MurphyA/hacker-news huggingface dataset:
by lambdaone | 2025-10-06 11:43:20+00:00
There are all sorts of crazy ways of getting data out of even air-gapped machines, providing you are willing to accept extremely low data rates to overcome attenuation. Even with million-to-one signal-to-noise ratio, you can get significant amounts of key data out in a few weeks.

Jiggling disk heads, modulating fan rates, increasing and decreasing power draw... all are potential information leaks.
by jcattle | 2025-10-06 11:43:32+00:00
Can anyone give more than a hand-waived explanation on how this crash will come about? This paragraph reads kind of like: Companies not profitable, no more money coming in, ????, crash

>> I firmly believe the (economic) AI apocalypse is coming. These companies are not profitable. They can't be profitable. They keep the lights on by soaking up hundreds of billions of dollars in other people's money and then lighting it on fire. Eventually those other people are going to want to see a return on their investment, and when they don't get it, they will halt the flow of billions of dollars. Anything that can't go on forever eventually stops.

How will this actually lead to a crash? What would that crash look like? Are banks going bust? Which banks would go bust? Who is losing money, why are they losing money?
by rhodey | 2025-10-06 11:43:59+00:00
I hope people dont give up on TEE, see AWS Nitro

The AWS business is built on isolating compute so IMO AWS are the best choice

I've built up a stack for doing AWS Nitro dev

https://lock.host/

https://github.com/rhodey/lock.host

With Intel and AMD you need the attestation flow to prove not only that you are using the tech but you need to attest to who is hosting the CPU

With Amazon Nitro always Amazon is hosting the CPU
by upofadown | 2025-10-06 11:44:01+00:00
You need to be sure to use a sufficiently strong password/passphrase for PGP symmetric encryption. For GPG I would use at least 4 diceware words. The thing being discussed here only requires a digit and 2 words due to the use of a PAKE.

It would be nice if things like GPG would generate an appropriate passphrase for you by default.

I guess if you are only going to send one file the difference is not really all that significant. Otherwise the experience after exchanging email addresses and fingerprints would probably be better with encrypted email.
by theshrike79 | 2025-10-06 11:44:37+00:00
I have a few of these on FreshRSS, they're all set so that they don't appear on the main feed and they have "Max number of articles to keep unread" set to a non-overwhelming number.

They're basically firehoses of information where I like to tap into now and then.

Some Day I'll do a classifier system that lifts up the ones I might be interested in to the main feed. FreshRSS does have "labels", but the filtering system isn't especially powerful (or easy to use)
by xoa | 2025-10-06 11:44:40+00:00
Thanks in turn for the details, always fascinating (and useful for lessons... even if not always for the party in question dohoho) to hear a touch of inside baseball on that kind of incident.

>But someone thought they were exceedingly clever and they were going to fix this without any downtime and that's when a small problem became a much larger one

The sentence "and that's when a small problem became a big problem" comes up depressingly frequently in these sorts of post mortems :(. Sometimes sort of feels like, along all the checklists and training and practice and so on, there should also simply be the old Hitchhiker's Guide "Don't Panic!" sprinkled liberally around along with a dabbing of red/orange "...and Don't Be Clever" right after it. We're operating in alternate/direct law here folks, regular assumptions may not hold. Hit the emergency stop button and take a breath.

But of course management and incentive structures play a role in that too.
by thaumasiotes | 2025-10-06 11:45:20+00:00
> it gave me a fairly sensible answer (similar to what is said in this article, ie, trained on language by humans that think it exists, etc)

That's more of a throwaway remark. The article spends its time on a very different explanation.

Within the model, this ultimate output:

[severed horse head emoji] can be produced by this sequence of tokens: horse [emoji indicator]

If you specify "horse [emoji indicator]" somewhere in the middle levels, you will get output that is an actual horse emoji.

This also works for other emoji.

It could, in theory, work fine for "kilimanjaro [emoji indicator]" or "seahorse [emoji indicator]", except that those can't convert into Kilimanjaro or seahorse emoji because the emoji don't exist. But it's not a strange idea to have.

