skysight-inc/HackerNews huggingface dataset:
Not just meetings, anything in life.. but I wanted to focus on a single problem

You might be familiar with these types of questions:

how did we get here?
why did we make this decision?
what has this person been working on?
what has the history of this system been?
how did we get off schedule?

The notes for these types of questions is acquired over a long time (weeks or months), and is mixed up with other notes. But frequently, topics do not fit into single categories that will fit into standard PKM tools

While Evernote, Obsidian, and Notion all have their own strengths, Logseq has one feature, tags, that helps to answer these questions and make your knowledge queryable.

In my article, I show how I solved this problem in my own information management approach.
Our SaaS hit 50 paying subscribers today. Here's how we did it with $0:
I will get to the marketing part, but first we needed an actual good product. Else marketing won’t work.

Here’s the 4 step approach we followed for building something people wanted:

1. We started by validating our idea before building anything at all.

2. Once we got a green check on that, we built an MVP fast.

3. Then we launched the MVP, got our initial users through content marketing which validated the project further.

4. At this point we built the full product.

Going to market is a lot easier when you know you have a validated product.

Our first marketing move was to launch on Product Hunt.

We had heard some skepticism around Product Hunt launches so we didn’t expect much but here’s what happened:

- Before launching we had 0 paying subscribers.

- On the evening of our launch day we got our first paying subscriber.

- One week later we had 20.

Definitely a success.

What we did to maximize our launch:

We were very active on X on the launch day, posting a lot of content and keeping people updated on how the launch was going.

That led to a lot of momentum actually. People became invested in our launch.

We also posted on Reddit, but much less so.

After the launch we experienced a dip, which was to be expected. But we worked our way through it.

The next steps were clear for us:

1. Talk to users and improve our product

2. Keep up the momentum we built from content marketing

3. Find a better long term marketing source (we’re focusing on SEO now)

We have now hit 50 paying subscribers and growth is looking really good.

That’s how we took our project from 0 to our first paying subscribers.

I hope I was able to provide some insight on how that journey might play out. Happy to provide more input in the comments.
I appreciate your condescension, but if you believe a few recent comments constitute proof of what I researched or trusted, perhaps this discussion isn't very productive.

I've been reading multiple outlets in English, French, Hebrew and Arabic (using machine translation), as well as history books and articles, for quite a while before October 7th and have formed opinions. I don't feel I need your help supporting them.
I’m confused about the purpose of truncating the salt.

How does the attacker learn anything about the salt without breaking Argon2id first? It’s not like the salt is included in the Sigsum ledger.

If the attacker did somehow learn the salt (truncated HMAC), it seems like that would immediately break security, regardless of truncation. Suppose the attacker starts with a dictionary of all possible Actor IDs, which seems reasonable, and that they calculate the truncated HMAC for every possibility until it matches. Due to the truncation, the attacker may get one or more false username matches in addition to the true username match. But if the attacker has narrowed down the username to two or three possibilities, they’ve already basically won. And they could just check the possibilities against Argon2id to learn which one it is.

On the other hand, if the attacker doesn’t know anything about the salt, then why would it matter if the salt did uniquely identify a user? How would they “observe that the recent-merkle-root is the same for two messages, but their salts differ”?

It’s quite possible that I’m misunderstanding something. I am not a cryptography expert.

But more broadly, it just seems wrong to use a salted password hash but have the salt be based on the same password that’s being hashed. I don’t think it’s _insecure_, because the salt also includes a high-entropy part (the recent-merkle-root). But I don’t see how it increases security at all. The security should be the same as if the salt only included the high-entropy part.

In other words, the entire “HMAC -> truncate -> Argon2id” process can be seen as a password hash in its own right, where the input consists of the secret username, plus various bits of public information such as the recent-merkle-root. But that’s essentially a form of rolling your own crypto, and it’s unnecessary. Argon2id is already a secure password hash by itself, so you can just feed that data directly to it.
I mean. If you find a way of harnessing enough energy.
The essence of civility is having the means, motive, and opportunity to delete someone/something from the calculus of life with violence, and choosing not to do so.

That is to say, anyone slaughtering one another have abandoned all pretense of civility.
British accents didn't go so far in the Royal Navy.

As I understand it, "Round Robin" comes from the practice of sailors signing feedback documents in a circle, so their officers couldn't tell who had signed first: https://en.wikipedia.org/wiki/Round-robin_(document)
It's been way too many years since uni for me to do any rigorous math, so what tends to help me is to try and get an approximate intuition instead. As a specific example, this article talks a lot about manifolds. Since I didn't study math in English, I don't know what that is, so I go and look it up. A simplified, but intuitive model [0] might be:

> A manifold is a space that is locally Euclidean, but globally might be complicated, e.g. a torus or sphere, or etc.

