skysight-inc/HackerNews huggingface dataset:
They didn't want a KDF, as far as I know, but they wanted a hash function with unlimited input size.

Including the username in the hash input gives you guaranteed domain separation between users that you don't get from salts/nonces. Its a generally good idea if you have a hash function with unlimited input size (all modern cryptographic hash functions except bcrypt have unlimited input size).
Most annoying thing about roosters is, if you have one, then you'll have a bunch. (Our hens go hide their clutches eventually.) But if you have a bunch, then you can have coq au vin.
> How does a company whose only job is security screw that up so badly?

While I don't have any answers to this, I've realized that it's an ideal showcase of why fuzzy testing is useful.
Reddit, by far, is one of the worst echo chambers on the internet. I've seen hundreds of death threats at one political group on there, but if any veiled threat is made against the "reddit approved party" it is instantly removed or accounts suspended. This really peaked during 2020, when open calls for violence stayed up, some with reddit admin approvals.

It used to be a good site, but that was many years ago.
Good question. If the US is truly facing a "Sputnik moment" with regards to China nd AI, the US should bring back something like the "National Defense Education Act" (1958) which was aimed at bolstering American competitiveness in science and technology.
I'd be interested to see this!
GCP's Document AI service is now literally just a UI layer specific to document parsing use-cases back by Gemini models. When we realized that we dumped it and just use Gemini directly.
For an OCR company I imagine it is unconscionable to do this because if you would say OCR for an Oral History project for a library and you made hallucination errors, well you've replaced facts with fiction. Rewriting history? What the actual F.
I don’t care if you call me names or say my beliefs are nonsense. I’m most enthused now that so much government funded “nonsense” is being defunded, and all of the federal and NGO employees being fired, so they can be free to actually contribute to society.
Why would you believe otherwise? Trump is notorious for nonpayment, and Elon doesn't exactly have a good record in that area w/r/t Twitter's severed employees. Sure, historically, you might claim something about the government meeting its obligations, but if the last two weeks have shown us anything, it is that President Trusk believes that nothing the government did before matters.
Are egg laying hens the same supply line as the chicken sold for meat? (Genuinely curious here whether that's the case or not)
It's remarkable that, for a bunch of young people who don't know what they're doing, they've completely decimated any competitors - both public and private.
What I find weird is people’s aversion to buying the organic and local eggs. They had them for half the price as the factory farm eggs yet people weren’t touching them.
A lot of this traffic is bouncing all over the world before it reaches your server. Almost always via at least one botnet. Finding the source of the traffic is pretty hopeless.
A few years back I briefly thought that a rich yolk color was a quality signal, until I found that additives could produce that color cheaply. The color comes from dietary carotenoids [1]. Companies like BASF sell carotenoid feed additives that producers can employ to get a yolk color as rich as desired:

https://nutrition.basf.com/global/en/animal-nutrition/our-pr...

[1] https://en.wikipedia.org/wiki/Carotenoid
Blocking Linux/Steam Deck in Apex Legends Led to a 'Reduction' in Cheaters
No brainer if you're sitting on a >$100k inference server.
What has the past actions of the administration shown us about trustworthy they are?

This is not where you were now. This is where you were four years ago.
You are thinking of a https://en.wikipedia.org/wiki/Coonskin_cap , which is made from a racoon.

The hat which was made from beaver is more familiar to most people as the https://en.wikipedia.org/wiki/Top_hat , which was made from beaver before the more modern silk versions became popular.
> Will this even register as a trivia question in 100 years?

My family could be murdered in front of me and it wouldn't qualify as a trivia question for you or most other people in one year. This feels like a version of stoicism that missed the point of stoicism.
Didn't you ever watch "The Killer Shrews"? https://en.wikipedia.org/wiki/The_Killer_Shrews
They also couldn't envision women voting. The president has veto power over the budget. That is their check on spending. They absolutely positively do not have any authority to cancel a Congressional appropriation and they never have.

