skysight-inc/HackerNews huggingface dataset:
It can’t do haikus. It very confidently puts them together with wrong syllable counts over and over even though you correct it many times. Then you ask it why it is so bad at counting syllables and it gives a great answer about how it is trained by text and that it doesn’t hear the words so it is hard to count syllables. But it doesn’t explain this when it is putting the haikus together or when you correct it over and over. It is humble when you directly challenge it, but it needs to be more transparent when it is feeding you garbage.
> One thing that I find make CMake configurations completely unreadable is to try to have it do everything, coffee included.

and to me, build procedures that aren't completely implemented in cmake but require to install who knows what shell / platform / language / etc... in addition are the bane of my life as they make everything harder and more brittle and less cross-platform.
I definitely do this if I have a layover with a long wait or have checked luggage anyways. Why would you add 10-20 min extra wait after landing to not pull a stroller for a few Min?
Users with most karma are always available on the leaders list: https://news.ycombinator.com/leaders
either two possibilities:

1. password was somehow left in plain text

2. there was a problem with the encryption implementation by LastPass. likely this is the reason.

this is why you always encrypt crypto stuff with offline computer using well-vetted tools like VeraCrypt or openssl, and not rely on cloud storage encryption. Only you can do your encryption. relying on others doomed to fail eventually.
Amazon Looks to Sell Excess Air Cargo Space as Demand Cools
Thanks for the pointers, appreciate it very much.
That's not what he stated.
I really enjoy how a lot of the top posts on HN end up generating related posts. I dont know if this post was somewhat related to the “40 years of PC Mag” post or not but to me it seems related.

Anyway thanks for sharing.
It depends a ton on where and when. I had "The State of New York" as a client once, which required commuting from Maryland to Annapolis and staying for the week. It's about a 5 hour drive, vs a 1.5 hour flight, which seems like a slam dunk, but considering that the airport is a half hour away, and I had to arrive there an hour early for TSA, ride in a cramped plane with not enough leg room, then rent a car on the other end and drive a half an hour to the hotel, it was down to traffic to determine which method was faster re: total travel time.

I found the drive more relaxing, more comfortable, and since I'd need a car at the destination anyway, just about the same degree of practicality.

I basically determined then that 6 hours away was probably my breakeven point at which flying became obviously more practical, but even then it depends on the target airport, traffic, weather, etc.

I certainly don't blink at the prospect of flying from Maryland to San Francisco, and would almost never consider driving instead, but IMO it's hard to fault someone valuing their rights over their time that it downweights flying significantly more than it does in my rankings.

I should probably also factor in that our location affords us a great variety of places we can go by train, and anywhere obviously train-accessible usually makes that a strong option. New York makes almost zero sense to drive to, and while the big knock against trains are the cost, it works out when you consider the cost of parking in New York, and the convenience of showing up at the train station 5 minutes prior to departure.
Although LastPass had a pretty lousy UX for years and years.
Indeed fully receptive to this argument.
Thank you for your feedback! Could you elaborate on what you mean by "projecting" the poster onto a mini planetarium? We're curious to learn more and see if there's something we can do to enhance the experience for you and other users. Thanks again for your suggestion!
I use PCalc regularly; on both my Mac, and my i-devices.

I wouldn’t say I’m “excited” about it, but it’s an invaluable tool.

I’ve probably been using it for most of its life.

Same with BBEdit, which is of a similar vintage.
What seems to link a lot of these cases is that the pilots tell the plane to do something and the plane decides it knows better. Throw up all the warning you want, but a computer shouldn't be able to override the pilot's decisions.
AES CBC not broken, but it's likely LastPass implementation of AES was bad , such as bad RNG or other possible problems.
Or typing your password in! Keyloggers…
I often wonder how we might estimate how much of the surplus created by economic growth and technology has been hoovered up by “alarp” in its many forms. I’m scared of the answer, and of the people who wouldn’t see a problem with it.
No, we shouldn’t.
I’m not convinced that every American who wants to should be permitted to stream their location to a Chinese company. I can see arguments either way, but the national security consideration seems to be quite real.
If you research cults this is what happens.
There are feedback mechanisms here which shift where people live and work in response to changes in transportation times. Which means you can’t simply extrapolate like that over time.
Surely ChatGPT will be subject to the same issues that Google is.

