skysight-inc/HackerNews huggingface dataset:
For a password manager, whether a cipher is fast or slow could mean something entirely different than for something that has to encrypt and decrypt large amounts of data. Cycles per byte is probably completely irrelevant here and I'd expect performance to basically be a function of how many cache misses (both data and code) are incurred to decrypt a single password.
I find your comment quite strange to be honest, and it's not comment. There are so many "the-final-straw-that-broke-the-camel's-back-I-cancelled-my-order" comments out there, of folks claiming loudly that they're getting an F150 instead.

The F150 and the Cybertruck is so far apart in terms of the type of vehicle they are that I can't really understand how they are used in the same conversation. It makes 0 sense to me to say "I'm going with the F150 instead", because it's not the same class of vehicles.

I'm keen to understand what you were hoping to get out the Cybertruck, that you are now instead going to get from a hybrid F150, and why you did not consider the F150 in the first place.
Imagine i have a pencil which I'm holding in my hand. With my hand, I can control the position of the tip of the pencil. Now imagine the pencil is made of rubber. I can still control the position of the tip, but e.g. a strong wind can cause the pencil to flex and so the control is not perfect. But it is still control.

I don't see how this is fundamentally different from controlling the current through a transformer.
Your malware would still need the password for the PBKDF step to decrypt the Firefox database
On a different note from my other comment here: don’t fall in the traps of letting some “evaluation” define you, or of considering your memory or “ability to think” permanently/unchangeably “poor”. While certainly some parts of our biological makeup may be more or less permanent, both memory and thinking skills are, well, skills that can be improved with training and practice.

Don’t get down on yourself or develop an unhelpful belief or attitude about yourself. You can and will improve with practice, and you are not defined by a test result.
Nothing has surpassed this classic.
One of the most common reasons floated for so few women in IT/software jobs amounts to the same thing: women don’t want to work in the “bro culture” or deal with “toxic masculinity.” I don’t have any evidence for that, just my own career experience watching women leave (or never enter) the software field since I started in the late ‘70s. When I started programming women made up 25% or more of my co-workers. Today that percentage seems close to zero.

I suppose it works both ways.
Those bombs might have done more good than his potential math career. Considering we just had our first AI millionaire. Perhaps there is hope for humanity to wake up.
UX and Performance debugging on Mobile apps
How do you balance user experience with performance in your mobile app? What tools help you in debugging UX issues, crashes and performance problems on mobile apps?
That is huge, the mosquitoes are panicking right now
It feels like mainstream technology is slowly replacing most if not all accessibility devices, and I think that's a really good thing for those who need them!

This already happened to blind people. We used to have color testers, specialized audiobook / ebook players, GPS devices, text scanning / OCR machines, devices for banknote recognition, barcode readers, talking scales, thermometers, blood pressure meters and so on, all as separate devices, all extremely expensive. Nobody really had or carried all of these at once, though most people had at least some, it was just too expensive and impractical.

Nowadays, while those devices still exist, all you really need is any smartphone (even a low-end Android will do, though iOS is much better for this use case IMO), a free screen reader, which both OSes include by default, and a couple of free / cheap apps. Things like talking scales can be replaced with accessories connected over Bluetooth that don't technically talk, but that expose the measurements to your smartphone screen reader.
Amazing, just awesome. Long standing applause.

Let’s regress to level of native apps without benefits of said native apps. No standardization, no performance, no unified integration. Let’s get rid of browser plugins that allow us to fight invasive ads and malicious JS scripts, let’s dump decades of expertise and optimizations, let’s undo all advancements of web just to be able to write same old <div> in C#. Nothing better than a single blob of <canvas>.

It’s ironic that some of people in this thread convict JS devs of using only JS and then you use those “frameworks” as an example of a good thing when they don’t even have a separation of presentation (like HTML and JS) that would allow other languages tap into it.

And all of this is with much worse performance and stability.*

* - for now
I don't watch TV as in broadcasts (neither OTA nor cable nor online streaming). I do watch TV shows from BluRay / DVD / files from my friend. I also don't use playback devices that don't let me modify them to work how I want.
How to Learn Anything?
https://archive.is/5Wu3G
It's a sign of bad code.

