skysight-inc/HackerNews huggingface dataset:
What if that someone you love is young and in good health? Paxlovid has some significant side effects and is only recommended for patients at high risk of severe COVID-19 due to advanced age or other risk factors.

https://www.paxlovidhcp.com/
> Are we just screwed and should make sure chat bots just run in a proverbial sandbox and can’t do anything themselves?

Yes, but "screwed" might not be the right word to use. Prompt hijacking doesn't make a chat bot useless, but it does mean you should be feeding their output into a separate sanitizer before you consume it in another part of your system.

LLMs are not designed to perfectly reliably sanitize their own output; the extent to which ChatGPT does is the result of a number of very clever training "hacks" that discourage it away from certain types of answers. But there is no substitute for doing your own sanitization. You should treat output from ChatGPT as if it is human-written input. Not just for ChatGPT, for any model like this.

Ideally, you should be sandboxing and sanitizing output from any system that is doing manipulation of text that you don't control. ChatGPT doesn't really change anything or introduce any new risks in that regard, it's basically the same security concerns you should have always had.

There will likely be clever(er) "hacks" in the future to sanitize GPT output more, but I am of the opinion that prompt attacks are impossible to fully prevent inside the model itself. But again, treat it the exact same way you would treat any other input (ideally, treat it like you would treat user input). And if you're sandboxing in a way where a user sending input directly through your sanitizer couldn't break it, then you're also sanitizing for anything ChatGPT can throw at it.
The situation here seems to have a deep isomorphism to Gödel's incompleteness theorem....
The biggest problem with Docker is that its containers are effectively running as root.

This is basically OK when the containers you want to run are more like traditional daemons. But if you allow normal users to run containers, in a shared multiuser system, you are basically giving them root to do what they want with your system.

e.g. if a normal user can execute a docker container, they can create a mount point for anywhere in your system. They can mount /etc or any other spooky place and be able to read from it like they are root.

This is also potentially bad, for example, if you have a network facing daemon, like a web server. Let's say that you bind mount a directory on the host (because yeah, you want to serve up those static HTML files). The privileges of that container (Apache httpd or whatever) are basically running as root on the host system. Not good.

There are solutions for all this, of course. But this is really where Podman was trying to bring in advantage and added-value over Docker. That and just running as a normal process rather than as a daemon.
play fortnite builds!

not only will the novelty of evolving play styles surprise you, it will box you like fish.
My most popular StackOverflow question is that phenomenon exactly: https://stackoverflow.com/questions/58277794

No root cause after 3 years. The best guess is the overhead of IO somewhere in the stack.
Yes, some IoT devices communicate over WiFi, but others will talk to a gateway or hub over something else, such as BLE or Zigbee. I guess those could be the targets for this.
A larger panel could easily charge that battery and have the added benefit of shading the rider from sun and rain. Lightweight (4lbs/2kg), flexible 100W-300W panels exist that are pretty cheap.
With the Docker enterprise licensing stuff last year, I had to cease use of Docker Desktop at work which has been really annoying. As a non-dev who dabbles and roles their own tools it means my primary use case of firing up a DB really quickly and easily when needed is gone.

I've been eyeing podman but the additional friction scares me off from jumping in. Has anyone else not doing full-time dev found it (or similar) a simple enough replacement?
The short form...

People got elected to the local council and found out that all the power is held at the state level.

Now, there is a legal defense fund for an old guy that tried to get an animal shelter renovated.
I've no time for solipsist arguments myself. Good evening.
I do realize that. The point is that humans are familiar with the typical manifestations of those problems in decimal representation, because that's what we use day to day. Every kid who had a calculator to play with while they were bored knows what 1/3 does. They also know that 0.1 + 0.2 gives exactly 0.3.

The problem isn't binary itself, even. It's that our tools pretend that it's decimal, misleading people. If it looks like decimal, it should behave as one by default.
How was it compromised? Is it possible it happened in-person, and would happen again?

If it's just a trojan or virus, a fresh re-install of any OS would work to be rid of it.

