skysight-inc/HackerNews huggingface dataset:
Thanks, it's a fair comment :)

I've tried to be honest about ruff's limitations: it supports only a small set of rules, it's not extensible in any way, it's missing edge-case handling, it's significantly under-tested compared to existing tools, etc. I don't consider it production-ready -- it's a proof-of-concept.

(I _did_ try to build conviction that there weren't inherent reasons for ruff to slow down significantly as the set of checks extended, but I could definitely be proven wrong as the project grows...)

My goal with ruff was partly to build a fast linter, but that was really in service of testing a broader hypothesis I have about Python developer tools could evolve. If that's interesting to you, I wrote about it a bit more here: https://notes.crmarsh.com/python-tooling-could-be-much-much-.... I'm certainly not here to say that the existing tools are bad or you shouldn't use them or that you should use ruff instead. I use those tools myself -- a lot!

With regards to code organization: oh well, this doesn't bother me given the state of the project. The code will evolve as the project grows in scope, I didn't see a need to over-abstract. I'd written a small amount of Rust prior to ruff, but much of it was a learning experience for me. (Funnily enough: not that I want ruff to be organized as such, but pyflakes, pycodestyle, and autoflake are also effectively single-file projects :))
Because the field saw exponential progress which has started stalling out only relatively recently. And so now there are two possible explanations:

1) We're reaching near the end of where the current domain can take us.

2) We're making some sort of mistake or otherwise missing something that's the key to unlocking continued exponential progress.

It's always natural, especially for those working within a domain, to assume it's #2. Unfortunately it seems our universe has this habit of always kicking us back to #1 just before the completely game breaking stuff starts happening.
https://web.archive.org/web/20220831175005/https://www.busin...
We use old-style public keys, but store them in LDAP. sshd has AuthorizedKeysCommand pointing to a script to retrieve for login.

And we scan for things that look like keys.
Whatever this is it's barely animation. It's interpolation and it's linear and far away from any thing that's animated or animation.

In an animation those two photos would be drawn and created as keyframes which would then get interpolated many ways (hopefully not linear and as robotic and weird as this).

Very interesting technology though. I could see this coming to an smartphone near you any day now. And there will be ways people animate with these tools but this isn't it.
"We won’t waste your time arguing with these claims"

Err, actually, if you have something substantive to say, please do?

I would really love to be persuaded that unaligned AGI is not something I need to worry about in my kids' lifetimes. I'd much prefer to believe more strongly in my ability to set them up to thrive! But when skeptics repeatedly don't seem to have anything to say beyond sneering, my anxiety is not alleviated.
Could you expound on this point? I don't think there is any appliance that is made only of metal that has planned obsolescence. For example a cheese greater I would expect to last forever as long as you don't buy a really cheap one, but that I feel is inevitable. and I'm sure there are people selling hand made cheese graters. In any event what I meant by household appliance and what I assumed OP meant was something like a blender, a microwave, or a washing machine. Just forging metal isn't going to cut it with these products. perhaps my language was bit harsh earlier but what else is there to say? I'm sure there are many talented people who can do this but I'd imagine they would be doing something more productive. Even if not, there is no guarantee on the quality, even if it's open source, as it still has to be manufactured. This seems like microwave gatcha to me, a game I'd rather not play.
It might not be the norm, my recommendation here was based on the OP mentioning it themselves, on experience with smaller companies and from my own experience working for a TLD (consider me biased)

Norms change and from my perspective there is still a big ongoing effort to push DNSSEC adoption worldwide.

I'm curious to know why you'd argue against DNSSEC and what your experiences are with operational overhead.
For those reading far, far too much into the headline:

- The "Union President" was only the president of a union local, in a city in Louisiana with a total population of ~62K.

- There is no hint about the nature nor scale of the alleged 'Fake Fundraisers'. (I receive those "we are fundraising for the police..." unsolicited phone calls, too.) For all that article says (zilch) - these fundraisers might have been "Chili and cornbread for $10, drop by the lot behind City Hall on Sunday from noon to 4pm" sort of stuff.

- The one drug deal that they give hard details about involved 3 pills, and a ~$100 profit for the dealer. So - very small scale stuff.
https://en.wikipedia.org/wiki/Triune_brain

There are distinct architectures and our brains have additional architectural features that lizards' lack.

https://en.wikipedia.org/wiki/Basal_ganglia

https://en.wikipedia.org/wiki/Limbic_system

https://en.wikipedia.org/wiki/Neocortex
> Pakistan is a nation of children and refugees. It's not well positioned to self advocate on the world stage.

I don't understand. Why can't the government self advocate given it's a nation of children and refugees?
Two quick notes:

If you really have no idea, push for a CISO (and the budget for the CISO to fulfill their role).

