skysight-inc/HackerNews huggingface dataset:
Depends on the vulnerability. It might be prudent to disclose it so users have the freedom to, for instance, change their passwords elsewhere as most people do indeed reuse passwords.

I'm not sure how this metaphor holds up under scrutiny but disclosing all vulnerabilities might be akin to considering yourself having had a break-in every time you forgot to lock the door.
Four out of five viewers between 18 and 25 put subtitles on
True but "you wouldn't have chosen that job" is a very different situation from "you now have to find another".

To use your analogy, if the travel was subsidised maybe you would actually take the plane. If the plane company suddenly stops because of strikes, this affects you, not some theoretical shmuck who shouldnt be using planes.
When lapping the computer room in F1 chairs goes bad
And what do you think, they are successful because the crypto schemes are so powerful, or because the CCP is letting them go with it?
How to use Jest spyOn with React.js and Fetch (with step-by-step code example)
I've followed this project for a longer time and I see less of the puritanical approach.

The "typical" setup before Klipper was Octoprint on a Raspberry Pi and a 8-bit board connected by USB. This setup ran into a lot of space / runtime / etc. issues for implementing advanced algorithms (or simply delta kinematics). Octoprint mostly just passes GCode to the 8-bit board which has to do all calculations.

With Klipper, the've split the workload so that both systems do what they are better at. The faster non-realtime processor does the heavy lifting regarding motion kinematics and the slower realtime controller does the synchronized moves. This allows for additional flexibility as it's much easier to have a modular linux tool and keep the uC firmware common.

I think the uP/uC split is a good alternative to bigger and more expensive boards like the Duet Series of boards.
> The supply-chain attack is a self-inflicted attack

It is attack regardless.
Someone has made something malicious which affects for the process for the end-user acquiring the final software.

> it seemed pretty clear to me that GGP misunderstood this as malicious code being inserted into existing trusted repositories, which is a common misunderstanding in the rest of the comments, and seems to be encouraged by the poor wording of the tweets.

I think the author just wanted to get attention and be sensational.
He deliberately did not mention that they are forks.
Just rushed to report findings.
I'm sure Mark Zuckerberg could use his influence at Facebook, Instagram, and WhatsApp to get a few users to try out a new app he coded up over the weekend.
Maybe they treat me better because I am a long term customer. That could be. I don’t think these providers are that budget really; OVH has a budget provider (kimsufi) but ovh isn’t one anymore, imho. Unless compared with cloud and ‘enterprise’ providers.

Anyway maybe it is because I am a long term customer of all of these; I do tend to have a talk upfront what I plan todo and tend to make sure I have a contact there. OVH is too big for that now (I had a contact until about 8 years ago in France), OVH is not.

If not aws or other overpriced (for dev/test stuff) cloud provider; what do you use as non-budget provider?
Not a solution but using event sourcing would have prevented this.
I feel like consumers writ large are forgetting they can protest. If everyone collectively rejects higher prices, the price will come down.

Everyone is manipulating this inflation sentiment to wring consumers out of every penny until they're broke.

Stop paying for things where the price has exploded higher and force businesses to deal with tighter margins. Prices will normalize.
the French Revolution didn't really solve any problems, just moved them around
It _is_ deterministic (same input gives same output).

You typically don't "test" pairs of inputs/outputs for a model. Instead you measure its performance by defining metrics e.g. "what's the ROUGE-2 score on summarization after fine-tuning AlexaTM 20B using N examples from dataset Y"

You can test some aspects of ML models, like sync testing (if you train on hardware A and run on hardware B, their results are not always the same). But generally you test the code that embeds the model, not the model itself.
I agree it definitely did lots well, but "it lasted over half a century" isn't a great argument for that. There are huge network effects with platform APIs that allow terrible things to persist simply because that's what everyone else uses.
That's common misinformation. The issue discussed in the review has no connection to what happened, and the narrative that it is the same issue, but it became exploitable after the update is incorrect too. It affects different part of smart-contract logic. Yes, it's pretty close at a glance—because you have zero-by-default problem somewhere close to Merkle tree.
Working in Bitcoin. This seems to me like the single most impactful thing one can do for the future of humanity, including climate and energy use.

