skysight-inc/HackerNews huggingface dataset:
That's less related to passkeys, and more to what the site (i.e. the Relying Party in WebAuthN parlance) requires in terms of authentication security.

User Verification (including PINs) is possible for non-discoverable credentials and vice versa (e.g. Bitwarden's implementation doesn't seem to support user verification at authentication time, but supports discoverable credentials).

In any case, note that this particular attack seems to degrade the security of "Yubikey + PIN" from two factors (possession of the key, knowledge of the PIN) to one (possession of the key), as the PIN entry can be bypassed due to how user verification works in WebAuthN/CTAP2.
Capital cost of these plants is significant, which is why most of them run 24 hours per day. If you only run them 8 hours per day, you triple the capital cost.
Correction: Itch.io lets developers choose their own revenue split. It's 10% by default but sellers can choose any amount, even 0%.

https://itch.io/docs/general/faq#why-buy-on-itchio
Breakthrough performance, but requires a 1500W PSU, right?
Exactly. Didn't want to confuse it with the normal lowercase `m` that might show up in a wave equation derivation for masses-on-a-string or whatever

Should probably have mentioned - the final equation in my derivation is the Klein-Gordon equation, which is a relativistic equation for the behavior of spinless particles (and maybe bosons in general? I forget)

To get an equation that describes fermion behavior, you need to do another step, which I believe Dirac was the first to do; try very hard to take the square root of both sides of this equation, so you only have first-order derivatives. Dirac really dislike the idea of having a second-order equation, because it leaves an extra initial condition you have to specify. If you expand the p^u p_u term, you can see that it's impossible to take the square root of both sides using normal algebra, because you're trying to take the square root of the sum of multiple terms (d^2/dt^2 - d^2/dx^2 - d^2/dy^2 - d^2/dz^2) . You have to introduce gamma matrices or clifford algebras (IMO the better option) to do it, which seems like a weird and non-physically-motivated approach, but if you do it, spin up and spin down states miraculously fall out of the equation. Eigenchris on youtube has a video that helped me to figure out what was going on there
In another context (networking gear) Huawei's router logic was said to be notorious for being almost purpose written per-customer, there was no engineering train which worked everywhere there was the release you got, for your sale.

I do believe over time, this kind of problem will be solved. Bugs have a lifetime, software has a bathtub curve as well as an asymptotic curve about its functionality.

Maybe Huawei is learning how to be what it needs to be slowly. It is probable the impetus to become something better is actually stronger now China faces trade restrictions.
Swamp coolers are not effective during at least July-September, when the dewpoint regularly rises to 65°F+ for weeks at a time.

Drier than the south still isn't dry enough when it's 117°F with a dewpoint of 65°F. You'll end up with output temps in the high 80s (or higher), and the output air will be extremely wet.
"communist" countries are simply countries that are still operating within Global Capitalism that happen to be run by parties that are made up of communists. They would also freely admit that. There are no communist countries because communism isn't here yet.
Disagree.

LLMs and diffusion models aren’t going anywhere.

As to all the nonsense they’re trying to sell right now, sure; but I think this is an epoch moment like the internet was for most of us.
Indeed, but iLO virtual media performance (at least used to be) so slow that it was silly.

Booting a live cd or installing windows at 1MByte/s speeds (late 1990s CDROMs were faster!) is horribly slow. Maybe iLO5 was a bit better.

usually found it easier (but annoying) to just walk over with a USB drive…
But there are very successful rocketry collectives! They just typically aren't called "farms".

Things like Friends of Amateur Rocketry have all the characteristics of a collective (including legal status) https://friendsofamateurrocketry.org/

The constraining factor is typically budget (as mentioned up-thread).
Anathem was almost unreadable due to the aforementioned world building but also apparently needing to redefine every single last word in the dictionary.

But Cryptonomicon, Snow Crash and REAMDE were amazing.
Referring to rooftop solar, this is definitely a problem.
> People that are not used to heat should think multiple times and try to live for a summer at a hot place before ever deciding to move there

Is there evidence of migration from Phoenix by people who moved there on account of the heat?

