HNHacker News
TopNewBestAskShowJobs

pred_

984 karma · joined July 31, 2015

submissionscomments
pred_··on ssh whoami.filippo.io
> The first is that the SSH protocol provides to the server all public keys the client is willing to produce signatures for, which by default are all the public keys in your ssh-agent and in your ~/.ssh/id_*.

Not sure about other systems, but this isn't the default on Debian. I, at least, start every day by running `ssh-add ~/.ssh/id_whatever_service_I_want_to_auth_to`, because it doesn't do it by itself, and I was too lazy to configure it. For the same reason, the party trick didn't work here, since I haven't had to commit anything today yet ...

pred_··on The Death of Quanta Magazine
Quanta themselves also put out a few posts on their Mastodon account about how they've changed the wording, and about how they assign credibility: https://mstdn.social/@QuantaMagazine/109439420826151490
pred_··on Tell HN: I asked ChatGPT to build a login form in React and it gave me the code
Here's a relatively simple example where it identifies and explains a buffer overflow: https://twitter.com/moyix/status/1598081204846489600
pred_··on Experiments spell doom for physical-collapse explanation of quantum weirdness
> Is wave function collapse is a real thing or just an approximation of what happens when a large system is entangled?

I've listened to enough Carroll to convince myself that I think MWI makes sense, but what I never got is that it doesn't seem to offer much in terms of explanation of how the entangled state ends up being what it is: We see a particular result of an experiment with many possible a priori outcomes, but is there a mechanism that determines which particular entangled state we end up in? Something like the phases of the wave functions on individual Hilbert space sectors conspiring to produce a certain outcome, so that an omnipotent observer with full access to both parts would be able to tell what happens a priori, no dice being rolled? Or is that just hidden variable theory?

pred_··on Magnus Carlsen to give up World Championship title
Unless I missed something recent, it is not known whether any player has a winning strategy (or a drawing strategy, for that matter). It would be quite the discovery as well.
pred_··on Bitcoin mining becomes unprofitable as BTC price falls to average cost of mining
If there were no users, presumably there would be no network (at least if "users" include people who are in it for the financial speculation), so it is meaningful to attribute energy usage to users. But how to quantify that? One reasonable approach that shows up a lot is to say that usage is making transactions, and just consider the energy usage of all transactions to be that of the entire network (since mining exists to add credibility to transactions). Then estimates will say that on average, any transaction uses more than 1 MWh of electricity.
pred_··on I Rewrote WinUI to WPF
What's a source for WPF being abandoned? Limited new feature development aside, it was just ported to .NET Core.
pred_··on Reducing complexity by integrating through the database
But if F->M, then why not G->A? MAAAN.
pred_··on Solving Math Word Problems
For a moment there, the title had me hoping that they were working on the generally undecidable https://en.m.wikipedia.org/wiki/Word_problem_(mathematics)
pred_··on Show HN: Web browser to help programmers think clearly
I don't know about Keywarden, but KeePass just uses a global hotkey that can be used to type in your password in a context-dependent fashion (figures out the relevant password from the page you're on). No browser integration required, yet no UX hit. (Edit: But I have no idea if its "figure out what page you're on" functionality would work with Bonsai.)
pred_··on Migrating from Docker to Podman
It is straightforward to get Podman up and running in WSL2; it is also possible to set up Docker in WSL2 as well without Docker Desktop as well but it is much more painful. So in the Windows space, Podman effectively becomes an alternative to Docker Desktop, simply because the latter makes it possible to do Docker at all (ignoring the other things it does).
pred_··on The health benefits of better air
I understand how fixing leakages, or more generally, not properly ventilating your place, would increase CO₂ levels, but where do air purifiers come into the picture? Is it just because someone who has an air purifier is also more likely to not ventilate (to keep PM2.5 down?), or are air purifiers themselves somehow bad for CO₂ levels?

I can't guess why they would be, and searching around a bit doesn't seem to suggest that's the case either.

pred_··on Why I'm Lukewarm on Graph Neural Networks
From the post:

> NetworkX is a bad library.

pred_··on Advantages of Using R Notebooks Instead of Jupyter Notebooks (2017)
What's wrong with nbconvert?
pred_··on 310 Bitcoin challenge has been solved
Another problem is that even if the puzzle is legit, you can't claim your prize without wrecking havoc on the environment in the process. At an estimated 850 kWh [0] per transaction, you would need to have a pretty good excuse for performing transactions at all.

