skysight-inc/HackerNews huggingface dataset:
> Fast key erasure uses symmetric cipher. If there's a mathematical attack on that, then you just don't have any symmetric cipher

The generation of the RNG’s output stream is the result of a symmetric cipher, yes, but an attack doesn’t need to be on the cipher as a whole. And, once again, if there is a state leakage at any point we end up with the same problem that any future output of the key stream can be undetectably replicated. Sure, you can always replace the key sooner, but that only better protects against the state leakage; the output sequence is still deterministic no matter how fast you replace it.

> You need a custom protocol for this, how is that certified?

This is where cybersecurity testing labs are useful, especially ones who can do entropy source validation. If the protocol itself can be described in terms of the standard, and fulfill its requirements, then it can be easily certified. If there is no way to map the behavior to the standard, but the behavior is secure (according to the lab), the SMEs at the lab can request guidance from the certifying body on how to deal with the situation. These requests have culminated in public guidance (e.g., the FIPS 140-3 IGs) on how to certify industry specific protocols.
> Atomics are very expensive operations.

Atomics are very expensive when contended - which is also the case where locks would introduce blocking and reduced performance. Uncontended atomics are relatively cheap.
> "that explosion wasn't a failure, it was an experiment rich with data"

- Neil deGrasse Tyson
https://archive.ph/smkN4
What do people think about pixi?
If the daemon isn't running as root it can't put the socket in a secure location, requiring more code. That code isn't complicated, but neither are any of the suggestions above.

Once more: people wanting to make this security bug about the specific socket family in use are doing bad security analysis. There's nothing wrong with TCP, the app just did it wrong and failed to recognize the security boundary being crossed.
Show HN: Reveal-App: AI Summarization of latest news
Hello Hacker News Community,
I have created a website/application for aggregation and summarization of the latest news articles (https://reveal-app.net).
How it works: It is a simple concept really. The backend grabs the news content (uses RSS) and then passes it through an LLM to create a summary of the news. The front end web app allows viewing the summaries. It’s built using NodeJS / NestJS for backend, Angular for the frontend. It’s hosted using Firebase and GCP, and uses Gemini Vertex AI for the LLM.

Why I built it: Basically today there is just so much information, It’s hard to keep up. Many reputable news publications are now behind paywalls. It’s impractical to have news subscriptions to multiple publications. And news publications always seem to have a particular viewpoint. So it is difficult to get different viewpoints. And even If you really make an effort to go to different news sites, the whole ecosystem of online advertising and tracking makes the experience highly unsatisfactory (to me atleast). So I built this application to summarize the latest news from a variety of sources. You can read the summary and then decide if it's worth your time to go to the original article. So hopefully much fewer click baits. My target audience is folks who want to efficiently catch up with the latest goings on.

What I am looking for: Any feedback positive or negative. Any suggestions on how to increase awareness in a cost effective manner. If it is even worth trying to increase awareness too. Please let me know what you think.

– Jantric
As someone stuck in macOS trying to run docker, I can tell you that the impedance mismatch between a what a "file" is, and its "location", and the meaning of "listen on localhost", and how much "memory" an application has makes virtualization absolutely horrible for trying to run just one program on a different OS (or arch) than the rest of your day to day
It's not complete until you have a comet cursor and several IE toolbars that were somehow installed.
Of course, I’m not suggesting they don’t contain great examples. It’s just silly to apply the book wholesale to a company 1/100th the size of Google or even 1/10th the size of Google. It’ll almost never work verbatim. You must adapt it to the organization, resources, architecture you have and adjust the direction for where you need it to go.

Someone else made the point that the book itself is an idealistic view as a visionary document of what Google wants it to be but from someone sitting in the SRE role at Google, the role is probably not exactly as described.
The "600+, AWS" detail is great to read, as confirmation that this kind of thind does work. We're urrently setting up remote AWS systems and finding a lot of moving parts for getting smooth playback while editing in AE/PPro.

If you have time to expand on the "bandwith and latency thing", I'd love to hear more. Even a "you need to be geographically within X miles of the instance" ballpark figure would be wonderful to know.
AFAIK Zig is the only somewhat-big and known low-level language with TCO. Obviously, Haskell/Ocaml and the like support and it are decently fast too, but system programming languages they are not.
How does it compare with duckdb, which I usualy resort to?
What I like with duckdb is that it's a single binary, no server needed, and it's been happy so far with all the CSV file I've thrown at it.
> More than just their cost, I found that most textbooks really were optional. Most professors never even referenced them throughout the course.

Imho that’s what makes the textbook overpriced: the usefulness in the course. In my academic years i’ve seen some textbook that are actually pleasant to read and that you could actually rely on, alone, to pass the course… and then so many books that where completely useless: either more of a reference than anything else or some poorly written text by the same professor holding the course.

