skysight-inc/HackerNews huggingface dataset:
With asymmetric crypto, you must also send by courier the root certificates (downloading Chrome or Firefox just fulfills the role of a courier that is not very trustworthy).

There exists absolutely no method of secure communication that does not depend on a piece of information that is transmitted separately, through a presumed trustworthy courier. All the existing methods only attempt to minimize the amount of information that must be sent through the secure courier.

With symmetric crypto without digital signatures but with some kind of Diffie-Hellman, you must send by courier only a pre-shared key that is used only for computing message-authentication codes that are used only in the couple of packets used in a key-exchange algorithm, when establishing a secure connection.

Using only symmetric crypto, secure communication can be performed in pretty much the same way as with asymmetric crypto, by generating fresh random session keys for every connection.

The only difference is that the key exchange packets are authenticated with a MAC using a pre-shared key, instead of being authenticated with digital signatures and a chain of certificates going to trusted root certificates.

If for some weird reason one would not want to use a Diffie-Hellman variant (e.g. with elliptic curves) to protect the session keys, one could use another pre-shared key only for encrypting the key-exchange packets.

There are only two advantages for asymmetric crypto, when used for secure communication connections.

The first is provided by Diffie-Hellman in any of its variants, which ensures perfect forward secrecy, i.e. even knowing all the content of some sessions, including their secret keys, that does not allow the decryption of other sessions. Without Diffie-Hellman, if the pre-shared encryption key that is used to protect the key exchange packets is captured, all recorded sessions could be decrypted. This can be only partially avoided by changing that key frequently, which would prevent the decryption of past sessions, but not the decryption of future sessions.

The second advantage is provided by the authentication of the key exchange with digital signatures instead of MACs based on pre-shared keys, which is the possibility of half authentication, where the server is authenticated based on the certificates provided by it, but the client is not authenticated, which is the most frequent kind of secure communication used on the Internet.

For communication inside a closed environment, i.e. a private network, using key exchange authentication based on pre-shared keys (but with elliptic-curve Diffie-Hellman for protecting the session keys) can be simpler, faster and more secure than using digital signatures and certificates.

While in the beginning I have used your metaphor about sending a pre-shared key or the root certificates by courier, the normal mode of transferring pre-shared authentication keys is by initial physical pairing (e.g. cable connection) of the devices that must be able of communicating securely between themselves.
It's what the profiling hinted at at least, but I don't know how much overhead that tool adds per function call, so if you profile a lot of very small/fast functions you basically just measure which function gets called most.

But you should not underestimate the impact of unnecessarily shoving data around in memory even with fast ram. Cpu speed has improved much much more than memory speed over the past decades. If your data layout sucks and you hit L3 or even worse actual memory, it's slow as heck relative to L1, or even better no copy at all. And then the overhead of the plain function call itself. As this is a 3rd party library you're guaranteed that each call to this wrapped memcpy is an actual call and not inlined.

But in addition to that I'm pretty sure the decoding library used originally isn't nearly as fast as mango.
So don't have a default. Have securerandom() and insecurerandom() and make the programmer choose.

That has the advantage of avoiding problems in a generation's time: if most platforms moved to random() being secure, it would be excusable if young programmers started assuming that would be the case on older platform too.
>I hate to see it happen as part of a charged ideological / political process.

Can it happen another way?
Ask HN: Worst gravity and black hole art, and CG labeling guidelines for science
I think that computer graphic simulations of gravity and black holes should be labeled as simulations.

The same technology that we use to label or watermark genai image and video content could be used to label n-body gravity and black hole images.

"Is this a direct physical observation? Is this retouched; did they add color, did they refocus, etc? Is this a presumptively contrived simulation rendering that shouldn't have same strength of evidence as a less biased direct physical observation?"

Almost all images and videos of black holes are simulations just.

This likely affects our intuition. People try to fit models to observations. If the observations are conjecture but aren't so labeled, then the people have unfortunately biased intuition.

In the interest of progress in science,
What are some of the worst black hole and gravity computer graphics you've seen?

How could science programming improve its citations in presenting simulated computer graphics as science evidence?

How could an "unproven science rendering labeling guideline" be politely and effectively shared with CG artists, physicists, and science content producers?
If 1000 cycles is 250,000 miles, then an additional 500 cycles also seems like a large number.
It's not inferior, it's just a different kind of machine!

The main advantages are in the workflow - heating, brewing, cleaning, etc are all done by pressing a button, and the pressure itself is going to stay at exactly what you set it to.

It's also a fair bit smaller than the robot.
From your description I expected a pile of legalese, but in reading it... I don't see "passive-aggressive" I see simple etiquette guidelines that shouldn't have to be said, but... clearly do.

