skysight-inc/HackerNews huggingface dataset:
Learning crypto isn’t just a box ticking exercise that you learn it and now you’re qualified to “do crypto” for the rest of your career. I also studied this in university but I know that I don’t spend anywhere near enough time to day to avoid, well, any pitfalls of rolling my own crypto.

I currently work on our company’s Auth systems and half my team still side-eyes our own work, despite having worked on this area for years now.
Unfortunately, none of this DOGE bullshit will do anything to the spiraling debt.

The majority of the US budget goes to social security, medicare/medicaid and defense spending. This is about 60% of the budget.

The billionaires are in control of the US now as oligarchs and defense spending is how they suck up money.
So that is never getting cut.

Social security and Medicare will be untouched even though they talk about cuts, because that's how they keep a good chunk of their voting base placated.

The cost of medicare/medicaid will continue to spiral to the moon as the Trump admin killed the governments ability to negotiate drug prices again, because this is good for the oligarchs. But even ignoring pharma, the cost of services is still growing out of control.
The arrogance and elitism is wild. I never said people shouldn't use libsodium.
> There was an open letter in 2020 summer from a lot of "prominent scientists" that claimed that suddenly social distancing didn't matter because BLM.

If you're referring to this letter, that characterization is pretty much the opposite of what it says: https://www.cnn.com/2020/06/05/health/health-care-open-lette...
As a side note, federal employee salaries themselves (*) account for less than 8% of the federal budget. What that says about the intent of slashing the workforce is beyond me.

(*) https://www.brookings.edu/articles/is-government-too-big-ref...
You mean like the law that was passed overwhelmingly by Congress banning TikTok that Trump told businesses to ignore or do yoh mean like unilaterally trying to block all spending when that is suppose to be controlled by Congress?

Congress is letting the President take their power. Even Republicans in 2016-2020 wouldn’t have done that.
You can auto detect it but please provide a way for the user to override it
Please link the rigorous study that says human/drug trafficking won't change if you close the border.

Locking it down to legal point of entries only can do nothing but help.

It's easier to secure a few locations than many miles, you don't need a study for that.
AI is absolute trash. It's a scam. Like Bitcoin.

And LibreOffice.
Thanks, I thought I was getting forgetful!
>The market is utterly saturated and honestly it's a bit depressing. People putting their heart and soul just to have "0 views, 0 comments". What's the point?

to hope for that 10 views and one quality response, I suppose.

I mostly just want community though. It's a crapshoot advertising a game, it's just nice to get to know other ambitious, talented people working in parallel with me. It's a shame that the only way to really find that is through industry itself.

Discord works too, if you have time for open source contribution. I'm sadly still in this circus of a job search right now, though.
Too late now, the voters asked for this.
This article put into words what I felt when I decided to stop using Neovim and start using Helix.

It's exhausting fixing broken plugins after an update and wading through the dozens of Lua configuration files to add support for a new language.

I enjoy Neovim's ability to be customized but I very much enjoy the out of the box experience with Helix.
Did Biden write anything he signed? This comment is a bit disingenuous considering that Biden was asleep for his entire term. His nap times were legendary.
I kept waiting for actionable advice, like maybe a site somewhere documenting the current best practices on common tasks, say securely implementing the complete lifecycle of encrypted sessions. Got to the end and it seems the advice, if there is one, is to pay some cryptography expert to review my system. And I have no idea if the author is a cryptography expert or an overconfident expert-wanna-be rolling their own crypto advice. So yeah, I agree.

Can HN give some actionable advice on dos, not don’ts (I already know all the don’t like don’t use OpenSSL primitives, don’t use AES-CBC, blah blah)?
Where are you getting this NATO target of 5% of GDP?

>...In 2006, NATO Defence Ministers agreed to commit a minimum of 2% of their Gross Domestic Product (GDP) to defence spending to continue to ensure the Alliance's military readiness.