Imagine if you didn't need to buy a new iPhone every other year, because they will be better built. Imagine if buildings would be of the same quality as they once were, when the world was on a gold standard.

Under a money system that constantly devalues the currency, everything that is built is of worse quality than the previous versions of the same for the simple reason that the producer has to somehow account for the money being lost due to inflation without constantly raising the prices, and the only way to do that is to "devalue" the products themselves - use worse materials, make them easier obsolete, so consumers buy them more often.
It would have been even better had the Paycheck Protection Program worked more like Kurzarbeit does in Germany - instead of just giving money to employers on the promise that they'd use it to protect jobs, insist that the employers use it to pay the wages that employees were going to be missing due to reduced hours, and have to prove that that's where the money went.

Kurzarbeit was one of the main reasons my employer survived the ill-timed purchase of another German industrial giant (deal done right before the 2008-9 financial crisis kicked off, payment due during said financial crisis) without having to lay people off, and left it in the position to get right back into the game once the world economy started improving. And, of course, spared thousands of working people a lot of misery.
What I do: we make sure that the tests done are testing the change request (a functionality added or a bugfix). Also I try to be in the mind of the end user and figure out if this is the thing I wanted.

When we find something related, a Jira ticket associated with the feature is created with test procedure to reproduce it, and what is expected. This ticket will need to be fixed before release.

When something unrelated is found, a Jira ticket is done with test procedure, but the expected behaviour may be missing. Then this is analysed (every 2weeks usually) to figure out the importance of the bug, or if it is really one (it might be a feature), then a priority is given on the issue. If it is not a bug, we make sure to write down in the ticket why it is not a bug. Chances are that someone else will find it and ask questions, and you will have the argument to counter it.

Our end of the backlog is actually filled with insignificant issues, turns out noone complained about it so no need to spend time on it.
The device in the article is a slightly less basic solar still.
Adjusting your product means you don't start your userbase from scratch, but I do agree that I'd prefer they start a fresh product and leverage the userbase to promote it.

But I think it's easier for them to centralise advertising operations where possible and steer the most malleable and lucrative audience rather than appease (what they thought of as) a minority of people.
What would make sense for golang, python, docker, k8s; maybe even bash if you squint a bit.

But what's the repo for "crypto" or "js"?
What's missing for the control of a CNC mill? Klipper doesn't force you to use a hotend.
Sorry to hear it; it seems very strange. Maybe indeed because the account was new and ‘something’ flagged it. I would try to call them anyway; phone is usually easier in this case; find it hard to believe they would check your info and just hang up.
> Why is the creator the only one that needs to be happy?

Because they define what the success is. If their goal is to make money they may want a logo which is the closest to optimal for getting clicks. If they want a private project, they may want it to be fun. And many other scenarios... You're welcome of course to do constructive criticism, but in the end it's up to them if they want to apply it.
That's exactly what I did. I had my checkbook and was there to put in a deposit when I found out. Here's an abridged version of how the conversation went:

> Me: I don't want that and won't be paying for it.
> Them: Well we do it for all new cars and you can't have us not do it.
> Me: Well then you can either eat the cost of this unnecessary "service" or sell me the car for $700 under MSRP to make up for it.
> Them: Sorry, we can't do that.

I walked out and they haven't called me back to say they were bluffing. Meanwhile, I'm working with a different dealership now.
Social science on a global scale determining a rigorous and measurable definition?

If you can't measure success then you can't evaluate it, and if you don't write it down then you can't critique it. Right now they use a few single bits of information, a person race, to determine diversity of thought. That would never be accepted in a scientific research looking at diversity of thought from a rigorous definition.
>Adding electric motors and a battery to diesel trains JUST for carbon capture seems foolish.