There's no hard-and-fast rule for this but the sense I get from doing this work is that the startup industry norm is to make a first security hire somewhere between engineer #20 and #40. That hire is usually not a CISO: your first security hire needs to be a hands-on-keyboard person, and CISOs are not that. "Senior Security Engineer" is probably the modal first security hire at startups, followed by "Director of Security" (for startups that expect to hire security person #2 within 6-9 months of #1).

A decent general rule might be "if you have to ask, you shouldn't be hiring a CISO".

* You can hire a pentesting company to check your IT (usually this is recommended to be done regularly, e.g. twice a year).

The industry standard here is software/prodsec pentests done once a year or on major releases, whichever interval is longer. Figure a serious software pentest is going to cost $25k-35k for a typical SAAS product.

You can get network pentests done; they're much cheaper than software pentests. I probably wouldn't do them annually.

Also, don't do DNSSEC.
I think you are just making a joke, which is fine, but I would reassert the point I think the OP was making that there is a qualitative difference in the nature of the abuses committed by individuals and firms.
I kinda feel like they chose the name "open"ai when they started back in 2015 because musk etc wanted exactly the kind of thing stability ai is now creating. I.e. something other than a corporation like google having primary access to these models, and it being more democratized. But as time as gone by they've strayed away from that vision but changing the name would be a PR nightmare.
Clint Eastwood knows how to play one character, and he played that same character in all of his movies. Other than that, I don't think he has any credibility at all, especially regarding what's "critical for the planet." Not that a plant-based diet is a bad idea, just that Eastwood is a poor spokesman.
I have always wanted to make a mountain bike out of scaffolding poles in order to review it positively.

Notionally such a bike should score highly in many key metrics. In the review the obvious failings are overlooked yet the reader can work it out for themselves.
Similar to https://pocketbase.io ?
Anyone else notice the corrected version is just the standard format for an email?
They have been happening for the last century. The reason why is simple: that part of the country is very fertile, agriculture is a big part of the economy, lots of people build houses in an area that they know will almost certainly flood within a few years (and the reason the govt doesn't do anything about it despite flooding being a major political issue is corruption).

This isn't to say that climate change isn't happening, but: flood plain that has flooded for centuries floods is not surprising. And it is fairly normal in that region for lots of people to live in flood zones because they are fertile agriculturally (due, I believe, to the flooding).
Rubber.
It's a product of the Americas, before that, wheels sucked.
Looks more like a contrived example to me:

h.db.Exec(fmt.Sprintf("insert into users(name, email, phone_number) values ('%s', '%s', '%s');",
request.Name, request.Email, request.PhoneNumber))

Any database driver including database/sql will support

h.db.Exec("insert into users(name, email, phone_number) values (?, ?, ?);",
request.Name, request.Email, request.PhoneNumber)

which is shorter and more natural. They’re throwing in a fmt.Sprintf in there for no reason other than forcing a tired old SQL injection.

Now, shitty HTML templating causing injection with unsanitized user input is a lot more realistic, since the golang templating story isn’t great.

Edit: “templating” -> “HTML templating”.
I was trying to figure out a relatable comparison on a map. Looking from one side of the flood lake to the other would be like trying to spot Niagara Falls from Toronto, or San Jose from San Francisco - never mind that the distance is large enough for Earth's curvature to get in the way. And that's just thinking of it as a cross-sectional view of the lake, which doesn't say much about area.

The way I ended up explaining it to my kids was that 33M people were affected. San Francisco population is ~800k, so around 40 SFs worth of people are impacted.
Almost all major cities in middle income countries have currency brokers who are more than happy to earn spreads by making a market between on-chain dollar-based stablecoins and the local currency. It's not really any different than traditional forex brokers. If anything, slightly easier because each physical location doesn't have to manage an individual cash vault.
It's similar weight to a small motorcycle.
VM is a good idea. I barely even trust a lot of the open source stuff, there's deep stacks of magic (and not so magic) shit in modern machine learning, and too much "we depend on pip installing this particular git repo, sometimes a particular commit that you'll need to figure out lol". Some of the stuff people are building has looked interesting, but I'm going to let the dust settle for a while before I look into them more, and I'm particularly trying not to gum up my new machine with npm BS. For now, I've had enough fun with just the original repo (regrettably finally mostly figuring out how to use conda) which I setup a bit before the weights were released and haven't updated. (So I didn't need to bother removing the last-minute added watermark/filtering stuff.) I also sometimes test things with the network down to see if there's blatant surprising network connections, interestingly the default repo will ping a site for a resource it needs to download, but continues to do so even after you have it. Add the "local_files_only=True" param to the from_pretrained() method calls in ldm/modules/encoders/modules.py to stop it. (Oh thank the gods that I can just edit the py files to make local changes and they haven't tried to do some weird hybrid binary thing like other projects (ActivityWatch).) I also setup Real-ESRGAN to upscale some favorites, its results are pretty interesting.