>...The combined wealth of the non-US Allies, measured in GDP, is almost equal to that of the United States. However, non-US Allies together spend less than half of what the United States spends on defence.

https://www.nato.int/cps/em/natohq/topics_67655.htm#:~:text=...
I always use curl, jq, etc. It's so simple and straightforward. But I would be lying if I claimed it to be easy to convince my teammates to use the same toolset I use.
Same reasons JS in HTML documents is useful??

Frontend form validation. Hide/show widgets, etc
1. Why wouldn’t CISA release the IP address? Blocking a specific IP is much easier for a hospital than patching or replacing every affected device. Some might argue that hospitals should just remove the device altogether, but CISA has stated that keeping the device and disabling its network capability is an acceptable solution. It seems very odd not to disclose the IP address. The only plausible explanation is that they want to monitor U.S.-based egress traffic to that IP.

2. The backdoor transmits data in plain text to a static IP address—something a competent hospital network administrator would have inevitably discovered.
The point is moot, since you can use your vim config as is, with nvim. I did exactly that, so the only change needed was to actually alias 'vim' to 'nvim' in my bash_profile.

So I guess this post complaints about the way the author chose to configure nvim.
My general workflow with ai so far has been this:
- I use copilot mostly for writing unit tests. It mostly works well since the unit tests follow a standard template.
- I use the chat one for alternating between different approaches and (in)validating certain approaches

My day job is a big monorepo, I have not investigated that yet but I believe the models context sizes fall short there and as such the above use cases only works for me.
If you've faced discrimination from DEI then I regret to inform you that you are being judged on merit and talent, relative to a sample of your ethnic cohorts. You might qualify for the job, but you still have to compete for it.

You should talk to more Americans that were involved in the corporate structure of the 1950-1990s. Old money ruled the place and white, protestant men filled every seat in the office. It was a caste system, and worst of all it was protected by the Civil Rights Act which did not demand equal opportunity when hiring. This was destructive to talented minorities, protective of untalented executives and ultimately wasteful to everyone that wasn't on "the inside" of the administrative structure. Something had to be done, these businesses weren't going to stop themselves from becoming insular and hostile boy's clubs.

Regan had the right idea; keep affirmative action, but axe or soften the numerical requirements. Trump had the wrong idea, but went with it anyways because he knows that today's neocons are hungry for some good, old-fashioned, government-sanctioned racism. You should be careful to not let your insecurities choose who you think is right, especially in pissing contests where you're liable to get wet.
The advantage for text based interfaces is that they work over ssh/tmate over trans atlantic connections whereas the GUI tools would suffer greatly. It just works everywhere and if you learn it, it will be just as good as a gui debugger. Potentially even more ergonomic without hunting for options with a mouse.
is it?

The 2024 budget was 15% national defense.

in 2024, the US Fed collected 4.9 Trillion in taxes and spent 3.8 trillion (78% of revenue) on the following programs: Social security, Medicare, health, and income payments like disability.

It also had 1.8 Trillion dollars of deficit spending, bringing the total to 6.7 trillion with welfare taking up (57% of total spending). The fed spent 0.9 trillion (13%) paying interest.

https://fiscaldata.treasury.gov/americas-finance-guide/feder...
Agreed on all points.

However, it still leaves the question: Were cuts possible in terms of realpolik in any other way? We can argue that there should have been more nuance and in the ideal world, yes, we would like more measured cuts.

Additionally, even if we found areas to cut which are generally agreeable, the proponents of that spending would use every means possible to oppose those cuts. The special interests would have every incentive to use the most inflammatory language to incite aligned partisans.
It seems to me that the problem the author writes about is bigger than the writer abstraction. To me it feels like the lack of interfaces* and inheritance in the Zig language hinders creating meaningful abstractions because you always have to use composition.

Alternatively you could argue that this just isn't the right approach within the boundaries of the Zig language: don't try to abstract, just provide a meaningful implementation (in the standard library) and re-use (using composition).

