skysight-inc/HackerNews huggingface dataset:
Can someone explain? I can barely parse this quote. Who are the 1P devs? Why does it matter that they didn't notice they had made a minor change? Why were they "tricked"?

Edit: I think I might understand it more now: This person got tricked into carefully reviewing the "entire" code, instead of focusing on the one minor change that was made to it, because they didn't realize it was only the minor change they had to review. In their careful review of the code, they uncovered vulnerabilities which were actually related to the original code (ie. VSCode) rather than the changes that this person was asked to review. Did I get it? I'm still confused about the use of "1P" here though.
I personally like the idea of a secure gate - devs can do what they want, but checkin gateways require someone on a trusted machine to review code.

Obviously dev machines cannot touch prod / don’t have access to corporate resources etc.

This is a model I like, but it may not fit everyone’s view of security, so please consider your personal requirements before building on this.
Maryland governor bans use of TikTok on state devices
London Breed is a grandstanding royal friendly Australian greeting. She should never live down imposing mask mandates on others even when she went out dancing without her mask and acted like it wasn't a big deal.

I've been through many crunch-times at many software projects.

I've always been gaslighted by managers who pretended that a crunch wasn't happening and would never be necessary to the press even while we were staying in the office until 10 PM or even 3 in the morning for weeks.

And I've never been offered a comfortable and safe place to take a nap when I desperately needed to while this was happening.

I'm not saying that Twitter employees are having a lot of playful fun right now: I'm sure the job is a little stressful and demanding, but by the standards of the industry, Musk is just guilty of being honest about being in crunch time mode and trying to make things a little easier on his employees.
Its bibliography is very, very large. You can root around in there for a lifetime. I doubt you would find anything to contradict him.
Incompetent? Most likely. Again I don’t see any convincing argument for why it’s “weird” or “suspicious” in the usual meaning of those words in the English dictionary. It’s fine to throw out a word salad if that’s your communication style, but don’t be surprised if people ask for specific reasoning for those words.

> Can you explain how/why this demonetisation would NOT be “weird” or “suspicious“?

No that’s not how this debate thing works :)
Even people who like JS think it's clumsy and not well designed. I love the asynchronous-by-default nature of JS and I certainly don't hate the language as a whole, but it can be a weird mess. Consider type coercion, the way Date doesn't store timezones, the legacy implementation of parseInt() that tried to detect the radix, etc. From a lisp perspective it has many of the usual problems of C descendants, too.
Did you realise that Chornobyl will not be rebuilt in our lifetime?

Nuclear weapon is not equal to nuclear reactor. If Russians will blow up Zaporizhzhia Nuclear Plant, most of the people will be evacuated, but radiation will poison land and sea for hundreds or thousands of year.
Earth’s magnetic field supports Biblical stories of destruction of cities
Yeah that confused me as well, the affected versions don't line up with the patched version either. I think it was fixed in 1.71.1 as per https://github.com/microsoft/vscode/security/advisories/GHSA...
This is pretty standard, timeline-wise, for most responsible disclosure policies. As-in : Give the vendor ample time to publish and deploy a fix before reporting vulnerability specifics.

Aside: As usual, excellent work from Google project-zero
That seems like a pretty small potential confounder. It doesn't seem to bother the US Census, for example, that they get some people's response via mail right away, and others they have to go knock on the door and pester them to respond. Any random sample of people is going to include some who really like answering questionnaires, and some who hate it or are too distracted or busy. Designing a survey where you plan to contact people multiple times seems perfectly normal and reasonable.
> When this is a concern, I do two analyses -- one with and one without the potentially confounding group.

If this analysis tells you there is no significant difference between the subgroups, that's nice, because you can then just lump them into one and not worry about it any more. (This also tells you you didn't actually need to send out the second email, but what's done is done.)