Okay, so that's reasonably simple. As an intuition, if we imagine a 2D character living on the surface of the sphere, if they walk forward, from their perspective they just move forward in 2D, but from our outside perspective, they're moving in 3D on the curved surface of a sphere.

Once I have this, I try and read until I get lost again. I don't try to rigorously solve or follow through with each equation, but to rather approximately understand what the idea is.

[0] https://math.stackexchange.com/q/1211762/128941
In case you're wondering how to pronounce it...

https://dillonshook.com/how-do-you-pronounce-oklch/
That's where I am now. I'd like to optimize out the retyping and duplication of time strings.

I want the player ui (I'm using mpv) to have a command that:

1. Remembers the last end time to use as this chapter's start time

2. Gets the current time to use as chapter-end.

3. Accepts the name (e.g. 'chapter1').

4. Runs the ffmpeg copy command.

Perhaps mpv+lua can already handle this. I see commands for setting a loop range and for calling a subprocess. Not sure how I'd input the chapter name. Maybe I'll have an LLM name the chapters for me :)
> It's also not clear to me at all that the person you are responding to is correct about mothering being about pampering or whatever.

The word they were looking for is "coddle".
Yes, it introduces limits (duh), but doesn't change the fact that there are plenty of Unity3d games that not only sold well, but also perform well.
I don't know anybody who first learns about new mathematical ideas from Wikipedia. Mathematics is a body of knowledge, not just simple isolated theorems or definitions. You learn new mathematics from textbooks.

Even for reference purposes there are often better resources. E.g. proofwiki is usually better for looking up proofs because the proofs and definitions are interconnected.
Missiles and Commercial Jets Are Sharing the Skies
I can recommend https://github.com/tkellogg/dura for making auto-commits without polluting main branch history, if your tool doesn't support it natively
Yeah, I play a VHS tape and capture the whole thing. Maybe I should be using a scene detector to split files on camera cuts, which would be roughly correct for home movies (but not for TV shows).
understood: big facilities get shared; sharing requires arbitration and queueing.

an interesting angle on 50 threads and 256G: your data is probably pretty cool (cache-friendly). if your threads are merely HT, that's only 25 real cores, and might be only a single socket. implying probably <100 GB/s memory bandwidth. so a best-case touch-all-memory operation would take several seconds. for non-sequential patterns, effective rates would be much lower, and keep cores even less busy.

so cache-friendliness is really the determining feature in this context. I wonder how much these packages are oriented towards cache tuning. it affects basic strategy, such as how filtering is implemented in an expression graph...
The Gray Tribe Is Not in Control
In order to survive, you wouldn't want to be wiped out if your home stream vanished. You'd want at least the likely chance of going to another stream to spawn and breed. Probably the salmon just swim upriver when they want to spawn. And it happened to be that now the Klamath is open.

Yeah, there's clearly tendencies for the fish to return to where they were born. I'm sure that's driven by all kinds of complex genetic memories and probably more importantly selective advantage due to adaptation to the specific characteristics of the given stream, but genetic memories for a specific stream seems a little bit unlikely.
https://en.m.wikipedia.org/wiki/Inertial_measurement_unit
> USA beat the UK for importing slaves by a few weeks

Do not pretend for a moment that USA was leading on anything here.

1. UK had already abolished importation of slaves. No-one could be a slave in the UK since 1778 (Scotland, Eng\Wales was earlier). If you "imported" a slave to the UK, they would become free.

2. The ~1807 US/UK laws were far from equivalent - the UK act was abolishing the trade completely. The US was only ending importation. Domestic / inter-state trade was unaffected.

3. The US law came into effect 6 months after the UK one.

The day Jefferson passed that 1807 act, his 100s of slaves got a little more valuable. Who needs imports when you can abuse 16 year old enslaved girls? As he signed this act, he was, yet again, impregnating Sally Hemings so that in 1808, his 7th bastard child born was into slavery. The birth was recorded in the Farm Book alongside other livestock.
The project:
https://buildpad.io
Yes, and people are recording encrypted conversations communications now for this reason.
Please not an animated gif. These easily end up weighing more than 10MB, while a similar mp4 can be 500KB. You just need to use an encoding all browsers support.
> How does the attacker learn anything about the salt without breaking Argon2id first? It’s not like the salt is included in the Sigsum ledger.

Take a close look at https://github.com/fedi-e2ee/public-key-directory-specificat...

The commitment (Argon2 salt || Argon2 output) is included in the ciphertext blob.