Note:

*) Yes, I know, you can create interfaces but this introduces lots of boilerplate code where to cast/forward pointers to their correct type/implementation. For an example, the author refers to another article: https://www.openmymind.net/Zig-Interfaces/.
Everyone doesn’t agree that health care is too expensive. That’s the problem.

The other issue is that a significant portion of the country is not guided by logic. But fantasies like if we don’t save Israel it’s going to prevent the second coming of Christ and all natural disasters are caused by “legalizing gay marriage”.
The ultimate in smaller government structure is a single despot: "Do what I say or I'll kill you."

The ultimate in removed regulation is an apparatchik unhelpfully advising: "Just don't screw up."

The ultimate in simple taxes is serfdom.

Those are the end-states of looking only at quantities while ignoring the changes in the character and mechanics of a government.
>>It’s pure radicalization and anything that can be labeled as a negative is rationalized to avoid regret.

This from the party that spent 4 years claiming Biden didn't have severe mental decline but "a stutter".
>While everyone is concerned about the risk of Covid, there are risks with just being black in this country that almost outweigh that sometimes.

Does it?

>White supremacy is a lethal public health issue that predates and contributes to COVID-19.

>However, as public health advocates, we do not condemn these gatherings as risky for COVID-19 transmission. We support them as vital to the national public health and to the threatened health specifically of Black people in the United States.

Do you think that anyone that has put his name under such idiotic sentence deserves state money in any form - except payments under ADA?
Again you haven't addressed the point I've made.
Speaking of helix, does is support vim key bindings?
Last time I tried, it was kinda disappointing to be forced to learn a completely key binding set.
The fact it is accepted by every single branch of government and is being done flagrantly in the open and their supporters cheer changes everything.
Bruno's pricing has changed recently, the lifetime offer is not available anymore. Prices tiers are: free, $6/month, $11/month [1]. Bruno's developers explained it was necessary to sustain Bruno's growth.

[1]: https://www.usebruno.com/pricing
As someone who still uses vim: no, you don't.

You'd have the exact same situation with various plugins for LSP or whatever (perhaps not the color scheme, but those always existed for vim too).

You're just pining for a time you had less functionality enabled.
You…you do realize that your country was ruled by a Trump devotee for YEARS and barely escaped that, and while that was happening, he destroyed the economy of Brazil, yes?
Ask HN: Does anyone still use code snippets?
Does anyone of you still use code snippets where you can type a shortcut and if you accept, it completes e.g. „fun“ to a function stub or has that all been replaced with AI-based completion tools like Copilot?

I noticed that I still like them and rely on them and was wondering if that’s the same for someone else.
I think the trick is to talk about the product rather than country.
It's not a perfect system at all but the Cesar Chavez movement and subsequent actions have greatly strengthened these workers' protections. These workers take these jobs willingly. This is not slavery, and your attempt to derail the discussion by equating it is poor form. Should there be more done to protect them? I think so, but that is an entirely different topic than the attempted sabotage of our food supply by artificially induced drought.
All your issues just sound like "Lemmy is buggy", not necessarily "federation as a concept doesn't work".

> Hopefully someday the community can rally around something better.

It's hard because if no one adopts it, it will improve slower. I'm sure Lobsters has its share of issues and bugs too, but there's simply been less peoeple to battletest it.

If we moved to whatever Bluesky uses it'd probably have the same growing pains. It's just a shame Open Source is slowly corroding and we only "really" fix such issues by paying developers full time to do the boring stuff (which ofc, most OS cannot afford).
There was an Obama era initiative called precision medicine, sometimes called personalized medicine and one of the people spearheading it was a software guy. I sometimes fantasize about using my good debugging skills to heal people. It is like Dr. House. But look up precision medicine.
There is interesting research in the use of hyperbaric chambers for improving concussion recovery and permanently.

https://pubmed.ncbi.nlm.nih.gov/35370898/
Why the China bubble still hasn't popped
He probably meant to say I am wrong concerning open source but then his inner llm kicked in.
Isn't it the whole point of helix?
Ask HN: Is AI converging on human-like cognition?
It seems every day I see another aspect of the human mind implemented in a very primitive form of course.