Like the Gulf, most of Phoenix—certainly the neighbourhoods someone out of state would be moving to—is air conditioned to a fault. Solar power is plentiful and cheap. Hell, there are tanning salons everywhere because people avoid the sun in the summer.
Check out this page https://chromatone.center/theory/interplay/spectrum/ - there's this exact question answered with diagrams and an interactive tool down in the bottom of the page. It shows that just by going up in octaves you get to THz territory on the 44th octave step and the frequency of note A44 matches red color. And other notes fall on the spectrum quite spectacularly.
How about just leave the chatbot bullcrap to addons, stay being the best browser with high respects for not being effected by 200 different CVEs and 0days a week like chrome.

'Let's slap AI in it!' how about let's not.
An odd writing style is a defining feature of the cyberpunk genre according to the canonical cyberpunk anthology "Mirror Shades" (edited by Bruce Sterling). Stephenson actually mentions the anthology in the interview. Snow Crash is relatively tame compared to some books by Williamson and Sterling.

I think the idea is that you wouldn't understand everything either if you were actually transported into the future: there would be a ton of new terminologies, unfamiliar concepts, and a changed culture that takes different things to be a matter of course.
This isn't the ringing endorsement of global capitalism that you think it is
Ah yes, the $55k “beater”.
Is this AI writing? What does Hunter Biden have to do with the article?
I am someone who enjoys challenging the status quo and am generally living unconventionally but I think we've swung too far in the opposite direction of being skeptical of practices of our forebears.

For example it is suddenly all the rage to study the health benefits of breathing or meditation. But this has been common knowledge amongst yoga and qigong practitioners for 1000+ years. If you are scientifically minded, a lot of the explanations of how qigong works are hard to reconcile but if you actually try it earnestly you'd realise there's something there. Sure, a 1000 year old model has the wrong explanations, but all models are wrong some are useful.

Empiricism gives us so much false confidence when we often still can't measure many things and often don't know what to measure. Especially so when real true reproducible science is hard, slow, and expensive.

So for me, starting from a prior "maybe people do do this thing for a reason even if they themselves have forgotten why" can be useful
With Cryptonomicon I had to keep stopping to look up every other word in a thesaurus. It made me feel incredibly stupid and just made the experience a slog.
Actually what is also needed is a notLLMs.txt.

robots.txt exists, but is mainly for crawling and also not sure anyone follows it or even if they don't follow what's the punishment.
I recommend checking out the UK AISI's work on this:
- https://www.gov.uk/government/publications/ai-safety-institu...
- https://www.aisi.gov.uk/work/advanced-ai-evaluations-may-upd...
> That isn't exactly some subtle side channel involving tiny emissions of radio waves...

No, it seems to be exaclty that. What's non-constant-time is not the execution of the algorithm (as that would probably be exploitable even via USB, worst case), but rather the duty cycle of the externally-observeable RF side channel, if I understand the paper correctly.

Infineon's implementation doesn't seem to be vulnerable to a pure timing attack, as otherwise that RF side channel wouldn't be needed.

They also do implement nonce blinding, but unfortunately with a multiplicative mask significantly smaller than the size of the elliptic curve, so it's brute-forceable.
(Fixing) Determinism in Robotics Testing
Self submitting this.

Some background: I quit my job to go fill a need I saw in the robotics industry. The current industry standard for robotics frameworks is lacking in a lot of ways, especially around testing and simulation. Over the past few months I've worked my ass off to get the basics of the framework up and running, and now finally I can show off the determinism features.

The code that back this isn't (yet) available for others to play with, but hoping to get there soon (not looking to be perfect before release, but I want the robot I'm building a demo on to be usable). Even if the code isn't runnable for others, hopefully it will give some food for thought.

If you're interested in seeing a bit more we have our "Hello World" tutorial here: https://github.com/basis-robotics/basis-examples/blob/main/c...

