MurphyA/hacker-news huggingface dataset:
by threeducks | 2025-11-24 21:40:20+00:00
> (~1TB / SSD_read_speed + computation_time_per_chunk_in_RAM) = a few minutes per ~word or punctuation.

You have to divide SSD read speed by the size of the active parameters (~16GB at 4 bit quantization) instead of the entire model size. If you are lucky, you might get around one token per second with speculative decoding, but I agree with the general point that it will be very slow.
by baxtr | 2025-11-24 21:40:50+00:00
This sounds logical and convincing.

At the same time, it should also be easy to falsify.

Has there been an experimental setup like this tested? If I’m not mistaken it should falsify your claim.

Train a decoder on rich neural recordings, then test it on entirely new thoughts chosen under blinded conditions.

If it can still recover the precise unseen content from signals alone, the claim that electrical activity is insufficient is overturned.
by mpyne | 2025-11-24 21:41:37+00:00
Given the emphasis on reliability of implementations of an algorith, it's ironic that the Curve 25519-based Ed25519 digital signature standard was itself specified and originally implemented in such a way as to lead to implementation divergence on what a valid and invalid signature actually was. See https://hdevalence.ca/blog/2020-10-04-its-25519am/

Not a criticism, if anything it reinforces DJB's point. But it makes clear that ease of (proper) implementation also needs to cover things like proper canonicalization of relevant security variables and that supporting multiple modes of operation doesn't actually lead to different answers of security questions meant to give the same answer.
by ImPostingOnHN | 2025-11-24 21:41:41+00:00
> the work in question is a document describing how to apply ML-KEM to TLS in an interoperable way. It is not a discussion of whether ML-KEM is a potentially risky algorithm.

In my experience, the average person treats a standard as an acceptable way of doing things. If ML-KEM is a bad thing to do in general, then there should not be a standard for it (because of the aforementioned treatment by the average person).

> It is clear here that they _are_ attempting to prevent a description of how to use ML-KEM with TLS 1.3 from being published.

It's unclear why trying to prevent a bad practice from being standardized is a bad thing. But wait, how do we know whether it's a good or bad practice? Well, we can examine the response to the concerns DJB raised: Whether the responses satisfactorily addressed the concerns, and whether the responses followed the rules and procedures for resolving each of those concerns.

> They regularly resort to personal attacks when they don't get their way

This is certainly unfortunate, but 6 other parties upheld the concerns. DJB is allowed to be a jerk, even allowed to be banned for abusive behavior IMO, however the concerns he initially raised must nonetheless be satisfactorily addressed, even with him banned. Banning somebody is sometimes necessary, but is not an acceptable means of suppressing valid concerns, especially when those concerns are also held by others who are not banned.

> DJB's behavior is why there are rules for how to address dissent.

The issue here seems to be that the bureaucracy might not be following those rules.
by Marsymars | 2025-11-24 21:41:44+00:00
I'm not claiming it's modern, I'm just saying that it worked for decades, and it's not like it's a system that's started working less well now that more modern systems exist.

This is literally how my city of ~1.7 million operates now, and it seems... fine? Like it's obviously worse than free transit or a snazzy FeLiCa-based system, but it clearly works to collect fares and move people around.

> What about transfers?

The bus driver tears off a paper slip with a time on it that's good for 90 minutes.

> There is also a reduced price from going from train -> bus. How would you track that?

You don't, all routes/transfers are the same cost.

Again, I'm not saying this is the best system, but it's a false dichotomy to assume that "expensive new fare system" and "no fare system" are the only options. For some cost-value analysis, a basic/cheap fare system beats an expensive system even if it has fewer capabilities.
by liampulles | 2025-11-24 21:41:51+00:00
To me it speaks to the fact that Rebble is not really an organization that is in a position to actually negotiate a long term deal with another company and go through all the trials and tribulations that involves.