* Right now, ChatGPT has a disclaimer that it doesn't know much about the world since 2021. This implies much of its training set excludes recent data.

* ChatGPT is brand new. Nobody has had a chance to reverse engineer it or game it.

* Most "search" is relatively simple queries. There's only so much you can do to differential a bunch of sites that offer the exact same facts.

I suspect, ChatGPT will reduce latency in its training data and people will figure out how to rank well against the algorithm. Then, it will be no different than just another search engine.
I'm not sure that this is true. There's two obvious ways that an IT department can measure this.

1) They can see people attacking the system. We can even often see what these people are attempting to do! A lot of security research is focused on this, figuring out what attackers are trying to do.

2) We have post hoc analysis. We can see lots of attacks and then provide an intervention and see if those decrease. Since terrorist attacks were black swan events you're right that we can't really measure the effect of TSA, but then again, do we need to address black swan events? At least we need to compare the costs and it is pretty clear that the yearly number of increased deaths due to driving alone is higher than the number of deaths from decades of terrorist attacks and hijackings.

I'd say we have pretty good data in both cases to make fairly reasonable conclusions about how effective these interventions are. There's a reason very few people question the need for an IT department. The ones that do don't question it for long after attempting to run without them.
This can be said of most actor systems. Using actors is a fundamentally different way of programming than non-actor-based multi-threaded systems. You do have to change your paradigm; but, when I have, I've found the experience to be really wonderful.
Bitwarden, Keeper ($ but trusted at megacorps), and good ol' PasswordSafe are the safest solutions.

I run BW with Yubikey 2FA and a local hosted sync server.

KeePassX/C perhaps. Vault for secrets management.

Never touched LastPass, 1Password or any of these other mickey-mouse commercial apps that invariably claim "military-grade encryption" or "unhackable" when their fundamental constructions are crap.
So their stock is collapsing for no reason?
aka The Strategic Latent Diabetes Stockpile
Possibly not even 3 characters; 3 numbers.
Distorting a market isn’t always a bad thing.
Part 2 here : https://www.cs.williams.edu/~freund/cs326/ReasoningPart2.htm...

A short tutorial that is nice and succinct.
I've yet to figure out how it's reasonable for the government to deny us our fourth amendment rights and then lease them back to us for $78, but I suppose I'm equally shocked at how inexpensive it is to violate those rights such that they've managed to make $78 / 5 years somehow profitable?
Does anyone have a link to the actual bill that includes the TikTok reference? I’d love to see the exact phrasing used. Also it’s interesting that they singled out TikTok instead of a more general ban on Chinese or any non-US owned and operated services.

edit: Found it here: https://thehill.com/wp-content/uploads/sites/2/2022/12/JRQ12...

The TikTok section starts on page 2001. The actual content is a bit longwinded. The only mention of "TikTok" is in the title and in the definition of the term "covered application". The key phrase from the title: "DIVISION R — NO TIKTOK ON GOVERNMENT DEVICES"

It seems the to leave the door open for other federal offices to expand the the list of banned apps: "...shall develop standards and guidelines for executive agencies requiring the removal of any covered application from information technology."
China does a lot more to it’s citizens than curate their app stores.
Kind of funny, but the last guy who looked at me like I was an idiot for asking for a detailed list of what actions should be performed to "whitelist" something had never had to implement one himself.

Each agency, bureau, department, school, and institution would not just have to have IT people to implement the whitelists (eg- in mdm or by policy, which they may not already use), but get people to serve on committees to approve, build, and maintain the whitelists, create the processes to field and test all whitelisting requests, create a process exception request process, and coordinate with whatever external governing or regulatory bodies' lists to ensure compliance.

