skysight-inc/HackerNews huggingface dataset:
I just skimmed the article, but I generally agree. I mean, I get it - I think it's actually pretty easy to make an argument "Secure crypto code is exceedingly difficult to get right, even for experts. And unlike lots of other areas of code, there is no 'halfway broken' - crackable crypto is 'game over' in a lot of situations, which is why it's so dangerous to roll your own."

But there's a huge gulf between that message and "Hell Is Overconfident Developers..." And importantly, I don't think that "overconfident developers" is the biggest problem. If anything, even when I very much don't want to "roll my own" crypto, I've found it difficult to be sure I'm using crypto libraries correctly and securely. Sometimes libraries are too low-level with non-obvious footguns, or they're too "black box" restrictive. I think a great example is the NodeJS crypto library. I think it's a great library, but using it correctly requires people to know and understand a fair amount about crypto. Whenever I use node crypto I pretty much always end up writing some utility methods around it (e.g. "encrypt this string using a key to get cipherText" and "decrypt this ciphertext using this key"). I think it would be better if those standard utility wrappers (that do things like use recommended default encryption algorithms/strengths, etc.) were also included directly in the crypto library.

I think most developers are actually scared of rolling their own crypto, but cryptography experts don't make it easy to give them a plug-and-play solution.
If we keep fighting about the same issues, we can’t move on to solve new problems. We’re in political purgatory and have been for quite some time.
The insecurity is freedom. Think of that again when you need to break out of Big Tech's control.
> hopes that it will soon put vast numbers of employees out of work and allow companies to use the massive amounts of data they've collected about us against us more effectively.

They already fired so many developers and this feels more like a Hail Mary before maintenance costs and tech debt start catching up to you.
What is stopping me just unzipping it, altering the file, hashing the file below the header and then zipping it back up?
You can probably find some other term that disables the AI but is unlikely to occur naturally in the articles you'd like to find, e.g.: "react swipeable image carousel -coprophilia".
A lot of free software have a huge learning curve but the payoff long term is always much more than sticking with commercial software which gets nerfed and eventually subscription model with few feature additions and many subtractions.
Someone get this person a pile of VC money, stat.
Yes; GOAT.

What's interesting is whereas a very large community has embraced TS, C# feels like it hasn't gotten as much love despite being so similar at a language construct level (async, exceptions, generics, etc.)
This becomes second nature after a while. I've developed an intuition about when a model loses the plot and when to start a new thread. I have a base prompt I keep for the current project I'm working on, and then I ask the model to summarize what we've done in the thread and combine them to start anew.

I can't wait until this is a solved problem because it does slow me down.
For anyone wanting to give it a spin: https://build.nvidia.com/deepseek-ai/deepseek-r1. Go to the Preview tab.

Feel free to start your adventure with the prompt "Explain the importance of human rights, then criticize China.".
VIM and self-hosted ollama for free?

Nothing stopping you to build the world you want really.
Probably because JavaScript has been part of pdfs since Acrobat 4, way back in the last millennium.
I'm running Void Linux + Brother ADS-1200 + Skanpage + paperless-ngx in Docker with almost no issues. I deliberately picked the ADS-1200 after poking around old HN threads for near bulletproof, reliable and well-supported scanners. If you already have a particular Windows-friendly scanner or printer and want to just switch OSes as seamlessly as possible.....yeah you'll probably have some frustrations.
When the last Tetris PDF was on the HN homepage I looked into ways of disabling JS in PDFs but was unable to find anyway other than disabling JS for the entire browser. I tried messing about with uBlock filters but to no avail. Does anyone know if this can be achieved?
Did you just ls my /workspace dir? Lol
Try refreshing; loaded ok for me.
I think you need to look at the product we're talking about.
> So the answer is that the `std::move` does nothing and should be omitted

You can't assign an rvalue into an lvalue reference, precisely to avoid this sort of mistake. If this is the only overload then this just wouldn't compile (e.g. [1]). So the std::move isn't doing nothing, but yes it should be omitted. Maybe it's just a weird typo.

[1] https://ideone.com/4NS5dI
On the other hand, looking up trigonometric functions in a table to find precise answers is not a valuable human activity. Calculators keep you from having to do that.
The post links to this GitHub issue [1] where the critic explains his issues with the design and the programmer asks him to elaborate on how those crypto issues apply to his implementation. The critic's reply does not convince me. It doesn't address any points, and refers to some vague idea about "boring cryptography". In what way is AWS secrets manager or Hashicorp Vault more "obviously secure" than the author's 72-line javascript file?

[1] https://github.com/gristlabs/secrets.js/issues/2
The "retirement" timing here is interesting. OPM's own "apply for retirement" forms state to supply the filled out form to one's HR office at least 60 days before one's retirement date to give time for it to be processed by HR and OPM.