That is not a criticism of them nor is it surprising, their responsibility up to now has been to maintain a core set of open source software. A loosely structured control structure is entirely appropriate for that task. But it really does not work when instead of bringing one person representing the company to a negotiation, you have half a dozen people who all have their own thoughts and levels of interest and commitment, some of whom will resort to community action if they don't like something about the process.
by detroitcoder | 2025-11-24 21:42:05+00:00
You can switch to consumption-based usage and bypass this all together but it can be expensive. I run an enterprise account and my biggest users spend ~2,000 a month on claude code (not sdk or api). I tried to switch them to subscription based at $250 and they got rate limited on the first/second day of usage like you described. I considered trying to have them default to subscription and then switch to consumption when they get rate limited, but I didn't want to burden them with that yet.

However for many of our users that are CC users they actually don't hit the $250 number most months so its actually cheaper to use consumption in many use cases surprisingly.
by theodorejb | 2025-11-24 21:42:06+00:00
Someone could be tricked into giving their npm credentials to the attacker (e.g. via a phishing email), and then the attacker publishes new versions of their packages with the malicious diff. Then when the infected packages are installed, npm runs the malicious preinstall script which harvests secrets from the new machine, and if these include an npm token the worm can see which packages it has access to publish, and infect them too to continue spreading.
by timschmidt | 2025-11-24 21:42:12+00:00
> Are you referring to complete home-grown DRAM designs? That, too, was already in the works.

Yes, via cxmt as discussed by Asianometry here: https://www.youtube.com/watch?v=mt-eDtFqKvk

As I mentioned, various groups within China have been working on China-native DRAM since the '70s. What's new are the margins and market demand to allow them to be profitable with DRAM which is still several years behind the competition.
by scottlamb | 2025-11-24 21:42:17+00:00
No. nextaccountic's comment and the cuongle.dev article are both talking about Rust. The Rust `parking_lot` implementation only uses two bits within a byte, but it doesn't provide a way for anything else to use the remaining six.

pizlonator's comments mention both the (C++) WTF::ParkingLot and the Rust `parking_lot`, and they don't answer nextaccountic's question about the latter.

> nextaccountic is confused.

nextaccountic asked how this idea could be applied to this Rust implementation. That's a perfectly reasonable question. pizlonator didn't know the anwer. That's perfectly reasonable too. Conscat suggested the article would be helpful; that was wrong.
by zsoltkacsandi | 2025-11-24 21:42:19+00:00
> But the anecdote you're describing is the definition of non-empirical. It is entirely subjective, based entirely on your experience and personal assessment.

Well, if we see this way, this is true for Antrophic’s benchmarks as well.

Btw the definition of empirical is: “based on observation or experience rather than theory or pure logic”

So what I described is the exact definition of empirical.
by davidsainez | 2025-11-24 21:42:25+00:00
There are well documented cases of performance degradation: https://www.anthropic.com/engineering/a-postmortem-of-three-....

The real issue is that there is no reliable system currently in place for the end user (other than being willing to burn the cash and run your own benchmarks regularly) to detect changes in performance.

It feels to me like a perfect storm. A combination of high cost of inference, extreme competition, and the statistical nature of LLMs make it very tempting for a provider to tune their infrastructure in order to squeeze more volume from their hardware. I don't mean to imply bad faith actors: things are moving at breakneck speed and people are trying anything that sticks. But the problem persists, people are building on systems that are in constant flux (for better or for worse).
by Marsymars | 2025-11-24 21:42:35+00:00
> The boxes themselves are expensive, as they have to be able to sort and count coins.

The boxes in my city of ~1.7 million don't do this. They're just boxes. Presumably they have some big box at the bus HQ they dump them in to sort the change.

> And it doesn't raise compliance at all. Why would it?

I'm not saying they raise compliance over other systems, I'm saying that observationally, compliance is pretty good. When I take the bus, I see basically everyone either put something that looks like a fare/ticket in the box or show a transit pass to the driver.
by jmcgough | 2025-11-24 21:42:40+00:00
https://en.wikipedia.org/wiki/Deaths_linked_to_chatbots

If you read through that list and dismiss it as people who were already mentally ill or more susceptible to this... that's what Dr. K (psychiatrist) assumed too until he looked at some recent studies: https://youtu.be/MW6FMgOzklw?si=JgpqLzMeaBLGuAAE

Clickbait title, but well researched and explained.
by Fnoord | 2025-11-24 21:42:43+00:00
I don't have a filter list for compromised proxy servers and VPNs. Do you have a link? I'd be interested in logging such. For Tor, I use [1] (formats in json, txt, md) on OPNsense, but I've also been able to indeed simply parse ASNs (which I currently use for "Twitter, Inc.").

