Hacker News Reader

dimiprasakison Time-Series Language Models for Reasoning over Multivariate Data at Scale (ICML)

Cool!

dimiprasakison Show HN: Kage – Shadow any website to a single binary for offline viewing

Cool approach.

But, a compromise still lands on host's kernel, Docker doesn't provide kernel isolation (well it does on a macOS because it runs in Docker machine but thats a side effect).

I wonder if a better solution would be to play with seccomp or Linux capabilities so that Chrome is sandboxed even in Docker. Not sure how this would work tbh.

Answering here to get ideas, I saw your fix on Git and request for feedback (will try to review and give it some thought once I find some time)

dimiprasakison Show HN: Kage – Shadow any website to a single binary for offline viewing

Neat project, I like the idea. One thing from a quick read: you launch Chrome with --no-sandbox. Is there a good reason for that? Security wise it's probably not a good idea. If there is no reason, I'd suggest leaving the sandbox on!

In any case, cool stuff :)

dimiprasakison Linux 7.1

- "Anyway, possible slight hiccups in the merge window aside, the news today is 7.1." - "nothing particularly interesting or scary stands out, which is as it should be."

So, a number.

dimiprasakison How Shamir's Secret Sharing Works

To be honest, I always wondered why variations of SSS haven't been seen commercial adoption more. For example, instead of storing API Keys in GitHub repos, the keys could be constructed on the fly by approvers signing their shares. I guess the UX of coordinating share-holders is what kills most implementations...

SSS does suffer though for some serious weaknesses, i.e. it trusts the shareholders. A cheating party can submit a fake share during reconstruction, corrupting the recovered secret, and honest parties have no way to detect this something that verifiable secret sharing fixes.

Anyway threshold crypto is a very elegant field and the math is there is really beautiful.

dimiprasakison The death of social media is the renaissance of RSS (2025)

What I'd love to see is an e-ink reader, purpose-built for RSS. Think of getting your morning digests from select sources without touching your smartphone or PC. Heaven