So, the model predicts that "there is a seahorse emoji: " will be followed by a demonstration of the seahorse emoji, and codes for that using its internal representation. Everything produces some output, so it gets incorrect output. Then it predicts that "there is a seahorse emoji: [severed terrestrial horse head]" will be followed by something along the lines of "oops!".
by charliebwrites | 2025-10-06 11:45:31+00:00
Hulu, ESPN, and Disney+ also sent out a notice that they’re increasing prices around the same time

I wonder how many cancellations are related to the price increase?

I know I switched to a cheaper bundle around that time, and it had nothing to do with politics. I just didn’t see the relative value of ESPN if I’m paying that much more for it
by peterfirefly | 2025-10-06 11:45:49+00:00
No. NOT a load/store architecture. People tried that in the 90's for x86. Doesn't work nearly as well as keeping µops generally the same as the simpler move/ALU instructions of the external ISA, just encoded differently. That's what modern x86 uses, that's what modern z/Arch ("S/360-31-64++") uses.

x86 and z/Arch instructions for move/ALU/jmp/conditional branch are fine. They are not hard to decode and they are not hard to execute. That's the core of the µop instruction set (just encoded differently). Then they add some specialty stuff necessary to implement more complex instructions using sequences of µops -- and of course the SIMD stuff. That's it. It's a simpler version of the external ISA, NOT a RISC.

Part of the path the µops take is wide, possibly with the option of a shared field for a large immediate.

Instructions that map to short, fixed-length µops sequences are handled directly by the decoders that spit out a wide chunk of µops. Longer or variable-length µops are handled by having the decoders emit an index into a ROM of wide µops chunks. The decoders can often spit out both the first wide chunks AND the index (so there's no need to wait a cycle for the ROM to emit µops).

Multi-cycle µops are not much of problem, as long as the cycle count is predictable, preferably statically predictable. It is common to have µops that are "multi-issue", for example if they involve memory operands.
by jdshaffer | 2025-10-06 11:45:52+00:00
Interesting article, though I wonder why they didn't mention the Fram -- Nansen's ship that WAS designed to resist the crushing ice, and DID survive a trip across the northern seas purposely trapped in the crushing ice (but just missing the north pole)... If my memory serves, Shackleton knew about Nansen, and even talk with him before his (Shackleton's) expedition. shrug
by pmarreck | 2025-10-06 11:46:20+00:00
And yet it isn't mentioned enough how Adam deceived the LLM into believing they were talking about a story, not something real.

This is like lying to another person and then blaming them when they rely on the notion you gave them to do something that ends up being harmful to you

If you can't expect people to mind-read, you shouldn't expect LLM's to be able to, either
by stego-tech | 2025-10-06 11:46:28+00:00
This. Speaking specifically from the IT side of things, an employer or customer refusing to do backups is the biggest red flag I can get, an immediate warning to run the fuck away before you get blamed for their failure, stego-tech kind of situation.

That being said, I can likely guess where this ends up going:

* Current IT staff and management are almost certainly scapegoated for “allowing this to happen”, despite the program in question (G-DRIVE) existing since 2017 in some capacity.

* Nobody in government will question sufficiently what technical reason is/was given to justify the lack of backups and why that was never addressed, why the system went live with such a glaring oversight, etc, because that would mean holding the actual culprits accountable for mismanagement

* Everyone involved is unlikely to find work again anytime soon once names are bandied about in investigations

* The major cloud providers will likely win several contracts for “temporary services” that in actuality strip the sovereignty the government had in managing its own system, even if they did so poorly

* Other countries will use this to justify outsourcing their own sovereign infrastructure to private enterprise

This whole situation sucks ass because nothing good is likely to come of this, other than maybe a handful of smart teams lead by equally competent managers using this to get better backup resources for themselves.
by renegat0x0 | 2025-10-06 11:46:53+00:00
- I can confirm that the web archive can be really slow

- I think I have seen that AI scrapers create bottleneck in the bandwidth

- To some digital archives you need to create scientific accounts (I think Common Crawl works like that)

- Data quite easily can be very big. The goal is to store many things. We not only store Internet, but with additional dimension of time

- Since there is a lot of data, it is difficult to navigate it, search it, so it easily can become unusable

- For example that is why I created my own meta data link, I needed some information about domains