> Preemptively banning all bad-reputation cloud IP ranges except whitelisted hosts has zero impact on clients. =3

This. There's outbound and inbound, and it is very unlikely your print server requires connections from Russia or China (to name an example). You're probably better off making a whitelist, jumphost, or using a VPN with proper authentication to access your services.

Outbound, now that is more difficult to assess. On a desktop, I like a personal firewall for that purpose. Little Snitch on macOS and Open Snitch on Linux have helped me a lot here, but ultimately your hardware firewall is probably lenient on outgoing connections, when you should ask yourself does my network require this, or are they better off with only a HTTP(S) proxy by default?

[1] https://github.com/7c/torfilter
by keyringlight | 2025-11-24 21:42:49+00:00
It doesn't help that GPUs have also generally gone up over the past decade because there's more market for them besides gaming, along with how they benefit from being hugely parallel and the larger you can make them the better, and fabrication costs are shooting up. I think there was a GamersNexus video at the launch of one of the previous GPU generations that noted that there was a move from "more for your money" each generation towards "more for more", i.e. keeping the value roughly static and increasing the amount they charged for a more capable product.
by 0manrho | 2025-11-24 21:44:29+00:00
If you, like me, were wondering why Google thinks it needs another operating system (ChromeOS, Android, Fuchsia - which is presumably dead (edit/turns out it's not/edit)) or where it fits in with the "stack":

> ChromeOS and Aluminium Operating System (ALOS) Commercial devices across all form factors (e.g. laptops, detachables, tablets, and boxes) and tiers (e.g., Chromebook, Chromebook Plus, AL Entry, AL Mass Premium, and AL Premium) that meets the needs of users and the business.

Sounds like ChromeOS is Android for entry/thin and similar PC's and Aluminum is more upmarket/premium.

Also, to be honest, this doesn't seem like "a new OS" to me, but rather a shift in Android's roadmap and an associated rebrand to try to push ChromeOS/Android upmarket to try and expand their "Devices with Gemini/Google AI as a first-class service/product" footprint beyond cell phones.

Given the push for arm in the consumer PC space, I can kinda see why google is renewing efforts here even if you set the AI stuff aside.
by bnchrch | 2025-11-24 21:44:49+00:00
1000%

2 years ago I gave a talk on Vector DB's and LLM use.

https://www.youtube.com/watch?v=U_g06VqdKUc

TLDR but it shows how you could teach an LLM your GraphQL query language to let it selectively load context into what were very small context windows at the time.

After that the MCP specification came out. Which from my vantage point is a poor and half implemented version of what GraphQL already is.
by sevensor | 2025-11-24 21:45:05+00:00
The way this worked at the fab where I was, was that facilities would have paged everybody, and whoever needed to hold wafers would do so. You could mark your equipment down or unavailable for a particular step. I don’t know what we would have done if it was “hey, we lost dry nitrogen a minute ago.” I think at that point you lose a lot of wafers in wet cleans.

In the case of a power interruption at the fab, consequences were highly dependent on the equipment and the unit process. A prolonged power interruption to diffusion was the worst case scenario. You’d have 150 wafers in the furnace, and any significant deviation from the nominal temperature profile meant they were all scrap. Worse, if the furnace cooled off, you had to scrap the quartz boat the wafers rode in, too. Other processes had a smaller blast radius but were even more of a headache to disposition. Implant, you’d lose beam and probably lose vacuum too. Then the wafer in the chamber would be dusted and in an indeterminate state, and the rest of the wafers you’d have to sleuth out whether they were implanted or not. Sometimes you’d have a lot sitting in the end station and it wouldn’t be clear whether or not it had been run at all. At least in photolithography you could tell whether or not a wafer was patterned by looking at it.
by rgblambda | 2025-11-24 21:45:36+00:00
A European Arrest Warrant would make the entire EU off limits. Which makes me think they haven't thought this through and are just overreacting, as many on this thread suspect.

