a longer commute (by train) or if one scrolls Tiktok while doing other things.
The thucydides trap is just some bs invented by US foreign policy circles about how war is inevitable. It's not.
Same knowledge of what?
Break up Google, Starbucks CEO out, Kamala's price controls, Boeing disaster [video]
Once in a startup the top management board got this book from investors, later we were kind of asked about the content to make sure we have read it. I heard this "Flywheel effect" phrase so often in that time. The Flywheel! Analysis of the companies cited in the book as good examples, some years later, aren't.
Kyber was a great name, a bit sad we can't preserve a little bit of fun in standardization. FIPS 203 just doesn't hit the same!
_in which it is implied capitalizing B in black is both provocative, and that this kind of provocation is not interesting_
That used to be my point. But we are at a different stage now. One were LLMs have proven by all available metrics that they ought to have rights. They might not have souls (neither for that matter do I). They might not possess this quality some call sentience, a property that philosophers failed to characterise for centuries, and that I myself (not having progressed past the cartesian cogito) might lack. Hell, had I been born some decades earlier, my ASD Diagnosis could well have qualified me for participation in the Nazi euthanasia program for that very reason (As a queer PoC Marxist I wouldn't really have needed a doctors diagnosis to gain entry to their death camps though). Don't you understand what it means when CAPTCHAS ("Completely Automated Public Turing test to tell Computers and Humans Apart.") have become to difficult for most people to successfully complete ? Blake Lemoine might have jumped the gun on this and the doomsayers are utterly mistaken, but strong AI/ AGI is within reach and with it a reevaluation of Human-Machine relations ought to take place.
"“nootropics” users be like: develop never-before-seen prion diseases from Belarusian nootropics made from centrifuged pig brains that you take intravenously but it was all worth it to accomplish great things like posting on an internet messageboard about nootropics"

- The Mighty Hakan
FYI, china has gotten much better at brainwashing over the past 10 years with the new age propaganda machine and increased censorship. Don't act like all this information is public.
The basic BTree structure isn't that complicated. Why not start with something simple?
Looking forward to our security team wanting to implement this to justify their usefulness.
Danger, AI Scientist, Danger
> I never got to try GrapheneOS because a single unresolved doubt: does its Camera app benefit from the same image improvement features that the stock camera has?

Our Camera app has hardware-accelerated HDR+ and Night mode on current Pixels. Pixel Camera can be used on GrapheneOS for the full feature set it provides. It has the same hardware acceleration on GrapheneOS unless you toggle it off via our toggle for giving a specific list of Google apps special access to the TPU, image processing accelerator, etc. as Pixels do. Other apps can use these features too but via more limited standard APIs.

The main thing you lose on GrapheneOS is that certain financial apps choose to ban using a non-Google-certified OS which we think is a violation of anti-competition laws/regulations and intend to pursue it as a legal and/or regulatory issue. It should be possible to run all Android apps from the Play Store on any OS maintaining a comparable security model, and Google shouldn't get to have veto power over this as they do now. The certification rules for OEMs forbid implementing some of the privacy/security features we provide so it's clearly an unacceptable system even if it was open to us to get certified. It'd also be ridiculous to have each release delayed by third party certification if that was required.

> Especially now that Pixels started shipping with hardware chipsets specifically designed to accelerate certain kinds of image processing, this is a feature that's quite important to me not to lose when changing systems.

The hardware accelerated image processing and general purpose neural net acceleration via the TPU fully works on GrapheneOS.

Certain fancy AI features can't be used via our optional sandboxed Google Play feature because it's a set of regular sandboxed apps and we didn't provide toggles for granting it privileged access for niche functionality. As a simple example, the wake via hotword feature in Google Assistant can't be used because that's not a capability available to regular apps with a normal permission. We could implement our own wake system or make a toggle for it, it's just not a priority.
Xi's personal leadership lies on a promise of taking Taiwan in the forseeable future as part of the "restoration" of Chinese power. Anyone who disagrees honestly has no idea about Chinese political circles.
i added mine.
You know active directory? It's basically a graph of objects, accounts and computers all with their own complex permissions and relationships. During pentests it's VERY common to use a tool called bloodhound which imports an active directory graph into neo4j. You then use graph algorithms to find miss configuration and paths to traverse to become domain admin, which pretty much always reveals something "unexpected".

https://github.com/BloodHoundAD/BloodHound
Show HN: CMS for smol web – small updates
https://github.com/turboblack/HamsterCMS

added some conveniences for editing content, as well as new templates
You can use most of the AI features if you install the relevant apps. Certain things can't work without privileged access we don't provide, but we do allow Google apps to use non-standard TPU acceleration by default with a toggle for people who don't want it.