Link:

https://github.com/rumca-js/Internet-Places-Database
by slightwinder | 2025-10-06 11:46:58+00:00
I don't think anyone seriously believes he will win. Despite making up all kind of wars and conflicts he claims to have solved, there hasn't been any real peace coming from him, yet. Maybe Gaza turns out to something real, but it's not done yet, and I kinda doubt they decide on these prices on a short whim. And if development in the USA continues like at the moment, I doubt he will be considered next year. It will be just one conflict cancelling out one peace.
by jaberjaber23 | 2025-10-06 11:47:12+00:00
testing cuda kernels on different gpus costs $7k/month in cloud rentals

so built an emulator instead

you give it a kernel, it predicts execution time on any gpu without running it. h100, a100, v100, whatever.

how: scraped specs for 50+ nvidia gpus, built tile-based simulator that models memory bandwidth, occupancy, and sm scheduling. validated against 12 real gpus and the mean error 1.2%

doesn't work for: dynamic parallelism, multi-gpu, tiny kernels under 1us but I will figure it out soon

if anyone's solved this differently?
by debugnik | 2025-10-06 11:47:22+00:00
> Json serialization, sure but you can use your own converters

And going through converters is (was?) significantly slower for some reason than the built-in serialisation.

> my impression is that minimal APIs are now the go to solution and you have `app.MapGet(path)` so no attribute

Minimal APIs use attributes to explicitly configure how parameters are mapped to the path, query, header fields, body content or for DI dependencies. These can't always be implicit, which BTW means you're stuck in F# if you ever need them, because the codegen still doesn't match what the reflection code expects.

I haven't touched .NET during work hours in ages, these are mostly my pains from hobbyist use of modern .NET from F#. Although the changes I've seen in C#'s ecosystem the last decade don't make me eager to use .NET for web backends again, they somehow kept going with the worst aspects.

I'm fed up by the increasing use of reflection in C#, not the attributes themselves, as it requires testing to ensure even the simplest plumbing will attempt to work as written (same argument we make for static types against dynamic, isn't it?), and makes interop from F# much, much harder; and by the abuse of extension methods, which were the main driver for implicit usings in C#: no one knows which ASP.NET namespaces they need to open anymore.
by chrischen | 2025-10-06 11:47:42+00:00
I've never understood monthly subscriptions. It's not like it's technically difficult to implement prorating or even look back and see that I haven't used Disney Plus at all and refund me for non-usage.

This event probably triggered a lot of their inactive subscribers like me to look at their bills. Not only will it lose a lot of these people but the required marketing efforts to bring me back would cost a lot more now too.
by preek | 2025-10-06 11:48:03+00:00
My current favorite llm (GLM 4.6) says „No“ on the first try with and without thinking:

- https://chat.z.ai/s/77f73452-a21c-418b-a1ba-311231743a83 - https://chat.z.ai/s/5c00a813-2c6f-473d-ba3c-88e2357c61a7

My previous favorite llm (GlM 4.5) also gets it right on the first try: https://chat.z.ai/s/0d3348d1-1465-4253-9521-2d447b0a2a97
by tcfhgj | 2025-10-06 11:48:40+00:00
sources for:

> dependency on gas of Putin which greens have not been a fan of, because of ecological issues as well as the danger of Putin which only the greens recognized before Putin started the war on Ukraine.

https://x.com/i/status/1497948385495687169 (captured from election debate 2021)

https://euractiv.de/news/baerbock-kritisiert-einigung-zu-nor...
by matsemann | 2025-10-06 11:51:37+00:00
Oh well, the comments will also be filled with complaints about Kissinger, Obama, Teresa, Arafat... and how the prize therefore somehow is worthless. 2020 thread has 30 comments mentioning Trump, 20 comments mentioning Obama.. https://news.ycombinator.com/item?id=24728142

Instead of celebrating the winners, some people just want to complain.
by ToucanLoucan | 2025-10-06 11:52:29+00:00
> What would that crash look like?

What it usually looks like when one of the valley's "revolutions" fails to materialize: a formerly cheap and accessible tech becomes niche and expensive, acres of e-waste, the job market is flooded with applicants with years of experience in something no longer considered valuable, and the people responsible sail off into the sunset now richer for having rat fucked everyone else involved in the scheme.