Yeah state is hard, but "else" statements are a thing. Even if a state is not "expected" if the system can represent it, it should be treated as possible.

Crash if you have to, but don't do unexpected things or just stop executing.
NO ONE should trust a website delivering JS that could do who-knows what the next time they skip reading the code. Like, send the inputs to a third party.

Please delete this project and your comment.

If you want to be helpful, write native code that user can read, compile, and install, and persistently use without risk of backdoor-out-of-the blue.
Valve Founder Gabe Newell Turned 'Half-Life' into a $10B Fortune
CS294/194-196 Large Language Model Agents
Large language models (LLMs) have revolutionized a wide range of domains. In particular, LLMs have been developed as agents to interact with the world and handle various tasks. With the continuous advancement of LLM techniques, LLM agents are set to be the upcoming breakthrough in AI, and they are going to transform the future of our daily life with the support of intelligent task automation and personalization. In this course, we will first discuss fundamental concepts that are essential for LLM agents, including the foundation of LLMs, essential LLM abilities required for task automation, as well as infrastructures for agent development. We will also cover representative agent applications, including code generation, robotics, web automation, medical applications, and scientific discovery. Meanwhile, we will discuss limitations and potential risks of current LLM agents, and share insights into directions for further improvement. Specifically, this course will include the following topics:Foundation of LLMs
Reasoning
Planning, tool use
LLM agent infrastructure
Retrieval-augmented generation
Code generation, data science
Multimodal agents, robotics
Evaluation and benchmarking on agent applications
Privacy, safety and ethics
Human-agent interaction, personalization, alignment
Multi-agent collaboration
Datadog State of Cloud Security
Security in C++ – Hardening Techniques From the Trenches [video]
Dynamic Let (Common Lisp, Mop)
> A spreadsheet is a narrow use case?

No, it’s not a narrow use case. I wake up my phone to spreadsheet calculation, I open HN - a little bit more spreadsheet, my kettle heats water via power of spreadsheet algorithm. Amazon purchase? Only via spreadsheets.
looks like a beast. With impressive CPU and GPU gains, it's closing the gap with Apple while outpacing Google's Tensor G4 by a massive 63%. Multi-core performance is where it really shines, delivering a 40% boost over the Snapdragon 8 Gen 3 and showcasing serious gaming potential with up to 34% faster graphics. If these benchmarks hold up, the next-gen Android smartphones might finally outpace Apple in performance. Can’t wait to see how this translates into real-world use!
There are definitely pictures of people who try, one bloke put a towing crane thing in the bed of theirs: https://i.redd.it/32fsd1elmfvd1.jpeg
No such crap on Motorola phones. Posting from a five years old Moto One Vision. It's... a smartphone. It has a decent CPU, screen, camera, storage, NFC, etc. I couldn't say what's missing.

The only thing I'd get excited about in a new phone is a faster CPU.
Beyond anything else, intentionally designing a political system around disenfranchising a class of people seems like a bad idea from a human rights standpoint. You're creating a system in which the wealthier citizens can systematically take the rights away from the poor. I think you know how that can go wrong considering you're asking this question specifically on this post out of all posts.
Discord can be a good alternative.
The Pontryagin dual of a discrete (locally compact abelian) group is a compact group, and the Pontryagin dual of a compact abelian group is a discrete (locally compact abelian) group…

Hm.

Momentum space being compact does seem weird..

Of course, if rather than a discrete group for space, you just have a discrete uh, co-compact(? Unsure of term. Meaning, there is a finite radius such that the balls of that radius at each of the sites, covers the entire space [edit: “Delone set” is the term I wanted.]), uh,
if you take a Fourier transform of that lattice…

Err… wait, but if the lattice is a subgroup, how does the Fourier transform relate to…

I think the Fourier transform of a Dirac comb is also a Dirac comb (with the spacings being inversely proportional)
If you multiply the Dirac comb by something first…
Well, if you multiply it pointwise by e^(i x p_0 /hbar) , then the Fourier transform will have whole thing shifted by p_0 , and this is periodic in (width of the spacing of the comb in momentum space)

So, if you consider all the pointwise multiples of a Dirac comb in position space (multiplying it by arbitrary functions), then I guess the image of that space under the Fourier transform, is going to in some way correspond to functions on S^1, I guess it would be functions periodic in the width of the comb in momentum space.