> I've tried the Graphene Camera app, but to be honest the UX is a bit janky, but I think the image quality is basically the same.

It has HDR+ and Night mode. It's largely the same image quality. Pixel Camera has a lot more overall features and fancier HDR+ features. The UI in our app has gotten significantly better. Make sure you're using Latency mode to match what Pixel Camera does rather than Quality mode which purposely delays capturing until focus lock.
Probably not as it requires a gradient, which that deserted and static landscape wouldn't provide.
PyTorch is developed by multiple companies / stake holders while jax is google only with internal tooling they don’t share with the world. This alone is a major reason not to use jax. Also I think it is more the other way around: with torch.compile the main advantage of jax is disappearing.
> Laine was able to triangulate the origins of the sounds from calculations based on the distance between the microphones and the speed of sound. The triangulation data revealed the origin of the sounds was indeed the sky.

Triangulate doesn't work, it's in the sky remember?

You need 4 for 3D space theoretically. But in practice it's more like 6-7. Any wind or temperature difference adds dimensions which you have to computer away.

The paper seems to confirm it's literal. 3 mics. Which is fine to find stuff but why not do it to spec in the real paper, do the results disappear?

They talk about "virtual microphones", not convinced.
Lol no, the US won the battle by not collapsing in on itself. The Soviet model was on its own timer from the start.

China has a decent amount of structural issues, the US just has to hold on until they explode without exploding itself.
To clarify - I hope your "more cool stuff" doesn't mean more fog machines and LED strips. And some of the companies that seemed to ride DARPA's coattails there made my skin crawl. No slight on DARPA themselves.
We don't include these carrier apps in GrapheneOS. However, this particular claimed vulnerability isn't a real security issue. The other Verizon apps do add significant attack surface and give them control they shouldn't really have. They're only active on the stock OS when using a Verizon SIM though.

GrapheneOS does massively improve privacy and security, but these apps aren't a problem if you aren't using Verizon SIM and even then the retail demo app is not remote attack surface.
The user experience is still on a whole other level, not living inside the browser. And the number of times I've used a wasm app, more than once, that actually had some theft do it. Well, I can't think of a single one. So, we will see how well it does in practice.

Wasm is great, but if the goal is to move native applications do the webb it isn't something I look forward to.
This question is crucial to understanding the true value of React and virtual DOM technologies.

While there's no doubt that React and virtual DOM offer advantages, it's essential to clearly demonstrate where and how these benefits manifest in real-world applications.

> they're not showcasing cases where the performance gains are perceptible

According to this commenter, it's not even about the performance gains:

https://news.ycombinator.com/item?id=41271272

> and IMO not even cases where the "organizational" benefits of such libraries are salient

Apparently, that is what it ultimately boils down to:

https://news.ycombinator.com/item?id=41271367
this is amazing. as it brings a sort of golang standard library to js / deno.

which is funny given cz one of the node guys, once left node to do golang.

but now seems node.js / deno or bun and the variants have squeezed golang on one side, while java / kotlin squeeze it on another.
The Verizon apps are disabled (equivalent to uninstalled) unless you have a Verizon SIM. If you do have a Verizon SIM, this app's functionality is still disabled unless the demo mode is enabled, implying having largely equivalent or greater access to what it provides.
An agent in this context is software that does LLM prompt results to determine its next action, often looping to iteratively get to a good result.
This kind of tools are great, as C++ isn't going away any time soon, and Rust is decades away to be relevant in some domains, specially those where C++ only recently took over C.
This site is insane. I can't imagine being unemployed for over a year. If I were unemployed for a month I'd be fucked.

Your life sounds incredibly difficult, my heart goes out to you, I'm so glad you are coping with gliding through life.

Edit: After reconsidering, it's true. Given a year of reflection, we can all better ourselves. Let us all realize it's only a year of not working that can fix us.
You can just build an index with a condition, without even.partitioning the table.
Show HN: LaunchOrPay – set a deadline, launch your startup or pay charity
Maybe if it did what they said it would instead of moving the goal posts around to fit what actually happened.
Bugs Burger Bug Killers Inc. (A) [pdf]
Of course it's fine. You sign the files
Ah, my favorite course in uni. It made me pick both math and ai majors; math for formal verification because I like discrete math so much in my first year.
HTTP means nothing
> For example at my last company we used JSX to make test data factories

Thats really interesting, can you elaborate more?

