News for hackers. Stuff that matters.

yoble

The required specs seemed a bit high to me, and I was just looking for alternatives.

I found Project Nomad (https://projectnomad.us) which looks more polished. Any other suggestions?

Re:An Update on Wayback Machine Access on Saturday September 19, 2026 @12:54PM (#49768137)
Finally signed up for 10$/month donation. Thanks for the inspiration!
Re:I resigned from Anthropic today on Wednesday September 09, 2026 @03:54AM (#49622870)
In prioritizing risks I do feel it's a genuine qualitative difference though.

Number of humans going to 1 million would be huge catastrophe, but after a few thousand years it gets back up to billions of people, renewed every generation.

Number of humans going to 0 means that's it. One scenario has many orders of magnitude more missing humans, when you count future lives.

I thought France had it. It turns out France, Italy, Netherlands, UK, and Belgium have a conditional deferred version: you can become a citizen at 18 if you're born and have been living there (plus a few caveats).
Re:Scraperr – A Self Hosted Webscraper on Monday May 12, 2025 @10:57AM (#43963790)
Love the easter egg when going to https://pure.md/https://pure.md
In my previous company we hired a startup that did security training, that recommanded everyone use a password manager. And one of their test was that they sent a fake phishing email to people (randomized over a couple of months so not everyone would get it the same day).

I don't remember the exact number but something like 30% of people who didn't use a password manager got caught. Basically no-one using a manager was.

Granted there might be some selection bias (people who had managers were probably already slightly more security conscious), but people were feeling slightly embarrassed to have been caught and it worked great to have everyone do the switch. And everyone remembered after that that if it doesn't autofill, something's amiss.

I don't think that's correct as a blanket statement - you can use a passphrase, or remember a 14+ character password since you only have one to remember.

Even if it's only random-ish, password managers do key stretching (for example by hashing the password 600k times - bitwarden has a high default value and lets you increase it if you like) so that it has to take some computational effort to check if a single password is correct. That's why it take a few seconds to unlock your vault each time.

With these in place I think you're pretty safe for a long time. (Well, maybe until quantum computing breaks those cyphers?)

Re:GitHub Copilot is now available for free on Wednesday December 18, 2024 @05:53PM (#42456401)
I have the same issue, I tried to get into VSCode a few times but each time switched back to JetBrains.

If your main issue is the keybinding though there is a vscode plugin[1] that recreates Intellij IDEA bindings, which I found helped smooth the transition during my tryouts for me.

[1] https://marketplace.visualstudio.com/items?itemName=k--kato....

My mom is an avid traveler who takes a ton of photos and puts them on albums she then shares with the family, and a while ago she was asking if I had a solution so she could have a website where all her albums are listed. She wanted to not have to share a new link each time, and have people easily look up older ones.

I didn't have any easy solution and this looks promising, congrats!

A few dealbreaker things I can share:

- she has lots of albums already on gphoto. She'd need to easily import them.

- she makes heavy use of the map and text blocks you can add in gphoto albums, which makes each album a kind of travel diary. I don't get the sense these are supported in your product yet, these would be required for her.

- she doesn't have a ton of videos but sometimes she does have a few.

- I'd have some concerns about the longevity of your product - if she invests time into it she wants to be able to look back at the albums in 10-20 years time. Having a convenient way to export the albums would be reassuring to me.

- I think she has a few 1000s photos in those albums, so your highest tier would be too low for her, if there was a way to buy storage that might suit her usage better (though she has a hobbyist budget).

It might be technically difficult and you rejected that path already, but I'm thinking an ideal way for her would be to keep editing her albums in gphotos and sync them to your site, which would take care of the longevity concerns and allow her to keep using the interface she knows (if you linked directly to the pics/vids on google server that would eliminate the cost of storing pictures for you, but I assume that's impossible or prohibited by google's tos).

Anyway, just sharing my use case in case that's useful but congrats on launching and on the good looking product!

Re:Functional ultrasound through the skull on Friday November 08, 2024 @02:22AM (#42084935)
For sure, though I'll probably have more info after the study.

It's done by the same people as the second paper I linked, on people attending a 10-day silent meditation retreat. My understanding so far is that the participants will be "zapped" a couple of time over the 10 days, to explore exactly what you describe ie alterations of consciousness similar to what's found in long term meditators on retreat, except induced on people who are already on retreat instead of people who'll have to go back to work afterwards.

I'll have more to report in a couple weeks time!

(If you'd like to share, I'm also curious as to what interests you in that field of study)

Re:Functional ultrasound through the skull on Thursday November 07, 2024 @08:52PM (#42083326)
Nice timing, tomorrow I'll be participating in a study doing transcranial ultrasonic neuro-modulation, meaning using ultrasound not just to map brain activity but to influence it (the point of the study is inhibiting the Default Mode Network).

If anyone's interested I found those two paper really interesting:

- Aubry et al 2023[1], on potential risks and limitions of using focused ultrasound in the brain (tldr we don't know but have conservative estimates. Really interesting for me to see that HN article adding to that)

- Lord et al 2024[2], a first study on using Transcranial Focused Ultrasound to modulate the DMN and subjective experience

[1] https://arxiv.org/pdf/2311.05359

[2] https://www.researchgate.net/publication/381488518_Transcran...

Re:The Quiet Art of Attention on Monday October 14, 2024 @10:49AM (#41838065)
In Buddhism this is linked to the central concept of Dependent Origination: things arise in dependence on other things, everything is conditioned by something else.