This post also coincides with moving to an actual website (Jekyll is cool), but given I already handed out the link to the blog post to HN and a few friends, I'll have to hold off on taking down the old site and reconfiguring GH pages to use the domain.
Show HN: A mobile app built with R
The reason is because it's supposed to be a standard folder that isn't in use accidentally for other purposes.

It's exceedingly unlikely that a website is going to just happen to make content available in a hidden directory path without it being created by automated tooling (which would likely be aware of such standards).

The entire point is to avoid adopting a path that people already publicly use for something else. A hidden directory is the best way to do that.
> every person has a purpose, nobody is superfluous or redundant.

It be much nicer to start this statement from the reverse. Instead of justifying everyone has a purpose for a society, how about a society justifying itself based on the premise that every person has a purpose (could just be consumerism for all I know but hey).
Developers don't care about cost of operation, only cost to build. If there weren't efficiency rules in building codes developers would still be building houses with paper walls here for $750K.
How to Build a $1M Product with No Coding｜ David Bressler's Story
Chromatone is useful on the way there while you're still learning those keys and scales. Just open that panel with a note name on the left, choose click the tonic note and choose a scale and you will immediately see the notes to play on your keyboard and guitar/ukulele without any need to memorize or calculate the interval steps. Then you memorize them and don't need the colors any more. But they help you get there much faster and with less pressure on memory and long hours of practice.
Personally, I think 74F degrees is to hot, 72F is normal, 70F is too cool. What's all that in C?
Dammit, now bureaucrats in other countries will jump on this as they have something easy to copy and get ahead in their profession.
It depends on the properties of the wire, such as the diameter, the purity of the copper, type of insulation, etc. In a twisted pair wire the length the light travels is also longer than the external lenghth of the wire.

Cat5 is has about the same velocity factor as fiber: 2/3, but Cat7 is closer to 3/4. Coaxial can get even higher.
For some reason I mentally swapped OpenAI+Anthropic with parents and models with kids, possibly because it seemed the natural extension of a rotten corrupt mindset that can only produce disasters if given enough power.
Those three and REAMDE (which I'm currently rereading) are just fantastic. Snow Crash was very stylized; too much for some tastes, not enough for others.
Every interview I've watched with Neal lately I feel like he's tired of talking about a concept from his 2nd (technically third but we don't talk about that) book 30 years ago. He's written so much better stuff since then and I would love to hear him talk about basically any of that.
Is this trying to be what the semantic web was supposed to be? Or is it trying to be "OpenAPI for things that aren't REST/JSON-RPC APIs"? (Are those even any different?)

And we already have plenty of standards for library documentation. Man pages, info pages, Perldoc, Javadoc, ...
I really like watching Brad Lancaster in Tuscon Arizona. He's been showing how to harvest rain and plant trees in the desert. He's shown with his methods how he's able to drastically reduce the temperature in such a hot environment. Phoenix is around 500 sq miles, and I bet 95% of it is paved.
Fwiw the active RFC is 8615 as RFC5785 is obsolete.

https://datatracker.ietf.org/doc/html/rfc8615
I was hyped playing this, lost a couple of times there, but i jumped out of my seat from excitement when I finally won lol.

Reminded me of flappy bird with its simplicity and difficulty, what an awesome little game.

Congrats and keep going Sh4jid!
The similarity I noticed was the fact that in the Fourier transform, when the time domain graph is focused in a small time range, its frequency domain graph is spread out in a wide frequency range, and vice versa, like the position and the momentum in the uncertainty principle. That makes sense if the wave function of position is the Fourier transform of the wave function of momentum.
Yubikeys are intended to block phishing. This attack requires physical access.