So, if instead of a regular comb, you jostle each of the Dirac deltas in the position space comb by a bit first (a different random amount for each)… I’m not sure quite what one would get…
Is OpenAI being fair to its non-profit?
Myth Buster did empirical tests on this and were somewhat surprised to discover that walking actually led to getting the least wet.
Riskify
That statement is spoken by people who only look at the us second quarter ev pickup truck sales and see the cyber truck at even with all others combined. Forgetting that is a tiny niche market, the time window is favourable for the cybertruck and forget the many of petrol versions.
Well good luck voting-out the government that controls that system.
Ohh I love the idea of a massive telescope that's just compromised of thousands of individual satellites!
Exactly, so we shouldn't say things like "no doubt" when it comes to the question of extra terrestrial life.
https://www.defenddemocracy.press/ukraines-nazis-who-are-the...
> I'm sure there are many other issues that I've not even heard about.

The windshield wiper committing suicide is a common one.
Right, and that's my point about practical languages that promotes a functional style being a better choice. The requirement for purity in Haskell (due to lazy evaluation) makes anything but purity a problem, it seems sometimes that just because things are possible to do purely it's the only way to do things according to adherents.
WhatsApp's desktop version
That's correct. It's sufficient that you in theory could listen to the radio, and it is assumed that pretty much everyone could.
I'm not defending this choice, and I think you're right in general.

In this case, the only thing encrypted with TripleDES is the password itself, so the practicality of a crib or other known plaintext attacks is debatable in my opinion.

If you use the same (or similar) password everywhere, then you have bigger worries than Firefox use of TripleDES. Password stuffing based with leaks from poorly hashed password DB (cough facebook cough) is likely the most practical attack vector in this case.

If all your passwords are like q@qrG#Z4ARYm^qjeTEMN2Kh45v^p7L# then crib like attacks are impractical.

There are other weird/debatable choices in the Firefox encryption layer:

- Why bother with CBC? Things like AES-GCM or other authenticated* encryption mode would be nicer. Not sure it's a flaw here (google the cryptographic doom principle of Moxie Marlinspike)

- Why not wrap the encryption keys with some kind of "key wrap" mode instead. There are such things as AES-KV for instance.

- Why do the weird PBDKF2 derivation here? It's not based on a password the player enters, so there's nothing to "strengthen"? Seems oddly unnecessary (or I don't understand and there's a password somewhere).

- If there's a password then PBKDF2 is really really shit compared to scrypt or even better one the variant of argon OWASP said you should use.
The title here matches the original title of the article, but I have to say: what is with the comma between subject and predicate in a sentence?

Ex. Mary, eats a pie.
The master appears when the student is ready.
That's modern capitalism for you.
Open source audio transcription locally in the browser using Web Speech API
A few days ago I needed a browser-based audio recorder with instant transcription locally without any data leaving the client.
After 5 minutes of googling I decided to try generating a web app using ChatGPT instead and host it for myself on github pages.

Within a few iterations refining the requirements, I had a working single html file with only a few 100 lines of js code that met all my requirements and was easy to further improve and as a bonus I learned a bit and had some fun optimizing it further the last days.
It's a cool idea, all you need to remember is the service and the master password.

But you need to make it easy to run on a local computer to convince the die hards. ;)
Singapore OKs 4,300km subsea cable for importing electricity from Australia
Stupid question but why didn't Newton come up with Relativity instead?
The Full Self Extending Range Extender: preorder now! Only $7999!
> risk model

Hah.
Don't bother us with your mumbo-jumbo, we're doing computer security here.
So malware which installs a key scanner to read everything you enter is outside of your threat model, as is external surveillance to record what you type.

