skysight-inc/HackerNews huggingface dataset:
> running a signed binary doesn't save you.

True, it does not. I don't recommend downloading (random) binary installers and running them either.

With eg Linux isos, you typically already trust the signing key for your os updates.

But unless you are vigilant about your ssl root certs, you'll easily allow a lot of malicious and incompetent services to potentially intercept most of your ssl traffic... (due to there being many trusted roots by default).

> if someone has overtaken a host and replaced the binaries

This again depend on who and how the binaries are signed, and how the signatures are trusted. Typical windows (and Mac?) setups will gobble up any signature. But if you do check who signs the binaries - then the signing key will easily be the most secure part of the system - a compromised ftp/web site allow hosting malicious binaries, but typically not grant access to the signing key.

With letsencrypt a hacked web site will typically have access to a valid ssl cert - no need to further compromise mx/mail records or gain access to a business phone number etc.

A ascii-armor signed shell script can be distributed safely via a paste-bin. Unfortunately there's no good automatic/standard way to do so. Or rather no standard tool to prompt to trust the signing key - and then run the script - beyond basic gpg --search-key --key-server.. + gpgv.

Maybe signed git repos would be easiest - but I don't know how easy it is to limit which keys are trusted - if it's possible at all?

The helm project does a little dance to try and verify downloads - but for all the effort it pretty much amounts to trusting the script, not the keys/signatures:

https://github.com/helm/helm/blob/v3.6.2/scripts/get-helm-3#...

I was hopeful sequoia might help - but apparently its sqv tool is even worse than gpgv - neither can handle an ascii armored public key, and sqv can only handle detached signatures.

And just for completeness - a reminder that any cut'n'paste in the terminal is a bad idea:
https://nakedsecurity.sophos.com/2016/05/26/why-you-cant-tru...
I've started listening to those hours long nature sound videos on YouTube with a noise cancelling over-ear headset.

Like https://www.youtube.com/watch?v=Y1y9GAjuSt8&t=10575s or https://www.youtube.com/watch?v=Qm846KdZN_c&t=2604s

Or some minimal techno https://www.youtube.com/watch?v=WddpRmmAYkg&t=2495s
Here's the Dyslexie homepage if you just want to see the font:
https://www.dyslexiefont.com/

Also, here's a free alternative:
https://opendyslexic.org/
This is an interesting perspective; it does, indeed, seem like Copilot is a lossy compression algorithm wrapped in a semantic search interface.
> Rather than play roulette with variants over the next several years, we can safely end this crisis by accepting an increased yet still exceedingly small risk of side effects that have not been seen to cause medium-term problems, let alone long-term ones.

Whats the relationship between vaccinated population and variants? Articles like this have an underlying claim that vaccines prevent variants from being created and spreading, but I've also heard that vaccines can select for variants as more innocuous strands aren't spread.
aye - the biggest risk here is that rather than pulling in some standard lib for validating email addresses an engineer may use the copilot suggestion and validate it against a few simple test cases.

Curiously an attacker could probe services for use of the invalid suggestions that copilot generates....
It's a little easier to read a 10 line bash script than a 35 mb binary installer?
> Depending on the product > 2000 times global warming potential of CO2.

Doesn't say much without any volumes attached to it.
Carbon taxes and tariffs would work yes. But you're imposing serious costs on people that they haven't shown any desire to support. Further, tariffs would disproportionately impact the poor in the developing world.
Wouldn't _not_ squashing be sufficient, rather than having to keep all of the messy commits? That is, would you be satisfied with modifying history such that the commits are logically separate, even if it's not how the code actually evolved?

I don't understand the desire to squash every PR into one commit each either…
> Following rules you were taught without evaluating whether they actually make sense in context is the definition of unthinking.

Like your rule for being polite at all times being "senseless" or "ridiculous" or any other superlative you could think of without any rational reasoning whatsoever, you mean?