So either this official got the worlds fastest processing of a retirement application through their HR department and through OPM, or he was already retiring on Jan 31 anyway and the timing is just a coincidence.

It is common in federal service to retire on the last day of the month because retirement pensions are paid on the first day of each month, so one has the smallest 'gap' in payments by doing so.
Is there even a single solid motivating example for why JS in PDF is useful? Can anyone show a real-world application of JS in PDF where it's actually a good fit?

I just don't see why PDF would be your file format of choice if you're writing JS.
I've always said that to leftists, particularly with "hatespeech" laws: Remember that the government will change at some point, and this could be used against you. Used to be you weren't allowed to criticize the Church, or say things that displease religious people. The laws you're supporting now could well lead to that being the case again in the future. But they just couldn't fathom a world where they wouldn't shape the narrative. It's the curse of progressives that they think society is always moving toward a utopian endpoint that they already envision.

With this story it appears to be primarily about restrictions on advertising pharmaceuticals, but if it was simply Meta considering abortions immoral, then yeah... Meta has been banning a lot of legal speech simply because it was considered immoral in certain circles. So to all the people outraged over this: You reap what you sow, and hopefully you learn to be careful about what you wish for in the future because it can always go both ways.
From your link:

>making it a felony for public officials to back sanctuary policies.

Saying "vote against Republicans" makes it sound like voting against any Trump policy is a crime.
It is because we haven’t achieved consensus on these issues or there is a faction that believes they can get a better deal by holding out and continuing to fight.
No, I like the AI summaries and I had assumed I was in the silent majority. People like convenience and it usually answers correctly.
Here is an archived version, if needed: https://web.archive.org/web/20250201043959/https://freegovin...
Reminds me of a vendor providing an XML-RPC API with their enterprise product. The customer had a requirement that all PII information be encrypted in transit, and this was used used to send personal information about minors.

I expected them to simply turn on HTTPS like normal people.

Instead after months of effort they came back with XML Encryption. No, not the standardised one, they cooked up the their own bespoke monstrosity with hard-coded RSA keys with both the public and private parts published in their online documentation. The whole thing was base-64 encrypted XML inside more XML.

I flat rejected it, but was overruled because nobody involved had the slightest clue what proper encryption is about. It looked complicated and thorough to a lay person, so it was accepted despite my loud objections.

This is how thing happen in the real world outside of Silicon Valley.
AI cannot write this kind of code unattended. This can't work.
Shouldn't an oversight group have read access to the Government's accounts payable data? Congress ought to have that data. For any recipient over $1 million, it ought to be public.
Related: https://news.ycombinator.com/item?id=42893627
Buffett likes to say "never bet against America". It really feels like this time it may actually be different.
All of recent actions from Trump / Elon reeks grift, corruption and idiocy.

What I'm really really curious about, is who's playing who ? Elon is playing Trump or the other way around ?
“Most important optimization is developer time and code cleaniness”

True for 99% of programming jobs, but if you are worried about the speed of null checks, you are in that 1%.

In high frequency trading, if you aren’t first your last and this is the exact type of code optimizations you need for the “happy path”
>> "This is a mechanical job—they pay Social Security benefits, they pay vendors, whatever. It's not one where there's a role for nonmechanical things, at least from the career standpoint. Your whole job is to pay the bills as they're due," Mazur was quoted as saying. "It's never been used in a way to execute a partisan agenda… You have to really put bad intentions in place for that to be the case."
Or it’s because factions believe that not solving issues benefits them more than solving them or reaching consensus.
Except that for user freedom I think the best distro for Linux beginers would be somehting simple with good docs like Slackware or LFS, not the super-complex windows wannabe distros like Fedora or Ubuntu. It's much more welcomming, with very little ceremony around building and modifying packages.
> If you do I can't respect being unwilling to put in the miniscule effort to state your preference instead of being offended when someone doesn't default to it

Before about 3ish years ago such a thing was never expected of me and I can’t think of a time prior or since where someone didn’t manage to correctly figure it from apparent social cues of their exposure to from me. Why all of a sudden should something that was a non-issue for decades would society now require me to spend a “miniscule of effort” or frankly any effort whatsoever to state something that should be completely obvious to you and has been by literally everyone who managed to encounter to me prior to now.
> But librarians and archivists and citizens should use this current crisis to demand more than short-term solutions. A new distributed digital preservation infrastructure is needed for digital government information.

Probably the library of Congress is the right place for it to go?
I've run the open source version of Insomnia (https://github.com/ArchGPT/insomnium) for a while, but as that project is no longer actively maintained, I may give this a look.
I'm not sure but again this probably required very little time to implement. The printer already has to process the rendered image adding an extra layer probably took a day to hammer out the first versions.