You know what else the founders definitely did not envision? A standing federal army. Trump is honor bound to the soul of George Washington to disband the DoD and reclaim $800B. Surely that is 100% his prerogative and nobody has any right to stop him.
in principle static checking of memory safety in zig could be a thing, but there are some minor obstacles:

https://github.com/ityonemo/clr
They clearly wanted something stronger than "a hash function" or they'd have reached for weaker cryptographic hashes.
Whether something is "wrong" is often more a matter of opinion than a matter of fact for something as large and complex as the internet. The root of problems like this on the internet is connections don't have an innate user identity associated at the lower layers. By the time you get to an identity for a user session you've already driven past many attack points. There isn't really a "happy" way to remove that from the equation, at least for most people.
President Trusk is going to completely screw the economy.
You're claiming the data is specious, but you have offered zero evidence to that end, only very shaky speculation. You say some of the links 404 - of the ones that do not, were their numbers significantly different from the table in the article?
This. Remember when he literally did a commercial for Goya products from the resolute desk? His justification was that they were being "cancelled" and that the law surrounding the white house endorsing products for political support was his to enforce or not and he was just not gonna enforce it.
On HN, reposts are fine (which is to say, aren't treated as dupes) when a story hasn't had significant attention in the last year or so. This is in the FAQ: https://news.ycombinator.com/newsfaq.html.

But it's great to link to examples of past threads, because readers like to look at them—so this was a good contribution! just not with the tag "duplicate".

Edit: basically, there are two disjoint cases when it makes sense to link to a previous submission of the same story:

(1) when a prior submission of the same story had significant attention in the last year or so, then linking to it with the word "duplicate" or "dupe" is helpful;

or

(2) when a prior submission had significant attention more than a year ago, then linking to it with the phrase "past discussion" or "discussed at" (or something like that) is helpful.

(And for completeness: when a submission has not gotten significant discussion, it's best not to link to it at all. There are plenty of those in the archives, and they're mostly harmless.)
Is DOGE an advisory body or real government audit agency. It is acting like the later but is solely creation of Musk.

https://www.democracydocket.com/news-alerts/federal-unions-s...

https://www.hrdive.com/news/federal-workers-unions-challenge...
They wanted a hard-to-compute cryptographic hash function. Today, that means bcrypt or something with a KDF construction. However, they needed one with unlimited input size, which rules out bcrypt.
It's specifically about the limits of incremental design.

TFA's thesis is roughly that incremental design dooms you to a local maximum:

Since Jeffries (the TDD/Sudoku guy you seem to be aware of) starts out with a suboptimal representation for the board, there is no small change that can turn the bad code into good code. At some point along the line, he makes motions in the direction of the design that Norvig used, but as there is no incremental way to get there (maintaining two representations was a dead-end since it hurt performance so much), he never does.
If 4% or 18 seats were switched four years ago why wouldn't that matter because currently the majority is thin and only a few seats. That could flip in two years. My guess after the gaza comments is more likely than not to switch.
The salute definitely upped things a level.
> there's nothing special about having darpa build it other than they provide funds

DARPA chooses real world engineering/technical problems, and then works closely with the external grantees that develop possible solutions, to solve the problem together - rapidly. Fundamental discoveries often come out of that kind of focused well resourced problem solving, but it's not really the goal.
Athletes are the original DEI. And Trump (the president!) didn’t have good grades.
This is a very naive comment, given the blatantly unconstitutional behavior that has happened in the last two weeks.
I wonder if there is any way of getting X/Twitter to shake it loose?
Try setting the safety params to none and see if that makes any difference.
Can you go rollin’ coal in a Tesla?
Thanks for confirming that claim is false.
My understanding is that most the actions you listed above were performed as standard Executive Orders or OMB Memos. Each one may or may not be illegal, but are being done through a standard channel despite the marketing around DOGE.

The questionable activity sees to be things like the physical and IT system access being given to DOGE employees.