Often users screaming "I won't use [your project] if you don't fix [my whim]!"** actually does get some traction. So saying explicitly in the readme that that is rude and won't be allowed seems ... healthy.

Notably, because it's just one dude's passion project, not a corporate-backed such-n-such, we don't want him resenting ever creating it, right?

** (or, to wit, "if you don't change your README I wouldn't want to use this." lol)
Good thing there are plenty of other employment opportunities for SpaceX employees should they wish to not live in a company town.

Somehow I think most of them are pretty happy working at one of the most interesting and ambitious companies in the world.
I'd argue it looks like it, yes.
I think it was a bit too far ahead of its time. By the mid-1980s when I encountered it, it felt dated; the communications increasingly felt slow. Attempts at commercializing it, and on running it on newer hardware didn't really go very far.

There were implementations of TUTOR for MS-DOS as well, with TenCORE being one that I saw. Early in my programming career, I came across it when we were rewriting a financial planner that was originally written in it into C. I was flabbergasted when my Lotus 1-2-3 importer was twenty times faster then the original. On reflection, I realized that TenCORE so completely imitated its CDC Cyber heritage that it used Cyber floating-point format for its math, and had to emulate every math operation.
DeltaNet Explained (Part I)
OH! I think you might be right. Oh! That explains it. Thank you.

Thinking about it now, of course. What else would the power lead be for? It doesn't heat the water. The pump being in that part can be the only other explanation.

> The kind of coffee enthusiast who is going to preorder a $650 unreviewed coffee machine probably has at least one temp holding kettle they use for pour over.

Yeah. I think that's the key here. This is for an enthusiast who wants the latest coolest tech, and is willing to accept some amount of discomfort for it.
Python in the Browser
This attitude is still presenet among doctors, and is one reason why electronic Medical Records still suck, and why Obama's "Affordable Care Act" has made American healthcare simultaneously the most expensive in the world as well as among the worst in the world. Doctors consider their time too valuable to be used in slow and fiddly data entry, so they offload it to additional staff.

They're not entirely wrong in this regard - modern EMR web UIs are arguably inferior in many ways to some light pen driven systems of the 1970s-80s (I'm thinking especially of the old TDS system, which nurses (and the few docs that used them) loved because it was so easy and quick - replacing or "upgrading" it was like pulling teeth, and the nurses fought hard to keep it in every case I ever saw.)
Just in case anyone besides me was wondering, he's 18 (the article didn't say).

https://en.wikipedia.org/wiki/Gukesh_Dommaraju
Re: the grinder and burr design - I am impressed that you’re taking a different tack from standard burr design, but it looks to me like you’re going to get extremely uniform grind size out of this burr design. There is a bit of black magic that goes into making great espresso, and my understanding of burr design was over grinding the beans actually led to a very “flat” tasting espresso, because everything was just far to uniform.

What have you seen in testing this grinder/burr design? Any numbers after screening the grinds?
Can you link to a single high-impact Proust journal paper published in the last 50 years?
Not without massive fees, and no store accepts it around me.
Yes economic system is highly flawed.

Elon Musk owns $400B. Earth will become uninhabitable after 1 billion years from now (when the heat of the Sun becomes too large for us).

This means that Musk, if he lived that long, would be able to spend $400 every day until the death of all life on Earth.

This is 15 times the current average daily income worldwide.

If this is not insane, then what is?
I have to admit I have a hard time relating your comment to my experience.

I remember a case where we were using a library throwing exceptions when it could not parse some string. I think we were parsing IP addresses, or something like this. There was a case where this was called in a hot loop (like thousands of IP addresses in a roe) and for whatever reason in some cases most of them were invalid, thus throwing. Then simple error handling: the caller catches the exception, logs the error and checks the next one.

The program was frozen for seconds. Replacing the parser with the same logic but returning a bool instead was something like 1000x faster. That was on MacOs Clang Arm.

I don't see how a few extra ifs (though none were required in this case) would change anything.

Generally I'm not a fan of exceptions, you never what something is going to throw. The majority of the crashes we see in production are unhandled exceptions. Turned out the documentation did not mention that this function could also throw std exceptions on top of the lib ones in this specific case.
I Confronted Microsoft About Blazor's Future [video]
I was never convinced by the argument that patients and doctors can't be trusted to request the care they need, and would overconsume healthcare unless strictly constrained. I mean, it will definitely happen (I know some hypochondriaques), but to what extent? On one hand, "overcared" patients would likely avoid serious illness through prevention, so it's not obvious costs would explode. And on the other hand, there's a limit to how many useless treatments you can push onto patients. However, there seems to be no limit to consolidation and price gouging...