It wouldn't take long before the employees would just start using their personal devices and hotspots for everything to avoid the hassle, which would be so much worse.
Whew, I carried that tripod around when I was younger, it's a killer.
> (no equivalent of b_lto, default_libary, b_sanitize, etc.) so you have to learn about each project's non-standard equivalent options.

regarding this, I developped a wrapper for CMake a few years ago and never looked back: https://github.com/jcelerier/cninja
(Sorry, I turned around and made an edit, but not before you replied.) KeePass encrypts the entire database, all fields, as one giant blob. LastPass stores URLs and other fields as plaintext; these too can contain critically sensitive information. [Edit: (See I flagged it)] As far as know it wasn't LastPass's client that was compromised--it was their servers/data store.
tragedy of the commons…
A Paradox of Robust Bayesian Inference and Belief Functions [pdf] (2005)
I think it's kind of interesting that the most controversial thing about these bots and image generators so far is that they're immodest. It's like we created Frankenstein's monster and he repeatedly shows up to dinner without his pants on, and doesn't know what everyone's on about when they get upset.
Tether wasn’t always that big though.
https://archive.vn/8Ah5S
haha we might - but on the other hand, I haven't worked at a Haskell shop that hasn't used Nix in the last many years
Pentium 75 mhz was enough for the BeOS demo. It was almost like using QNX. I believe I tried BeOS on some 486'es too, but if I did not at least it screamed, and burned, as you said, even on a Pentium 75mhz. The only limitation of the 'demo' was that usable space was like locked into 512MB extendable user-space, if I'm not wrong. Please do correct me/this.
Indeed, the current iteration of ChatGPT can't access the internet, but a future iteration should be able to look up references from reliable sources and fact check itself.
And also QT Luong's site: https://www.largeformatphotography.info/
Look at the PinePhone, Pinebook Pro, and RockPro64. All have mainline support and you can run several distros on them. I consider them the gold standard in this space, although it's thanks largely to the community and not the actual company. Anything newer than RK3399 will probably take a few years to become very good, but I'm sure mainline support is in the cards so long as the device is popular enough and Pine64 can sell enough. (Their PineCube IP camera device was a failure in recent years)
postmarketOS also does a lot in this space. Their developers often help to improve support for everyone on a board.
well understood and badly implemented, which is the same as no encryption
> Banning products always distorts markets.

This truism doesn't really say anything. Things can distort more than one way. If China has distorted markets in its favor, you would certainly want to distort them back toward neutral or to your favor.

> If the US decides to distort markets for ideological reasons the CCP has already won.

Won what?
I've been self-hosting miniflux [0] for a couple years. Rock solid performance, deployment is easy, upgrades are small but meaningful, and doesn't use anything exotic in the tech stack (mainly Go, some vanilla JS, persists data in PostgreSQL).

I mainly browse on my laptop, but it's pretty decent on mobile.

[0]: https://github.com/miniflux/v2
WebAssembly has miniscule compute requirements compared to containers
The difference between a Google search page and ChatGPT is with Google, I can read the primary source. I can't find what ChatGPT is made of.
I hope not, life is precious no matter what someone has done. The bail conditions include mental health support so hopefully that will help.
Couple of linkedin data breaches should definitely put them on the nope list for government devices.
I know more and more people that are unwilling. But looks like 1Password is still unable to recognize this.
Anyone can make a crawler and index the data, Google without AI is far more than the sum of its parts.
n? What if last pass isn't using encryption as secure as they claimed? What if the attacker just gets really lucky and your password is in the first thousand bruteforce attempts?

This is why you always do your own encryption on offline computer using trusted tools like VeraCrypt . Relying on cloud storage to encrypt is doomed to fail eventually.
I get that this is a thing - isolating one specific app for very specific reasons. I am honestly surprised it's a thing though - shouldn't all unapproved apps be disallowed from government devices? Whether Instagram, TikTok, Facebook, Pornhub or whatever - unless you have specific reasons such as e.g. PR position, shouldn't all these be relegated to your private device?
> Brick-and-mortar retail’s indisputable edge over e-commerce is that consumers can get what they want immediately, and can touch and feel the product before buying it. Rising theft—and stores’ measures to prevent it—could dull that edge.