[0]: https://digiconomist.net/bitcoin-energy-consumption

pred_··on Google YOLO clickjacking
They also state in the same Twitter thread that they were aware of the issue before the blog post was written. IANAL but even if the shutdown was intentional (as opposed to being the example of terrible damage control it looks like), willfully leaving a bug in production that allows a set of whitelisted partners to deanonymize their visitors without their consent seems like something that shouldn't fly in countries with data protection laws?
pred_··on Google YOLO clickjacking
On Twitter [0] they're claiming that it wasn't disabled, and that it working only on a set list of hosts is intended behavior.

[0]: https://twitter.com/sirdarckcat/status/994867137704587264

pred_··on Google YOLO clickjacking
Indeed. A Google engineer stated on Twitter [0] that the shutdown of the service happened because apparently YOLO is only supposed to be accessible to whitelisted partners.

[0]: https://twitter.com/sirdarckcat/status/994867632355577862

pred_··on Google YOLO clickjacking
Looks like they took it down for everyone [0]; maybe not the most elegant approach but at least it seems they're taking it more serious now.

[0]: https://stackoverflow.com/questions/50289065/google-yolo-sto...

pred_··on The Logical Disaster of Null
Those interested in how C# 8.0 approaches the problem might appreciate Mads Torgersen's thoughts on the matter [0] (relevant part starts at 5:40).

[0] https://channel9.msdn.com/Blogs/Seth-Juarez/A-Preview-of-C-8...

pred_··on Seven Puzzles You Think You Must Not Have Heard Correctly (2006) [pdf]
> and then assume a random integer yourself C.

This is impossible; there's no uniform measure on the integers (as σ-additivity makes it impossible to bound such a measure).

pred_··on The Erdős paradox: When a mathematical number and Wikipedia collide
Although it will give you more or less reasonable results, I don't see a null hypothesis for which this approach does not ultimately become flawed: Assuming that you are testing the hypothesis that the two proportions agree, then, for instance, using a fixed binomial parameter of 12/262 becomes wrong for any number of deletion attempts different from 2; that is, part of the assumed model includes the outcomes you are testing: The case "3 deletions", which is part of the "2 or more extreme" probability you calculate, would have led to a different value of $p$.

Various statistical tests exist for taking this into account. With Fisher's exact test [0], we find a $p$-value close to yours:

    In [6]: from scipy.stats import fisher_exact, binom

    In [7]: binom(12, 12/262).sf(1)
    Out[7]: 0.10211478280975775

    In [8]: fisher_exact([[2, 10], [10, 240]])[1]
    Out[8]: 0.098322319292822702
However, had we not had such a large male sample size, the values might differ greatly; say, for instance, that we had had 3 deletion attempts out of 33 articles on males instead. Then we find

    In [12]: binom(12, 5/45).sf(1)
    Out[12]: 0.39171131326925679

    In [13]: fisher_exact([[2, 10], [3, 30]])[1]
    Out[13]: 0.59808767522891315
[0]: https://en.wikipedia.org/wiki/Fisher's_exact_test
pred_··on Simple example of machine learning in TensorFlow
That's nifty; I was looking for something like that just a few weeks ago for a work demonstration! Ended up doing https://gist.github.com/fuglede/ad04ce38e80887ddcbeb6b81e97b... instead.
pred_··on The Security Impact of HTTPS Interception [pdf]
Relevant Bugzilla entry: https://bugzilla.mozilla.org/show_bug.cgi?id=1059392
pred_··on Email Address Disclosures, Preliminary Report
You don't even have to specify an email address at all; it's considered optional in ACME.[0]

[0] https://github.com/ietf-wg-acme/acme/blob/master/draft-ietf-...

pred_··on Email Address Disclosures, Preliminary Report
Not of those that did not specify any, I would imagine; you can use the ACME service without providing any email address at all.
pred_··on More contributions on your profile
I wish it was possible to turn off the graph entirely; I don't see why I would want to make it so completely obvious when I'm on holidays or for one reason or another not working on GitHub based repos.
pred_··on Announcing Certbot: EFF's Client for Let's Encrypt
It's worth pointing out here that reusing a static keypair with Let's Encrypt is currently more or less straight-forward using acme-tiny.

https://github.com/diafygi/acme-tiny

Edit: Looks like https://github.com/lukas2511/letsencrypt.sh is capable of doing the same, as pointed out in another comment.

pred_··on Go best practices, six years in
The site blocks Tor users; ugh.
pred_··on WordPress.com turns on HTTPS encryption for all websites
If available, and if someone has added it to the database of more or less manually maintained rulesets for redirection;

https://www.eff.org/https-everywhere/atlas/

https://github.com/EFForg/https-everywhere/tree/master/src/c...

← PreviousPage 4 of 5Next →