The executable binary blobs I've a natural inclination to distrust, but I can also see where they're coming from, culturally, and Most Of The Time it's not a problem, like random indie games you might download to try. (Besides, there are other binary blobs I depend on, like the nvidia driver...) Culturally it seems somewhat comparable to the gaming world or even demo scene or modding scene, where traditionally you don't often find much open source.
Did you not watch the video in the tweet?
You don't need to develop GPT-3 to make major progress in deep neural networks: but in the 1990s the field had stalled due to other reasons that had nothing to do with either compute power or data set size.
Lol so true. Why am I being matched up against top 500 players when I am quite literally making my way through bronze.

Just double my queue time until we find a good match at that point.
> sama is very active in YC and makes the call on OpenAI product roadmap. Furthermore YC encourages good CEO-community relations

Sam hasn't been at YC in years and (based on anything I've seen) isn't active in YC at all. As for "YC encourages good CEO-community relations", I have no idea what that means* but it has nothing to do with HN. We encourage good content-community relations and that's it.

You have a long history of posting dark insinuations about YC/HN, not to mention nagging the mods about how bad we are and how much better you yourself have done the job in the past. I mostly let the latter go, but when you start with the ethical insinuations, that gets my dander up. It's time you stopped smearing people's reputations on HN. If you have evidence of wrongdoing, post it—I'm sure the community will be extremely interested. If you have no evidence, please stop from now on.

(Edit: I realize it probably sounds like I'm over-reacting to the parent comment, but this has been a longstanding pattern. We can cut people slack for years, but not infinitely.)

OpenAI stuff and Stable Diffusion stuff (and DeepMind stuff for that matter) are all popular on HN because the community is super interested—that's literally it. We're not pulling strings or playing favorites (we don't even have favorites in that horserace, at least I don't). As a matter of fact, the last thing I did before randomly running across your comment was downweight the current thread because of the complaints at https://news.ycombinator.com/item?id=32665587.

* unless you mean that we advise founders about how to write content that actually interests the community—that we do, and not only YC founders but non-YC founders, open source programmers, bloggers, and anyone else. That's all a consequence of wanting HN to have good content and seeking to avoid the boring stuff. By the way, I'm working on an essay about how to write good for HN and avoid boring stuff too; if anyone would like to read it, email me at hn@ycombinator.com and I'll send you a copy.
I don't understand this criticism. What matter are the results, not the technology used. If your company is capable of solving a new problem that is worth billion of dollars, then does it matter that it uses basic statistics ?

Of course if they overpromise, then reality will catch them and the company will fail.. but this has nothing to do with statistics.
I remember in the 1980s Bicycling or some such magazine wrapped a road bike in concrete, called it a composite bicycle and did a full review. Needless to say, it scored poorly.
I'm not the person who suggested it, but I wouldn't mind having it fill my (wide)screen when watching. That said, I understand that some film/tv uses the frame very precisely, however I'm not sure that these two particular examples do that throughout their entire episodes. (Though I bet that in Seinfeld in particular it might weaken/ruin a few visual gags.)
Do you happen to know what stopped the radiologist stuff from happening?

I know I read press releases ages ago saying "hey look, we can do this machine learning", but I haven't really heard anything about it since.
And how often does this happen with Photoshopped images that aren't immediately disproven?
Yeah, European capitalists at least.

And they'll destroy our wages and trade unions even further.
I own a platform with several thousand unique monthly users within the company where I work.

In order to get to the point where you can raise a support ticket, we gently usher people through a flow that asks them whether they've checked our FAQs (that cover 90% of all tickets raised) and then provide them with examples of the kind of additional information that will help the support team to provide quick and useful responses.

Some ridiculously high proportion (half?) of tickets still come out looking like "it doesn't work when I do X" with no attempt to report what (if any) error was experienced or what parameters were supplied or what indeed their expectation for "work" was or whether this was "working" before etc.

I'm sort of coming to the conclusion that for some fraction of users, there is nothing that can be done to get them to think at all before raising a trouble ticket. Another theory: that for some people, hitting a problem is an excuse to stop working entirely and claim to be waiting on another team for support.
What about the sub-culture of open source who doesn't want their code used for profit without the result also being open sourced?

To put it another way, why should we have to treat Microsoft's EULA and licenses as ironclad while Microsoft gets to ignore licensing terms of code they want to use for their own products? Seems like an imbalance that's only possible because one side is more well-funded than the other.
I work on the Platform team at my company, and so we do a lot of internal tech support. It's a daily struggle to get people to ask good questions, provide details, provide links when possible, etc...

