HN user

abricq

704 karma

Software Engineer

Personal site: arthurbricq.com

Posts23
Comments89
View on HN
rdist.root.org 11mo ago

Timing attack in Google Keyczar library (2009)

abricq
1pts0
www.zdnet.com 1y ago

Apple quietly makes running Linux containers easier on Macs

abricq
4pts0
www.youtube.com 1y ago

Two AI agents realize they're both AI and switch to a superior audio signal [video]

abricq
2pts1
www.digitec.ch 1y ago

Liberux Nexx: Linux smartphone (found on Galaxus, Swiss online reseller)

abricq
22pts21
www.youtube.com 1y ago

A 1968 documentary about Inuit from national film board of Canada

abricq
3pts0
engineeringprompts.substack.com 1y ago

Sorry Human, You're Wrong

abricq
18pts4
www.politico.eu 1y ago

Romanian court cancels presidential election amid TikTok Russian influence fears

abricq
9pts19
dynamical.org 1y ago

Weather data is hard to work with. What if it wasn't?

abricq
2pts0
curiouscoding.nl 1y ago

One Billion Row Challenge

abricq
1pts0
www.codingwiththomas.com 2y ago

Implement a List of Types in C++

abricq
2pts0
www.whitehouse.gov 2y ago

(White House) a path toward secure and measurable software [pdf]

abricq
5pts0
en.wikipedia.org 2y ago

Doomsday Argument

abricq
2pts0
www.semdesigns.com 2y ago

Code Coverage for Arbitrary Languages Made Easy [pdf]

abricq
23pts20
www.galaxus.ch 2y ago

Dry January affecting Galaxus sales

abricq
1pts1
devseed.com 2y ago

DevSeeds's CO2 flight calculator to optimize footprint of company meetings

abricq
2pts0
solar.lowtechmagazine.com 3y ago

Can We Make Bicycles Sustainable Again?

abricq
47pts81
folk.ntnu.no 3y ago

Oberon-2, a hi-performance alternative to C++ (1997)

abricq
73pts102
chrismorgan.info 3y ago

Why your first FizzBuzz implementation may not work

abricq
2pts0
en.wikipedia.org 3y ago

Non-recognized British WWII hero who 'hacked' the German radios in France

abricq
2pts1
rxnmapper.ai 3y ago

Extraction of chemistry grammar from unsupervised learning of chemical reactions

abricq
2pts0
www.lemonde.fr 3y ago

The deserts of Saudi Arabia will soon be a playground for winter sports

abricq
1pts0
blog.codinghorror.com 3y ago

The Broken Window Theory

abricq
2pts0
unhabitat.org 4y ago

First sustainable floating city prototype in Korea, as sea levels rise

abricq
2pts0

I'm not an expert either, but i've studied it a little and tried some of these stuffs.

First, the attestor is not google. Google here only provides the infra (to generate proof and verify them). Let's call the attestor the issuer, and it's the trusted authority that gives you a proof of identity.

A possible flow is:

1. (pre-req) Some issuer (a state, bank, mobile operator, etc.) issues a signed credential to my wallet (stored on my phone, for instance). This could be a full digital ID, or a narrower “proof of age” attestation.

2. Later, a site asks my browser for a proof that I satisfy some predicate, e.g. age >= 18. The site provides the "zk-program" (circuit) that needs to be executed, and awaits for proof (which are essentially proof of executions of the program on trusted yet undisclosed inputs).

3. My phone generates (ideally locally, but not ready today yet) a ZK proof that it knows a valid issuer-signed credential whose hidden attributes satisfy that predicate. Essentially, it is executing the circuit with some inputs (some are public, like public key of issuers, some of private, like the issued ID)

4. The site verifies the proof against public inputs: the issuer public key, the circuit being used, the predicate being requested, and a fresh nonce/challenge.

So to answer some of your questions.

Does the site know who I am? Not from the ZK proof itself, it will know who has issued your ID.

Does the site know my attestor? Yes, it knows their public key.

Does the attestor know what site I am visiting? No.