There's no such thing as a train propelled by a diesel engine.

All "diesel trains" are diesel-electric. They use electric motors for propulsion, and for braking as well. Normally, there's a big resistive grid on the roof where the power is dumped.
Sure, but I like not having every email I've archived since 2004 scraped for keywords :)
How exactly would you word or enforce such a policy? What is a "bad habit"? Is fun or happiness addictive? Why might the puritan nanny state approach work better here than with alcohol, drugs, or abortion?
Copilot has given me great utility and increased my productivity a lot. I constantly get surprised and amazed by the suggestions. A self-hosted version would be awesome.
Virtualisation on Apple Silicon Macs: 7 Improving the virtual display
> Its still fairly easy to spoof APs. 802.11w aims to prevent this but support is spotty.

Even with 802.11w it's easy to impersonate APs, 802.11w doesn't protect against evil twins. I find it a massive pity that we can't freeload off of web PKI to authenticate AP's.
You're right. It's not. I just copy-pasted the list from the tweet. I assume that the author meant to write jq.
A solution might have predictions for other areas of physics. Predictions for other areas of physics that we _can_ test.
Hint: They won't say "develop software to oppress the people". It will say "develop software to track child abuse and criminal activity" and "develop software to track people's preferences to be better able to help them find the products they need" and very slowly devolve from there, one incident at a time.

> None of that is anything like what I was responding to, a system of forced labor camps

I saw stories from the US about debtor prisons and about for-pay prisons with very questionable tactics used to fill them, people who cannot fight back because they have no money, often don't ever get an actual date in court but are forced to submit to accepting a sentence because the prosecutor threatens them with trying to get an outrageous sentence should they actually want a real judgement.

https://www.aclu.org/news/criminal-law-reform/coercive-plea-...

It's old: https://elibrary.law.psu.edu/cgi/viewcontent.cgi?referer=&ht...

I think your opinion on what is possible in the US justice system depends on where you are, i.e. location, as well as in the social hierarchy.
OpenVPN & WireGuard server at GitHub Actions: representative NAT traversal case
It's not possible to run server software on GitHub Actions using regular methods: the worker virtual machine is placed behind Network Address Translation (NAT), which prevents it from receiving direct inbound TCP/UDP connections.
This repository consists of GitHub Actions jobs for OpenVPN and WireGuard VPN servers which traverse NAT, making possible to establish VPN connection to the Actions worker machine directly, without any additional tunnel, third-party service, or port forwarding software.

This is a step-by-step, thoroughly documented practical UDP NAT traversal showcase using GitHub Actions with OpenVPN/WireGuard servers as an example, with only stock software from Ubuntu repositories.
I always find it amazing that applicants only have 10 minutes to present themselves. If I only had 10 minutes, I'd be nervous as hell and it would not give a true representation as me as a person and my project - unless the nervousness factor is a key decision factor as well.
Agreed, but I think it should be neutral; I read this as a ‘too expensive, just build it’ which I see a lot with articles about OSS.
here are many models to explain the customer life, but until now I had´t found one that applied completely to a SaaS business model, covering all its peculiarities and phases.

After working with more than 100 Saas startups at one of the biggest Europe´s accelerator and iterating several models, I designed the essential saas metrics guide, my own framework for measuring the most important kpi’s of a Saas that I will explain in this post: “The B2B Saas Metrics Journey Framework”.
Against Chinese we have pretty good buffer zone. Same can't be said for a country that continues to murder innocent civilians around the world with drone strikes. And forcefully extradite foreigners...
> It’s never one big database. Inevitably there are are backups, replicas, testing environments, staging, development. In an ideal unchanging world where nothing ever fails and workload is predictable then the one big database is also ideal.

But if you have many small databases, you need

> backups, replicas, testing environments, staging, development

all times `n`. Which doesn't sound like an improvement.