Sure. I can agree with that.
I said this having GPT-3 in mind too. To be fair: my mind was absolutely blown when I first got to play with it, and I'm still deeply impressed by it. The experience altered my beliefs on human intelligence. I've always appreciated the joke that sometimes humans can be hard to distinguish from a Markov chain, but GPT-3 actually made me take this seriously - the quality of output on a 1-5 sentence range is astonishing in how natural it feels.

Still, it doesn't take more than a few sentences from GPT-3 to realize there's nothing on the other side. There's no spark of sapience, not even intelligence. There's the layer that can string together words, but there's no layer that can reflect on them and check whether they make any kind of sense.

To be fair, "sapience" may be a bit too high for the lower bound of what is an AI. I still think the bound is on that control / reflexivity layer. It's the problem that stifled old-school symbolic AIs. To this day, we can't even sketch an abstract, formal model for this[0]. Maybe DNNs are the way to go, maybe they aren't. But GPT-3 isn't even trying to solve that problem.

I'm not sure when I'll be ready to call something a proper AI, but I think it would first need to demonstrate some amount of on-line higher-level regulation and learning. I.e. not a pretrained, fixed model, but a system where I could tell it, "look, you're doing this wrong, you need to do [X]", and it'll be able to pick up on a refined pattern with a couple examples, not a couple hundred thousand. For this, the system would need to have some kind of model of concepts - it can't be just one big blob of matrix multiplications, with all conceptual structure flattened and smeared over every number.

--

[0] - I think the term of art here is "metacognition", but I'm not sure. It looks like what I'm thinking about, particularly metacognitive regulation.
Not true. Ethereum moves about 10 billion a day while Bitcoin moves about 9 billion a day. https://money-movers.info/

This is just comparing the base assets, adding in stablecoins makes the gap even larger with Ethereum moving 27 billion and Bitcoin moving 9 billion.
Myanmar violence triggers asylum crisis for India's northeastern states

https://m.dw.com/en/myanmar-india-mizoram-asylum/a-57171804
If this is a company project, a REST API or task service of some kind, then you are probably using Docker in the year 2021.

If this is anything else, or if you work for a shop that hasn't embraced containerization, then you use PyInstaller (http://www.pyinstaller.org) to bundle your application. Either into a directory that contains your full Python virtual environment (only 5-10 megs!), or into a single executable file.

The latter is most convenient for a Go/Rust type experience. But the former will startup faster, because that single-file executable has to first uncompress itself to the system temp directory.
Ultimately, anywhere that is relatively wet and/or not located in a forest is probably decently safe from forest fires. In terms of safety from heat waves, there are a few good hedges: a very well insulated house, ideally with some sort of reflective roof. A backup battery system that allows you to run independently in the case of a grid failure. Solar panels that work when the grid is off, which have excess capacity. Redundant cooling systems? If you really wanna go crazy, build a small underground bunker like Colin Furze did.

With these things in place I think you'll be safe enough during any foreseeable heat waves. You still wouldn't be able to go outside on really hot days, but you wouldn't likely die due to overheating.
All decompression requires input: the compressed artifact. In this case, the compressed artifact is the semantic queues necessary to extract the Quake inverse square root function.
Dupe (203 points, 52 comments): https://news.ycombinator.com/item?id=27693929
Emacs has an AOP facility as well. It's called advising there. But the manual strongly recommends to only use it as a method of last resort, as performance will eventually degrade. Also, debugging in the presence of these features is not exactly fun.
This specific issue has been there for years, long before covid. So not sure why you're jumping on covid being the cause here. The erosion of civil liberties specific to covid are mostly temporary emergency powers, which again aren't even at play here.

Also this Microsoft press release has a lot more information in it than the Rueters article https://blogs.microsoft.com/on-the-issues/2021/06/30/the-nee...
"We have reviewed the number of secrecy orders that federal law enforcement agencies have presented to us from 2016 to the present, a period that spans the Obama, Trump, and Biden administrations. We found that while the number has increased some, federal law enforcement has consistently presented us with 2,400 to 3,500 secrecy orders each year, or 7-10 per day, representing one-quarter to one-third of all the legal demands we received. These are just the demands that Microsoft, just one cloud service provider, received. "
"sleep infinity" works on GNU coreutils as well as recent versions of busybox (which is what Alpine uses as coreutils).
Does anyone know which codebases got included? I get the impression copilot scraped github - but as it's an internal tool, did it only scrape public repos or has private repos also been slurped?
>Anec-data: I’m in my 40s and live in the Vancouver area. The first time in my life that I ever experienced a smoked in summer was about 5 years ago.

