skysight-inc/HackerNews huggingface dataset:
Do not worry. You are self taught by others through their work.

Everything we use is made by someone else, you just trained yourself because you could not find a mentor, so you found many.

Good luck.
This is a really nice study! It is very cool that they were able to get professional programmers to participate, this is something that is really hard to set up as an academic team. And yes, 47 participants is a small number, but apparently sufficient in this case to detect the effect (as evidenced by the p-values). It also lines up nicely with work we did last year, which looked at the security of Copilot's completions without any humans in the loop [1] and found that something like 40% of its completions in security sensitive scenarios were vulnerable.

One thing I'm not sure of is how well the setup reflects how people actually use IDE-integrated tools like Copilot. In the experiment, users had to explicitly ask the assistant for answers rather than getting them as inline completions (see Figure 7(b) in the appendix). I don't know if this would change the results; I could see it going either way (inline completions appear automatically so might be accepted automatically, but on the other hand programmers are also used to inline completions being incorrect and might be more likely to reject or repair them). It also means that it was up to the individual user to figure out how to prompt the AI, so the results will depend a lot on how users chose to phrase their prompt and how much context they provided.

As full disclosure, I'm one of the authors on a very similar study [2] that didn't find any large effects on security :) The main differences were:

- We only looked at C, rather than multiple languages. C is notoriously hard to write secure code in, so the base rate of vulnerabilities is likely to be higher. It's worth noting that the Stanford study also didn't find a statistically significant difference in security for C.

- Our study environment was designed to mimic Copilot much more closely – so we had participants use VSCode with a plugin providing inline completions from OpenAI's Codex API. This is also why we used the Cushman rather than the DaVinci model: Cushman's latency is much lower, which is important for realtime use; it looks like GitHub made the same decision, since reverse engineering of the Copilot plugin indicates it also uses Cushman [3].

- We had participants try to code up a full library with 11 different functions, rather than doing a bunch of smaller independent tasks. This means that the AI model had more context to work with, and may have affected how users approached the problem.

- We unfortunately only managed to get undergraduate and graduate students as participants, so the base and experience skill level of our user population may have been lower.

Overall I think it's clear that these models are prone to spitting out insecure code right now, and this is an important problem to fix (and one we're working on)! But it's still not clear to me what effect this actually has on the security of code written by programmers using tools like Copilot, and more research is needed to figure that out.

[1] https://arxiv.org/abs/2108.09293

[2] https://arxiv.org/abs/2208.09727

[3] https://thakkarparth007.github.io/copilot-explorer/posts/cop...
I second your comments!
Yep I don’t know what’s going on here. OP posted another reply with the time they added their keys and they aren't recent.
That's what kexi was supposed to be. https://kexi-project.org/

I tracked it for a long time, just was never able to make it fit my needs
I see, so you're saying that it's good that Google does the first part, but needs to add the second part. Awareness that Google does the first part wasn't clear from the comment.
Covid-19 surge raises odds of new coronavirus mutant
I'd like to see you try to send a 10 GB file to every human on the planet through Cloudflare.
Having read several articles and comment threads about the ChatGPT research preview, the general trend seems to criticize its accuracy. I don't see how it even matters.

Traditional internet search engines are biased towards the truth. Search for lies on any given topic and you will find a page telling you about the real truth. Rarely an obvious disclaimer about truthfulness or accuracy of the content.

This language model on the other hand seems doesn't even claim to know the truth. Without asking, it will go out of its way to tell you that it might be wrong for an arsenal of reasons.

With such an ever-present caveat, humility, ChatGPT is what I would call human friendly and what google & co should've been. A search engine acting in the inquirers best interests. Not only sharing knowledge but most importantly - perspective.

I am personally looking forward to a future where this and similar models are readily available to non-technocrats. I imagine using this instead of google for general knowledge would reduce radicalization on any axis and generally broaden empathy.
> This references the "fuzzing" infrastructure hosted by the Reproducible Builds project, and doesn't show "true" reproduction of binaries. It's designed to help us figure out where impurites occur in builds.