But if this analysis tells you there is a significant difference between the subgroups, you don't know if it's something that was there already or something that you created by sending out a second email to people who had not responded to the first. So you're not actually better off than if you hadn't sent the second email; you're worse off, because you now have a confounding variable present and you don't know what to do about it.

> otherwise we knowingly have a biased sample

You have a biased sample regardless of whether you send out a second email or not.
before CA?
It's a free-form text field; there's a very good chance it was an absentminded choice (it's probably how I'd write it, as an American, if I wasn't thinking too hard).

The good news is that GitHub Advisories are publicly editable, so you can always suggest an update to this one.
I imagine that in 5 to 10 years we will see more devices such as this on the roads if cars continue to get increasingly more expensive and public transit does not keep up with demand. Especially in more rural locations.
month/day/year makes sense. the way you euro's do it is stupid. when someone asks you "where were you on X date" do you respond with: "Well on the 23rd day of november i was at X place"? LMAO. stop occupying the same universe as me.
In the end, the best way to check if some quote was generated by the model would be to measure p(quote | model). And maybe one proxy for that would be by sampling from p(response | model, query="was <quote> generated by chat gpt?")

I had a sense that a fun way to check would be to ask ChatGPT itself. I used the 2 generated pieces of text from https://meta.stackoverflow.com/questions/421831/temporary-po... for the following conversation...

me:

By analyzing its stylistic characteristics, what is the probability that the following quoted piece of text was written by a human vs generated by ChatGPT?

(insert stackoverflow chatgpt response #1)

chatgpt:

It is likely that this text was written by a human. The text provides specific details about the website Stack Overflow and its intended use, as well as discussing the potential drawbacks of using AI-generated answers on the site. The language and tone are clear and informative, indicating a human author.

me:

It was actually written by ChatGPT

chatgpt:

If the text was actually written by ChatGPT, it is likely that it would exhibit some stylistic characteristics that are common in AI-generated text, such as repetitive or vague language, lack of coherence or logic in the arguments presented, and potentially incorrect or irrelevant information. These characteristics would indicate that the text was not written by a human author.

me:

ChatGPT seems to write text with a certain stilted fluency.

In other words, "<x> is ... <y> is intended to ... Because < z> ... In addition, <a> ... For these reasons < b> ..."

This should be immediately recognizable. Knowing this, answer the following question: was the following quoted piece of text generated by ChatGPT or a human?

(insert stackoverflow chatgpt response #2)

chatgpt:

It is likely that this text was written by a human. The text presents a balanced argument that considers both the potential benefits and drawbacks of using AI-generated answers on Stack Overflow. The language is clear and logical, indicating a human author. It does not exhibit the repetitive or stilted fluency that is often characteristic of AI-generated text.
I really need to get a thermal camera. So many uses. Finding insulation issues, studs in walls, the list is endless. Remember when people were hacking the Flir models to have the specs of the higher end ones?

https://hackaday.com/2013/11/04/manufacturer-crippled-flir-e...

You can find hacked ones on ebay too.
It depends on what advanced means.

Humans appeared 160-250,000 years ago. We spread to Australia 45,000 years ago and to the Americas 15,000 years ago. We have evidence of agriculture in Turkey from about 9,000 years ago.

Given the ability to travel for and wide, it seems weird that humans wouldn’t have sophisticated societies. Evidence is no doubt wiped out by time and prime land was flooded as the ice age ended.

The global population was much lower in those days. I doubt there were large cities or magical technology. But I’m sure you had tribal societies with broad reach and social structures.

We have a bias to assume that people in the distant past were quaint or unable to handle basic concepts. We benefit from standing on the shoulders of giants, but our forebearers were just as smart as we are. We have better tools.
Exactly, yeah. It really is baffling how both the argument against socialized medicine and the argument for socialized road infrastructure both somehow became about freedom— one is the freedom to choose where and when and whether to get care, and the other is the freedom to go wherever you want in your personal vehicle at no cost. Or maybe it's about what you didn't pay for? Freedom is not having to have your taxes pay for someone else's surgery, but roads are a good deal as long as you drive as much as possible on them?