That has not been my experience at all. The number of times I went to a store only to find out that the thing I drove out to get is not in stock is high enough to make me pretty averse to the in-person retail experience.

The bookstore doesn't have the book I want, the shoe store doesn't have the shoe in the size and color I want, the computer store doesn't have the iPhone peripheral I want.

Unless I'm in a desperate situation, I'm better off waiting a couple of days and actually getting the item I would prefer, instead of torching a few hours for nothing.

Add theft on top of that, and I don't see how the physical retail market won't keep shrinking.
Why computers won’t make themselves smarter (2021)
> I do not like this math

Many policy difficulties arise from unwillingness to trade-offs between "sacred" and non-"sacred" values. It's easy to say that just one life is worth an arbitrary amount of non-fatal inconvenience to an arbitrary number of people. It's the cheap, easy platitude anyone can summon in a meeting. It feels good to say. Simple. Strong. Righteous.

But the world doesn't work this way. Mere life does not, in fact, have infinite, overriding value. Infrastructure engineering is not a morality play. It's a complex set of trade-offs, some involving safety. In a big system like public transit, as crass as it might be to say explicitly, the optimal number of deaths is seldom zero. Safety and utility are not, as the moralists might insist, incommensurable. They in fact exist on the same plane, and to build things that are effective and efficient, we need to trade them off against each other. Failure to do so leads to cowardly paralysis.

In other words: yes, we absolutely should accept some statistical nonzero risk of injury to save time or money in the overwhelmingly common case, because these things matter.
Write yourself a graph of your core account recoveries, don't put those on. Just put your leaf accounts on (those that recover from the core accounts).
Is there a site or something where you can put in all the devices you own (e.g., iPhone, Mac laptop, tablet, chromebook, etc) and what features you want (e.g., adding a password on one device syncs it automatically to all other devices, offline useage, auto fill of browser form fields, auto saves now username/passwords, etc.) and it will tell you what password manager best meets your needs?
Actually I was wrong, it was 70 billion, and it was 22 years ago:

As of December 2022, Son ranks 67th on the Forbes list of The World's Billionaires 2022,[10] despite having the distinction of losing the most money in history (approximately $70bn during the dot com crash of 2000).[11]

That’s $121b inflation adjusted
Agree. Content on Chinese tik Tok is very different.
Deployed service members often (usually?) can’t connect to the internet using their personal devices. They use public government computers connected to govt networks.
Do encryption on offline computer with trusted open source encryption solutions. Why do you think bitcoin experts have always said to do everything offline?
No. I'm good.

Rss reader grabs stuff off remote server for local reading. Hosting a tool to grab hosted content is just... Inefficient overthinking of a tool made to make things simpler

If you wanna sync across multiple devices or something, have a checkpoint file or something and throw it on dropbox,one drive, Google drive, owncloud.

The future is duct-tape, bubble gum, paranoia and "it work on my machine"
I was just talking to a colleague last week about how my use of grokking stack exchange with Google for anything relating to hanging code together has been utterly disrupted by ChatPGT.

I haven't used Google as much since it launched...

Two days after ChatGPT launched I asked it to create a bash script that updates my active registered domain names in AWS with new domain, admin and tech contacts... a task I have been putting off for years and keep getting reminders each year to update contacts. I have too many domains to be bothered with AWS's regressive UX.

It made a script for me (after a few prompts) that used aws-cli (version two, you have to tell it that) to pull a list of active domains (using Jq no less) and update the contact details listed in variables in the bash file.

Look, I know sometimes versions of software with ChatGPT can be in conflict, but it just worked... first time???

I was done in 30 minutes, as opposed to hours of code pasting, rumination and iterating over and over (I'm a code paster, not a code cutter) with stack exchange and other sites like it.

It also explained how to do everything with extremely lucid instructions!