At some point I resorted to ligben first, and then bookstore later and only if the book did deliver some actual value.
Yeah frankly I'd take the NeXT UI over any of them, including Mac OS X, which felt like a huge step backwards to me compared to NeXTstep

EDIT: Sun's OpenLook is the other one from that era that was fantastic
The literally bold-faced conclusion of your article is that no evidence exists that community water fluoridation affects childhood IQ.

We have a natural experiment running for 80 years where each arm of the experiment has N > 100e6. If there was going to be evidence of community water fluoridation lowering IQ, it would have emerged by now.
The modern Word suite’s basic format was introduced with Word 2010. So as long as the person who created the doc uses features that were previously present in Word 2010 they’d be fine.

Features from later versions will either not show up or show up as boxes
Is there a source for this claim? It appears to be untrue.

[1] https://en.wikipedia.org/wiki/List_of_countries_by_incarcera...

[2] https://www.statista.com/statistics/262962/countries-with-th...
The head of OMB pretty much directly said that science backed departments, like the EPA, are being destroyed/hamstrung so that they can't regulate industry, like our energy sector.
UV just implemented PEP 723[1], which is now PyPA Inline Script Metadata[2]. That's no longer provisional, it is standardized already! It's unfortunate that Python didn't have some non-comment way to provide this functionality.

[1] https://peps.python.org/pep-0723/

[2] https://packaging.python.org/en/latest/specifications/inline...
I bet there's a way to accomplish what you're looking for with ICC profiles. They allow arbitrary functions and LUTs in addition to standard matrix math. There's typically a way to set this for your OS, an individual image, and I'm pretty sure an individual app as well (but I'd imagine only your own).

Edit: Actually, this may not be editable on iOS, but it is on macOS, Windows, probably Linux, and it looks like Android too.

https://en.wikipedia.org/wiki/ICC_profile
I think the practice subsided when the minimalism trend became popular in software.

> Do you know of any other web-app/saas doing this?

I don't use webapp/SaaS tools, so I'm not in a position to answer this. Perhaps someone else can, though.
You should probably check out Wargroove on Steam. It's very close to the Advance Wars games in terms in terms of mechanics.
Considering it was about 100 developers, it was horrible.

The two major problems were:

1. The volume of data itself was not that that big (I had a backup on my laptop for reproductions), but it was just too heavy for even the biggest things in AWS. Downtimes were very frequent. This is mostly due to decisions from 10 years ago.

2. Teams constantly busy putting out fires but still getting only 1-2% salary increases due to lack of new features.

EDIT: Since people like those war stories. The major cause for the performance issues was that each request from an internal user would sometimes trigger hundreds of queries to the database. Or worse: some GET requests would also perform gigantic writes to the Double-Entry Accounting system. It was very risky and very slow.

This was mostly due to over-reliance on abstractions that were too deep. Nobody knew which joins to make in the DB, or was too afraid, so they would instead call 5 or 6 classes and joining manually causing O(N^2) issues.

To give a dimension of how stupid it was: one specific optimization I worked on changed the rendering time of a certain table from 25 seconds to 2 miliseconds. It was nothing magic.

I'm glad I left.
The science projects are a tiny fraction of the budget. Cancel all of them and you won't make a dent in the deficit.

Add to that the administration's deliberate rejection of climate science and putting an anti-vaxxer in charge of the health department, and there is no way to avoid the straightforward judgment of "anti science". This is ideology and nothing else .
It’s your moral duty to dump that app, extract the contents and make a torrent out of it.

I know I’ll be flagged and downvoted for this but I don’t care.
It's interesting especially because it seems like companies today pour tens of millions into "accessibility", but I never see a thing's usability in terms of simple and easy-to-do-what-I-want UX fall in to the same category.
My bigger issue with tail call optimization is that you really want it to be enforceable since if you accidentally deoptimize it for some reason then you can end up blowing up your stack at runtime. Usually failure to optimize some pattern doesn’t have such a drastic effect - normally code just runs more slowly. So tail call is one of those special optimizations you want a language annotation for so that if it fails you get a compiler error (and similarly you may want it applied even in debug builds).
I think the desktop operating systems of that era were at a sweet spot. They were technically advanced enough to render good-looking, crisp color user interfaces. However, most people were still novices at using computers, so OS designers consciously designed their operating systems to be as clear as possible. Applications tended to be written for each individual platform and to follow its UI guidelines.

Windows 95, NT, System 7 and System 8, BeOS, and NextSTEP all had really clear UX. You always knew where to drag a window, what was clickable, where to find settings, etc.
This isn't self contained in that sense, it's deferring dependency management to runtime, with uv apparently doing that reliably enough for the use case.
To add some validity here, I think to an extent we already see distributions aimed at converting Windows users moving in this direction. Zorin OS has Wine support for .exe's almost out of the box, and there's Steam OS / Proton, where (if I recall correctly) the official guidelines for the Steam Deck state that developers should NOT create native Linux ports for new games, but rather optimize around Proton itself.
I actually would think less of this as a look back into the past but hopefully as a real alternative to the current DEs, which obviously then needs to have high res fonts. That would be nice.
> But those big numbers always seem a bit abstract to me. The idea of paying $5,000/day, if we miss our departure date, is awfully concrete in comparison.