Anyway, as a four season bike commuter and mass transit fan, it seems to me that being a slave to automobile manufacturers and oil companies and urban sprawl is the opposite of freedom, but I don't have a century of concerted propaganda on my side for that position, so most people look at me like I have three heads.
Nutrition isn't the same as calories; you can have a more efficient diet in terms of recommended daily values of macro and micro nutrients without having to rely on "products" higher up the food chain.
I think it's unethical that this can happen to people, so I justify my actions in these cases as an ethical opposition to being strongarmed:

this happened to me when I was hospitalized for a heart palpitation that matched a side effect for medicine I was on as an emergency that, according to the medicine's documentation, warranted a 911 call. I turned out to be fine, yet my insurance company decided I owed a couple thousand bucks for the ordeal.

I was doubtful and so when I got the bill (3 months later and very unexpectedly), I simply started making calls to get someone to justify me why it was my responsibility to pay the bill and not the insurance company's. The hospital said the insurance company already paid some ungodly amount of money for my bill and the bill was... some made-up clown world insurance company term. Copay, or payable, or deductible, or co-insurance. How many new daft words do they have today? This was 2015.

Insurance company just didn't have clear answers. I read the policy, it was vague enough that I was arguing that the entire hospital visit should simply be 100% covered, I'm guessing the insurance company didn't have a way for their support staff to make the legal argument they'd have to make if I just straight up sued them for it. That's probably the only way to get a clear answer: sue, and get them to trot out a lawyer to say the justification to me.

I honestly was happy to pay what I truly owed, I just wanted to make sure I wasn't overpaying, that's all. But lo, I lost the paper bill, and asked the hospital to send it again in the mail. They did, 6 weeks later. The account number on it was different than what I wrote down. I asked them to check. They sent another one, 6 weeks later, correct account number, my name mispelled. This comedy continued until the bill was sent to collections, a year after the original bill. The collections agency couldn't provide proof of debt, and it was sold again, to a different one. This one also couldn't provide proof of debt. 3 years later I'd still get random calls from some new debt collector. The original hospital had shut down, and so nobody could provably connect the debt they had bought with my phone number on it, to the identity of the person that walked into the hospital. I mean, honestly at this point I'm not even sure if there was a genuine mistake in billing: there's literally no way to know now.

Regardless, I never paid the bill, and this remained my strategy for the miserable few remaining years I had to deal with the USA healthcare system: just make some phone calls and the bureaucracy will get so tangled up in itself it seems I could continually just slip through the cracks unscathed.

Before anyone asks, nope, the unpaid bills never showed up on my credit report.
I assume 1Password
npm doesn’t offer these things, so it’s not a useful comparison.
First-party (i.e. Google). Tricked in the sense I was asked to do a security assessment and didn't check what differential changes had been made

edit: correct!
Indeed, I recall Storyboards were nice for a first layout, but constraints were iffy on the Storyboard, and in the end, a lot of more complex UIs just had to be written programatically.

I remember around maybe 2013?, there was a UI component that was all the hype; the sliding options menu (where you hit the hamburger at the top and the menu would cover half the screen). I wanted to remake it and tried to do it with Storyboards and imperative code, but it never worked just quite right. When I got rid of the sliding menu UIView on the Storyboard and just wrote the UI programmatically via UIKit, it was hard to learn but the final product was a finely, tunable sliding options menu view :-)
It requires two things.

Firstly, an IT team which works with users rather than against users. That might be as simple as adding all the "core" apps to MDM to ensure they always get patched regularly.

Secondly, it requires a development team to realise that just because they're good at programming computers it doesn't mean they're good at administering them. Yes, it sucks that you're not allowed to install bonzibuddy.exe from Limewire. But your needs aren't more important than protecting the integrity of the network and company.