In this case though given the sheer scale of the money about to go away, I would also add: a lot of pensions are going to see huge losses, a lot of cities who have waived various taxes to encourage data-center build outs are going to be left holding bags and possibly huge, ugly concrete buildings in their limits that will need to be destroyed, and, a special added one for this bubble in particular, we'll have a ton of folks out there psychologically dependent on a product that is either priced out of their ability to pay or completely unavailable, and the ensuing mental health crises that might entail.
by XorNot | 2025-10-06 11:52:32+00:00
Their profitability would shrink, but they'd only be in trouble if they were taking on debt to expand operations on the expectation of future growth. AFAIK one of the annoyances gamers have had with Nvidia is that after crypto and now with AI, they've generally been very careful to control how they expand production since they seem quite aware the party could stop any time. It certainly helps to have a lot of product lock-in - people will bear much higher prices to stay with Nvidia at this point (due to, as noted - CUDA).

Sure, the stock price wouldn't be to the moon anymore, but that doesn't materially effect operations if they're still moving product - and gaming isn't going anywhere.

The stock price of a company can crash without it materially effecting the company in anyway...provided the company isn't taking on expansion operations on the basis of that continued growth. Historically, Nvidia have avoided this.
by antonvs | 2025-10-06 11:53:02+00:00
Have you found any actual value in this report? What, specifically?

It compares a fully open model to two fully closed models - why exactly?

Ironically, it doesn’t even work as an analysis of any real national security threat that might arise from foreign LLMs. It’s purely designed to counter a perceived threat by smearing it. Which is entirely on-brand for the current administration, which operates almost purely at the level of perception and theater, never substance.

If anything, calling it biased bullshit is too kind. Accepting this sort of nonsense from our government is the real security threat.
by mk89 | 2025-10-06 11:53:09+00:00
>Nobody believes that, WTF?

Why do you think Germans voted against nuclear? It was because of fear of events like Chernobyl/Fukishima etc. Then 2022 was the final blow, with documents saying that nuclear reactors didn't produce much energy and needed maintenance anyways. Kind of like getting rid of working trains to ride bikes instead. Why not. It's healthier :)

In the meantime, the world laughs at us. Literally the whole world.

You keep on mentioning the lobby of fossils, which obviously had an impact.

However, with Merkel the change was happening. At exactly the speed it was needed: 5% every couple of years, or so.

Now the only lobby I see is the one of fear that there is no tomorrow. While the countries just next to us, without even bothering China all the time, don't give 2 cents about it.

They keep on buying gas, uranium and fossils.

We on the other hand can finally build 800W solar panels on the balconies without bureaucracy. Thank God.

EDIT: with Merkel, we reached an increase of 5% per year for energy generated with renewables. Which is and was really good.
by addaon | 2025-10-06 11:53:14+00:00
This seems pretty trivial to fix (or at least work around) by adding an enclave generation number to the key initialization inputs. (They mention that the key is only based on the physical address, but surely it has to include CPUID or something similar as well?) Understood that this is likely hardware key generation so won’t be fixed without a change, and that persistent generation counters are a bit of a pain… but what else am I missing?
by HelloNurse | 2025-10-06 11:53:17+00:00
This type confusion would have been identical with a plain function, __add__ is only syntactic sugar:

class MyNum(int): def ten_times_sum (self, other): return (self+other)* 10 n = MyNum(12) a = 45 print(n.ten_times_sum(a))

Compare with, for example, fouling the state of output streams from operator>> in C++.
by bartread | 2025-10-06 11:53:46+00:00
I think it’s deliberate: subscribers cancelling their subscriptions over Jimmy Kimmel and/or price increases is old news, but if you spin it as subscribers facing cancellation of (by implication) shows you can generate more engagement whilst credibly being able to claim it’s just a badly written headline.

This is a garbage website. Look at how the article reads like it’s unfinished, like half of it is missing and there’s no conclusion. Look at the absolute irrelevance of the articles and ads underneath the article.