I think the "fuzzing" approach is actually the correct one. The fact that build systems are static does not improve reproducibility on its own, as the idea is that the packages could be built on different systems and result in the same binaries. If I built some Arch PKGBUILDs from the official community repo, I should still get the same binary, despite the fact that my machine has a different setup from the Arch project's own infra.
I suggest TIS-100 to learn coding again and to make it more fun. Coding is a lot of fun, and the language in that game is great.

https://www.zachtronics.com/tis-100/
Whenever I see that rare consumer-protection or worker-protection law get passed in the US, I'm always amazed at how timid and gentle on corporations the law ends up being. I know I shouldn't be amazed but I still am. I read the bullet point list in the article and think "Wait, don't companies already have to do these sensible things?" When it comes to protecting the investor class, you get giant sledgehammers like SOX. When it comes to protecting the little people, they put on the kid gloves legislation and give the company a popsicle if they at least try to follow the law.
Perhaps we are speaking about different concepts. I was referring to the pace layered architecture.
Strange how this kind of discussion is now considered “okay” to have. I was attacked for trying to have it in 2020, 2021, and most of 2022 but it seems like 2023 is the year that people will wake up. Too little, too late. The media, especially those that seem to have people’s trust like the NYT played a disgusting role in normalizing the marginalization of the unvaccinated.
They probably asked you for your phone number at the same time....
They should but then they started hodling as the price dropped, putting them in a bind that is leading to bankruptcy.
I frequently click through random people's repos when they interact with the ones I'm interested in. I see lots of students who are apparently required to do their homework on github. Which is good! But if that's what's feeding the beast... woof.
This and the newsfeed not being chronological, or the option to have it chronological being hidden from the user (that’s one of the most recurring question and feature request that internal employees ask, how crazy is that). IMO facebook could really change by creating a subscription and ensuring that people who subscribe are happy enough with the product to keep paying. I think that recenters the incentives towards building something for the user.

Another meta problem is that there seem to be no authoritative product person that can force his/her vision on the product so you get hundreds of visions colliding and fighting for changes. IMO it’s much more valuable to have a coherent vision being enforced for the product, otherwise you get this frankenstein-like collection of apps.

Finally, the fact that HN is such a hater of facebook means that most fb engineers have deserted HN and they’re not reading the excellent ideas and feedback that this community sometimes provide. It’s a shame, because I still completely believe in Facebook as a good product for the world.
I like this log used to protect the border:

https://www.google.com/maps/@45.0108844,-73.3349375,3a,75y,1...
And how does the probability of getting diagnosed with Covid change if you get the AstraZeneca COVID‑19 vaccine?
I lack the passion to be anything. Identity's for losers.

Cultivate the passion to do cool shit, and just do it. No need for titles.
full title == China’s COVID-19 surge raises odds of new coronavirus mutant

decide to keep name of nation out of publicly viewable title of submission.
should the title be edited? or is this idea good for these particular circumstance?
I think the goal with such programmes is to encourage a significant proportion of similar institutions to follow suit. I could see the Illinois Mathematics and Science Academy (which is similar to TJ) adopting this protocol, even though it’s an anathema to the school’s historical practices and objectives.
It seems like ChatGPT-like solution can supplement and assist the user in searching the Web not completely replace the search engine itself(at least not for now).
Remember that the human genome project was started in in 1990, completed in 2003. In 2003 it took a year to sequence 80% of the human genome, now it takes a day to do 98%. In 1990 they had the understanding on how to sequence DNA, but scaling that across whole human genome seemed like monumental task.

I'm guessing in a decade we'll have a viable early stage industrial process, and in 2 decades we have commissioned fusion reactors.

If we don't kill the planet with nuclear war or the climate crisis.
> 1) by telling the truth about how much it's going to cost to do, and 2) by asking for evidence that the idea will pay back the effort required.

You are making 2 hardest questions sound easy.

1. Sometimes you need to seed optimism to get buy in and sponsorship, even though it might cost higher.

2. Not everything pays back in short term. Of course product team might care about 10% increase in revenue in short term, but 10x idea might disrupt them. That's the reason Blockbuster lost to Netflix, Rackspace lost to AWS
SWE Reflects on Musk
If a set is countable, then there exists a mapping which is a one-to-one correspondence between the items and the natural numbers (that’s the definition of countable). This correspondence would always allow you to determine the “next” item (by converting to a natural, incrementing, then converting back). However there could be multiple mappings (sorted differently, for instance) and so it’s more specifically, whether it’s possible to have a next function.

In other words, there can be multiple next functions, but a set is countable iff there is at least one of them.
So in other words, for what this costs, you can get an apartment pretty much any place you want and/or AirBnB or VRBO etc. around the world for what to me at least would be a far more interesting experience.
I did not get asked for a phone number or use SMS 2FA during this process.
To be honest, once I saw the direct allusions to Elon Musk in the build up of the film I thought... oh this is going to be annoying. When the conclusion of the film was "Hey! You know that guy! You know how he seems really stupid but everyone asserts he's a genius? Well guess what! He's a fucking idiot!"... well, I had a strong suspicion how a certain segment of people would react to this movie.

> Thematically, Glass Onion is showing how terrible people gain power.

