skysight-inc/HackerNews huggingface dataset:
Does anyone have any insight on the real inner working of chatgpt or its source code?

Because, so far it is advertised as a "magic" thing only working with a language model, but as a seasoned dev engineer, I'm quite sceptic.

When we look at all the replies, we can obviously see some patterns in the way question are replied. Something like:

Can you do operation x on y for me please?

Yes, opération X is reticulating that and this in a specific way like I'm reading Wikipedia.
For example bob become zob.
So, X(y) result in bar.

To me, I have the feeling that in addition of using gpt maybe for decoding, maybe for generating outputs, they might have a big base of predefined response "templates". Also, they can have specific "plugin" calculators or things like that, so that once tokenized, the operations would be performed by the plugin and not by some magic AI understanding.

It is easy as to pre record that + == plus == add. * == X == multiply == times.

Just to explain my scepticism to younger readers, in Emacs, for >40 years there was a fun and very light lisp plugin that was embedded: the cyberpsychoterapist.
It is based on this:
https://en.wikipedia.org/wiki/ELIZA

For anyone that tried that decade ago, you could have a 30 mins conversation without noticing that it is not a real person.

The fun trick in my youth was to feed the replies of it to my friends on Google Chat with them thinking that they were talking to me directly.
Tf illegitimate use do you have for solving captchas automatically? Play with abusive software you deal with the consequences.
Yes, I was mostly kidding that Scientists found out only now. But we definitely need a new design. Closing the lid is ugly (someone who has always thought about invisible splashes falling up on the floor and toilet seat wouldn't think about that?). When you close the lid and flush, all those tiny little particles are sticking on the lid instead now. And when you open that again and sit, unintentionally some part of our backs (/clothes) do touch that - not helping much. Also ideally it doesn't save the toilet seat as well since even when closed the lid is still above the seat. That's why an auto-closeable inner lid that seats beneath the toilet seat is a solution (or like someone else suggested, it always remains closed but opens up only by the pressure of someone sitting on it).
'Terribly misconfigured' sounds like a bug report should be filed at the distro level, not a complaint about the upstream tool on HN ;-)
Fair. It would be trivial to add this functionality, I would assume.
That's quite cynical. Neither Google nor Apple profits from their password management solutions. It's in their best interest that people use passkeys to keep their accounts secure. Less support staff for $MEGACORP, simpler logins for the masses. It's a win for everyone that doesn't have malicious intent.
Another way of framing this is that Google wanted to do things that browsers couldn't and better, and built a new browser that redefined what the standards could be.

You could call that "control" but in the early days when Chrome was gaining dominance it made the web better.

The change in reputation is directly related to the change in the decision making and reasons behind it, imo.
The point is people won't notice this because Twitter doesn't tell you your tweet was hidden.

Does it make sense for Twitter to shadow remove tweets from a whole TLD? The fact that it needs to be done secretly is evidence that most users don't know that using such a TLD will "create a negative impression".
I find the concept of servers really hard to explain to anybody...
> by which French citizens working in Monaco still have to pay income tax in France, even if they are Monaco residents. It's the only case of "global taxation" of French expatriates in the world. There are, therefore, no incentives for them to live in Monaco

Ha, it's amazing how fast and efficient the French government can be at blocking these legal loopholes so that the handful of workers working in Monaco couldn't avoid paying French taxes anymore, when many publicly listed French corporations like Airbus, ST Microelectronics, Balenciaga, etc. have their financial residence in the Netherlands depriving the French state of billions in taxes for decades and nobody bats an eye, but if a few ordinary people do it then there's hell to pay.

It's almost as if there's an agenda for a double standard here, where the system is rigged against the peasantry and for the benefit of wealthy elites. Maybe those guillotines have been gathering dust for too long now.
Can't wait until all of the timber skyscrapers that they're building to fight global warming meet the same fate.
Though I'm not a direct user, I've recently seen Waze has some glaring errors that Google Maps doesn't - especially on "special" days.