I'm glad this article provides real data and solid analysis to back my intuition.
WordPress Contributors and Leaders Call for Governance Reform in Open Letter
In fact, GP quotes "350 nJ" which is a tiny fraction of a watt-second.
Thank you for the explanation! I was totally confused about it. I thought the pump is at the other end of the tube.

In that case I agree that a video where one makes coffee with it would be useful. That would have disabused me of my confusion immediately.
Usually the third field is philosophy. Sociologists have to go out, meet people, and observe things, while philosophers can simply think alone in a closet.
Ask HN: Join My Fintech Journey as a Co-Founder
I'm looking for a co-founder (either business-oriented or technically inclined) to join me in scaling FIXParser https://fixparser.dev, a profitable company that provides a TypeScript npm library designed to help trading firms automate and streamline FIX message workflows.

I'm based in London as the solo founder of the business, and I'm looking for a capable partner who shares the same vision to collaborate and achieve great results in this space.

Our product is already in the market and generating revenue, but we have ambitious plans for growth. We’re aiming to raise venture capital in the near future to accelerate development and expand our platform. There are plenty of exciting opportunities, including integrating AI-driven features to enhance the product and further differentiate ourselves in the fintech space.

If you’re passionate about fintech, automation, and AI, and are excited about joining a profitable startup with huge potential, let’s talk! My email is victor@logotype.se
I previously wondered about the generator trailer. Hook it up for long trips and travel without fear.

Can a typical EV battery charge while driving or would they need to be redesigned for this purpose?
The default configurations of most terminals includes illegible color combinations.

So I think it's not on every user to somehow design optimal color palette settings on their computer that work in all combinations (if they even can), but rather on the developers of software not to say "Hey, I bet every yellow would be legible on white" or "Yolo, I bet yellow is legible on every background, so I'm just going to set this foreground to yellow and not set background at all."
Honestly, there are a bunch out there at similar price points to the big names, but I think the critical mass of the ham community is too geriatric to understand what IQ means and just wants to ragchew on 20m. Based on what I've seen the younger crowd is all up in the V/UHF space playing with digital radios but that's where SDR has seen the least penetration because you need something spicier than a repurposed AF ADC for the available bandwidths. I've literally seen people on reddit pleading for the ability to dump the entire 2m band at once from an HT and practically, that's pretty trivial, there's just no hardware. I'm starting to wonder if the big radio manufacturers are trying to market segment the AD9xxx/ADRV9xxx chips away from the consumers and towards to military customers. They're more expensive but you can get 9363s and 7010s for $20 ea, so total list price around maybe $500.
The homeless people we don't see are not the ones rotting away on the street, and most likely will not be affected by whatever they're proposing. The ones who are, tho, need help by any means necessary. I consider it a cruel and unusual punishment to just let them slowly die in public while providing "outreach" that goes nowhere.
> One one side, we help businesses (consultants, investors, and startups) find, connect, and learn from experts. On the other wide, we make it easy for experts to get paid to share what they know.

You should fix the typos in the linked notion document. I am guessing the typos are an accidental result of a recent edit, since the description in notion is not one-to-one with the description you pasted here.

Would you consider remote Canada?
> There are infinitely many primes that can be formulated by squaring two whole numbers and adding them together. [...] By insisting that one of the numbers you’re squaring be odd, perhaps [...] makes the problem much harder.

Does it? For any number a, a^2 = a (mod 2), and primes greater than 2 are all odd, so if a prime p = a^2 + b^2, doesn't one of a or b have to be odd? Reducing mod 2, p = 1 (mod 2), a^2 + b^2 = 1 (mod 2), a + b = 1 (mod 2), so either a = 0 (mod 2) and b = 1 (mod 2) or vice-versa?

edit:

If Euler proved infinitely many such primes exist then "With this in hand, Green and Sawhney proved Friedlander and Iwaniec’s conjecture: There are infinitely many primes that can be written as p^2 + 4q^2." makes no sense without a further condition of p or q, let (in my notation) a=p be odd and b=2q be even.

Now having finished the article, I think this was just sloppy writing, and the actual accomplishment is related to the post-perhaps clause: one of p or q has to itself be a perfect square? Anyway, I have very little certainty about what was actually accomplished from reading this article.
This is great thank you. Been a k8s admin for many years but obviously still need to look up fields from time to time, and trying to find it or an example in the k8s documentation is always difficult
There are a few "The Psychology of Money" books/talks including by Charlie Munger. Which one are you referring to may I ask?
Fair point, we're already at the level of near full OS in the UEFI. Odds are good there's already full clock and crypto libs, so maybe it's not that much of an addition.
So, the problem with these types of arguments is the evidence is often obscured by shell games with labels, or ignoring the elephant in the room.

My research sort of straddles statistics, epidemiology, neurogenetics, and social sciences, and my impression is there's a great deal of stuff that doesn't become interesting to people until it involves social sciences. I say this from the perspective of someone who often wants the math and whatnot to be more appealing to people when it's not.