If the GrapheneOS maintainers were being advised by a lawyer, they'd surely know that if French Authorities wanted them arrested and they were standing on a street corner in Stockholm, they could just as easily be picked up by police as if they were in a café in Paris. Making the whole France travel ban just a load of theatrics.
by dpoloncsak | 2025-11-24 21:46:21+00:00
He's doing this for a base that already doesn't trust the experts, right? Either he's right and we get a medical breakthrough ('breakthrough' may be too zealous a word) , or he proves the experts right. Seems okay to me...

MAGA (MAHA? The 'cult' RFK has procured...) has been screaming "Don't trust the experts" for years. At some point, someone needs to validate the credibility of the experts for this subset of people. Otherwise, we'll get more cases of diseases we have already found vaccines for.

Trust needs to be re-established in these systems. I haven't looked at the data he's claiming is fraudulent, and I probably wouldn't understand it even if I did. I'm fine going with "People who know more than me in this area determined x,y, and z". However, I'm not naive enough to see a profit motive, and know the awful things some of these same companies have done in the name of profit.

I don't see the downside to "reviewing vaccines" but maybe I'm missing context. The article doesn't seem to provide the exact comments he made, just that he is questioning aluminum in vaccines.
by CGMthrowaway | 2025-11-24 21:46:22+00:00
AV-Pro works from period color chips, not from faded photos. They replicate every Pantone card the airline handed the terminal architect. Those original chips are already the buttery, camel, avocado and rust you see in the model

It probably felt brighter and more vivid at the time, because we were seeing it under our mental-white balance of fluorescent lights and comparing it to nicotine-pantinaed older materials. Today in our mental white balance model, we have titanium-white plastics and “cool-white” LEDs that didn't exist then
by Fnoord | 2025-11-24 21:46:28+00:00
Exciting, except it runs Android Wear OS by Google instead of a deGoogled OS, and in the comments it says: "Repairability is admirable but only 3 years of security updates isn't near enough"

FTA: "We’re also making sure that our new watches are more repairable than old Pebble watches. The back cover of Pebble Time 2 is screwed in. You can remove the back cover and replace the battery."

So the battery of the Pebble Time 2 (the watch I bought to replace my Fossil HR Collider which replaced my orig. Pebble 2) is user serviceable. I had to open my Pebble 2 because my buttons were falling off. I bought a second hand donor (Pebble OC, since I ditched my broken Pebble OC at some point) and unfortunately I failed to succeed the transplantation of the buttons. Which made me very sad.

I also very much liked you could turn the radios off on the Pebble 2. The HR was useless though. But if I want a good quality of that, I'd go for Garmin or (if I were in the Apple ecosystem) an Apple Watch.
by toast0 | 2025-11-24 21:47:16+00:00
If you know where it ended up, you can probably get State resources activated over there too. But if you need law enforcement to investigate an interstate case, you pretty much need the FBI.

The FBI does not investigate all reported crimes, and neither do state and local law enforcement, so yeah... if you do crime that nobody wants to investigate, you can get away with it; at least until those meddling kids show up.
by rini17 | 2025-11-24 21:47:19+00:00
> the taxman's assessed value of your business doesn't change

That's first time I saw anything like this, usually in accounting the fixed assets depreciate so if there are lean years without much investment the assessed value should get down.

Like, are you saying when you buy a work truck for your business then after 5 years you'd be still paying 1% tax of its original price every year?
by nehal3m | 2025-11-24 21:47:22+00:00
I picked up a PS5 today on a Black Friday deal for 350EUR. 32GB DDR5 is at around 280EUR at the moment.

I have a gaming PC, it runs Linux because (speaking as a Microsoft sysadmin with 10 years under my belt) I hate what Windows has become, but on commodity hardware it’s not quite there for me. Thought I’d play the PlayStation backlog while I wait for the Steam Machine.
by observationist | 2025-11-24 21:47:50+00:00
This is silly. It's the sum of electrical and chemical network activity in the brain. There's nothing else it can be. We've got a good enough handle on physics to know that it's not some weird quantum thing, it's not picking up radio signals from some other dimension, and it's not some sort of spirit or mystical phlogiston.