I saw the most spectacular failure like this on Good Friday this year, where I had to take a cross-town trip and Waze was telling my Bolt driver that it would take 2h+ (and trying to make them avoid all large roads), when in reality and in Google Maps, the city was essentially empty and the trip took ~30 minutes.

The 2h+ estimate was definitely correct for a normal day, but that day was part of a long weekend and no one was around, and yet Waze had absolutely no idea. Even on normal days, it typically significantly overestimates how long rush hour lasts by at least another hour.

Maybe this is somehow specific to my city, but at least it shows that in some places Google Maps and Waze use significantly different data (or weigh different sources very differently).
Does anyone’s office these days feel like a co-working space, in the situation where your company might maintain physical locations but one’s team is distributed across the world?
> you are supposed to accept and there is no "continue without giving these permissions" so its an "either you continue or go back and dont use" thing

I can't remember the site that does/did this, but there was some site that wanted you to log in with OAuth2 through some identity provider and they initially ask for access to your contacts. If you click 'cancel', it sends you back through the OAuth2 flow but without the "read contacts" scope. Sketchy dark pattern BS.
Comfi is a BNPL for B2B SaaS vendors.

Comfi integrates in your sales processes to help you sell more annual contracts by providing your customers with payment flexibility and access to annual discounts, while you get paid upfront.

Your customers sign up for annual, but pay monthly. You, as a vendor, get the whole some upfront.

Comfi takes the risks and collects from customers.
The Tandy Zoomer – The x86 PDA Before the Palm Pilot
Shady software does shady stuff. Very surprising.
It is really hard to keep up.

I often have to Google for definition when I read code. Inevitably someone uses the latest feature.
Because if it's not being malicious it might want to let the user star things in a non-farming way.

Is that not obvious? It's not a "farm stars" permission.
It probably wasn’t actually a standard “sign in with GitHub”, minimal SSO flow, it was likely an OAuth2 authorization code flow, where OP granted them explicit access to do things like star repos. Like, the button on the nopecha site may have said “sign in with GitHub”, but it actually kicked off and authorization code flow with GitHub, where you’re granting nopecha access to do GH things on your behalf. And OP just didn’t read things carefully enough, clicked through without looking.

This is a dead giveaway:

> i logged in, clicked through a bunch of pages because its the same drill everytime

For SSO, “login with GitHub” type flows, there’s no “clicking through a bunch of pages” post sign-in - you aren’t granting them access to your GH account, you’re just letting GH tell the site “yup, this is person X”. What OP describes sounds like explicitly granting a 3rd party access to your GitHub account, and OP was just being sloppy - I’d strongly bet the pages said things like “do you want to grant nopecha access to star repos on your behalf”, and OP clicked “yes”. If there’s any lesson here, it’s to read things more carefully, and not just freely give out access to your accounts to sketchy websites.
This is an excellent way to preserve classic machines. There are lots of projects out there for new PCBs, new accelerators, new replacements for Amiga custom chips and so on, just as there are new updates to AmigaDOS (up to 3.2.1, which was released last year). For example:

https://github.com/endofexclusive/deniser

https://github.com/LIV2/Bluster

https://github.com/jbilander/ReAgnus

https://www.tindie.com/products/bobsbits/a500-amiga-500-repl...

https://github.com/terriblefire

Add the PiStorm, and you've got multiple ways to keep old hardware running while enjoying advantages of new hardware.

Lots of people are too young to remember using Amigas, but any programmer of modern systems could learn lots from seeing firsthand how incredibly efficient Amigas are.
I think the issue is not that this feature exists, but that it was abused to silence criticisms primarily from the right, while at the same time twitter denied this.
I think we'll get there eventually, like how on iphone/android you can deny individual "scopes" these days. It took a long time and there were some growing pains, but now I have little worry about some sketchy app slurping all my photos from my phone.
> What happens if my devices are gone? You follow whatever recovery procedures the service has, just like if you forgot your password

Are you sure? If so, why? Passkeys are advertised as a replacement for username + password + 2FA. Current practices generally allow for a password to be reset via email, but not MFA, as half the point of MFA is to protect against password resets. So the reset process for a passkey can’t be the same as a password otherwise you don’t have “real” MFA.