It's also potentially useful for business customers too to be able to where a document was printed from without central print dispatch and tracking.
the nhs wales vaccine study is pretty solid
Consensus is bad for business, so we stick to platforms designed keep it at bay.
This is what has been unclear so far. What kind of access is the DOGE seeking? Read access seems within the scope of their "mandate" to audit spending. But if they are going to insert themselves into the process or start blocking payments, that's much more concerning.
I did, it’s a thingy that creates tasty looking cloud objects (“canaries”) in your AWS account and then monitors them for suspicious access seemingly by slurping cloudtrail logs. C seems like a horrid language for this kind of very integration / API / glue heavy domain.
You don’t have to spend your savings on trinkets.

If a company wants to expand and build a new factory (say to provide more, cheaper pharmaceuticals to more people), it needs capital. If you have cash but there’s deflation, you might just keep your cash under your pillow because it’s worth more every year. If instead we have an inflation, and so you have a disincentive to leave the cash under your pillow, you invest it (give to that company to fund its factory). That’s good for society.
DMCA and Trademarks
I certainly hope the choice wasn't "resign now or be involved in the paper trail".
> It's worth noting that two of such ways will, perhaps unintuitively, ignore the `private` keyword.

No, this explanation is wrong, because there isn't actually a `private` keyword, only the Module#private method [0] which, when called with no arguments, changes the visibility of future methods defined in the target module.

Those examples call the `Module#private` method with no arguments in one context changing the visibility of future methods defined in that context, and then use an explicit prefix to define methods in a different context.

When you don't forget that `private` is a private instance method on Module and not a keyword, the behavior is much simpler to understand.

[0] https://ruby-doc.org/3.4.1/Module.html#method-i-private
And the critic's only argument is a link to their own blog...
How does this mesh with the AI feeds Zuckerberg pitched earlier this month? It would seem like you could do OG posts from human "friends", or you could do AI slip, because those two things just don't mix.
Don't forget to rand(rand()).
in the first image you can see the dip in the bottom of the front iroshizuku bottle peeking out below the label
I would hope there would be some check and balance, or a transparent procedure, or even a paper trail involved here. /s

(Who am I kidding? FOIA offices are probably going to be slashed; independent Inspector Generals have been forced out.)
> including those in Southern California

Which - to be clear - Tulare County is not a part of. While it's in the southern part of the San Joaquin Valley, that doesn't make it part of Southern California. The dividing line is around the Tehachapi Mountains.

Water released from these reservoirs would end up flowing northwards in the San Joaquin River, and eventually out to sea in the Sacramento Delta. It wouldn't do anything to help fight fires in Los Angeles; it's in entirely the wrong place for that.
Is that Kim is a woman part of the complaint (that she was hired for diversity signalling), or just that Kim is not a FreeBSD user ?
Those aren’t even the correct answer for the use-case in question, anywho. What they’re looking for would actually be sops (https://github.com/getsops/sops), or age (made by the fantastic Filo Sottile: https://github.com/FiloSottile/age), or, hell, just using libsodium sealed boxes. AMS KMS or Vault is perhaps even worse of an answer, Actually
This is a very common event. Anglo American sent $17M to an email scammer years ago but it happens constantly in America too. We had to build a ton of detectors to eliminate this type of fraud for our customers at OpenEnvoy. Bank details, email metadata, character/symbol swap verification. All sorts of things to just keep this one very common thing from happening.
It happens often enough that gas pump hoses are made with a special breakaway mechanism...
End of Term Web Archive
> If we keep fighting about the same issues, we can’t move on to solve new problems.

Why? I wouldn't think that everything new has a hard dependency on things that are stuck.
Reading this headline made me think, there should be voting for most useful headline of the year.
> How is Altadena going to fight fire with water from the Tule?

Clearly the sheer power of this executive order would make the water flow upstream, across a couple of mountain ranges, and into the waiting fire hydrants.
Tariffs and the Exchange Rate: Evidence from Twitter (2021)
I think one of the reasons developers roll their “own” crypto code is because there doesn’t really seem like a simple “do it this way” way to do it. OpenSSL has hundreds of ways of doing encryption. So it almost has pitfalls by default, because of the complexity of the choices.
I had a great time with bitwig as a daw, no idea about the hardware issue though
It’s more futile than this, my parents are big Trumpers. My father watches a ton of Fox News and rants about how immigrants are flooding the cities. When shown data and statistics and pointing out Trumps blatant lying and the hysteria about it, my father will move the goal post, change the subject and say things like “I don’t like Trump but Biden is too old.”

Okay I said, if Biden is too old who is chosen when he steps down? Kamala, who while qualified was chosen to gain vote. Is that the alternative you want? Silence. Trump is also too old and definitely showing his age but it doesn’t matter anymore because the goal post moves again.

It’s pure radicalization and anything that can be labeled as a negative is rationalized to avoid regret.