Your mind is the state of your brain as it processes information. It's a computer, in the sense that anything that processes information is a computer. It's not much like silicon chips or the synthetic computers we build, as far as specific implementation details go.

There's no scientific evidence that anything more is needed to explain everything the mind and brain does. Electrical and chemical signaling activity is sufficient. We can induce emotions, sights, sounds, smells, memories, moods, pleasure, pain, and anything you can experience through targeted stimulation of neurons in the brain. The scale of our experiments has been gross, only able to read and write from large numbers of neurons, but all the evidence is consistent.

There's not a single rigorously documented phenomenon, experiment, or any data in existence that suggests anything more than electrical and chemical signaling is needed to explain the full and wonderful and awe-inspiring phenomenon of the human mind.

It's the brain. We are self constructing software running on 2lb chunks of fancy electric meat stored in a bone vat with a sophisticated network of sensors and actuators in a wonderful biomechanical mobility platform that empowers us to interact with the world.

It explains consciousness, intelligence, qualia, and every other facet and nuance of the phenomena of mind - there's no need to tack on other explanations. It'd be like insisting that gasoline also requires the rage of fire spirits in order to ignite and power combustion engines - once you get to the point of understanding chemical combustion and expansion of gases and transfer of force, you don't need the fire spirits. They don't bring anything to the table. The scientific explanation is sufficient.

Neocortical networks, with thalamic and hippocampal system integrations, are sufficient to explain the entirety of human experience, in principle. We don't need fire spirits animating cortical stacks, or phlogiston or ether or spirit.

Could spirit exist as a distinct, separate phenomenon? Sure. It's not intrinsic to subjective experience, consciousness, and biological intelligence, though, and we should use tools of rational thinking when approaching these subjects, because a whole lot of pseudo-scientific BS gets passed as legitimate scientific and philosophical discourse without having any firm grounding in reality.

We are brains in bone vats - nothing says otherwise. Unless or until there's evidence to the contrary, let that be enough.
by 0manrho | 2025-11-24 21:48:06+00:00
Oh, Fuchsia isn't dead [0]. Apparently it's what the Nest Hub launched with and the latest update is pretty recent: from Oct 2025. Interesting.

(Replying to my own comment instead of editing it as this is tangential to the topic at hand)

0: https://en.wikipedia.org/wiki/Fuchsia_(operating_system)
by Aurornis | 2025-11-24 21:49:19+00:00
> This AI movement seems to move things in the opposite direction, in that us plebeians have less and less access to RAM, computing power and food and...uh...GPUs to play Cyberpunk; and are dependent on Altermanic aristocracy to dribble compute onto us at their leisure and for a hefty tithe.

Compute is cheaper than ever. The ceiling is just higher for what you can buy.

Yes, we have $2000 GPUs now. You don't have to buy it. You probably shouldn't buy it. Most people would be more than fine with the $200-400 models, honestly. Yet the fact that you could buy a $2000 GPU makes some people irrationally angry.

This is like the guy I know who complains that pickup trucks are unfairly priced because a Ford F-150 has an MSRP of $80,000. It doesn't matter how many times you point out that the $80K price tag only applies to the luxury flagship model, he anchors his idea of how much a pickup truck costs to the highest number he can see.

Computing is cheaper than ever. The power level is increasing rapidly, too. The massive AI investments and datacenter advancements are pulling hardware development forward at an incredible rate and we're winning across the board as consumers. You don't have to buy that top of the line GPU nor do you have to max out the RAM on your computer.

Some times I think people with this mentality would be happier if the top of the line GPU models were never released. If nVidia stopped at their mid-range cards and didn't offer anything more, the complaints would go away even though we're not actually better off with fewer options.
by toast0 | 2025-11-24 21:49:23+00:00
I imagine it's not hard to get liability/collision insurance on a modified vehicle, and that's all you really need; most insurance will cover damages you cause on "any vehicle" you drive, so it doesn't usually cost much to add an additional vehicle unless it's particularly risky; that this has a real VIN and a real manufacturer should make it pretty easy. If you really think you need comprehensive insurance, you'd need to get specialty insurance anyway, because normal insurance is going to give you a near zero value on a car like that.