And up until last week, almost no one alive in BC had lived through record-setting temperatures, most of which were set in the 1930s.

It just seems so counter productive to point to every single weather event now and say "see? climate-change". That's why people ignore the issue. They're inundated with it.
Funnily enough, whatever I set my alarm sound to (using my smartphone, so it's some kind of chime) I grow to hate.

There are certain standard alarm sounds that mildly annoy/trigger me whenever they play, just as they remind me of that..
You should be ashamed of this comment. You’re there by choice, unlike an inmate.
Download thousands of web templates, mobile app templates, illustrations, SVG icons, and graphic assets for Figma, Sketch, and Adobe XD.

Hello Everyone!
I am really excited to share UI HUT with HN Community. We are launching UI HUT with 12,000+ Exclusive design resources.

UI HUT is a design resources platform for UX/UI designers, developers, and founders. Our high-quality design resources will help you to speed up the design process.

Resources:
1000+ Web Templates (Figma, Sketch, XD)
2500+ Illustrations (Figma, Sketch, XD)
8000+ SVG Icons
500+ Mobile App Screens (Figma, Sketch, XD)
100+ UI Assets for Web Application (Figma, Sketch, XD)

We are uploading more resources every day. HTML & Flutter UI Coded version will be available in week.

Any feedback/suggestion will be more than welcome.

Use the code hn-10 for 10% discount on annual subscription

Thanks,
Mansurul Haque
I predict it will go well until the money flow stops.
What would be severe to you?
I have been using https://mynoise.net/ to focus during my work.
ML applications face a frightening problem of diminishing returns on investment. The first prototype often happens in days or weeks, the next iteration months, after that years.

It's more analogous to clearing a foundation for a house by progressively picking up the boulders, then the rocks, then the grains of sand one at a time.
Crimes are less likely to be reported in places where reporting them doesn't accomplish anything useful.
All of those are custodial solutions which defeats the purpose of blockchains.
Electric hypercar group Rimac to take control of VW’s Bugatti
To be completely fair to humanity, most people don't get enjoyment out of the arbitrary anguish of sentient creatures.

E.g. even animal fights are frowned on in most cultures, and bloodsports are now pretty heavily regulated (especially vs historical norms)
Some of it sounds like the old ambient genre people were experimenting with in the late 90s early 2ks (perhaps before but thats when i become aware of it). For faster tempo, go dnb.
Exxon lobbyist details efforts to blunt Biden’s climate agenda in leaked video
For the port is trivial: `kubectl get pod <yourpod> --output jsonpath={.spec.ports[*].port}` or if you don't remember the json path just `k get pod <yourpod> |grep Port`.

For the IP address, why do you need that? with k8s dns you can easily find anything by name.
Google has effectively been the technology arm of the U.S. government for like ten years now, yet widespread obscurantism related to this fact is one reason everyone hates "googlers" too.
Total agreed. It is a surprise that this niche product came back to confuse us customers. Why? Electricity at home and work shared EV ... hydrogen meant going back to gas station. We can stop at place we like to rest and stretch our legs if the rest. and park have these chargers, not gas station ...
I'd usually suggest someplace away from the equator to get cooler temperatures, and close to a large body of water to reduce temperature swings. Good supply of fresh water is a plus as well. Lower population density reduces the risk of social unrest.

Great lakes, Maine, Northern Europe, Japan, Southern Chile, New Zealand?

Of course, what BC is experiencing right now demonstrates that it may be more complicated or impossible to predict.
In Taipei (Taiwan), it is the name of a mountain where most of the photos shots are taken.