This includes movements of attention: attention is drawn to a sound perception because a frog makes a sound, then conditioned on interest being high interest dwindles, conditioned on that plus nerves shooting in the back a sensation catches the attention, it goes to a thought of planning that appears conditioned on you having a deadline tomorrow...

Even the arising of intention to move the hand arises at that moment conditioned on other things (that include you playing around with your perception a moment ago, pre-existing view around how decision work and wanting to prove it, having a hand...)

Looking for conditionality in everything we might identify with - thoughts, perceptions, intention... - is a central practice in numerous schools of Early Buddhism, and can lead to a deep, deep sense of letting go, inhabiting a flow of things "just unfolding", and classical insights around what our sense of self actually is.

Then I'll go ahead and list it there. Thank you for sharing the project!
Yeah definitely! StatiCrypt was originally created to password protect pages uploaded on static hosting (like Github pages) or where you didn't have control on the server.

It has some valid other use cases but it has drawbacks too and htpasswd can definitely be the better solution in many situations. StatiCrypt just aims at being another tool with different trade-offs.

Oh cool that looks awesome thanks for sharing! Are you the maintainer?

I saw that StatiCrypt is listed is the alternative section of your README, I'll do the same on StatiCrypt (and add a bunch of the one listed there that I didn't know about!)

The "Alternatives" section of StatiCrypt has always felt a bit empty to me, I'm glad to discover all those great looking projects and beef it up a bit. :)

Especially with 600k PDBKF2 iterations, 16 alphanum chars should be very safe.

There's a (warning: very detailed) issue covering the topic of PBKDF2 iterations and password length over here, if you feel like diving into that rabbit hole: https://github.com/robinmoisson/staticrypt/issues/159

Looks cool! And I like the effort you put in making your readme clear and covering many possible configs too, it feels very easy to read to me.

Would you be okay with me listing your project in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

That looks cool!

Do you mind if I list in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

Glad you enjoyed it before switching!

If you're open to sharing what didn't work for you in remembering people through re-deploy I'd love to hear it, I spent quite a few brain-cycles to think about making that as seamless as possible for the user (semver major version bump shouldn't break this, for example).

I'm assuming the problem is the salt being changed if it's not pinned by the .staticrypt.json file (auto-created but needs to be commited) or the `-s <salt>` CLI option.

Love that approach! Would you be ok with me featuring it in the Community and Alternatives[1] section of the StatiCrypt readme?

[1] https://github.com/robinmoisson/staticrypt#community-and-alt...

(author here) Yeah, or if it's on http someone could MITM and change the script, or if they are malicious extension on the browser the content can be stolen after decryption.

That felt implicitly obvious to me, but I think you're right and it wouldn't hurt to put those assumptions in the FAQ. Thanks for the feedback!

(If you, or someone else, see other attack vectors, feel free to comment with those)

Just random chance!

I recently launched another project with an interface to search and filter blog posts from a prolific blogger I really like, using AI tech. He featured the website on his blog last week which draw a pretty big spike in traffic - well, big for me, like a few thousands people - so I've been refreshing my analytics tools from time to time to follow what's happening, and I just noticed a spike on my other website as well.

Author here. I was wondering why I was seeing plenty of people from github on my meditation website so I checked HN, hi!

Happy to answer any question you might have, and feel free to offer feedback too.

(Last time this got posted to HN[1] was really productive in improving the project, thanks!)

[1] https://news.ycombinator.com/item?id=34849024

Seconding this, as a layman I've found his books both technical and fascinating. He's a great teacher, getting into the details but explaining in a really engaging manner.
Re:How to Do Great Work on Sunday July 02, 2023 @08:56AM (#36561048)
I see this simple version of Karma talked about quite often in the general public and it's pretty far from my understanding of Karma in Buddhism.

Karma is a consequence of Dependent Origination - basically that things arise dependent on other things, and there is nothing that's outside of the law of cause and effet (hence no eternal, unchanging, eternally happy Self, which is the type of Self, or soul/atta(pali)/atman(sanskrit) the Buddha was talking about).

Karma means your intentional thoughts and actions all have consequences.

If you give to those in need, that ripples through the world and yeah, you're more likely to get good things because you're building a good life. There's no need for a "cosmic justice" that will weigh what you did and give you the exact same amount when you're in a similar situation. You have more probability of receiving help (cause you've got friends now), but you might still be unlucky and don't receive any help.

That's on the material level but it goes further than that - by acting and thinking wholesomely, less based on your own craving and delusion, you're cultivating a mind that's less likely to act based on craving and delusion. It's simple cause and effect again, and it depends much less on external conditions since it's internal.

(Now the word Karma is used differently in different tradition, so the general idea of "cosmic retribution" might be what it refers too in some of those. When I understood more this version of Karma it made a whole lot more sense, so I'm sharing that here.)

I found this article by Culadasa really enlightening on the topic: https://s3.amazonaws.com/dharmatreasure/20130322--what-the-b...

Re:Password protect a static HTML page on Sunday February 19, 2023 @06:17AM (#34856588)
Author here - the specific use case is when you _don't_ have or want server-side logic or a DB. For example on static hosting (hence the name StatiCrypt) like Github pages, Netlify, etc.

That means nothing to maintain, no server cost, no serverless functions to rely on, etc.

But when that's not a constraint there are many different options that might make more sense.

Older »