Does the attestor know who I am? Yes

Do I know who the site and attestor are, and when proof happens? I guess there are multiple possible ways to do this, depends on the UX.

While I appreciate all the stuffs mentioned here, I believe they are missing something: people should *go vote at all the elections*, and advocate for a system-level change. Systemic resilience instead of personal habits.

Pretty much all their suggestions are to be applied on personal-level. And I agree with those. But they could be made 100x easier if there was some help provided by localities, municipalities & states. I'd love to know better my neighbors & exchange skills & objects, but i'd be much easier if there was a *free* repair-coffee in the neighborhood.

One example from the article: one of the suggestion for "hope for the best prepare for the worst" is "start a local repair cafe". But come on ! With what money ? With what time ? Where ? Opening a repair café is the kind of stuff is by nature non-profitable, therefore the business of the states.

All i'm trying to say is: let's just not forget that this is a political concern, and we can vote for these stuffs.

ML assistance reduces our performance and persistence, and denies us both the muscle memory and deep theory-building that comes with working through a task by hand: the cultivation of what James C. Scott would call

Imagine being starting university now... I can't imagine to have learned what I did at engineering school if it wasn't for all the time lost on projects, on errors. And I can't really think that I would have had the mental strength required to not use LLMs on course projects (or side projects) when I had deadlines, exams coming, yet also want to be with friends and enjoy those years of your life.

Let me explain why I feel emotional about this. Humans had already proven how much harm can be done via online harassment. This seems to be the 1st documented case (that I am aware of) of online harassment orchestrated and executed by AI.

Automated and personalized harassment seems pretty terrifying to me.

This game gave me a real-life déjà vu. A few months ago, three friends and I spent a long weekend trying to build a Game Boy emulator from scratch in Rust. None of us had ever worked on emulators before—we basically gave ourselves three days to read the docs, figure things out, and ship something. It was chaotic but also educational and an absolute blast. Encouraging anyone that wants to learn a bit more about simple computers and assembly to try that ! If anyone’s curious about what came out of it: https://github.com/chalune-dev/gameboy

My belief in this tech isn't based on marketing hype or someone telling me it's good – it's based on cold reality of what I'm shipping daily

Then why is half of the big tech companies using Microsoft Teams and sending mails with .docx embedded in ?

Of course marketing matters.

And of course the hard facts also matters, and I don't think anybody is saying that AI agents are purely marketing hype. But regardless, it is still interesting to take a step back and observe what marketing pressures we are subject to.

Yes, certainly agree. A few days ago here there was this blog claiming how formal verification would become widely more used with AI. The author claiming that AI will help us with the difficulty barrier to write formal proofs.

* Programmers resistance to AI assisted programming has lowered considerably. Even if LLMs make mistakes, the ability of LLMs to deliver useful code and hints improved to the point most skeptics started to use LLMs anyway: now the return on the investment is acceptable for many more folks.

Could not agree more. I myself started 2025 being very skeptical, and finished it very convinced about the usefulness of LLMs for programming. I have also seen multiple colleagues and friends go through the same change of appreciation.

I noticed that for certain task, our productivity can be multiplied by 2 to 4. So hence comes my doubts: are we going to be too many developers / software engineers ? What will happen for the rests of us ?

I assume that other fields (other than software-related) should also benefits from the same productivity boosts. I wonder if our society is ready to accept that people should work less. I think the more likely continuation is that companies will either hire less, or fire more, instead of accepting to pay the same for less hours of human-work.

Roc Camera 9 months ago

What I am waiting for is something similar to this (proof of image ownership / authenticity) embedded in smartphones cameras.

Not sure if ZK is the right way of achieving this. Even if the cryptographic guarantees are strong, generating these proofs is very expensive.

This is great ! Congratulations. I really like your project, especially I like how easily it is to peak at.

Do you plan on moving forward with this project ? I seem to understand that all the training is done on the CPU, and that you have next steps regarding optimizing that. Do you consider GPU accelerations ?

Also, do you have any benchmarks on known hardware ? Eg, how long would it take to train on a macbook latest gen or your own computer ?