For example, chain of thought (CoT) can be thought of as the beginning of the internal monologue that you and I have and DeepSeek's CoT reads very similar to how one would think about a problem. Did nature also figure out the same solution? and was consciousness born out of something similar to CoT?

Another example I was reading about today is Mixture of Experts (MoE) where we have a router that dispatches tokens to subnetworks that specialize in certain domains. If this technique were to develop further would that lead to something like human hub personalities?

I may very well be finding patterns where none exist and these may be nothing more than metaphors at best. I have a very crude understanding of AI that's why I'm asking here hoping to get an expert's opinion.
> You mean easily exploited illegal alien labor?

Does that mean you support laws to protect those workers from exploitation by enforcing workplace safety standards and giving them legal guest worker permits? Great, let's hold the exploiters accountable by protecting the exploited.

But the plan isn't that, nor is the plan to deport them. Rather it is to put them in a state of fear of deportation so they don't complain about the exploitation.

You don't actually think the exploiters want to pay Americans a living wage, leave crops to rot in the field, or slow down meat packing plants do you?
I've had it do similar nonsense.

I just don't understand all the people who honestly believe AGI just requires more GPUs and data when these models are so inherently stupid.
While Emacs(I'm speaking of emacs here because that's what I use, but it should apply largely to Vi as well) is very configurable and extensible, I wish something was there that is more "batteries included" than them.

Recently I tried to use Emacs on a windows machine, and found that grep-find wouldn't work because it actually depends on an external grep program.

The same with modern context and language and project aware auto-completion, it's not bundled in, and you need external components like LSPs to work.
Security vs. Liberty. My country claims to want the latter, but gives up the former everytime for something convinient and "it just works".

Most people don't care if it's a black box leeching your data and causing national disrest. they just want to do a simple thing and forget about it. This is partiially why we're heading to doom.
Trump was elected on a mandate to dismantle the deep state. This is what people voted for.
Now this is an interest idea, have you had any success?
> I don't care what your global consensus is. Jews are entitled to their homeland

Evidently. You seem rather incensed that I even mentioned the hundreds of nations that oppose Israel's existence on non-religious grounds. The nations that observe international law, the eminence of criminal justice, the treatment of minorities, the protection of journalists, the (repeated) violation of Syria's border and the displacement of Israel's remaining native population.

Simply put, I agree that Israel's natives are entitled to their homeland. It's unfortunate for the Jews then that they are not the Arabs.

> so that there is a place to go where they can be protected from genocidal maniacs who are creating this "global consensus" with intent of wiping them out.

The Zionists very helpfully showed us that it doesn't take a global (or even religious) consensus to incite genocide: https://en.wikipedia.org/wiki/Operation_Cast_Thy_Bread

For the courtesy of the Jewish people I do not conflate Zionism with Judaism. Anyone examining Israel's history can very easily distinguish for themselves the extremists and the oppressed.
paying to fix your own bugs sounds like a skill issue
IMO if a website supports both light & dark themes, it should _by default_ switch automatically. If the site wants to allow overriding that, that's fine, but I hate having to constantly go into the settings of sites to switch it to "Use System Default" instead of "Light theme". Especially when sites don't store the data very long, or it's a site like AzureDevOps/Jira/etc which is deployed across multiple instances and therefore has a setting per-instance.

Depending on the device I'm using and where I am, I either let my computer automatically switch based on time of day, or keep it on dark theme. Sites that have manual toggles that don't default to respecting system settings make automatic system-wide dark/light mode an absolute pain.
I use OG vim mainly because I perceive it as more performant. Maybe my use isn't typical, I don't know, but when I try out nvim every other year or so I usually switch back due to it feeling a bit sluggish. Since version 8 OG vim supposedly has async support, I'm guessing that's why the ALE stuff doesn't seem to lag anymore.