Says the guy who owns multiple hypercars, some of which are $3M+ (Aston Martin Valkyrie)...
Endor: WebAssembly-Based Server in the Browser
there are lots and lots of proposals for doing this more cheaply. Most require megascale engineering, and would be a huge benefit to humanity if we could do it.

Some examples -- skyhooks -- large counterweighted swinging things that reach down into upper atmosphere and spin you right round baby right round -- a bunch of gravity assisted momentum ideas where you get the sun or the earth or what have you to get you really going, and then use that momentum to get a little thing up and moving more quickly. Space elevators -- hang a giant heavy thing out off one end, and drop a cable made of uninvented nanoscale tech down to earth, then just, you know, climb.

And then there's orbital construction, which requires some .. construction materials. The long standing idea has been to either go out to the asteroids and build there, or bring an asteroid or two here. Both have a lot of problems, and are a long way off. I think it's most likely that human governments will opt not to have the ability to make giant tungsten rods hanging over their countries, and will, to the extent moving an asteroid were ever viable, require they be a long way away, or alternately that we just go to the asteroids and construct elsewhere.

We are like maybe a century from all this being viable, and that's if companies like SpaceX keep moving at the clip they've been moving for that century.
It’s not clear from that description how it differs from interface inheritance in OOP.

In an interface/class hierarchy A < B < C, C can be an abstract class that only implements B’s methods and not A’s.
> Would it mean that when you look at a simulation of the effects of your colorblindness, you see zero change from the unaltered view?

Ideally, yes. Although it's unlikely to match any one person's exact colour vision.

If you look at filtered images side-by-side, say from this collection on bored panda[1], to me the deutran images and the normal image are pretty much indistinguishable, while the protan image is close but slightly too green.

> Or would it mean that it looks absolutely nothing like what you see because it’s transforming the base image by clamping the input colors to what you can see, and stretching that decimated color space out over the entire range of normal sensitivity?

That's how most "colour blind filters" look in practice, yes. I don't think a lot of folks are setting up the transform correctly (or they are just straight-up using a colourblindness preview filter as if it were a colourblindness correction filter).

[1]: https://www.boredpanda.com/different-types-color-blindness-p...
They remade them for Switch. Some people claim Wargroove is a spiritual successor but I didn’t like it nearly as much
I don’t think it’s necessarily that either. They probably just want some guarantees that the app will keep working, instead of someone submitting 100s of wine apps and having them break eventually.
> I don't get the impression they save any time - it's just different stuff. they're constantly doing things with permissions

Permissions in the cloud is whole other beast, especially in Azure. You can easily spend a week figuring out various managed identity issues.

As for time saving: I've noticed cloud engineers often build a huge contraption of Terraform, Ansible scripts then bots and processes around them. That is then where the focus and time goes too.

And with any software, it is never done. It can always be better.

Classic sysops is much faster in a state of "done, no need to touch it now".
For larger rockets this is typical, however smaller rockets often only have a thrust termination system - for example apparently Rocketlab's Electron uses thrust termination.
The CEO said that it didn't blew up the pad: https://x.com/danielmetzler/status/1906307777242275881

I don't see why would you detonate the rocket if it doesn't pose danger to just fall down. Probably its also easier to collect the debris.
I Have ADHD and Created a Free Web App with Tips and an ADHD Test
Hey everyone, I’m Viktor, and I’ve lived with ADHD my whole life. After dealing with all the ups and downs—distractibility, hyperfocus, and everything in between—I put my personal experiences into building a web app that’s all about helping others navigate ADHD.

It’s not a task manager or anything like that. Instead, it offers practical tips on managing symptoms and includes a free ADHD self-assessment test. My goal is to make it easier for folks like us to understand our challenges and find quick, actionable advice.

If you’re curious, feel free to check it out! I’d love any honest feedback or suggestions, especially since I know how important it is to have ADHD-friendly tools. Let me know your thoughts, and I hope it can be helpful for some of you out there!

Thanks for reading, and I appreciate your time and support.
On a slightly related note, I have created a tool for generating web pages based on any subject using different "themes". You can create one here with a "Mario-Bro's" theme for example: https://thedeadweb.eu/?q=honey&style=mario-bros
One is required by law and/or contract terms, the other is just nice to have.
The National Toxicology Program recently completed a fairly substantial meta study and concluded that "for every 1 mg/L increase in urinary fluoride, there is a decrease of 1.63 IQ points in children.". [1] This is also relevant to OP since it's not just pregnant women at risk from excessive fluoridation but also children. For now it seems that adults are, somewhat oddly, unaffected.