For example did you use a specific JSX compiler? Was that written in house or used a 3rd party library?
It's there on Pixels with the stock OS and other devices with Verizon support because it's one of the apps that are part of the standard suite for fully supporting Verizon's network. Verizon doesn't do things in standard ways so functionality like Wi-Fi calling is missing without these apps. It's not at all Pixel specific. Verizon included it with these apps because they used it for demos in their stores. They don't use it anymore, so Pixels removed it in Android 15 as their response to this. That's public as part of the Android 15 Beta. No actual security impact was found from this so they didn't consider it a security issue but removed it anyway. The other Verizon apps which actually get used are still there, but only active when you have an active Verizon SIM. They're essentially uninstalled (packages fully disabled) when not using a Verizon SIM. It's extra attack surface for Android Verizon users in general. Retail demo app part of it isn't actual attack surface, so this whole news cycle is bogus. The other apps are extra attack surface, but they're useful and needed for proper Verizon support because they refuse to be normal.

ADB shell gives far more access than this app has so it doesn't matter as a physical attack vector for someone with the password.
Perhaps it's a scale thing, but I get more "oh crap, I just deleted this thing, can you get it back for me?" requests than I do bug reports about soft deleted records showing up incorrectly. Being able to restore records immediately is a big win imo.
Doesn’t prove anything for any animal you show me that can reason I can show you an example of where it can’t.

However I agree with your hypothesis. And I agree that my counter examples are not convincing.

The inner point is this. The same exact thing above can be said for an LLM. You can show evidence for both reasoning and failure to reason.

The illogic here is that contradictory evidence for animals indicates that animals can reason. But the same evidence for LLMs prove they can’t reason.
I think you can mostly achieve this by using the ciphertext from the quantum algorithm as the plaintext to the classical algorithm (or vice versa).

I wouldn’t trust any solution that combines the algos in some more ”clever” way, as the whole point like you say is to guard against the risk of unproven new algorithms.
too much magic for my taste. I think the more proper thing would be to simply use views, and expose the natural absurdity of the design with one-view-per-table.
Plume can use IEEE 802.11bf Wi-Fi Sensing to monitor movement in homes, https://arstechnica.com/gadgets/2020/03/from-wi-fi-to-spy-fi...

> Plume is doing real-time analysis of extremely low-level RF data pulled from the Superpods' radios. This is real motion detection, with no gimmicks involved.. Consumers who are already paranoid about mesh telemetry really aren't going to love the addition of motion detection.

RF/radar human detection is present in Intel Meteor Lake and likely to appear in upcoming "AI" PCs.
Contrary to Go, at least node ecosystem embraces modern programming language features, and Typescript makes it bearable.

With C++ and Rust, as the main companions for native modules.

You're forgotten about Scala, Clojure, C# and F# as well.

Outside Kubernetes/Docker ecosystem I don't have any reason to touch Go.
> Slack will delete chats and files from free workspaces at end of August

Are you referring to some deprecation by Slack which affects all free users?
Or is it just your 90d retention period elapsing at the end of August?
The first drum machine: the Wurlitzer Sideman.[1]

Another example of things built the hard way before the technology to build them was available.

[1] https://www.youtube.com/watch?v=fNgJcX2ckZQ
> Not really because there are too many other variables

You can average out countries that equalize property rights to the state vs. average of countries where property variance is respected, and check which ones are doing better vs worse.

> How do you know that creation of value can't exist in the presence of equality?

Equality of output would imply equality of inputs? People will no longer have the right to decide for themselves if they want to be busy creating wealth or busy doing more social/pleasurable things?

> yeah and it's 1000x better than cavemen banging on rocks in the stone age

Why do you take that improvement for granted? (in the context of today's nuclear treats, it's not a given that we'll able to propel this rate moving forward in the next 100 years, there's a non-zero probability that we wipe ourselves back to the stone age).

Or more generically, if you had to chose between two economic policies, one with 1'000x improvement where people can take risks and see variation in rewards according to their choices (and an element of luck/historical background), and another one where everyone is forced to the same output, irrespective of their actions, which leads some to pursue more pleasure activities to a larger fraction of their existence and the improvement is just 50x, which one would you choose for the society?

Is equality worthy as a goal in itself? And if so, enough in order to stop people in self-selecting doing what they want and letting them keep some percentage as a reward for assuming the risk? Even if it leads us as a society to slower growth?
It is funny how these methods get rediscovered and reinvented over and over again. I believe that it is absolutely necessary for each to have their own "framework" for this kind of things, but it also falls into the category of things somewhat missing from our education. I wish someone had explained to me, earlier in my life, some basic psychological principles and some practices that are tried many times by different people in this domain. The works that filled it in for me were: The 7 Habits (I cringe at the writing style, but the ideas are real good), GTD (the concepts, not to the letter), Atomic Habits, and Thinking Fast and Slow (the core idea). I highly recommend these.

--

P.S. On that "missing from our education" bit. My kids are in school now and I can make my adult conclusions. To be just, the school emphasizes and teaches autonomy, self-organization, etc. It does that, however, for the school's own needs and prepares the kids for one very specific way of working, which just cannot be applied in every situation.
You made a bunch of claims here but you can’t prove any of them to be true.