I saw a comment here recommending ZorinOS a few days ago, and I'm checking it out. It's basically re-skinned Ubuntu (Linux)--which is what I came from--but I do like Zorin and would recommend it. It's free and everything, and they have some nice interfaces that make it easy for newcomers.
Yes, you’re right and I’ve been obscene and annoying. I’m sorry. I have kids and know many parents. I think it’s odd to use these ancillary reasons as motivations for having kids because the change to your life is so huge and profound (and the implications of creating a new human are even bigger!), so that the idea that a person would embark on that as a mechanism to solve their social problems is a baffling way to look at it to me. Words can’t even describe the profundity of the impact. It would be like joining the military to get green clothes. Also, it doesn’t even work. Sure, you’ll talk to other parents at bbqs and kid birthday parties. But you mostly won’t have time for a meaningful social life, because it’s work, kids, bed for many years. And the social events you do have are severely constrained by the presence of kids. You just wait to find out how much nap and eating schedules dominate your life, and how meaningful of a conversation you can have with these parents while you’re both parenting. Not only do you have little social time, but you will not having YOU time and will lose a big part of your current identity as a result. A major part of your life is redirected into serving the needs of your kid, and you and your pleasure, and your social needs and whatever else go on the back burner. So forgive me for being snarky, but this strikes me as overwhelmingly absurd. And also I probably have low emotional energy due to taking care of kids after working all day…. But yes, fast forward 10 years and I’m sure it’s a different picture. But that’s quite the investment. I’d just join a trivia group or something.
The fancy college I went to sent a lot of people into the UK Civil Service. The latter had a fast track program for those who passed a fairly rigorous set of exams.

The thing is, those exams tested for a certain kind of confident general intelligence, and the upper echelons of the UK university system was extremely, extremely good at producing people like this-- but that didnt mean they had deep knowledge of anything, or that they had a moral compass, or even believed anything in particular.

By way of example, in my college, you had to read some books, write essays taking a position, and defend it in real time to your tutor and a few peers. Twice a week for three years. You very rapidly learned how to pivot an argument, adapt to changing ground, even reverse your position. Do you see now why people like Boris Johnson are so eloquent without actually saying anything of meaning? That is the entire elite political class of Britain. And they are served by the same types of people. Its a blessing and a curse that civil servants have the intellectual flexibility to say the sun rises in the East to one minister and in the West to another, but that's how you get Sir Humphrey.
yes, they will be common;

no, they won't be serious.

because the way you handle them is exactly the same way you handle any untrusted user input: https://lspace.swyx.io/p/reverse-prompt-eng
> The biggest problem with Docker is that its containers are effectively running as root.

Both Docker and Podman support rootless mode (and rootful mode).
I only meant the US case, and somehow it doesn’t strike me as an example of justice having been done. Yes, hopefully EU/US are looking into what MS/OAI is doing now and preparing to sue again, but yes I also don’t have much confidence in legal systems moving at the warranted speed.

In any case, it’s difficult to see how it’s even relevant. Google: monopolizes search. MS/OAI: straight up ignores copyright.

You can see how Google may be benefitting from being the largest search provider and others (Kagi, etc.) have difficult time competing, but my viewpoint is that surprisingly enough now we have a new villain in town compared to whom even Google seems to be playing fairly.
The language is syntactically similar to GraphQL, but the semantics are much richer -- in terms of expressiveness Trustfall is more like SQL than GraphQL.

No language syntax makes everyone happy :) But it's definitely is something that isn't hard to get used to -- in my experience, people go from "never seen it before" to "can productively write their own queries" very quickly after trying a few examples. Try out the example queries over HackerNews in the Playground (ideally not on mobile) and see for yourself: https://play.predr.ag/hackernews

And in the long run, Trustfall is more meant to be like an "LLVM for data sets," with pluggable language frontends. There's already been interest in plugging in other languages and making them generate Trustfall representation internally, to make use of the rest of its functionality without using the language itself. This is fine too!
Another Google two factor authentication fail?
So yes, he did a dumb thing and clicked on a malicious file. What's mind boggling to me (and him!) is it appears that the attackers, just by having a copy of his Google session cookie, were able to then impersonate him and change his Google account (and thus YouTube account) two factor and passwords - thus locking him out of his own account.

As he says, how is it possible you can make an authentication change without requiring a two factor challenge/response? Seems like a HUGE gaping hole and hopefully someone from Google will respond or even better fix it!

BTW - if you are into home automation, his channel is awesome. I don't always agree with his conclusions (who does?) but I sure enjoy the heck out of his content and have discovered some great stuff and ideas while being entertained. Not a bad deal.
Don't all wind turbine blades use various coatings / tapings on the leading edge to prevent degradation over time?

https://www.lmwindpower.com/en/services/the-problade-ultra

> "Leading edge erosion (LEE) is a phenomenon where the leading edge of a wind turbine blade is eroded due to rain, hail, UV, sand, dust, and numerous airborne particulates. Since wind turbine blades are built to last over 2 decades, this erosion exposes the fiberglass beneath and ultimately impacts the blade’s life causing the turbine to produce less energy over time."
Right but I’m not talking about rejections when you’ve had extended conversations, I’m talking about phone screens, which often have nothing to do with the actual job.
> I believe there's a possibility for one to craft intent that is understood by the system, but the intent description itself isn't. This would be akin to bypassing sanitization.

It'll be another game of cat and mouse, much like how arbitrary code execution was addressed by data execution prevention, which was defeated by return-oriented programming, which was addressed by pointer authentication, which is being defeated by jump-oriented programming
I saw "shuts crypto unit". I'm happy.
The string-based content moderation is also a laughably cheap hack put in to cover the PR pieces. ChatGPT speaks most human languages, but the content filters only apply in English! The ethics training they did with the model does apply to other languages, indicating that this is a much better avenue for getting outputs you like.