I feel that account recovery is either going to get a lot harder (eg KYC for what would have been previously been an email), or services will enforce additional data collection (eg phone number) to aid recovery. Neither of these are good.
Malaysians commuting across the bridge make up about 10% of Singapore's workforce - huge, to be sure, but nowhere near the ratio seen in Monaco.
Except that, humanoid robot does it more "analog" way.
> I think that comparative advantage here is a real and important

It is.

But so are transaction costs, and all handoffs have them.
5. TruthSocial does it too
> oversampling, but oversampling of what exactly?

If you have 3 million pixels of sky, and 3 variables to find, then you have oversampled by 1 million times.

In the ideal noise-free world with no other unknowns, any 3 of those pixels would be enough to solve the problem perfectly.
Will be interesting to see your future insights.

There are plenty of open source projects from successful companies, but it's never their core IP.

Fully open source business models seem to be rare and tend to be consulting services or alike. That's at least my observation so far.
If the political bias you’re seeing is “far-left” then you’re very far to the right. Advertisers don’t want to advertise on a website that is being used to direct hate and violence towards the LGBTQ+ community, advertisers are the main source of revenue for Twitter, thus content directing hate and violence towards the LGBTQ+ community are moderated. Similar arguments could be made for other ways in which Twitter was moderating their content. Those are decisions to boost revenue and to make Twitter a safer place for people to hang out, I don’t see how those are “far left” biased decisions. If employees were pushing a “far left” agenda I’d expect to see every conservative shadow banned, instead conservatives were protected (ex. Libs of TikTok not being kicked off). Last year Twitter even admitted to boosting conservative content in order to try to appease conservatives claiming a bias [0]. Im sorry but I just don’t see anything that proves there was a “systemic far left political bias” at Twitter. If anything I’m seeing a far-right systemic bias growing at Twitter with Elon at the helm.

[0] - https://amp.theguardian.com/technology/2021/oct/22/twitter-a...
Ah, Digitiser, I used to read you every day. Occasionally Teletext would do multiple choice adventures, complete with ASCII art. And very little in the modern world can capture the excitement and terror of waiting for the football scores to turn the page and show if there was a new score in the Everton game.
GameStop's NFT Marketplace uses IPFS: https://nft.gamestop.com/

For example see https://lexplorer.io/nfts/0xdcf8ff6b4de163873066118a8eeec9e6...

- MetaData URL ipfs://QmbpB8hWvDuvtyHRDPQSMwg4EGr8AqbKH1Vq3eNknZew9p

- Image URL ipfs://QmNq8T2e4DGiDuyHEgBM9WEpfUTE8TFuXAkTWVVQ8vbFc5

- Animation URL ipfs://QmYBdBXzCXoYyr1vKPQJGKbb97P2ypPpA5jAL9emiB6EcE

Also, GameStop has a domain configured a node to access IPFS as well to appear on Web2 (but unfortunately the www subdomain prefix is required and the domain is not configured to work without it)

- https://www.gstop-content.com/ipfs/QmbpB8hWvDuvtyHRDPQSMwg4E...

- https://www.gstop-content.com/ipfs/QmNq8T2e4DGiDuyHEgBM9WEpf...

- https://www.gstop-content.com/ipfs/QmYBdBXzCXoYyr1vKPQJGKbb9...
I don't like the term misinformation. I don't think Twitter should have restricted his tweets. However, it's important to remember Bhattacharya was wrong.

In the op-ed posted above he guessed that the predicted death toll of 2-4 million people was off by multiple orders of magnitude. He said that dramatic interventions like lockdowns would be justified to prevent that kind of death toll, but that COVID was nowhere near that deadly.