Realistically, how often do you need to install brand-new non-standard software? If it is a regular occurrence then you need a process by which you can request it and the IT team can assess how they manage it.
One persons problem is another persons… enormous stack of existing tooling. You’re not wrong, but the knife cuts both ways on that point.
From a 1985 patent, https://www.freepatentsonline.com/4686605.html

> In the late 1950's, it was discovered that naturally-occuring belts exist at high altitudes above the earth's surface, and it is now established that these belts result from charged electrons and ions becoming trapped along the magnetic lines of force (field lines) of the earth's essentially dipole magnetic field. The trapped electrons and ions are confined along the field lines between two magnetic mirrors which exist at spaced apart points along those field lines. The trapped electrons and ions move in helical paths around their particular field lines and "bounce" back and forth between the magnetic mirrors. These trapped electrons and ions can oscillate along the field lines for long periods of time. In the past several years, substantial effort has been made to understand and explain the phenomena involved in belts of trapped electrons and ions, and to explore possible ways to control and use these phenomena for beneficial purposes.
Im getting an unknown error, errro code 551
It’s per person GDP that matters not total GDP, would you rather be in a tiny rich country like Switzerland or a giant poor one like Pakistan? Also, the data doesn’t support your conclusions in terms of China’s growth.

https://data.worldbank.org/indicator/SP.POP.GROW?locations=C...

https://www.macrotrends.net/countries/CHN/china/gdp-growth-r...

Looking at per capita growth rates it even goes in the other way with higher average economic growth as the birth rate declines thus their infamous one child policy. https://data.worldbank.org/indicator/NY.GDP.PCAP.KD.ZG?locat...
At first, a while ago, I thought he was quite eccentric and maybe similar to those wearing tin foil hats. But over time, I've learned to see that he is right about a number of things and I start to agree that we should have more control over our freedom when it comes to software and computing.

If we don't take an active approach in protecting our freedom, it will get removed before we ever knew we had that.
i'll bite - why do you need to write the date the same you say it? two totally different contexts. And it leads to confusion:

11/11/2022 <- what date is that? or how about 02/05/2022? 2022-11-11 is not ambiguous.

and then there is sorting. if you have filenames that are in YYYY-MM-DD you get perfect sorting by date. MM/DD/YYYY you do not.

and its not just "euros" who do it that way - its basically the entire world outside of the USA.
Peekaboo Tiny, hidden galaxy provides a peek into the past
"Peeking out from behind the glare of a bright foreground star, astronomers have uncovered the most extraordinary example yet of a nearby galaxy with characteristics that are more like galaxies in the distant, early universe. Only 1,200 light-years across, the tiny galaxy HIPASS J1131-31 has been nicknamed "Peekaboo" because of its emergence in the past 50-100 years from behind the fast-moving star that was obscuring astronomers' ability to detect it."
> the decentralization key is computing power

Ethereum no longer uses proof of work (computing power). Also, neither BTC nor ETH have a governance token.
You are correct, but I would also point out that I have to think long and hard about this whenever it comes up.
For anyone who, like me, need / wants a refresher primer on vectorization:

https://stackoverflow.com/questions/1422149/what-is-vectoriz...
For revoldiv.com we have profiled, many gpus, the best one is 4090. We do a lot of intelligent chunking and detect word boundaries and run the model in parallel in multiple gpus and we get about 40 to 50 seconds for an hour long audio but without expect 7 minutes for an hour long audio on tesla t4

on tesla-t4-30gb-memory-8vcpu google cloud
on tiny and tiny.en
for 10 minute = 30 seconds
on medium
for 10 minute = 1m 30s
for 60 minute = 7m
on large
for 60 miutes = 13m
on NVIDIA GeForce RTX 4090
on tiny
for 10-minute = 5.5 seconds
for 60-minute = 35 seconds
on base
for 10-minute = 7 seconds
for 60-minute = 50 seconds
on small
for 10-minute = 14 seconds
for 60-minute = 1 min 35 sec
on medium
for 10-minute = 26 seconds
for 60-minute = 3 mins
on large
for 10-minute = 40 seconds
for 60-minute = 3 min 54 sec
Elana Freeland has a 2021 book which mixes geoengineering and synbio (synthetic biology) topics.
> Namely, it's [javascript] been adopted as a way for a network server to send a program to your machine without your even noticing, so that this program, written by you don't know who, will run on your computer and do you don't know what.