It's a great small hike you should do if you visit the city. Start the hike around 4.30pm to catch the sunset.
https://taiwangoldcard.com/images/taiwan-unsplash.jpeg
does it not eventually get consumed by bacteria? they keep talking about finding bacteria/fungii that can digest it?
It is not an appeal to authority. I'm saying the expert is providing a legal explanation, and HN is throwing anecdotes around.

There is no logical fallacy since HN refuses to even have a logical discussion about Copilot.
@mdsami Very impressive collection & well crafted design.. I am one of the earliest user of Uihut :D (y) keep it up <3
If they're in a financial position to do so, have them angel invest in the startup. In general my experience has been expert angels add a lot more value than advisors.
Seems like a problem for folks who try to develop their own understandings -- which probably correlates with "being gifted".

By contrast, folks who don't feel smart enough to question the established-wisdom, and so just believe that it's probably true for reasons beyond them, wouldn't seem to have the same exposure to doubt. Because, surely, someone smarter than them knows the answers; if anything seems off, it's probably just a misunderstanding of the experts' wisdom.

But if you lose your faith in the experts' wisdom, and then struggle in trying to find your own solid answers to big questions -- what do you believe in? How can you feel safe and secure in the world when you're not even sure what the world really is?

---

[Obligatory xkcd](https://xkcd.com/2221/ ):

> I feel weird using old software that doesn't know it's being emulated.

The existentialist-concern from the alt-text:

> I laugh at the software as if I'm 100% confident that it's 2019.
Vibration Leap Review, Is the Vibration Leap Program Legit or a Scam?
Kubernetes is much more simple than what we would have to do without it, and my team is much much smaller than anything at Google. For what it does, it offers some good opinions for what might otherwise be a tangle of dev ops scripts.

If what you want to deploy is best described as “an application” it’s probably not the right tool for the job. If what you want to deploy is best described as “50 interconnected applications” it’s probably going to save you time.
Wow, I’d forgotten about this. The reason no one has fixed it is partially because I didn’t do a great job of describing what the fix was I expected to see (clarified now). Reopened and will poke folks to look.
This corroborates my long-term suspicion -- all those talk about provably correctness of programs is basically a way to gate keep people from entering the industry.

I mean, of the millions(?) of programmers out there churning out code, how many % of them actually prove their programs correct?

Despite what all the academia-types say, I firmly believe that programming is at most 50% math/logic, and the other 50% is literature or "writing skills". The ability to express ideas in text form that is easy for people to read and understand is one of the most crucial skills to have as a coder.

The point is, this aspect of programming is so neglected that people readily accept gatekeeping of aspiring programmers by scaring them away with advanced maths, but nobody ever told you that if your writing skills suck (even in English or your native language), you might end up a bad programmer...
I found a lot of items I possessed represented things "todo", and if I didn't actually use/do them, represented undone things. Having a reckoning - will I actually use, or get rid of this item, was the trick.

You can always re-buy utility items. The hard things are the sentimental stuff.

Incidentally, I have/had exactly the same issue will code/files on my computer - a lifetime of downloaded files, and bookmarks, for thing's I might never re-visit.

Here's a good metric for value: "If I had a baby right now, would I still give a shit about this?". It sorts the trivial from the truly valuable well enough, without having to question the meaning of life (the question "If I where dying would I give a shite" is too strong/abstract a proposition for the same purpose)
I hate to say it, but climate change is a classic tragedy of the commons problem. Countries are economically incentivized to "cheat". Until "we" are willing to, literally, go to war to enforce global emissions standards and other policies, it's hopeless.
As opposed to the national EU governments themselves. Why does this idiocy always have to come up at the EU level? The general monitoring that the EU implemented more than a decade ago was also an EU level initiative.
I mean that’s essentially what all ML is if you want to think about it that way.

Training is the process of creating a space where searching for the right thing within it gives you the answer to some problem you have.
Modern reactors are also much more expensive and take literally decades to build. Right now the option is to choose between comparatively cheap solar and wind energy (and their immense land usage) and nuclear power plants that are decades old. If we could build modern fission reactors more cheaply and quickly and if we had the water to operate many more of them they would be an option. Right now, they are not.
> Nothing severe has happened yet.