So far COVID has killed about a million Americans. So by the logic he lays out in that op-ed his policy proposals were wrong.
I had a very similar experience except it was a 1st gen MS surface book packaged in a 2nd box. They look nearly identical.
Spent months getting gaslighted by Amazon support.
My coworker who'd previously worked at Amazon Fulfillment suggested I email jeff@amazon.com directly. The case was picked up by a higher-level CS rep and they reversed the charges. No apology or concessions for the horrible experience otherwise. I truly hate this company.
Tech companies fueled the rise of Homeland Security and domestic surveillance [pdf]
> If you're ever manually calling `.release()` then that indicates a place where the smart pointer abstraction has broken down. You want to minimize or eliminate that.

Yes, that's life when you're at the boundary with a C API.

> I can't recall ever seeing a C API that conditionally deallocates the pointer passed in. Do you have an example?

realloc()?

Generally when you have an in-out parameter, it's doing more than just releasing resources, so there's a potential for failure. And in the failure case, the caller will often retain ownership of any pointers it passed. In fact, off the top of my head, I can only think of one function that is contrary to this, and that is DeferWindowPos() in Windows, which invalidates the input handle even on failure.
My app is serving thousands of concurrent users with tables of billions of rows with postgres powered by just 4 CPUs and 20GB RAM.
Permission overload exist specially when you are allowing users to sign up to third party sites with your platform credentials.

Any platform that offer easy to use API, openID or integration service should be concious about what they consider to be a vulnerable and what can be easily exploited. The amount of meaningless authorization buttons we have to press is astounding and it should be considered by all platforms. This argument doesn't advocate for strict integration control and disabling their OpenID features.

Any system that chalks up massive amount hassle to people only due to "human error" is poorly designed.
Musk says wise to avoid margin loans during macroeconomic risks
I use KeePassXC specifically so that I can publish my encrypted database to the open Internet and access it anywhere, from any platform.
Fire rages through shopping mall in Moscow suburbs
Try the meow or kakoune package ... or even just god-mode.
It's the predictable consequence of the things built. I don't think you can absolve yourself of responsibility for how your work is used just because you didn't realize that companies exist to make money.
Is Strong Towns an unbiased source? I mean, would they ever publish an article that runs counter to their policy position?

I’d assume one needs a bit broader set of data than that that comes from a clearly anti-suburb position.

It’s like only looking at NRA sources on the need for gun control.
It is. Even if it was exactly the same amount of CO2 (it’s not) it would eliminate much of the air pollution where people actually live. It gives you an handful of places to apply additional carbon capture versus trying to address it individually across millions of vehicles. And the grid is getting more and more renewables added to it every year so the coal that is used to power these vehicles is shrinking all the time.
I don't see what benefits a passkey has over using a password+TOPT/HOTP 2 factor. It seems like this is trying to solve a problem that has been becoming less significant over the years as more and more people use 2 factor properly and websites properly salt passwords. The current marketing doesn't properly show the need for this. I am not worried about a single password compromise because I don't reuse passwords and there is no risk my non-sms 2FA being compromised.

It seem more like how I have to enroll my device to Duo if I want to use it for 2 factor to log in and Duo using a proprietary implementation locking me into their software. As it stands, despite this being an open standard, Google has made it clear it has no plans to add support to linux for "Local user verification" or "Passkey sync".

The idea that Google will one day push users to only use passkeys and phase out passwords isn't unfounded. It's clear that Google would be motivated to make such a push. The reason people are concerned is because using Google ties the passkey to your Google login. From what I recall, Google also used a proprietary method to generator TOTP/HOTP making it impossible to use third party authenticators to log in to Google. Google Authenticator is open sourced but hasn't been updated in over 2 years. I believe Aegis supports Google Accounts so it can be used instead of Authenticator.

I understand this from the more basic SSH authentication using a generated public/private key. I am also aware of Yubikeys, which are also open, but I have chosen to continue using passwords because I want complete control over my private keys.