Is anyone aware of direct action by DOGE employees that constitutes orders (vs just being routed to the whitehouse to ship out orders via the EO/OMB)?
But you would be even richer if you had a nickel for every time Microsoft reinvented the wheel for things nobody asked for...
I think it was Food, Inc, a documentary from a number of years ago. Joel Salatin of Polyface Farms talks about factory farming and Salatin often argues that industrial farming is not necessarily more cost-effective and that his method is both profitable and environmentally sustainable.
I think it's largely a matter of routine. People have been buying the same eggs for years; switching is perceived as a risk by our monkey brains.
It's about that, as I too expected from the title, but there's a twist.

The twist is that Jeffries started working on that project again in 2024 and wrote 45 more posts on it. And that's what this article is about.
As a general rule I agree, but in that case we’re limited to what the constitution says explicitly and what is says explicitly is that keeping and bearing arms is a right of “the People” which is a distinct group from “the States” and “the United States”. Further we know that the Militia is not the Army, nor the Navy, and that it too is also considered a separate group from “the people”.

It seems reasonable to conclude then that the right must be conferred to all the people because if they meant for it to be limited to the Militia they would have said “the right of the Militia to keep and bear arms shall not be infringed”
RAGE is one of the main points of this entire department. Retire All Government Employees.
A lot of local eggs here will have slightly orange yolks and my family just won't do it, not even in cornbread.
That is probably true, but has little to do with enums, which are concerned with mentioning things one-by-one (i.e. producing values).

It is true that some type system features built upon enums. Like a previous commenter mentioned, Pascal offers a type that constrains allowable values of that type to be within the values generated by the enumerator. Likewise, I mentioned in another discussion that in CrabLang the enumerator value is used as the discriminant in its discriminated union types, which achieves a similar effect. I expect that confuses some people into thinking types and enums are the same thing, which may be what you are trying to get at, although doesn't really apply here. The difference is known to those reading this discussion.

The biggest problem with this desperate attempt to find new meaning for "enum" is: What are we going to call what has traditionally been known as an enum? It does not seem to have another word to describe it.
Really? There must be some replacement who steps in though, no? Otherwise districts would have no representation, which seems unlikely.
Yes but do you believe that that is what the NIH specifically does? Because that's what the FDA and USDA are supposed to do
Some of the exceptions include:

- For routine uses within a U.S. government agency

- For law enforcement purposes
Also prehashing opens you up to an other bcrypt flaw you need to be aware of: it stops at the first NUL byte, so you need to use some sort of binary-to-text encoding on top of the hash to ensure you don't have any of those in the data you ultimately hand off to bcrypt.
Presidential Pardons
"Diversity hiring goals" is the pretty new propaganda word for ugly old racism.
the orange yolks are usually a sign of better hen health... the irony of this. they taste a lot better, too.
No personal option stated or implied, but: exactly this was clearly promised before the election, and it is being delivered right now. The people voted for this: a majority of the American people. Democracy, no?
the good old microsoft, never change...
I don’t buy that argument because that side of the aisle has been voting with the other side on pretty much everything in the new term. I also don’t buy this argument because like I said in my original comment, the tactic of using presidential powers in this way was always available, including when this side of the aisle had the majority.
One thing people always forget about traditional OCR providers (azure, tesseract, aws textract, etc.) is that they're ~85% accurate.

They are all probabilistic. You literally get back characters + confidence intervals. So when textract gives you back incorrect characters, is that a hallucination?
can you expand on "write programs as morphisms directly"

I'm someone super interested in category theory and ITT, but I can't quite parse what you are trying to convey even though I think I have the prereqs to understand the answer.
With a coop, it's a bit like a litter box. We put down hay, and change it out with the poop every couple of weeks, into a compost pile.

Chickens are way easier than a dog or cat day-to-day, with distributed risk.
> It's clear that OCR & document parsing are going to be swallowed up by these multimodal models.