I don't think that assertion is even close to correct. In fact, I think you have to work pretty hard to avoid seeing the actual theme. It's called Glass Onion for gods' sakes. It's not about terrible people. It's about appearances! It's about seeing people for what they are! It's called Glass Onion. What happens when you peel back the layers of a glass onion? It looks exactly the same. I don't know how to explain how much more obvious the theme was meant to be other than continually repeating the name of the movie... Look, read the name of the movie, that's the theme.

I think trying to get ou the rule book for this movie and scoring it is an unsatisfying prospect, because it doesn't play by those rules, so it doesn't care.
I've lived on St. Josephs Island, Canada for a couple of years. The biggest downside for me was how much time was spent shoveling snow every year, if I were to do something like that ever again I'd do it in a place where the climate does not eat up half your time or so.

As for being 'not the hang out with people' type, beware: your family may be on board with it now, but it looks like you might be the one in their element, and they may not be after a while. And that can get quite tricky, especially for kids when they get a bit older.

Also: go take as advanced a first aid course as you can afford. You don't need to be able to do brain surgery but it helps if you know how to set a broken bone and do a lot of other common things because the nearest ER may well be too far away to be useful.

Other downsides: hauling groceries across any distance requires careful planning, especially if you only plan on doing this once a month or even less frequent, during the Canadian winters we sometimes did for three weeks or longer without free groceries and that can really work against you in many ways so plan your diet well and well in advance to make sure you get enough of everything that your body requires to stay healthy.

For energy I used solar panels (2x8 on trackers, though I would just install them fixed if I did that again) and a small home brew windmill. Between those we very rarely had to back that up with a small generator.

Fresh water came from a well, but it was rather high in sulfur content and that made it smell quite bad, this you may well end up missing as well, clean tapwater is a luxury that you only really come to appreciate when you don't have it.
I think burnout happens when you feel frustrated that your effort is not having an impact. At least that's been my experience.
It is normal for people to change opinions about something after experiencing it - in both ways. Some things look and sound bad ... until you tried it. And other things look and sound great ... until you tried it.
China and Taiwan tensions continue to rise, exacerbating chip supply problems.
I thought that at least the kernel philosophy was the exact opposite? The “never break userland” motto?
Tangent: Instagram managed to lock me out of their service for a week or so a couple of days ago. My browser was signed in into my account, but I have not used it for like a month.

Got logged out.
I log back in (using 2FA btw).
"Please give us your phone number so we can verify it's you"
I enter my phone number. I don't really get the point of this because they did not have my number before, so what are they actually verifying here? Anyway, I trust Facebook with my phone number lol.
I get a code, I enter it.
"Your account activity is suspicious and we will limit your account for a bit"
That was it. No redirect, no link to click, nothing.
So I go back to instagram[.]com and have to do the same thing again?

Well maybe my browser is on a block list now or sth. So I go to my phone (where I was signed in).
And the App is broken completely, looks like the session was invalidated.

I log out, log back in, do 2FA, enter the code again.
Same result.

I checked back in a couple of days ago and it seems like I have access again.

It is unfathomable how this can happen.
How can the front gate to your multi billion service just not work to the point where you DOS yourself?

Also this account has 0 images, and just a couple of followers, so there is literally nothing to protect.

In moments like these you really start to notice the missing communication channels to the big tech companies. Is there any other industry that has zero customer support?
Will Amazon 3P sellers be subjected to this? It will be interesting to see how many of the made up brands like HORDUSY and ASCALFT are backed by the same parties.
Weird nitpick. There are almost no GUI toolkits that run everywhere, including embedded systems (i.e. microcontrollers). The only one I know of is Slint.
> How big are FB video games today? Zynga was purchased for $12.7B when Take-Two's market cap was ~$20B without really impacting Take-Two's market cap meaning that Take-Two purchased a company for $12.7B that the market valued at ~$0 (generously if we assume the following peak of $28B was the acquisition, then the market valued it at ~4B).

I'm not sure that's correct.

If a company worth $10B pays $1B in cash to purchase a gold bar that's worth $1B, it's market cap should not change. That doesn't mean that the gold bar is worthless!

Likewise, if a company worth $10B pays $1B in cash to purchase a company that's worth $1B... It's market cap should not change, either!

The only situation in which the market cap should change is if the purchase unlocks some kind of new synergy between the two companies, that wasn't present when they were separate entities (Or if the shareholders think that the management of the buying company has gone insane.) But that still has zero bearing on the 'market value' of the acquired company.
The Hacker News Holiday Fund
I was curious what they meant by unary: they are representing numbers as serial bitstreams rather than parallel registers.
For me, the decline in notification quality started with the rise of FarmVille.
If you want stable binary compatibility, use distro that focuses on that (Suse, Redhat). Not some joke build around opensource idea and communism!
Google generally does stuff like that when they believe somebody else had access to your account and made changes. This sometimes involves the attacker enrolling for (their own) 2FA or changing recovery methods to lock you out. So, the action of removing 2FA is in itself not unreasonable.