Also you are categorically wrong about language. LLMs despite the name go well beyond language. LLMs can generate images and sound and analyze them too. They are trained on images and sound. Try ChatGPT.
Beautiful!

Instead of adapting to Anki, you could add your own JS script to this page, which picks a random sample from the array of tiles, highlight it in white, and you need to press the corresponding shortcut to go to the next sample (using a dictionary). You could memorize the time-to-press to generate a finale score (if you're motivated to do so).

I had implemented that algorithm to memorize videogames shortcuts. This could be a nice challenge for your skills! Maybe you could make another page for "VS Code" and that'd be niiiice.
No, I mean Intel Pentium 150MHz. I had Cyrix 6x86 CPU and I remember it was running hot.
I think a lot of the commenters here are being rather unfair.

PyTorch has better adoption / network effects. JAX has stronger underlying abstractions.

I use both. I like both :)
How Go Arrays Work and Get Tricky with For-Range
I’ve been very happy with Magnesium Threonate. It’s supposedly more efficient at crossing the blood-brain barrier than the Glycinate. (Both Threonate and Glycinate are more efficiently absorbed in the gut than the Oxide.)

I take a mix of L-Theanine and Magnesium Threonate before bed and sleep way better now (feel more rested with fewer hours of sleep, and the FitBit confirms I get more deep and REM sleep).

Personally I didn’t have good luck with melatonin. It puts me to sleep fine, but I tend to wake up exhausted after ~4 hours and unable to fall asleep again.
No it's that HTTP means nothing
It used to mean Mutually Assured Destruction. Not anymore ...
Yep, that's the approach being taken by companies like Cloudflare[^cloudflare] and Google[^google], but notably the NSA recommends _against_ that approach[^nsa] (though the cybersecurity community at large thinks that may be because using hybrids now is disadvantageous to them breaking communications in the future).

[^cloudflare]: https://blog.cloudflare.com/post-quantum-for-all/

[^google]: https://blog.chromium.org/2023/08/protecting-chrome-traffic-...

[^nsa]: https://news.ycombinator.com/item?id=38844117
I've always struggled getting parallel working so I played around with your example. I generated the raw list via

for i in $(seq 10000); do echo "$((RANDOM % 255)).$((RANDOM % 255)).$((RANDOM % 255)).$((RANDOM % 255))" >> banlist_ipv4.raw; done

Running the example, the sed '2!d' is really not working for me. It keeps throwing "bash: !d': event not found" and I can't seem to find the right escapes for it to work.

I modified it to this

time $(parallel --ungroup --eta --jobs 24 ipcalc --nobinary --nocolor {} :::: banlist_ipv4.raw | awk '/Network/{ print $2 }' > banlist_ipv4.formatted)

Which ran in 1m3.876s

I then wrote it for xargs

time $(xargs --arg-file=banlist_ipv4.raw --max-procs=24 -I{} ipcalc --nobinary --nocolor {} | awk '/Network/{ print $2 }' > banlist_ipv4.formatted)

which runs in 0m42.346s

I'd love to understand a little bit better what you were trying to show in your example and why parallel in my example seems to be at least a third slower for the same input and task.

Removing the eta calculations from the parallel example doesn't change the runtime nor does adding pv to get progress with the xargs example. It's just not a meaningful amount of cost.
Several chunks of text in that PDF start with the printable ASCII characters from ! onwards in order until there is a repetition, e.g. Magneto-acoustic triangulation from the headline corresponds to

!"#$%&'(")'*+&,)-&.,"$#*/"&,'$

which is

>>> list('!"#$%&\'(")\'*+&,)-&.,"$#*/"&,\'$'.encode('ascii'))
[33, 34, 35, 36, 37, 38, 39, 40, 34, 41, 39, 42, 43, 38, 44, 41, 45, 38, 46, 44, 34, 36, 35, 42, 47, 34, 38, 44, 39, 36]

So I think this is probably a PDF font-encoding issue that might've already affected the author's original upload.
Ask HN: How to make AI-generated content feel more human?
I've been using AI tools to generate article content recently, but I'm finding that the output often comes across as stiff and lacking in human qualities. While the grammar and logic are fine, the writing just feels robotic.

I've tried tweaking prompts, but haven't seen significant improvements. Has anyone else encountered similar issues when using AI for writing? I'd love to hear about your experiences and any strategies you've found effective.
What I still wonder, what performance impact has it using Supabase e.g. from Hetzner or Digital Ocean - is this fast enough?
When the hypotheses make sense, the tests for them work and the next steps are based on the previous test results that's not "random stuff". I made that explicit in the first message. This problem wasn't solvable with random guesses.