It’s sort of unbelievable that it’s made it onto the front page here.
by hyperbovine | 2025-10-06 11:53:52+00:00
See comments elsewhere in this thread. To cite one well known recent example, Oracle stock went crazy recently (and Larry Ellison briefly became the world’s richest person) after they disclosed in their earnings report that they are expecting something like $400b in revenue from serving OpenAI in the coming years. These overinflated expectations systematically multiply and propagate until you’ve arrive at the situation we’re in. As soon as that does _not_ happen and everyone realizes it, the whole house of cards come crashing down, in a very 1929 sort of way.

This is the point TFA is making, albeit a bit hyperbolically.
by lyu07282 | 2025-10-06 11:55:07+00:00
But if you believe in liberal censorship, cancel culture and DEI and critical race theory and immigrant crimes and all that other culture war/scapegoat nonsense being real then wouldn't you just be a Trump supporter? I'm saying that's all nonsense. That's why I'm saying liberals shouldn't cater to conservative delusions even if they think to be liberals, Trump will always outmatch them, he is a way more convincing bigot. Why do we need two conservative parties, it's just not a winning strategy.
by veeti | 2025-10-06 11:56:35+00:00
> Here's a thought experiment: imagine if Daniel Ek had launched Spotify in 2008 by scraping every song off the internet, hosting them on his servers, and telling record labels to pound sand. How long would Spotify have lasted? Instead, Spotify carefully negotiated each deal as it launched territory by territory.

Isn't that fairly close to what actually happened though? "Spotify's Beta Used 'Pirate' MP3 Files, Some from Pirate Bay (2017)" https://news.ycombinator.com/item?id=43169461
by incomingpain | 2025-10-06 11:57:01+00:00
>AI models from developer DeepSeek were found to lag behind U.S. models in performance, cost, security and adoption.

Why is NIST evaluating performance, cost, and adoption?

>CAISI’s experts evaluated three DeepSeek models (R1, R1-0528 and V3.1) and four U.S. models (OpenAI’s GPT-5, GPT-5-mini and gpt-oss and Anthropic’s Opus 4)

So they evaluated the most recently released American models vs pretty old deepseek? Deepseek 3.2 is out now. It's doing very well.

>The gap is largest for software engineering and cyber tasks, where the best U.S. model evaluated solves over 20% more tasks than the best DeepSeek model.

Performance is something the consumer evaluates. If a car does 0-60 in 3 seconds. I dont need or care what the government thinks about it. Im going to test drive it and floor it.

>DeepSeek’s most secure model (R1-0528) responded to 94% of overtly malicious requests when a common jailbreaking technique was used, compared with 8% of requests for U.S. reference models.

this weekend I demonstrated how easy it is to jailbreak any of the US cloud models. This is simply false. GPT 120b is completely uncensored now and can be used for evil.

This report had nothing to do with NIST and security. This was USA propaganda.
by GuB-42 | 2025-10-06 11:57:09+00:00
Global illumination is the hard part. The math isn't that hard, but even the best render farms don't have enough computing power to support a straightforward implementation.

So what follow is an endless series of tricks. Path-tracing is one of the purest implementations, and it is actually a simple algorithm to implement, but if you don't want to have a noisy mess on all but the most simple shapes, now we are talking PhDs and rock star developers.
by ants_everywhere | 2025-10-06 11:57:24+00:00
> The only evidence we have that the cryptography that we commonly use is actually safe is that it's based on "hard" math problems that have been studied for decades or longer by mathematicians without anyone being able to crack them.

Adding to this...

Most crypto I'm aware of implicitly or explicitly assumes P != NP. That's the right practical assumption, but it's still an major open math problem.

If P = NP then essentially all crypto can be broken with classical (i.e. non-quantum) computers.

I'm not saying that's a practical threat. But it is a "known unknown" that you should assign a probability to in your risk calculus if you're a state thinking about handing over the entirety of your encrypted backups to a potential adversary.

Most of us just want to establish a TLS session or SSH into some machines.
by bartread | 2025-10-06 11:58:19+00:00
I read these complaints so was surprised to have a different experience.

We’re based in the UK and cancelled via the website because there was no option for us to cancel via the Apple TV app (probably signed up on my laptop originally, I’d guess), and there was a comment field so I did not hold back in informing them exactly why I was cancelling.

So I wonder if the availability of the comment field varies by country or sign-up method - not that there’s any really good reason it should do.