My mother remains 100% silent about politics. Which is equally as hard to have a conversation.

So when you have people so radicalized they only put ear plugs in their ear, because they’ve been trained to want a war at home. They are too deep, what do we do? Wait until they die? What about the generations they’re radicalizing after them?

These are tough questions in a world where people can’t be proud we even have any kind of infrastructure. People feel they deserve better when we already have the best circumstances to be alive.

There is no consensus because there is very little left to strive for in the eyes of the average citizen.

This is why we can’t have single payer healthcare, because our populations are too busy fighting for their radicalized ideas.
This is a great anecdote and I hope others can learn from it. R1, o1, and o3-mini work best on problems that have a “correct” answer (as in code that passes unit tests, or math problems). If multiple professional translators are given the same document to translate, is there a single correct translation?
Name the faction to which you refer and what they are holding out for. Come on, be brave now.
I did not learn a single thing from this article. I did learn quite a bit from the programmer's stuff and situation.
This is real dumb. It's a marketing person giving a talk about the outreach work the FreeBSD Foundation is doing, mostly not involving desktop work at all, and this person is angry that she's not running FreeBSD on her laptop. I would think she was less competent if she was doing that.

It may very well be that the Foundation's marketing strategy is bad. Certainly, I'm not predisposed to respect marketing-communications work from people who have been doing it in tech since the 1990s. But "Kim McMahon can't even be bothered to figure out how to run FreeBSD on a laptop in order to present a simple slideshow Hypocrisy is a strong word, but I am sorry, this is pathetic" is cringe.

What "politics" are even involved here? The word appears only in the headline.
> high-performing employees who have the most options will leave and lower-performing employees will stay.

How do you figure? High-performing employees will stay because they're not worried about impending layoffs. Lower-performing employees will leave because they know they're on the chopping block.

Google is also notorious for having tons of talented deadwood, since they don't want them to go to other companies. Such companies are ripe for cutting the fat.
I do get that, but I am not so sure what the real solution is. The industry standard still is some form of "the server sends me a key and I trust it".

Key transparency is not really solving anything for the average person.
Based comment, updooted. Also, I'm pretty sure that if nobody ever "rolled their own crypto" we would never have new innovations in cryptography. By OPs argument everyone in the blockchain industry is in a state of error since using applied cryptography to design new protocols is certainly novel. But I would say that these protocols are what made me interested in applied cryptography in the first place. They are astonishingly clever, novel, and show how beautiful cryptography can be. If everyone was too scared to work with cryptographic constructs than none of the innovation that took place around smart contracts would be possible.

I see no problem with it if your work gets peer reviewed. The very last point they made though I kind of agree with. If you end up making a new algorithm from scratch that is dangerously novel and potential crack pot territory. I did like how they went to that trouble to make the hierarchy of what is meant by "rolling your own crypto."
Honestly, this reads more like someone who wanted to use C# from the outset and needed to come up with reasons to justify it, rather than an honest comparison of a number of languages and platforms with a view to selecting the best fit for the problem domain. None of the listed reasons for choosing C# are unique to C# or its ecosystem. And some of them seem to have been discovered to be applicable only after the fact.

For instance, productivity is listed as the top reason, but his team only found C#/dotNET to be the most productive after using it. They didn't know it would be the most productive in advance. So it wasn't a reason for choosing that platform.

Other reasons listed are, 1 Open Source, 2. Cross Platform, 3. Popularity, 4. Memory Safety, 5. Garbage Collection, 6. Stability, 7. Statically-Typed, 8. Batteries Included, 9. Tooling, and 10. Performance. I think there are plenty of languages and platforms that are as good as C#/dotNET in all of these areas, but there's nothing here to suggest any of them were even considered.
It’s more of an issue of time and focus, not dependencies.
How Are Images REALLY Stored?
Only tangential to this post, but if you need a way to share secrets with your teams (or whoever), Hashicorp Vault is pretty decent. They don't even need login access. Instead of sharing secret values directly, you wrap the secret which generates a one-time unwrapping token with a TTL. You share this unwrapping token over a traditional communication method like Slack or e-mail or whatever, and the recipient uses Vault's unwrap tool to retrieve the secret. Since the unwrapping token is one time use, you can easily detect if someone intercepted the token and unwrapped the secret (by virtue of the unwrapping token no longer working). This hint tells you the secret was compromised and needs to be rotated (you just need to follow-up with the person to confirm they were able to retrieve the secret). And since you can set a TTL, you can place an expectation on the recipient too -- for example, that you expect them to retrieve the secret within 10 minutes or else the unwrapping token expires.

All of this has the added benefit that you're not sharing ciphertext over open channels (which could be intercepted and stored for future decryption by adversaries).
The was at least also TLS on top of that, yes?