Sometimes it's really hard not to get incredibly frustrated with it. The questions can be as vague as "hey we're having trouble authenticating to the artifactory, how do we fix it?" A few people really shine in explaining themselves clearly, giving the context, copy-pasting the error message, etc, and I truly treasure those people. The proper context can really turn an hour of debugging into 5 minutes debugging
> The stationed troops and machines were not nearly enough to handle the situation, see my sibling comments. You can't suppress protests of several millions with 300k not-so-willing troops and 5000 not-so-good tanks

I don't know how old you are or where you were at the time. I was there. In the GDR, in East Berlin. On the streets. And I can tell you, a few tanks and troops getting their guns out would have made major impressions on people.

It's not just a numbers game. You are greatly oversimplifying history here. Quite naively so, I might add.

It's a great achievement of history that Gorbachev made the Soviets keep their feet still and among many eastern Germans it's regarded as quite the miracle that this whole episode went down non-violently. Look around in the world in the last decades. This was the major exception, and Gorbachev was central to that.

Also, let's get the picture of the situation straight. He didn't just passively sit bunkered in in Moscow, letting things happen. He actively went out to meet leaders of other involved powers, including the German chancellor and foreign minister, Kohl and Genscher, which he outlived by a few years.
It doesn't seem odd to me that a product that involves an absurd amount of data and computing power isn't an easily consumable commercial product available for mass download.
To be clear, I think Cloudflare should take the offending site down because it is, IMO, the right thing to do.

Just don't justify whatever decision you make by conflating public and private services.
The gas reservoirs don't hold enough to get through a winter. They hold enough so that with normal inflows, there's enough gas in the winter - while drawing down the stocks.

You need both ~full storage and continuing supplies to get through a winter.
The current push for cloudflare to unlist kiwifarms is in response to a well known twitch streamer's attempted killing via swatting. They literally had to leave the country (canada), and the new address was found, and they were swatted again.

https://globalnews.ca/news/9097654/twitch-streamer-and-trans...

Their "nastiness" (suggestion: terrorism) is never self contained. I know several people who've been doxxed on there - every single person had to move and change their legal name. If a thread on someone in KF is active, they will find every member of your family, your workplace, friends and loved ones. Then if they find your friends are "degenerates", they will doxx them too, and all their family workplace friends and loved ones.

The fucking point of the site is harassment - they post ADDRESSES and PHONE NUMBERS, why would those ever be allowed if it was supposed to be self-contained?

Here is the how the southern poverty law center describes Kiwifarms:

> KiwiFarms – a forum with roots in 4Chan culture that has become notorious for engaging in extreme trolling, harassment, and even stalking

Source: https://www.splcenter.org/fighting-hate/extremist-files/grou...

Throwaway because its not safe to post on my primary account about them while kiwifarms is allowed to operate.
I actually paint and spend a lot of time looking at 'serious' paintings. AI hasn't even scratched the field to a trained eye.

Doesn't mean I'm not excited though. This kind-of feels like I'm watching the camera or printing press being invented. Everyone is comparing it to fine art, but I think ultimately it's going in a different and bigger direction.
Double meta, what a surprise to find someone you know in meatspace here on HN!

Definitely would have loved to catch up had I been in BLR.
This isn't about a parasocial relationship with Krebs at all, but determining how he'll avoid the situation again going forward.

> So like, what do you want?

I think I've been pretty clear, basically an acknowledgement of the situation and a statement that he has some ideas on how to address it from coming again. I'm not even asking for an in-depth process update, I realize why he might want to be vague. Importantly, I just want to make sure he sees the problem. Otherwise, what stops it from happening again?

> What more should he say? You say "maybe he sees the facts differently" as if we as anonymous internet crowds are entitled to a post-mortem on his psychological state.

I'm certainly not entitled to his mental state, he's free to remain as private as he'd like. To go back to my original point, I said "[how he] has handled this whole episode has not inspired optimism in how he'll handle future mistakes." So to answer your question, all I'm saying is if he wants to be seen as a trustworthy public security researcher that is a step he can take in service of it. If he wishes to remain private on it he can too, but as he's decided to be a public security researcher I think it's only fair to engage with that. And I think it's off the mark to call it parasocial, when I'm only engaging with him as a public security researcher doing security work.
Guess we should take down traditional media as well then when they dox LibsOfTiktok and other creators so that the Twitter mob can harass and SWAT them, since they can't hide behind 'journalism'. Or does it only apply to the bad guys?
I don't, the ocean is a big place and we haven't seriously started to farm it anywhere near it's full potential yet (bet we do before long though).

Now granted many areas won't be suitable for seaweed cultivation, but if the demand is there, humans can get really innovative. The thing is, we don't make plastic out of seaweed yet and likely won't until we have to, and maybe never at all.

I do like your other idea better though if feasible. Save the ocean farming for food.
> I'm not sure what the artist wants to communicate with the bike

"I paid a lot of money for an architecture degree I'm not using."
> Wishing you are always on the beach

Thats not what they said and you know it.