It's possible that their logic has some sort of a bug, especially if it only happens when you visit a specific service - and in that case, getting on HN might be the best way to get it looked at by a human... but also make sure you don't have any other issues going on.
> But I'll do so only when it's the simplest and most maintainable solution to the problem, and not because I want to be the greatest of programmers in my or other people's eyes.

The problem I run into is the simplest and easiest modification, the yagni for any one ticket, if sufficiently small seems to be a great algorithm to find local maximas in the design.

But if you keep with good design principles from ticket to ticket the end result is better.
It doesn't have to be like that. I've done it on 6 acres on the edge of a town, 3 minutes from groceries, all my kids walked to school. You also don't have to do livestock - you can just grow plants. "Homesteading" does not have to be "farm life". There are huge middle grounds.

That being said, no matter where you land, it will be work. Probably more than people think. The weather will dictate what you do. And for the first couple years as you build skills, tools, and infrastructure, your "free" food will be the most expensive food you've ever had.
Is the LiveView reference referring to integration with Elixir's LiveView or is it just a poorly chosen name for some Rust thing?

On desktop, does it support multiple windows? I can't find any information. I'm generally not a fan of multi-target UI platforms, as desktop is almost always de-prioritized compared to mobile and web.
I don't know, while this account is old and fairly infrequently used I normally have it in the google account switcher dropdown logged in rather than completely logged out.
The RAM doesn't even need to be doctored:
https://www.zdnet.com/article/academics-turn-ram-into-wifi-c...
Maybe for once someone should tell the story of how Windows 3.1 went the extra mile to ensure incompatibility to the extent of getting an antitrust settlement enforced.
I sent you a message on keybase. Happy to contribute as well.
Indeed. It think a lot of people romanticize this sort of thing without actually looking at it clearly. But props to the OP for at least asking.
Anger Affects the Body
Well, yeah. That should have been required years ago. In general, you're not allowed to run an anonymous business. Arguably, it already was in the EU, under the European Electronic Commerce Act.

If Amazon doesn't like this, they can be the seller themselves, and take responsibility for product liability. They've fought that in court. They lost in Pennsylvania, appealed, and then paid off the plaintiff to avoid an adverse decision on the record.[1]

[1] https://news.bloomberglaw.com/product-liability-and-toxics-l...
> Stupid ideas often take the form of "let's spend six months of the team's time on this thing that only 3 people in world will care about".

This is obviously stupid, my gut feeling says OP wanted to say totally different type of stupidity, because your example not only stupid thing, but complete incompetence of how products are delivered, unless those 3 people are willing to pay 30B$ each.
Building convenient public transport is doable. It does not requires new technology either.
Had a desire to watch Soylent Green a few months ago. Imagine my surprise when the opening credits showed people wearing masks, and that it was set in 2022...
> which grants me 4 free years of tuition at any public university in the country

I would consider using it. That would put you around a lot of people on a regular basis that are younger than you that can learn from your experience. More connections is a good thing. You don't really know your co-workers. That is why they are great but they ARENT KEEPING YOU HAPPY.

If you have enough resources to survive, I suggest going back to university.
My perspective is that if an app is not directly using a platform’s APIs, it is not native to that platform. Feel free to explain to me and others how this take is wrong and how something written in XML could be a native app on, say, iOS.
Crashing is "not the problem" because crashing prevents the far worse problem of incorrect data or operation that you don't know is incorrect.

The difference in significance is so great that by comparison a mere crash is no problem at all.

In fact you design systems with hair triggers to 'crash' on purpose as readily as possible. Trying desperately to crash at all times every millisecond all day every day.

IE, halting all operation of some subsystem, or the whole thing, the second a single bit wrong is detected. Better to kill the hd or the entire machine than let it keep running one second after getting any hint it might not be 100% trustworthy.

'crash' in quotes because really all you want to do is halt, and you're doing it on purpose, but that is still a crash, in the sense that your application does not want to halt and it isn't necessarily halted gracefully with any chance to conclude anything or save anything. Those are just more operations you can no longer trust to be correct, and so should not be allowed to do.
> Why on earth would you sabotage the electrical grid to disrupt LGBT events?

Someone probably thought the gays had too much power.

ba-dum.
Removing security keys that have been registered for years is very unlikely to be the right move even if my device has been compromised, as they are one of the most reliable ways I could prove I am the original account owner at some later point.

If the message had stated "We have removed recently added security keys" I would be a lot more understanding!
Why is anything based on Win32 not native on Windows? As far as I know, it's the only way to create a window on Windows.
“Discord” would like to receive keystrokes from any application