[1] - https://ntp.niehs.nih.gov/whatwestudy/assessments/noncancer/...
> This looks nice

These kinds of things almost always give me an uncanny-valley feeling. Here I'm looking at the screenshot and can’t help noticing that the taskbar buttons are too close to the taskbar’s edge, the window titles are too narrow, the folders are too yellow, and so on and so forth. (To its credit, Wine is the one exception that is not susceptible to this, even when configured to use a higher DPI value so the proportions aren’t actually the ones I’m used to.) I’m not so much criticizing the theme’s authors as wondering why this is so universal across the many replicas.
Well yes, I can certainly imagine Batista's troops and especially intelligence being more competent in a parallel universe.
All the evidence in that article is based on what a politician thinks. "And I think another meta study came out also".

The actual high quality evidence shows that water fluorination has minimal impact on tooth health in 2025: https://www.cochrane.org/news/water-fluoridation-less-effect...
So it’s happening.

I was talking about something similar with a family friend (in the high finance space) a few years back.

When will passive
investments and indexes be manipulated and carved out for “wealth extraction”?

With the funds locked away for years by law/policy preventing a move to safer territory, without any FDIC guarantees to keep retirees solvent; the plans were a tempting pool of money.

With social security being pushed for insolvency; I think my generation is well-and-truly in trouble.
> > but it's not like we have an absence of research below 1.5 mg/L).

> But it is?

But it isn't. There's 7 studies included in that meta-analysis looking at levels below 1.5mg/L, covering 2832 children. The effect measured so far across all of the studies is a statistically insignificant increase in IQ.

I'm in favor of additional research; I just don't think getting to n=10,000 showing little or no effect is going to convince anyone. I also don't think that these possible modest effects are going to be in the top 5 most important environmental stressors to measure the effects of.
What Books Should I Read to Learn ASP.NET Core and Blazor?
It's not for you, clearly. But there's plenty of platform-specific software in the world, especially when they involve low-level system extension.
I had no idea! Thanks for sharing. Those are definitely more subtle. I had never caught on to those when viewing the movie.
> I never had to do anything akin to fiddling with the Windows Registry

If I recall correctly, when I got my first Macbook, I had to edit plist files or something similar in order to do basic things like permanently showing hidden files, showing the full path in Finder, show file extensions for all file types, increase the animation speed so the computer didn't feel slow as molasses, etc, etc.

Maybe these things are now easier to configure via GUI on macOS?
The phrase you quoted is not from the comment I linked; you’ve quoted from a response. Here’s the comment I have linked above:

> I have flatpaks from several years ago that no longer work (Krita) due to some GL issues.

That’s an example of Linux GPU APIs being unstable in practice, and container images not helping to fix that.
Thanks for the encouraging words! Please do try it out and report back if it worked well or not for you on the issue tracker.

With sufficient usage I think we can make a good case to get merged upstream. This patch introduces dynamic/static instrumentation for ticks counting which is quite different to how things have happened till now on rr. If there are many success stories a stronger case for upstream merge can be made. The rr maintainers are aware of this project but it is early days yet for an upstream merge PR attempt yet
Asked to undergo biometric collection and facial analysis for job application
if you like rats and coding, then https://docs.raku.org/type/Rat may be for you
A dentist once recommended Xylitol gum to me for this purpose. It's been too long to remember the details, but you can do some research on it.
I learned to love uv because of this usecase but I still find it against the Zen of Python that an official (and, dare I say, extremely useful!) PEP is not supported by the official Python tools.

This is the first time that Python didn't come with "batteries included" from my POV.

Now I also have two Python dependency managers in my system. I know there are volumes to talk about Python dependency management but all these years, as long as a project had a requirements.txt, I managed to stick to vanilla pip+venv.
Honestly, I don't think anyone has done real user research on basic interfaces since Microsoft did it for Windows 95. I'm pretty sure that was the last publication I've seen.

It's a lot of time, effort, and expense to run user research, but the potential benefits to the users are big.
Vibe Coding and Kodak Cameras
For guarantee:

https://crates.io/crates/tiny_tco

https://crates.io/crates/tco

As an optimization my understanding is that GCC and LLVM implement it so Rust, C, and C++ also have it implicitly as optimizations that may or may not apply to your code.

But yes, zig does have a formal language syntax for guaranteeing tail calls to happen at the language level (which I agree with as the right way to expose this optimization).
"Grandpa what did you do during the dissolution of American democracy?"

"Don't worry Jimmy, I did my part by flagging articles online so that we could focus on how to use em dashes."
And its inhibitor, Robotnikinin.
Aside: angle brackets should be avoided in shell examples; one mistaken enter and work can be destroyed.