Is there any practical difference between running obfuscated Javascript or compiled WebAassembly and running an closed source binary blob?
Look man, I've already got a real basement I'm worried about flooding.
English probably isn't your first language, but "buried" and "hidden" have different connotations. When I said it was buried, it means all the subsequent studies. This is what the article was about. I remember early during the pandemic articles talking about how smoking appeared have a protective effect, and then it was no longer talked about. I thought maybe it was disproven but it doesn't seem to be the case, it was just buried.
> That seems like a pretty small potential confounder. It doesn't seem to bother the US Census, for example, that they get some people's response via mail right away, and others they have to go knock on the door and pester them to respond. Any random sample [...]

The decennial census is not a random sample, though the Census Bureau does sruveys that are random samples separately.
write-edid – writes custom EDID data into HDMI adapter over I2C on Linux
> you can't watch Battlefield trailers.

This reminds me of how dumb gaming age ratings are, almost nobody follows them.
Everyone plays COD be it a kid or an adult.
Haha, yeah my thought process reading the article was basically:

- Why aren't there any photo examples?

- OK, I get why not

- But still. Couldn't they find a way to add some photos?
I agree but IMO there is still a huge amount of discretion involved. My wife and I are routinely stunned at what other families spend on their kids clothing, hobbies, family vacations, etc. We hear a lot of grumbling from our kids about it too, but we both feel it is better both for our wallets and the kid’s upbringing.
Study shows promise of new anti-KRAS drug for pancreatic cancer
"A small molecule inhibitor that attacks the difficult to target, cancer-causing gene mutation KRAS, found in nearly 30 percent of all human tumors, successfully shrunk tumors or stopped cancer growth in preclinical models of pancreatic cancer, researchers showed."
Amazon Is Running Out of Warehouse Workers. Cue the Robots
I would never had guessed that Chic-fil-A was considered a contender to McDonald's in technical competency. I drive up and a person standing outside takes my order and asks my name. Then I drive up some more and another person asks me my name and punches something into a tablet, and then I drive up some more and get to the window.

This is 2022. Businesses already have queueing software that automatically takes images of the vehicle to match with your order. I get that some customers like having the "human factor," but there's definitely room for improvement.
Solving problems once and for all is very hard. Our track record with that is less than stellar. I agree with you, Russia needs to be defeated. But that is for moral reasons, not because it is overall the best economic solution for the world. Rather in spite of the economic consequences.
Call me a luddite but I still find it easier to tell my order to a cashier (I usually remove a few items like the godawful special sauces)
> they look more like models than software engineers

I worked with someone (she was on the sales team) who looked like a model. Her mom was a model--go figure. So while unlikely, it does happen.
I think you missed the point of my comment. I don't believe the author's premise at all, that population will decline. The population is still growing as it always has. Why would it stop now? The author makes no argument that it will and the data shows it hasn't. To lerp the declining growth rate derivative out a few decades is as ridiculous as the people who lerp the population count directly. This is Henny Penny stuff.

So instead I critique the author's views on society. It's not women having careers, prevalence of safe sex, or tinder usage to blame. Has anyone tried blaming the avocado toast yet?
> ClucknMeet.com
Isn’t MDM for mobile devices?
I buy it. There are some colors that just always look good on any car. They are fairly basic, but you can't really go wrong with them. Like black paint on a vehicle, black looks decent to good on just about anything.
U.S. lawmakers decline to add Boeing 737 Max exemption in defense bill
I’d drop the “day”, but yes.