You can take some model, or method, or advance, and if it sits somewhere in a wetlab or physics building, no one cares. But if you make it about relationships, or money, or happiness, or children's social development, it becomes interesting.

The value is so built into the fabric of these things we don't even recognize it half the time. It becomes another physics grant, or engineering grant, or medicine grant. They're social science in nature, but god forbid you call it that because it's seen as soft or irrelevant even though that's the thing people are actually most interested in. People don't give a damn about memory models in bare-metal programming, or electrical engineering, but they do care about being able to talk to their relatives on the other side of the globe.

The other thing that always strikes me as odd about these discussions and decisions is we as people are, well social beings. So do you want to leave the study of our social behavior and experiences to ... what exactly? Religious theory? Astrology? What else is there than scientific study of psychosocial phenomena? Are you saying that social phenomena shouldn't be studied at all? That it should be studied nonscientifically?

Within the social sciences there's a well-known phenomenon of people coming in from elsewhere and thinking they can solve all the problems because they're physicists, or chemists, or whatever, and that you can just slap whatever paradigm works in that to study psychological or socioeconomic phenomena. It's seen as naive, and it inevitably fails because it doesn't scale up to the population level, or doesn't address the difficulties of the real-world phenomenon as it is, or whatever.

There's also the problem that some of the biggest contributions of social science aren't what people think they are. Modern meta-analysis and preregistered replication research both came from psychological research for example (meta-analysis from clinical and educational psychology), and I doubt people realize that. But it's widespread in biomedical research, and should probably be applied more widely in many other fields. In certain ways it's more scientifically rigorous than what happens in a lot of biophysical science. But it goes against the stereotype of what "psychosocial research" is.
> I also upgraded OpenWrt Routers by soldering bigger RAM and bigger flash chips in the past

Sadly this is harder than it used to be because with devicetree the flash size is hardcoded, where before it was auto-detected (so previously you could swap the flash and continue to use stock firmware, not you need to compile custom firmware).
The title had me quietly think to myself "Dart was the mistake".

So many stack/enviornments are leveling up their languages: ObjC => Swift, Java => Kotlin, Erlang => Elixr, C++ => Rust, Javascript => Typescript

Dart feels like one of the befores, not the afters.
Character.ai steps up teen safety after bots allegedly caused suicide, self-harm
Some feedback - your market is undoubtedly going to be coffee nerds, and we are instantly turned off by the video of the very unappealing shot being pulled on this page https://velofuso.com/trefolo.

If any situation ever called for the early 2000's ideal expression of espresso, this is it. Break out the double city roast, grind it fine and pull some ristretto shots with tiger stripes. It might taste trash but it will make for much better marketing.

Kudos for making something cool. 5 second preheat is awesome.
Are the Trefolo legs weak? It looks like the wood for both sides of the legs only connect in the back.
Oxidised causal inference in software design
This has happened to me so many times. Especially in the distributed database I work on ... "hmm maybe I need to let the experiment run for longer, this data is noisy so it probably needs more time to show a trend line".
I didn’t know about Typingmind, but it’s super nice. Love their community prompt library. We’re aligned on the idea of being more productive with LLMs.

I’d say Dobble has some cool features like shortcuts (end goal: do everything without my fingers leaving the keyboard) or multiple chats on one screen (soon extending to “spaces”). Still working on the longer-term vision, but want to create the best env to use LLM with simplicity.

I started this side project two weeks ago, released it to some beta testers, so there are about 30 users at the moment. Gathering feedback atm, open to ideas for improvement.

I’ll open-source it by Q1 2025. We could imagine having a special bundle with your credits for Claude only.
Not sure what alternate universe you got stuck in, but I'm using a Macbook Pro with all those features, plus some. OS accessibility has gotten better, not worse. Web design has gone the opposite direction unfortunately, which is ironic because the web community is the one berating everyone over a11y constantly
It sounds like the person you responded to isn't able to see, so they depend on the tactile/audible feedback.
All taxpayers are exposed to the stock market via taxpayer funded defined benefit pension plans and retiree healthcare plans. Stock market goes down, taxes go up (and/or quantity/quality of government services goes down).

Of course, that can happen anyway due to a relatively rapid decrease in the purchasing power of the currency.
That all may be true, but that still doesn't mean the outputs are the same in depth, complexity, or understanding
What is now "AT&T" is the former Baby Bell RBOC SBC, plus PacBell, plus a couple of other companies, which bought AT&T wireless & long-lines. Thus, SBC acquired and assumed the AT&T name from its former parent.
Fujitsu 144-core Arm chip: 2nm and 5nm chiplet, 3D-stacked CPU cores over memory