> What happens in the real world is that the one big database becomes such a roadblock to change and growth that organisations often throw away the whole thing and start from scratch.

Bad engineering orgs will clutch defeat from the jaws of victory no matter what the early architectural decisions were. The one vs many databases/services is almost moot entirely.
I find that general light exercise helps. Also changing to a split keyboard has really helped my posture (moving the two halves of the keyboard apart stops me hunching over the keyboard).

Also look at what you're doing with you legs. If you're crossing them then you'll be affecting the position of you hips, which in turn affects your back.
>As Admiral Grace Hopper would point out (https://www.youtube.com/watch?v=9eyFDBPk4Yw ) doing distance over network wires involves hard latency constraints, not to mention dealing with congestions over these wires.

Even accounting for CDNs, a distributed system is inherently more capable of bringing data closer to geographically distributed end users, thus lowering latency.
So, hows does the "Right to deletion" actually works in this scenario?

I have worked N years for company X and I was registered in their Slack workspace. Now I don't work for company X anymore, could I request Slack to delete all my data related to company's X Slack workspace?

Would that be a matter between Slack and myself only? Or perhaps between company X and Slack only? (at the end of the day I wasn't a paying customer, company X was)
Why manually scrub through videos when there's a tool to do it automatically for you and re-cut the video into a seamless block of content?
You can write C libraries in Rust. The entire operating system could be written in Rust and there would still be be dynamic linking between programs.

What you are complaining about is ABI stability between versions of Rust but you are hiding that by arguing steveklabnik is violating the spirit of your secret ideals.
Electric vehicles use a lot less energy in total in the supply chain than gasoline cars (extracting and refining and transporting oil uses a lot of energy too, some of it electricity).

So electric vehicles reduces the energy required.

Longer term: Gasoline cars are not viable at all; electric cars are viable to the extent one can secure the energy for them. It is a way of getting any road transportation done in the future AT ALL; that is surely not a con?

I hope noone is arguing that moving to electric cars by itself is sufficient to stop climate change. That would be a con but also seems like a strawman.

The goal should be net zero, and electric cars are needed to have road transportation at all.
I have added a list of the prompts I used to the description of the above YouTube video.
thanks for the explanation!

do you think vulkan will progress into being easier and easier to use? is it mature enough? are there good resource to learn the most basics?
So what? It would cost like 50+ billion dollars to censor the network for a few hours until the mining algorithm is changed.
RTEMS is fairly popular in space industry. I have been involved in two sateliite projects using RTEMS, one using the somewhat obscure OpenRISC architecture and one using LEON3/SPARC (also quite popular in space industry).
If it's important enough it crosses over. Most of our news we see on a daily bases is pretty worthless too.
Crypto uses less energy than huge data-centers. Hear me out: Proof-of-Stake is more energy efficient than a data-center and runs on small devices like Raspberry Pi. Modern blockchains like MINA only store the ZK proof for the whole chain, so, even the storage requirements are very minimal.

Already a 6 kW rack will soon cost 7500 Euro in Germany. After that that will be the case around the world. That is when Web 3.0 will make a comeback.
I can recommend these two sites to check out:
https://www.effectivealtruism.org/
https://80000hours.org/
If the data in this article is to believe, I have to wonder if governments should start expanding recess for young kids to a mandatory 2 hours a day. I mean if the effect of Covid restrictions is 17->27, I imagine you can actually go in the opposite direction quite far 17->7?). That’s a huge benefit to your citizens.
Immutability is something that happens at the level of the programming language. Runtime efficiency is a concept that, unsurprisingly, lives at runtime.

When eg a Haskell program runs, its supposedly immutable datastructures get mutated all the time. For example laziness is one way that happens.