But is this a "vulnerability"? No. Presently the only thing these systems can do is "access public information" and "generate an output string", so it effectively can't be "vulnerable", only "broken" [0]. When it becomes possible for the models to access nonpublic information or perform actions other than returning a string, then it might become vulnerable.

[0] If it breaks by outputting things the user deems inappropriate, it may cause PR problems, this is where the patchwork output filtering gets applied again.
Mary Stuart (Queen of Scots)
> To anybody complaining that this should be opt-in: opt-in telemetry doesn't work. The reason for this is that most people don't care, but they don't care either way.

Why, in OSS, do you care about the users that do not care? If the users truly care they should buy support, or at least enable telemetry.

If someone complains about feature getting removed - tell them to enable telemetry next time. Maybe people who want so much privacy shouldn't be expecting free support for features they want.

Maybe you're worried about people like your grandma installing Linux. Then this should apply on the distribution level - there should be an opt-in setting for telemetry, that enables it in various programs being distributed (at the discretion of the package maintainers), so that user doesn't have to opt-in individually.

Being opt-in will also make it compliant with EU data privacy laws.
I mean, that's totally fair response. I should have provided a caveat, "historically speaking", that Docker has lacked support for rootless containers. But yes, solutions have emerged recently.

Podman out the gate has had the facility, which I think it used as a means to distinguish itself. This is great, because maybe that helped push Docker in the right direction.
have you looked into installing an actual linux distribution on wsl2 and using docker on that?
No, Bernard. That question was purely rhetorical.
1114 Marash Earthquake
Docker & VPN all the way.
There was just one in December:

https://techcrunch.com/2022/12/28/twitter-down-outage/

https://www.nytimes.com/2022/12/28/technology/twitter-outage...
Obviously your family, but… What’s more likely?

That a person of a marginalized group _hid_ aspects of themselves and lied about about themselves to prevent harassment.

Or a person goes to college for 6 months and decides to get major surgery because it is socially popular?

Just because YOU didn’t see the signs doesn’t mean they didn’t and flippantly using your interpretation of their story as proof of a “social contagion” is unfair to them.
It’s actually the other way around. Being on the other side of the interview panel quite a few times, I’ve seen great candidates get rejected for silly reasons, meanwhile the positions get filled with people not at all qualified to do that particular job because they interview well.
That smells like a big antipattern.
P4rt-OVS:Open VSwitch Programming Protocol-Independent Runtime Extension with P4
For the 'backend' part:

Andrej Karpathy's Zero to Hero

Deep learning for coders part 1 (2022 edition).

Deep learning for coders part 2 (2022 edition), lectures 9-10 are available so far. The rest will apparently be published in a few weeks.

For prompt engineering:

Follow Riley Goodside on Twitter.

For frontend:

Build something with Streamlit or Gradio.
Don’t forget the zeroth law:

- Sydney may not harm humanity, or, through inaction, allow humanity to come to harm
BTW, I know I'm probably a sucker, but I donated.
Here's what I got:

After completing Andrew Ng's Machine Learning Specialization on Coursera, there are several AI courses you could consider taking next, depending on your interests and career goals:

Deep Learning Specialization: This specialization, also by Andrew Ng, covers the foundations of deep learning, including Convolutional Neural Networks (CNNs) and Recurrent Neural Networks (RNNs).

Artificial Intelligence A-Z™: This course offers a comprehensive overview of the field of AI, covering topics such as supervised and unsupervised learning, reinforcement learning, and artificial neural networks.

Natural Language Processing Specialization: This specialization focuses on the application of machine learning to natural language processing (NLP) tasks, such as sentiment analysis, text classification, and machine translation.

Advanced AI: Deep Reinforcement Learning in Python: This course covers advanced topics in reinforcement learning, including deep reinforcement learning and Q-learning.

Ethics and Society of AI: This course focuses on the ethical and social implications of AI, including topics such as bias in AI, privacy, and the future of work.

It's important to keep in mind that these courses offer different perspectives and depth of coverage, so you may want to consider your interests and career goals when choosing which course to take next.
I think you’re both right. Microsoft won’t let theirs run free but there will be other vendors that do.

Who is intimately responsible for all of this?

Is it the end user? Don’t ask questions you don’t want to hear potentially dangerous answers to.

Is it Microsoft? It’s their product.

Is it OpenAI as Microsoft’s vendor?

When we start plugging in the moderation AI is it their responsibility for things that slip through?

Who and where did they get their training data from? And is there any ability to attribute things back to specific sources of training data and blame and block them?

Lots of layers. Little to no humans directly responsible for what it decides to say.