IE: If you're "worth it" to target IRL, you shouldn't use a Yubikey to begin with. Someone can swap your spare and you won't realize it until too late.
Exactly! It's all made visual and interactive here https://chromatone.center/theory/interplay/spectrum/ - you can even slide the tuning of A4 by dragging left-to-right the last graph - it will show the distribution on 44th octave notes along the visual spectrum
I found the second point most intriguing -

> Discovery #2 - Systematizing charisma

> Contrary to popular belief, charisma is not something purely innate, but can be learned.
You're really missing out. Hiro Protagonist is a great character, and the idea of modern capitalism (Pizza delivery chains) combined with the yakuza underworld makes for some excellent cyberpunk imaginings.
How Do Fibers Work? A Peek Under the Hood (2019) [video]
Milton Friedman allegedly repeated

“You don’t understand, Mr. Friedman, this canal is a jobs program to provide work for as many men as possible.”

“Oh, I see. I thought you were trying to build a canal. If you really want to create jobs, then by all means give these men spoons, not shovels.”
Stephenson and Sweeney mean something else: User-generated 3D worlds where people interact with their avatars, e.g. to play games. Roblox and Fortnite are semi-early examples. VR is not required.
Marx wrote a gigantic book called Capital and it provides a thorough analysis of investment and risk. He wrote a great deal of words describing how investment relates to surplus value (hint: investment is simply a capitalist's way of generating surplus value - profit, which is then used to generate more surplus value, which is... you understand the systemic contradiction here, I hope). You should probably read it if you want to discuss it!
My immediate reaction to the headline was "Whose safety?"
4 sounds like a nonsense catch all for "says things the government doesn't like"
Freud and Jung both wrote about dream interpretation, but I wouldn't call their work "very well researched." What would research on the meaning of dreams even look like? Something more credible and rigorous than Freud's subjective anecdotes? More reality-based than Jung's mythology?

You might call "AI" a collection of our consciously-created artifacts, since that what it digested. It has no subconscious, nor access to any human subconsciousness. But it can regurgitate anything you ask it to, whether the result makes sense or not.
I once had a colleague who had a favourite interview question, it had something to do with graph data structure and would always ask the question, many times candidate would reply and get rejected, strangely enough after a while all those candidates who replied got rejected. So we all gathered around him to work through what questions he was asking. We got to this question, and working with him on this question for a while we realised his solution to his own problem was wrong.

Turns out he was using this one question to reject people his whole career.

It was a humbling experience to all of us, to recheck everything before we asked questions. Most of the candidates you interview are perfect hires. Some times its you who is wrong.
Computers run very fast, it's software that runs slow.
I think the idea is that LLMs aren't actually that good, so adding a semi-machine-readable version of your site can make it easier for them to surface your work to their own users.
I imagine you meant societal harms? I think this was mostly my fault. I edited the areas of work a bit to better reflect what the UK AISI is actually working on right now.
Back in July, it was the sand coming off the Sahara that was suppressing hurricane development:

https://weather.com/storms/hurricane/news/2024-07-15-saharan...

But supposedly this ended in early August:

https://www.bloomberg.com/news/articles/2024-08-05/atlantic-...
I don't recall laughing out loud reading Siddhartha, but man I laugh my ass off every time I read Cryptonomicon, as well as a lot of his other books. They're often over-the-top wink-wink caricatures and often full of humor and clever references.
The initial pizza delivery segment is kind of a humorous prelude. The tone of the book changes a fair bit after that.
There is something called OpenSnitch that I've heard about but never used.
I just ported my md to pdf (via LaTeX) to use Typst. There are still a few nagging issues but overall Typst is 10x better than LaTeX (for my needs which is writing technical books like Effective Pandas).
Ironically, it almost sounds as if total energy consumption may increase due to cheap solar…

Definitely good to not be using fossil fuels but there must also be a later point at which marginal increases in energy consumption have negative effects.
καλά πήγε αυτό
Exactly. robots.txt is useless and those that think its useful for preventing unwanted crawling are clueless
I fully agree with him on Apple. The current App Store rules are insanely anti-competitive. It is as if Microsoft would launch Windows 12 where all software, I mean apps, had to be downloaded and purchased (30% goes to MS) via the Microsoft store. Valve's Steam would be forbidden, browsers other than Edge as well.
OpenAI allegedly wants TSMC 1.6nm for in-house AI chip debut
>But records released so far show the probe, which wrapped in November, found that the entire chiefs mess knew about the secret system, and those who didn’t buy into it were nonetheless culpable for not reporting the misconduct.