I don’t think this is clear at all. A multimodal LLM can and will hallucinate data at arbitrary scale (phrases, sentences, etc.). Since OCR is the part of the system that extracts the “ground truth” out of your source documents, this is an unacceptable risk IMO.
You can create a new browser, there are plenty of modern new browsers that aren't considered major and work just fine because they run on top of recent releases of chromium.

There are actually hundreds of smaller chromium forks that add small features, such as built-in adblock and have no issues with neither Cloudflare nor other captchas.
when you go to a car repair shop, would it shock you to see 99% males working there?
HN is sufficiently MAGA as to not require bad faith actions by dang.
Kind of. He also spent $120m in taxpayer money to spend nearly a quarter of his first term golfing. He wasn't the most active president I've ever seen.
We could get eggs for 40c a dozen 6 years ago?
The words putting science in the crosshairs of Trump's orders
The worst is Cloudflare challenges on RSS feeds. I just have to unsubscribe from those feeds, because there's nothing I can do.
There are tons of studies that have shown that if your name is sounding like you're from a minority your chances of being invited for an interview are significantly lower. Similar if you include photos.

As a side note, it's quite ironic that engineers often tend to complain about performance metrics and that they are being gamed, not really a good measure of merit..., but the same people turn around and argue that the everything should be a meriocracy.
Ah, the joys of overloading. Do you mean "art" as the high-brow stuff we see in galleries and are produced in volumes of dozens per artist-years? Or do you mean "art" as the more common stuff that's produced by artisans are the rate of dozens per week? Because to me it's more the latter -- I'm an artisan, not an artist.
Your example is somewhat inadequate. We _fundamentally_ don’t understand how deep learning systems works in the sense that they are more or less black boxes that we train and evaluate. Innovations in ML are a whole bunch of wizards with big stacks of money changing “Hmm” to “Wait” and seeing what happens.

Would a different sampler help you? I dunno, try it. Would a smaller dataset help? I dunno, try it. Would training the model for 5000 days help? I dunno, try it.

Car technology is the opposite of that - it’s a white box. It’s composed of very well defined elements whose interactions are defined and explained by laws of thermodynamics and whatnot.
How Animations Work in Kaplay
Bird flu in the US has spread to wild animals and other species of wild and domesticated animals so it is very widespread, also there is a vaccine but poultry farms refuse to use it because of cost and it would make the meat/eggs not suitable for export, poultry producers have resorted to making their poultry farms as clean as possible, washing trucks that come onto property, making employees wash and wear protective clothing to prevent contamination and the disease still makes it onto these farms. The method we used last time we had bird flu pandemic on poultry farms was mass culling of flocks that had any infected birds, but it has not worked for long this time so the cycle of kill flock, clean everything out, raise new birds raises long term capital costs for poultry farmers in USA.
I think it's pretty clear this is about browser engines. If your view holds then Servo (currently #3 story in front page) will never make it.
I wonder what changelog of the two studio products tell us about internal org fights(strifes)?
I am amazed that people still post on social media
I laughed.

Netflix 4K is some bs in my experience. A 4K file of the same show, pirated, is vastly better quality. Whatever they do to it is just vandalism.
how bout the CEO?
I don't bother with sites that have cloudflare turnstyle. Web developers supposedly know the importance of page load time, but even worse than a slow loading page is waiting for cloudflare's gatekeeper before I can even see the page.
It will be interesting if that is the case by this time in 2026,2027, and 2028
This is a lie since I don't have a google account, and cannot search on google anymore since noscript/basic (x)html browsers interop was broken a few weeks ago.
How about this: https://finance.yahoo.com/news/elon-musk-loses-battle-dismis...
>Ideology rarely affects brand penetration this much.

CEO's rarely open their mouths this much.
which representative? the one that "represents" a cracked district and doesn't see me as a constituent? or the senator who also doesn't see me as a constituent because of my address?
Incredible. Loved it!
NSA employees offered deferred resignation, early retirement
`bcrypt()` is bcrypt as implemented everywhere else, and is required for interoperability with other implementations. If you don't truncate, this is not `bcrypt` any more.