Look guys, I'm not a coder, I sort don't know how to do things in terms of for loops and navigating data structures, but I definitely know what to do and why I need to do it, which probably makes me an architect and not an engineer.

ChatGPT has reduced my Google usage for this range of use cases down to near zero.

It's a "game changer" and I hate that term.

For me, this is why Google has called a "Code Red".

Thank about all the other use cases that regular folks have?

It's no wonder they called a code red.
Lots of the slides are just displayed as black for me.

Is that a browser issue, or are there embedded links to now-dead resources in the deck...?

(For instance, slides 51 and 52 are supposed to have content per the speaker's notes, but are just black in my version of the deck.)
> This can be said of most actor systems.

True, but other languages/platforms have better built-in support for immutable data structures and don't force you to fight the standard library to implement a share-nothing approach.
But the left is perfectly fine with putting this in place to tax the lower class.
The US congress is so broken that it seems like a majority of laws are railroaded into bills that absolutely need to pass rather than seperate bills themselves.

Both parties say "we'll pass this spending bill if you let x, y, and z completely unrelated bills be attached to it." Then both sides can say "we got this bill you wanted passed" and "I didn't want to vote for X but I had to support the budget bill."

It's a ridiculous system.
If you want a mystery to solve, the recent jamming around Chengdu is unusual: https://gpsjam.org/?lat=30.54828&lon=104.34787&z=6.6&date=20...
A bureaucracy can't ignore the possibility of a deadly crash. But they chose the slow-down instead of spending the money needed for safety. Which is despicable imo. But there is the quandary that they know a modernization project could be a disaster just all American public transit projects tend to be disasters.
LastPass Does Not Encrypt Everything in Your Vault (2017)
How is that different from any other scheme which uses a master password?
> Life can't be reduced to (productive) time like this

Yes it can, and it's essential that we do it, because the alternative is a ruinous level of risk aversion.
> In my experience, prebooked taxis in large cities frequently simply don't show.

My father had a habit of booking two competing Bach companies for biz trips to the airport because of this.
Flying in a plane is basically the most carbon intensive thing normal people do. It's something like 1/4 ton of CO2 per hour per person. Per capita carbon emission in the US are ~15ton/yr.

(https://www.statista.com/statistics/1049662/fossil-us-carbon...)
I agree it's not about doing justice. But I still think we need the overall system to be just. I don't object to pretrial people getting home confinement generally, and I can grudgingly accept it here on the theory that the Feds must be pretty sure he's not going to pull a Ghosn. [1] But I have real questions about exactly who isn't getting this kind of generous treatment.

[1] https://www.businessinsider.com/carlos-ghosn-inside-the-rise...
I don't do anything, because I just realized that the overwhelming majority of everything I read or comment on isn't unique or doesn't matter, and it's just a momentary indulgence. The rest I can just search for, check the threads I've commented on, or it's in pocket, but I truly don't care about most of it. I can't think of a time I've actually thought to click on a bookmark, and I've maybe re-looked at a pocket article maybe once in the decade I've been using read it later services.

I find that also I'm much happier with this relationship to the crap I look at. It's neat for the moment, maybe impactful, maybe provides residual utility, but if there's something I need to know it likely won't come to me randomly while browsing on HN.

Once you read a critical mass of posts about anything you deem interesting, you'll almost certainly start seeing the same idea pop up again as other people have the same revelation, but by then there's a good chance I've moved on anyway.

Really important things demand deliberate attention to either learn about the existence of or learn the subject matter, and a lot of the time it's not really something I'd accept as a valid use of my attention, unless it's a hobby I'm steeped in. Not even more than video games. Not because it's not a valid use of anyone's time, but to really get value out of anything, it needs dedication, not a cursory perusal, so I accept that most stuff im casually perusing just isn't very important.
NoScript User here. I see no ads, and I see Images. Site needs some work.

Thank you for the breath of fresh air after coming from a story about New York's mis-managed Railways leading to horrific tragedy. I would love to visit Japan.