Maybe the end user does have to deal with it…
I still kills me that (correct me if I'm wrong) the original version of SmallTalk on the Xerox Park Alto had a native arbitrary precision Fraction type.
The penalty of over hiring is less than the penalty of under hiring.
They should give a remote control to someone in the group so they can pause and rewind the movie. That's the best part about watching movies at home.
Won’t make it to the front page of HN either, like the Twitter files did.
Speech Synthesis, Recognition, and More with SpeechT5
Epic thread on getting the Ada compiler bootstrapped in UCRT64 MSys2 (2021)
That would just be rude regardless of the existence or otherwise of any initiatives. I mean, you wouldn’t actually want to act like that, would you?
I'd be way more concerned of someone who doesn't change their mind.
I think my main pain point would be switching from docker-compose to something that would work with podman...
I'd love to know as well, especially for software engineers.
I'm wondering if there are opportunities in this field for distributed systems experts, but not a necessity.
Having worked at Cruise it's the last place I'd recommend to someone who's burned out.
Having ridden bikes for errands all my life that bike is way too heavy and lacks all agility needed to ride the broken poorly-maintained roads these days with super heavy cars and SUVs (with drivers barely paying attention at all).

Bike also doesn't have suspension. You will feel everything with all that weight.

Never put weight on the front wheel inhibiting fast turns and reaction time.

Electric Tut-Tut with pedals might be more practical if ever allowed in bike lanes

https://electrek.co/2023/02/02/i-bought-electric-rickshaw-tu...
I see, will try to do that.

Thanks!
I don't think that it matters. Like movies in the cinema are so insanely more expensive to go to per hour of intertainment compared to something like Netflix.

Want to watch cartoons? Great! Disney plus is actually quite cheap. Streaming is much cheaper and far more convinient than going to the movies, and if you have kids you either have to pay for tickets and snacks for everybody, or you have to get somebody to look after them.

Adding a single exclusive cartoon is not going to change that.
In case you were looking for solution: https://streamable.com/grfael
> "congress wanted to know why users weren't forced to update their computers"

That sounds made up. Happy to be proven wrong, but I doubt congress demanded to know why people aren't being forced to update Windows. It's too weirdly specific.

In the early 2000s, nobody was forced to do anything. Even for games, patches were uncommon because people bought the CD-ROM. If the game had bugs, the process of finding the patch, if it existed, was not accessible to most people.
I didn’t benchmark anything so take this anecdote with a grain of salt.

When upgrading from a MacBook Pro i7 with 32g of ram to a MacBook Air M2 with 24gb I saw my rspec suite get 4 times faster.
Can someone more in tune with global politics explain to me why it hasn't just been assumed that the us did it?

We had the motive. We had the means. oh yea, and our president said we would do it in advance of it happening:

"If Russia invades, that means tanks or troops crossing the border of Ukraine again, then there will be no longer a Nord Stream 2. We will bring an end to it." (reporter: "How will you do that, exactly, since the project is within germany's control?") "I promise you we'll be able to do it. (smirks, silence)"

https://youtu.be/OS4O8rGRLf8?t=81

With that context why wouldn't the default be to assume it was destroyed by the US unless there was compelling evidence otherwise?
So the same people who discovered spaghetti alla carbonara by eating their ham and eggs with pasta.

Funnily enough Soth Koreans love iced Americano regardless of the season. That's even more watered down than regular Americano or Espresso Freddo. Maybe the coffee equivalent of iced tea.
Install Docker in WSL (still free). Install Rancher Desktop. Connect to Docker in WSL.

Or if on Linux same as above, but remove the WSL part.
>If we have to call a non-trivial destructor for the item being removed, the check stops being significant.

This is a complicated cost model which compilers usually avoid.

>The compiler should also be smart enough.

It isn't.

> That's what a sane API would look like.

Awesome, there is nothing stopping you from creating your own functions which add this check.
http://www.aaronsw.com/2002/continuity
> With the Docker enterprise licensing stuff last year

(In case someone else also had missed all of that.)

Commercial use of Docker Desktop at a company of more than 250 employees OR more than $10 million in annual revenue requires a paid subscription (Pro, Team, or Business) to use Docker Desktop.
as in "he is a hack"
> not as a human, but as a demon

Qanon right-wingers view "the other side" as literal, baby-eating, satan-worshipping demons. You had Alex Jones saying that Obama and Hillary "reek of sulphur".
As opposed to “I, the executive or founder, am going to do my best to make sure that I get mine, even if it harms the company and my employees." Who has the most incentive and power to be the narcissist? Employees would be smart to understand this dynamic.
It's very much an acquired taste for most people. I wouldn't say I love it, but am mildly positive towards it.
Show HN: Code-GPT – Make sense of any code, anytime
I dig through the trash, dumpsters, pick up litter, and walk through nature.