That sounds like the man who jumped off a tall building, and at each foor on the way down was heard to say "so far, so good..."
Ransomware Attack May Impact Thousands of Victims
How to teach someone RSA without talking about RSA
Yah, not sure what is astonishing about outrage in response to what appears to be a method for laundering GPL'd software.

Copilot ought only to have indexed public domain, wtf, and other wide-open licensed software. They should remove all GPL'd software from their model, even if that means retraining from scratch.
(1) At least it’ll help offset gerrymandering a bit. Note that we’ll have variants moving forward regardless of what the anti-vaxxers do, since variants generally come from reservoir populations, not humans. We don’t have any real hope of vaccinating all mammals.

(2) They’re rushing through the approvals for ages 2-12 as quickly as they can. They don’t even know what the correct (safe but effective) dose is for that age group yet.
Can someone point me to a journal paper that proves an given event was due to climate change? Would be good to have.
Tried to find them while writing the comment, but failed. I was able to find them this time:

Looks like 1gbps is ₺875/mo on average (first three months is cheaper, remaining nine is more expensive) if you promise to use it for 12 months. Has 20mbps upload.

10gpbs is ₺8000/mo, but you have to sign a 24 month contract for it. Has 50mbps upload.

They're extremely asymmetrical, needlessly expensive. It's like a data hoarder's dream, but I don't know what will they do if you manage to saturate the bandwidth for a considerable amount of time.
People like to tear apart Echos because of the privacy fear a lot of people have around them. But in this case, I'm sure many devices have the same problem. It's just a matter of not wiping the NAND memory and instead just invalidating pages. I'll bet you could get a bunch of Wifi and Netflix credentials by buying up used TVs too (another place where people have privacy fears).

Apple at least gets this right by encrypting everything in memory and then just rotating the key (and I think Android does this now too?). But that is complicated and expensive.

I guess those of us super concerned with privacy either shouldn't sell these devices used, or get a powerful magnet that can cause bit flips (or not buy these in the first place, but good luck living in a modern world without buying a device with NAND memory in it)!
These are 2 different kinds of idempotency:

1. request (also command/mutation) idempotency (using Idempotency-Key in HTTP, or clientMutationId in GraphQL/Relay)

2. entity idempotency (using invoice_id)

(1) is more generic one and can be applied to any mutation with a side-effect, for example sending an email. It can also work with server-side generated IDs.
It can be implemented as a generic middleware via cache or DB with TTL. That's what Stripe is doing.

(2) is more application-specific, for mutations actually changing a state (usually a DB row/document, or an entity managed by another service). Here the entity id should have a uniqueness constraint in the DB, and you should use either a semantic key (i.e. customer name), or a client-side generated ID like for example UUID.

I use a combination of both, to reduce a load on the DB while still having the same guarantees as using DB only.
The perfect demo.
here's a quick one https://youtu.be/QZwneRb-zqA
What you’ve described is pretty close to Optimistic Nihilism, eg “The universe has no intrinsic meaning, so I’ll make my own.”

https://duckduckgo.com/?q=optimistic%20nihilism
These Plants Act Like Bees in a Hive
Why focus on China and India, when on a per capita basis they have a small fraction of the carbon footprint that we have in Canada and the US? When we can get our per capita carbon footprint down below theirs, then maybe we'll have a right to criticize their environmental policies. But in the meantime if we're being at all objective, trying to point a finger at them makes us look like absolute hypocrites.
Guide on implementing a wash tunnel with SOLID and various design patterns
Copilot's api and suggestions could easily (and maybe was?) implemented as a SBQA style model. Using a search engine to find promising examples/context followed by a transformer model to synthesize the final output.

Attribution would clearly be required in such a search derived model.
Is there a link that is not behind a paywall?
Cities like Venice and countries like the Maldives having to be evacuated because of sea level rise? But it remains to be seen if we can stop that from happening with the agreements currently in place...