The format of each encrypted attribute is:

h || r || Q || t || c

Where "h" is the version ID (0x01 currently), "r" is a 256-bit random value for key derivation, "Q" is the plaintext commitment, and "t" is the authentication tag. All of these values are fixed-length. Then "c" is the ciphertext, which is variable length.

> If the attacker did somehow learn the salt (truncated HMAC), it seems like that would immediately break security, regardless of truncation.

> Due to the truncation, the attacker may get one or more false username matches in addition to the true username match. But if the attacker has narrowed down the username to two or three possibilities, they’ve already basically won. And they could just check the possibilities against Argon2id to learn which one it is.

That's an interesting point. It might be beneficial to exclude the plaintext, then, given that we already have a high-entropy value (the previous Merkle root).

We could also just use "r" to calculate the salt, since that's right there.

Thank you for this feedback. My primary motivation in writing this blog post (and the ones that follow it which will focus on different design decisions and trade-offs) was to elicit better feedback for the current draft of my proposal.

EDIT: https://github.com/fedi-e2ee/public-key-directory-specificat...
This is another hype piece from Google's research and development arm. This is a theoretical application to increase the number of logical qubits in a system by decreasing the error caused by quantum circuts. They just didn't do the last part yet so the application is yet to be seen.

https://arxiv.org/abs/2408.13687

"Our results present device performance that, if scaled, could realize the operational requirements of large scale fault-tolerant quantum algorithms."

Google forgot to test if it scales I guess?
I think there was plenty of financial writing on the wall, even without considering physical or practical aspects of the vehicle. For example:

1. Tesla was imposing a no-resale restriction on customers to punish them if they sold within a year. (TBF, it could have been motivated by stopping scalpers, but I doubt it.)

2. Tesla refuses to take that model as an exchange or trade-in.

Stuff like this suggests that from the very beginning Tesla knew their product's pricing was inflated by blind hype and not sustainable (even the standards of automobiles, a depreciating asset) hence the measures to artificially prop it up.
Show HN: EMG – Menu bar mactop for Apple Silicon hardware
Why Do Airplanes Still Have Ashtrays Despite the Smoking Ban?
Thank you! This is wonderful.
> Golden Book of Chemistry Experiments

This book is an absolute classic. I've got a hardback copy from my childhood and doing the experiments as a kid was magical. Nowadays most other chem experiment books are watered down because the old stuff could be quite hazardous and getting some of the reagents is a lot harder without a parent who can order from Sigma Aldrich.

I've got a decent number of scars and even some chemically induced skin discoloration from those days. The book itself is quite valuable now.
I think there's more than a quantitative difference between "slightly more convenient" and "with no effort". A centrally maintained list of labelled "enemies" that you get forever with a click is materially different than having to research people who gave you a reason to do so.
Winamp skins era brings back so much nostalgia.
> The general public cares more for its wallet than the environment.

More or less, yes, but I think it deserves more nuance. Most of the general public is stuck trying to make ends meet, and regard the environment as a problem to be solved by their government and rich corporations.

If you take away their plastic bags and straws, they will make do.
MAD also assumes a level of rationality that I am starting to doubt exists in many world leaders...
So you're saying having plumbing in the computer makes it not a computer? What about water-cooled gaming and HPC systems: are they computers?
I think back-end development is a much more "comfortable" lifestyle (I'm full stack myself), even if lots of it is technically more difficult coding than front end (i.e. multiple threads, databases, load-balancing, etc), because there's a new front end technology that comes out every couple of years, making many of the front end tech stacks become obsolete rather fast and they're super fragmented in terms of large numbers of different and unique frameworks. Not to mention how plagued front end work was for so many years due browser incompatibility issues.

For example, on the back end in Java there's been just basically SpringBoot for a decade, and as long as you keep up with it's minor changes you're all set.
With some transcribing (using another LLM instance) I’ve even gotten it to solve NYT mini crosswords.
Secret Hierarchy system of the magical Japanese foxes, Kitsune
Should we be learning about the product or the company? Only one seems valuable, no?
The thing is, the term "Semite" is (except in very archaic contexts) pretty much dictionary-only.

It exists, and has semantic validity. But it does not in any way describe a group that has ever had any kind of common identity. Or as Wikipedia (itself a kind of a dictionary) puts it:

The terminology is now largely unused outside the grouping "Semitic languages" in linguistics.
Consciousness shows there may be a limit to what science alone can achieve
Did Israel fund ISIS as part of that operation?
Normal people aren't paying for LLMs.

If they ever do Apple and Google will offer it as a service built into your phone .

For example, you could say ok Google call that restaurant me and My girlfriend had our first date at 5 years ago, set up something nice so I can propose. And I guess Google Gemini ( or whatever it's called at this point), Will hire a band, some photographers, and maybe even a therapist just in case it doesn't work out.