Another example is that a (pure) Scheme program will overwrite the same memory addresses over and over again while it is running, just like a C program would. Conceptually, no mutation happens, it's just that the garbage collector constantly frees up memory that will be get re-used immediately.
It’s super fun and easy to get started with.
i am using mine as gateways into my networks.
All deployed with wireguard and traefik and authelia to let me login to anything with 2fa if i want it exposed, got tired of the very bad solutions some companies like synology provides with 2fa and dyndns.

no firewall ports just plug it in and ready to go in a second, and i use ssd's instead of sd cards for speed and reliability. Works without thinking about it for at least 1 year now.
Yes, but visual basic doesn't use line numbers? but for sure. it is probably a shortcut.
In that case, Company X would be the Data Controller and the request should be made to them.
This is wrong on many of the early points so I didn’t finish it but:
- on financial information, you must delete everything not required for regulatory purposes if requested by the user.
- on logs, while there is a legitimate interest to be able to find logs related to a user to be able to help them in support cases you cannot keep that information indefinitely. And once a user requests deletion that need is no longer relevant.
That's basically exactly the same idea, yes.

Haskell didn't invent linear types. Eg Clean had them for ages to do IO. (They didn't use Monads in Clean.)
It was probably cheaper to spend $600 to just buy the office treadmill right then, than have 2 employees and the CEO debating the merits of the thing for much more than 5 minutes. Far from being a trap, it seemed like a super cheap way to show that the CEO both cared about the employees and was responsive to exploring opportunities the employees identified.

Feels like a misplaced anecdote. Otherwise it's interesting article about opportunity cost, even if it has a bit of a clickbaity oversimplification feel to it.
All of them to to great lengths to ensure Taiwan isn't accidentally mentioned as being a country.
I google translated that to Spanish and it feels like it makes sense - because my Spanish is poor so I interpolate to make sense. Also translation itself “tries to” make sense of the text.

Do people trying to read GPT3 generated English translated into their own language have more difficulty detecting generated trash?
This isn't really news, many countries collect data on their own citizens in expanding ways.

https://www.theatlantic.com/international/archive/2013/06/ac...

TikTok almost certainly receives requests from various governments to collect data no differently from Facebook/Google/Verizon etc..

I think it's not a question of if China is doing this as well; certainly they are. No politician is going to publicly say though, "Look we know China is collecting data on you from TikTok because, uh duh, that's what we do with all of your US based social media posts."

I also don't think our government is all that directly concerned that China is monitoring. I think the concern is more on how the data and the outside control of the platform might be used to influence public opinions. Election tampering and the like.
Still, I found it staggering that there were 414 companies in the recent batch. When we went through 13 years ago (crazy that it's been that long) we knew pretty much everyone in our batch. It was like 50 people. I had conversations with most of the speakers. A batch of 414 companies (or even 250) sounds like a completely different beast.
As others pointed out, this paper tries to do more with fewer params.

But you've identified a trend does actually describe large language models for the past few years (they've been getting bigger, and bigger has been better). Like microprocessors have the famous tick/tock cycle (https://en.wikipedia.org/wiki/Tick%E2%80%93tock_model), I think models might see be seeing something similar emerge naturally (make models bigger --> make models better (shrink) --> make models bigger again --> make models better (shink again)).

Also, most of this LLM stuff is probably not trained on NVidia hardware -- at scale it's probably cost prohibitive if not also hard to set up. Google's TPUs, MSFT/Amazon's equivalent custom hardware, or other specialized accelerators are more economical overall.
From what I've read, Meta's strategy (and valuation) ultimately relies on 'ubiquity' (as they put it) - where everyone on earth has a Meta account and uses it. The stall in user growth is accompanied by a massive decrease in the company's valuation as a result of this, so they do the classic "what's working for the competition" action.

I've not had a FB account for years, and didn't use it other than for messenger for years before that, but when I was on there, I felt that most of their growth came from 'copy what other sites are doing, extinguish the competition by doing this' strategy, as everyone is on facebook anyway. It's worked for them so far, just now it's a bigger shift to try to emulate TikTok rather than try to destroy local ads sites or small business site hosting.