`bcryptWithTruncation()` is great for applications entirely written in Zig, but can create hashes that would not verify with other implementations.

The documentation of these functions is very explicit about the difference.

The verification function includes a `silently_truncate_password` option that is also pretty explicit.
Same. And the next step is that it must feed back into training, to form long-term memory and to continually learn.
The article mentions $2.5MM liens which is drastically less than 1% of expenses of $1445MM ("[SpaceX] generated $55 million in profit on $1.5 billion in revenue during the first quarter of 2023")

It don't appear to be because SpaceX is having trouble paying.

I would guess SpaceX are delaying payment as much as possible because it is cheap lending and because it's run as an extremely mercenary company.

Their costs of deliquent payment are likely below their lending costs. So optimally don't pay until the cost of deliquency exceeds lending costs (maybe ≈ junk bond rate per year).
Arrr matey climb aboard yer don't need Hulu where we're going
> The adversarial interviewing really hurts the entire feel of the process

Agreed. I have been through technical interviews where at the end, my feeling as a candidate was "I don't want to work with this asshole".
The Democrats were leading by 8 or more until the worst debate performance in history followed by a weak replacement. People never really cared about the capital riot. They cared about getting costs down... costs are going up with tariffing the world and businesses will suffer when they are shut out of foreign markets.

Things have already changed since the last election.
I'm a simple man, I see a Karpathy video, I click, I watch, I enjoy. :)
yep. been a long time coming. it's unfortunate that when it favors them this is a talking point for the maga folks... but when it hurts them they are nowhere to be found.
What good is a lawsuit if He decides to ignore it and not pay? One side of that battle is ultimately backed up by the military.
> Let's remember to check back.

:D Probably the hardest part of this wager.
I don't like buying DRM-encumbered digital copies. I'm OK with streaming subscriptions because their catalogues are fundamentally ephemeral, but if I buy a movie I want to know I can keep it forever, even if the platform I bought it from disappears entirely.

To that end, I only buy physical media that can be copied and have its DRM removed. On the plus side, Blu-Ray turns 20 next year and still provides better image quality than your typical 1080p stream.
Is Sonos still based in Santa Barbara? I imagine that's a tough place to find a tech job.
How would you do DDoS protection without having something in path?
What if Trump dies in the office and doesn't get to pardon him?
I had a northern short tailed shrew running around my basement. After luckily live catching it (and getting the correct id), I also discovered that they are mildly venomous. Go figure.

Wish it hadn't found a way into the house, as I would have liked to have it keep clearing pests out of my yard. It got dropped off else where quickly, after a snack.
Personal attacks will get you banned here, regardless of how wrong another commenter is or you feel they are.

There's at least one other recent case of this by your account (https://news.ycombinator.com/item?id=42945640). That's not good.

If you'd please review https://news.ycombinator.com/newsguidelines.html and stick to the rules when posting here, we'd appreciate it.

Fortunately the rest of your recent comment history looks fine, so this should be easy to fix.
"The revolution will not be televised" for a new medium.
Language is improving (?), although IME it went besides the point I'm finding new features to be less useful for every day code. I'm perfectly happy with C++17/20 for 99% of the code I write. And keeping the backwards compatibility for most of the real-world software is a feature not a bug, ok? Breaking it would actually make me go away from the language.
a lot of farmers feed them marigold and other color enhancers to try and boost the color - because it is also a sign of the hen having a good diet
How does your job security and pension compare?
Is it possible Mr. Musk's companies are actually in deep trouble financially, and this political stuff is actually a means to an end?
Or just a hash of the bcrypt hash, for the password!

I don't like using thought-stopping cliches any more than anybody else does, but this design feels a little cargo-culted. All this stuff follows the more fundamental question of "why is the password mixed into a cache key"?