Choose a password manager which you like. I like having a paper book with a dumb-ass encryption scheme, because my threat model is that I am not going to worry about physical attacks, and servers will detect attempts to brute-force the dumb-ass scheme by adding delays after the first few failures.

I use Firefox's manager for my Mastodon accounts, because no one cares for my 10 followers, and the instance manager can resolve things if needed.
> An open question is if any other manufacturer will be able to get a device that works this well at this price point - the amount of software and chip design engineering that went into H2 and the bridgeOS or RTKitOS that the AirPods run is just not something smaller manufacturers will be able to easily copy.

Well, "classic" hearing aids have two features that I don't see Apple replicating any time soon: longer battery life (AirPods roughly last around 4-6 hours depending on battery degradation and usage, whereas hearing aids run for days) and most especially, support for audio induction loops [1] - basically PA systems for the impaired, you'll find these in churches, conference/meeting rooms, concert halls/stadiums and in the UK also in taxicabs.

Classic hearing aids will have their place for quite the time to come.

[1] https://en.wikipedia.org/wiki/Audio_induction_loop
I think that's the point of these questions, to have no clear answer.

So a presidential candidate picks a vice president running mate. Voters vote for the pair. The electoral college then, usually but not always, cast votes matching the voters.

So who decided? Technically the electoral college. Who were guided by the voters. Who voted for someone the president picked.
I thought it needs 2xUSRP if you want to receive both sides? And it's a lot less useful without that.
here is the best tool for risk.
Bloody typical for a project with vim in the title, no instructions on how to quit!

Joking aside, I’ll have to give this extension a spin.
You can call them whatever you want, as long as you can point to instances of what real users actually said.

Instead of referring to abstract/hypothetical users and what you think they might be saying in some alternate universe.
It depends, see https://en.wikipedia.org/wiki/Big_Rip
Absolutely mind blowing - I've not thought of this and will be reading about it
Huh how can that work? It's only got 2Mhz bandwidth. An LTE cell is much wider.
Dupe (213 points, 2 days ago, 380 comments) https://news.ycombinator.com/item?id=41893200
Haha yeah, diagnosed recently - almost 30
…which is somewhat ironic in the context of TV Licensing which trolls the British public en masse with its relentless and unnecessarily aggressive communications.
Simple: Mass production, dedicated hardware for that single purpose (but not able to do full monitoring like this).
It’s happened before, life will prevail and eventually thrive again in some other format. I think fully eradicating life from earth will be quite difficult even if we tried. Perhaps when we get swallowed by our sun or some similar event.
Yeah for me that is already eye-wateringly expensive :) (Being in Spain where purchasing power is low).
Nyxt it's the truest hacker's browser.
I built my first blog (NextJS, MDX)
It seems a bit strange to frame it as a struggle. Like the article alludes to, men seek high social status. University no longer provides greater social status. So men have moved on to the next thing that will give them what they seek. They're not bothered by it. It is not like university is some kind of magical deity that will send you to the fiery pits of hell if you don't attend. It's just a tool, and if the tool isn't working it is no big deal to not use it.
I've tried most firefox vim addons, and Vimium is the one that I ended up using.

The only configuration: I disabled it on banking sites... you never know.

To disable it, just press its icon on any website, and it will stay disabled on all the domain.
Can you share any links which can help me read up more on this?

Also, a cursory search on internet doesn't brings anything conclusive about Aryabhata being a Shudra.
Interesting that they mentioned the default-mode network but not the salience network

I experience mind-wandering as sampling salience signals when no signals dominate (as they do in reactivity and goal- or motor-planning).

Mind-wandering presents unlike meditative absorption, when salience seems quiescent (or, conversely but rarely, sharp).
If you need an orb plus an human to recognize a person, why do you need the orb. Just use the biggest cheapest technology available, just one human and no orb asking for an ID card. Or a sign of "put your card in this slot to open the door please". Well tested and reliable.