This is informed and healthy concern for a new implementation of security protocols.
MEGA Family Shopping Centre:

https://en.m.wikipedia.org/wiki/2022_Russian_mystery_fires
Twitter's visibility filtering wasn't based on "Your" User Behavior. It was based on what their moderation team decided to filter or not filter.
Is soy the natural prey of cows, pigs, and sheep or do they eat other things if left to their own devices?
Same experience. People universally hate ads, yet they're not too keen on blocking them. I'd be curious to learn why.
Kind of sad to see PostScript slowly fade away these days. My Mac won’t even open .ps files anymore! The entire graphics stack was designed around it and they removed viewer support for it…
I think there is a difference between asking someone to reduce their social interaction and forcing them to reduce their social interaction
There is none but the general process is

1. Look for interesting results in Midjourney gallery

2. Use a similar prompt

3. Pick 5-10 interest results and build a collection

4. Upload said collection on Etsy (using placeit mockups) and offer hand made painting + print on demande

5. If I make a sale using POD there isn't much to do on my part

6. If I made a handmade sale, I ask a local painter in Phuket to reproduce my Midjourney image and sell it with ~300% profit (this greatly help because I can them remove the AI defects or take custom orders if needed)

7. I also use "Waalaxy" to do Cold Outreach of Linkedin (I target hotel/condo manager or people responsible for purchasing).

I have been doing this for a few months, got two leads, sold 60 artworks for a newly built high end condo.

This resulted in roughly 65 * 200 = 13000$
I think it's kind of two sides of the same coin. Of course google didn't exclusively use their increased control over the web for strictly evil purposes, but it's more about whether someone who has a vested interest should be the one controlling browsers. It's kind of like a manufacturer being in charge over the safety regulations of their own factories. Sure, you can argue that they might know better than anyone what needs to be regulated, and might regulate things for the better where other manufacturers are worse than them, but there's also a huge conflict of interest built into the scenario.

Of course chrome was an improvement over browsers at the time, it's hard to dispute that, but that doesn't really mean that googles intentions were pure. Or that it wasn't a strategic move to place themselves into a position of having a grip on a central piece of internet infrastructure.

If a wal mart shows up in your town and drives all the smaller stores out of business you can also argue that they might have genuinely lower prices and a wider selection, but that's also just part of a larger strategy to assume dominance.
Having lived in Somerville I’m going to disagree on the “without noise”.

Sure it’s not like living next to Times Square but it’s far noisier than a neighborhood of single family homes.
Problem with C++ is that it's easy to add stuff, and super hard to get it out of the language again. Inevitably leads to bloat and an accumulation of wrong decisions.
It’s interesting that nobody is talking about King, candy crush is a license print money.
The amount of work varies because there are many different design decisions you can make.

We have been working on this (Nx + Axon + Livebook + Bumblebee) for almost 2 years. One person full-time (part-time for the first year) and 3 part-time. But we have taken a foundational approach: instead of providing bindings to high-level libraries, we choose to build the whole foundation in Elixir and only leverage 3rd-party libraries at the compiler level. It looks like this:

|-----------|
| Bumblebee | pre-defined models
|-----------|
| Axon | NN library
|-----------|
| Nx | tensor library
|-----------|
| Compilers |
|-----------|

Everything is done in Elixir, except for the (pluggable) Compilers layer, which can be written in anything. The ones we use by default are from Google/Facebook and are written in C++.

This design gives us agency and resiliency: we have control over how to evolve the whole stack and we can swap between different compilers depending how state of the art evolves. We are more expressive too, as we are not limited by design decisions done in libraries written in a separate language.

But you can skip ahead provide direct bindings to libraries such as torch + torch.nn. This will cut corners but also will officially tie you to a Python library.

However it is important to notice that embedding a neural network model inside your Phoenix app, as done in the video, is only really practical in a language that can fully leverage concurrency and effectively run both CPU/IO workflows in the same OS process. I am not following the progress of concurrent Ruby but my rough understanding is that it is not there. So in practice you would need to deploy your machine learning models to a separate service anyway.

I hope this helps!
Guys guys, hear me out. What if we took a nuke and instead of exploding it outside, explode it inside and capture the energy into electricity.