All of this will be done seamlessly.

But I don't imagine any normal person will pay 20 or $30 a month for a standalone service doing this. As is it's going to be really hard to compete against GitHub Copilot they effectively block others from scrapping GitHub.
That's the neat part
The problem is now you have to have all sorts of additional libraries you need to load across a network.

Web APIs need more standardized functionality built in, including high-level ones, and not rely on additional libraries, because they have to download across a network.

It's like having to install an app every time you visit a site.
Is your thesis that since we live in a world of infinite possibilities, any device that makes harassment more efficient is not worth measured consideration for guard rails because there’s always a different and worse way to it?
u r on right track with llm, just tell it that you will give input file and set of start, end times and that it should generate the command for u. As a bonus ask it to give u the example as well so that it doesn't misunderstands! i think even chatgpt mini should be able to do it.
I agree, and in general I am very pro-estimates (they switch your team from cooperative scheduling to preemptive scheduling, and they’re an important tool for managing the chaos of development), but the statement “we expect this project to take eight weeks, but it could take 24 weeks in the worst case” is one I would be very loathe to make.

Granted, I’m coming from a B2B startup rather than a consultancy, so I was working with a mixture of internal (product, sales, support) and external (customers) stakeholders. The perspective I would try to give people, though, was this:

If we discover a bomb partway through the project (oops, groups are limited to 100 members in this auth system, so we will need to find a new system and migrate or else not support groups) then 8 weeks will no longer be enough, but maybe neither is 24. The right thing for us to do in that situation, IMO, is go back to the stakeholders and align on a new plan. Maybe groups will come in v2, or some groups will work and some won’t, or maybe we do the migration and add it to the estimate, or whatever. One shouldn’t use the 16 buffer weeks between 8 and 24 to sneak in a backend migration (which itself might be a 16-week project, or might not), but to pause and re-align on a plan everyone likes.

When I was giving estimates, I would try to frame them as “we’ll spend eight weeks trying to accomplish this list of things. If we discover an issue that prevents us from finishing the list for any reason, we’ll come back to you as early as possible with some alternative proposals and re-assess”. Sometimes people felt that this meant we just weren’t willing to commit to our estimates, and this idea of “software development is chaotic” is what I would say, to explain that the issue wasn’t a lack of motivation, but an inescapable knowledge risk that needed to be managed.
Anthropic is receiving large investments from Amazon, so it wouldn't surprise me whether they are "optimizing" their business model:

https://news.ycombinator.com/item?id=42215126
A couple of points:

- Proton's image proxy is not unique - it's actually how Gmail's images work as well

- Removing parameters from URLs would only work if the URL was not a redirect, which most email services do for their users. Also, stripping out URL parameters can also have unintended consequences if a service legitimately relies on them.

- Outlook blocks images by default still, which prevents loading the tracking pixel as well.
> So that's how it worked with MacOS and Windows? Color me surprised.

Lots of people use MacOS and Windows though, so Google has incentive to support these platforms.
As instantaneous as arial bombing generally.
Dostoevsky is one of those authors whose works absolutely require deconstructive double reading. :-)
If you are supposed to be doing math homework and just pasting answers you found online through a search engine (and not doing the actual work), then the student should get into trouble.

Classrooms are there for students to learn. ChatGPT just spits out an answer and doesn't really help with learning (and makes the student worse off). Why should it be allowed in the classroom?
> needs more furry art

Hard disagree. I need to forward this post to my CISO and have them be impressed with my breadth of reading and depth of knowledge. When we chat over brewskies later, I want to be able to casually ask what they thought about using HMAC-SHA512 instead of GHASH for making salamanders more opaque. But I can't do that because the number of cartoon furries will make them think I'm not totes profesh. Maybe we can get this post in a more professional setting like LinkedIn or something?

And that ^ is how you invoke more furry art.
> Customers believed the accounts were backed by the full faith and credit of the U.S. government.

This is the biggest problem with the whole situation.

Consumers should be free to invest in whatever risk tolerance they choose, but it’s not okay if they’re under the impression that their investments/deposits are insured by the government.
The current link, https://sixcolors.com/offsite/2024/11/the-app-store-era-must... , is just the first five paragraphs of this article: "Once again, the only way forward is the Mac" https://www.macworld.com/article/2525708 .
> Sixth, AWS doesn't have its own LLM (relative to Meta, MS, etc.). The market will associate Claude with Amazon now.

Amazon/AWS has their line of Titan LLMs: https://aws.amazon.com/bedrock/titan/
The backend at this point is just Graphhopper so I think it would make more sense to use it directly and customize it based on your needs: https://github.com/graphhopper/graphhopper