But if we think that the orb is doing something here, why not be ambitious? Lets provide each door with a device to extract blood and made a DNA analysis so is 100% granted that every time somebody enter their home is not a thief disguised as the owner
An Approach to Flooding in England: Give Land Back to the Sea
someone made a larger universe a few blocks down the road, and so we made a larger one just to one-up him
I had a lot of problems with that. The "disable on some domains" functionality was broken for years. Probably they fixed it by now. Vimium worked and works better.
1. The richest 1% vote whoever makes them even richer, at the expense of all the other 99% poorer than them.
2. The other 99% people no longer play the "democracy" game with the rich, form their own government without the "voting power corresponds to how much tax paid".
3. The rich people country loses its foundation, thus can no longer sustain. The rich join the poor people country.
I’ve tested my dreaded mosquito tastiness. I always count bites after a hike and compare to others. No one ever comes close.
> There is also a question of if even works well ...

No, it doesn't. And that's one of the main tragedies in modern discussion about education. A lot of people think that we have to teach the way how experts think. But it doesn't work.

Take a look at programming for example. Everything you ever really need to know about programming, can be described in single A4 probably. But it has no any use if you learn. It even makes things worse, because it's a thing you have to pay attention to, but you don't really understand. You have to learn via small babysteps, automate a lot of small things in your brain, practice a lot etc. There is no shortcuts in learning.
Can you explain to me why votes should be weighted differently at all?
How We Generated Millions of Content Annotations
I think it's great to see blogs like this, debugging all the way through from the Web UI to the Linux Kernel.
Climate change, even in the worst case, won't come remotely close to eradicating all life. It won't even eradicate humans (though it'll suck for people living on the coasts or in Florida). Even the very worst imaginable catastrophe wouldn't eliminate the various single-celled organisms and extremophiles.

But there are a lot of larger species that are at risk. Maybe I'm just species-ist, but I'm more concerned about things like various bird or mammal species than I am some bacteria.
They fit perfectly together in the category "cool truck if you don't need a truck" so it's very easy to see why.
Did you try AppleMusic?

Not directly related to your case, but I thought I had some age-related hearing loss when listening to Spotify Premium only for a decade. I appreciate their recommendations (found me a whole bunch of new interesting bands, even new favourite ones), but didn't know how awful Spotify's quality is even in comparison to Apple's standard codec.

I didn't make the switch yet since for lossless since I don't have enough space on my phone, but am considering it, even for just showing support for the current music quality efforts over at Apple.
All addons are disabled on system pages.

I've never experienced your problems, Vimium works on any tab, indipendently from the others.

I don't understand your glitches, really.
Show HN: Browser extension that helps you beat the Giskard RED LLM challenge
Made my first browser extension on Chrome for logging attempts to the Giskard RED LLM Red-teaming challenge.

Didn't know any JS so used Claude heavily, then wrote it myself.

Write-up here: theophilec.github.io/blog/2024/giskard-logging/
it is for sending alerts while doing some task. but thank you for your review we will do it better
Nomerge Comments in CI/CD Pipelines
An opinionated beginner's guide to Haskell in mid-2019 (2019)
We have special power plugs that evaporate a solution that works 100% for us. Whenever we expect or have mosquitos we switch it on. All disturbance gone in 15 min, even with window and door open. The solution is based on something like https://en.m.wikipedia.org/wiki/Prallethrin

Needs a refill every month or so in Summer.

I assume the vape goes up to the ceiling where the mosquitos also like to be.
Throwing my phone number into a random website that claims to use AI?

No thanks.
Ghostpulse malware loader hides inside PNG image files
The additional features this tool brings (port enumeration, list usb devices, system info), makes me thing the tool was not designed for good/ethical reasons, but to ease the life of infostealers that are usually distributed via Discord.
> I'm pretty sure I'm never going back to Tesla if Rivian and other auto companies deliver better value and quality EVs

Which is a very sober and reasonable statement. If other companies deliver better value and quality, the only reason to buy a Tesla would be brand-loyalty (which is not a good reason to compromise on value/quality)