I'm actually really bad at all this networking certificates, and have a question for the experts. If a user have to sign a short-lived CA and then present that certificate to the host he wishes to connect with, isn't that basically allowing CA emitters to track the user's activity for this host ?

This feels like replacing ssh for shh-with-tracking. Am i missing something ?

I know that I, as a user, ultimately have 2 choices: to pay for a subscription, or the choice to not use these services.

Option (1) does not block infinite scrolling content, it only removes adds. So this is missing the point. All i want is to not see these dumb shorts videos that I genuinely give no fuck about, but that manages to catch my attention regardless.

Then sure, I can always delete my social accounts, and ultimately i might end up doing it. But let me try to explain why I think this is difficult, and also unfair.

I give 2 purposes to these social networks: First, they play a role in personal-life balance as a way to be more integrated in my group of friends / local communities. Second, they play a role as citizen of my region (in my case, France and switzerland) by being a (sorta reliable) source of information through following accounts and newspapper on them.

Initially, none of these social-networks came with this super-fast / addictive content. They only started to integrate it, in my experience, since 5 years. So it seems to me that these companies have broke the initial contract that they "sold" to us: to connect with our friends & communities and to allow us to follow a specific set of public influencers.

I guess that I am mad that we, as a society, have allowed these companies to gain such an important role in our daily lifes (social life and public life) that they can now say : we will allow you to interact with some of our friends, but you will also have to watch our stupid videos... And unfortunaltey, it's not easy at all to spin up a concurrent social networks that would be full-filling this initial contract. Probably lots of people actually like to scroll on insta Reels and youtube Shorts.

I really like everything related to network-wide blocking of shitty online services that are enforced on us !

On top of blocking adds (which is great), I wish there were more / easier ways to do network-wide blocking of all sorts of aggressive infinite scrolling (in my case : youtube shorts and instagram reels).

I often like to go on instagram to see posts / stories from the people I follow and I don't want to be suggested stupid videos that are especially designed to catch my attention. I know it's probably revealing a lack of strength on my side, but yeah, I often fall for watching a few of them and loosing 15 minutes of my life.

If you care fairness, I have 1 extra suggestion that you might be interested in.

It was proven by several data-science research that when users have to votes (or give ratings) and if they are able to see the previous result, then the first few votes have an extremely important effect.

For instance here is one stury, very well written article by a famous teacher Robert West, "of sheep and beer" https://dlab.epfl.ch/2017-08-30-of-sheep-and-beer/ which describes this effect on beer-rating sites.

One way to overcome this effect is to hide the votes until enough votes were collected (eg more than 50). Another way is to hide votes until you have voted yourself.

It's not that you ask it to write 200 lines of code at once, and blindly trust it. It's more that you start to use the lib, ask it to generate one helper method at the time, for an isolated task. Which leave you time to "review" the code that it wrote properly. Even when a human writes code, it needs to go through peer-review. So the exact same applies with AI. It's the job of the reviewer (in this case, the one who invokes the AI) to make sure that the one who wrote the code does not do mistake, which can include going to read the doc in more detail.

This last month I decided to try the Jetbrain equivalent of Cursor, for their IDEs (https://www.jetbrains.com/ai/). It's a pluging well integrated in the code editor that you can easily summon.

I work in Rust and I had to start working with several new libraries this month. One example of them is `proptest-rs`, a rust property testing library that defines a whole new grammar to define the tests. I am 100% sure that I spent much less time to get on-boarded with the librariy's best practices and usages. I just quickly went through their book (to learn the vocabulary) and asked the AI to generate the code itself. I was very surprised that it did not do any mistakes, considering that sort of weird custom grammar of the lib. I will at least keep trying for another months.

Los Alamos Chess 2 years ago

This rule is required because "as in chess", a pawn may promote to bishop.

If you only remove the bishops from the starting position, then the rules of chess still allow bishops to come in later in the game (through a promotion).

I am assuming they did not have enough memory to hold the rules of bishops, and therefore decided to completely remove them from the set of possible pieces. They allow rooks and knights promotion because these pieces are in the set of initial pieces: their rules are already implemented.