Recently I've tried zed. It was very weird. Installing modules is slick and performance is decent most of the time, but it lags sometimes and doesn't play nice with i3. I'm guessing it somehow sucks in all keypresses and only hands them over to i3 when it has exhausted its own checks and stopped lagging, causing rather harsh interruptions in my workflow where I usually hop immediately from the code to browser, shell or whatever to check on we results.
All I'm reading here is more of the same scare-mongering. I don't casually implement cryptosystems to be used in critical situations, and I wouldn't attempt it without a serious amount of research. But "never do it yourself" is a poor substitute for actually spreading knowledge about how to do it and open discussion of pitfalls. It rubs me the wrong way.
I just wrote my own [1] and I will be Sure that this one will never be monetised

[1] https://github.com/warmuuh/milkman
I am surprised that "professional headshot" would be a task that can be outsourced to an AI. Even with the various filters available these days, how do you work around the need to actually have a professional grade kit?

At a minimum I would expect you'd still need a professional lighting setup, a sturdy tripod, the right studio background, a good DSLR (or mirrorless), properly diffused, reflected and toned flash, and the skills to really work with RAW images to get the best possible output. And that's even before we include the skills and knowledge to guide their subject to just the right poses to get the subtle body language right. (Yes, the relative position of your spine and the stress you put on your upper body does affect how comfortable and confident you appear in the final shot. I know that now.)

More than 20 years ago, my boss at the time recommended that I get a professional headshot. We were producing printed[ß] booklets as part of our marketing strategy, and I wrote occasional columns in them. He wanted to have the author's face attached to the pieces. He recommended that I pay for the service myself so that the photos would remain with me. If the company had paid for them, getting them into any other (read: off-work, post resignation) use would have been awkward, confusing and possibly a red flag for the accountant. One of the best investments I've ever made. I paid for three slightly varied versions, and used them actively for about a decade.

As it happens, it might well be the time to get a fresh set.

ß: an anachronism, no doubt
>After training, we could take advantage of the structure to remove ~80% of the weights in topographic layers without sacrificing performance

This is really interesting to me. Is it that the structure clustered the neurons in such a way that they didn't need to be weighted because their function were grouped by similar black box properties?
No, instead you said you learned about how to understand "known plaintext attacks", counting on the average reader of this thread not to know that's a content-free claim. One time, in a "graduate level" cryptography class, you even built a protocol using Diffie-Hellman on top of TLS. OK!
I also fell into the neovim pit of plugin horrors. The good news is, you can get out, empty completely your config (or rather, go back to vim) and start from scratch with only what you need.

(I now make sure that my config works equally well in vim and neovim so I don't have to worry about the odd server with only one vim)
Perforator is a modern eBPF profiling tool
I mean, these type of cheap gig work apps already basically destroyed such work for people who were good at it since they can't compete with a guy who will do it for a fiver
So you don't even have a cursory understanding of the law or why it exists? As long as it fits your agenda, literally anything goes. Legality, lawfulness, fairness, the wellbeing of tens millions of people? All be damned.
Users flagged it. We can only guess why users flag things, but in this case it seems unlikely to have any chance at a thoughtful conversation. It has the Ultimate Troll Ingredient but little actual information.
There was evil-helix but it looks like it's stalled. I wish there was one.
With signing server level of interaction is the thing that really matters. I would probably say that if you implemented algo doing the signing operation it might be questionable. But if you implemented the key storage fully yourself, it is even more questionable. Or design your HSM module, or just write the keys in plaintext or minimally protected on the disk...

Also who designed and implemented checking the appended blob? Also crypto...
> Does it?

Sure .. All the risks of being black in the USofA and the additional risk of being even more likely to contract COVID while black.

https://wwwnc.cdc.gov/eid/article/28/11/22-0072_article#:~:t...
It's also just a profoundly good product. If you can use KMS, you should.