>Marrero and her cohorts paid $2,800 for a Starlink High Performance Kit with a personal credit card, and contacted Starlink to expedite shipping so the system would arrive in time for the deployment.

>Those involved also used the Chief Petty Officer Association’s debit card to pay off the $1,000 monthly Starlink bill, and Marrero warned the chiefs to only use the network in their rooms.

Sounds like the Navy needs to provide better wifi before people get desperate like this and screw up their electronic warfare
Just so we’re clear, you’re asserting that Donald Trump is an environmentalist?

So we’re on the same page, Wiktionary defines that as: one who advocates for the protection of the environment and biosphere from misuse from human activity.
Looks correct to me, and I like that it pointed out that my final equation I wrote is the klein-gordon eqn. Forgot to mention that in the original post
> If utilities are required to do net metering

Sure, but they are not in most places. IMO subsidies made sense to kickstart the industry given the external costs imposed by climate change, but I agree that they don't anymore.

> >...Rooftop solar photovoltaic installations on residential buildings and nuclear power have the highest unsubsidized levelized costs of energy generation in the United States.

I don't think levelized cost for generation is the correct metric here. That ignores the costs imposed by grid transmission (and utility profit margins). It's also worth noting that installation costs in the US can be much higher than those in other countries (even other wealthy countries).
> a heart attack waiting to happen for anyone over 50

Not if you are healthy.
That's assuming that the validation software even has all issuing countries' root keys available.

Supposedly it's surprisingly (or maybe not, given how international government relations historically work) difficult for countries to exchange their public keys: Since there isn't any central authority, nor a chain of trust available (a la "this key is signed by France and Switzerland, so it's probably the real thing to us, Germany"), it boils down to n^2/2 key exchanges, and n additional ones every time a single key expires or, worse, has to be rotated on short notice. Then all of that has to be distributed to all border authority systems.

Last time I looked into this (10+ years ago), my laptop doing Passive Authentication and Active Authentication using 10 lines of Python and my country's root certificate (it's publicly available) was supposedly more than what most border checks could practically do.
These are salaried employees.
I re-learnt how to write as an adult, after a hand injury, using this handwriting manual from the ~1920s[1]. Shows positions for holding your hand, arm, etc. as well as exercises for practicing the various strokes involved (for English).

[1] https://thepalmermethod.com/
> To be fair to the owners of power-hungry AI models, their energy usage is probably still dwarfed by other power-hog data center technologies such as cryptocurrency, streaming apps, and online games.

But some guy says you should ignore that because he wants you to be angry.
They replied to my ticket asking about the motherboard and bios even though I had mentioned both and more in the initial ticket.
That's common in many industries. Oil and gas, nursing, etc. 2 shift changes per day is an improvement over 3 shift changes.
A lot lot more than a factor 10 if you count microcontrollers.
Why is single threaded Redis so fast (2023)
You'd walk from https://news.ycombinator.com/item?id=41437295
That $19,000 fine is sure gonna hurt their $1.1 billion profit.
Locking up the fab for this stuff won't help supply chains for classic compute functions, so this is going to keep prices high for everyone else.

We need TSMC to diversify its fab into EU and US. Maybe this will help?
Second Life was the metaverse 20 years ago, it fizzled for a reason.
yesh, that's why my post literally said, "A lot of times you know you never called chdir()..."

Sure, don't put this in the library, but there is nothing wrong with using it in the app where you know no one makes this call.
MNT Pocket Reform – Unboxing and First Impressions
Not really the same because Microsoft isn't the sole manufacturer of Windows devices
https://www.youtube.com/watch?v=d1g1tltlVr0

Its been working this year so far. Erm... not for making money, but for raising money. (Exception: NVidia actually got profits)
> In August, the company reported Q2 2024 revenues of $1.1 billion, up by 26% year-on-year.

Jeez. Talk about opportunity cost.