skysight-inc/HackerNews huggingface dataset:
nginx listens on port 80.
Accessible from machine.
Inaccessible from outside unless allowed by ufw.

docker listens on port X.
Accessible on machine.
Also accessible from outside regardless of ufw.

No amount of time and experience will make you think that configuring a software to listen on a port will automagically poke a hole in the firewall.
I talked about Bing and tried to explain language models on live TV
Learn how to set and achieve your goals using OKRs and the Skhokho OKR Management System. This step-by-step guide is perfect for small business owners who want to improve their focus, accountability, and results.
Ouruboroi is an art project of images drawn in the browser using a unique animated digital orrery of the solar system from overlapping yin/yan symbols. For orientation, the Sun is at the center, and Mercury, Venus, Earth, Mars, Jupiter and so on concentrically orbiting it. Change the parameters to watch the app draw informationally complex and visually interesting images. Web app written in Javascript and Laravel PHP, checkout built with Stripe. Please be aware that there can be a strobe effect from black and white areas as the images are generated and there is a "Stop" button provided.

- Parameters: set start date, end date, jump days, and included planets, press "Ouruboroi" and see something you have likely never seen before.

- Orrery mode: computed alignment of planets is animated for a broad date range, works best with jump days set to 1.

- Ouruboroi mode: the orrery becomes a brush, drawing a complex and compelling image of order and chaos, best results with larger jump days settings.

- Randomate: randomly generate parameters for a new ouruboroi.

- Save: export the resulting image.

- Order: order a 12x12in dye metal transfer print.

- Gallery: a sampling of ouruboroi images.

Any feedback on the form, feel or function of the tool and site or comment on the resulting art is appreciated, and an advance thank you to any who order the artworks.
Not that it excuses the chicanery, but it is worth noting that kangaroo meat is perfectly fine and commonly available in Australian supermarkets.
Yea, for their ancestors may have once killed millions. And that this ancestor ideology is not to be revived/resurrected in order for their country to not kill millions more. When you drink bleach and feel bad, you don't drink it again, yes? Then, it follows, you have to take precautions. Not everyone should follow an American understanding of things, in this case, the First Amendment.
Afaik, firewalld doesn't speak nftables (the tooling, not the backend).

At least, in the sense that if you use nftables (the high level tooling/config) and firewalld (the high level tooling/config), there will be some incompatibilities.

So it's either/or.
This is true, and interesting, but doesn’t address Chomsky’s concerns. While a LLM has structure, it’s still not as structured—or structured in the same way—as the human language faculty. This is easy to see by observing that LLMs can and do just as easily learn to produce things that are not human language as things that are. For something to count as a model of human language, it has to be able to produce language and not produce non-language.
Carmakers Are Pushing Autonomous Tech. This Engineer Wants Limits
This Deadly Chemical Should Be Banned
The point is that adding "context" to an initiative by associating it with fringe politics with negative connotations does not illuminate much at all... and in particular, after the last 3 years, people should be very careful to throw stones.
It adds nothing to reply to someone saying that the changes at twitter could be good and influential by saying "but they could also be bad." It's already implied in the could.

> I’d rather judge on things that have actually happened than have to deal with a new set of forward looking projections about what could happen every few months.

If you're leaving all prediction and forecasting to other people, why complain when they do it?
These are basically arbitrary (albeit useful) criteria.
>For other areas of cybersecurity, you may need to study psychology and management theory to better understand the people involved,

Economics in particular planned obsolesce explains why the cybersecurity industry exists.
I did not, I'm away from my notes at the moment so I don't remember which libraries I used. I used a couple of different ones but not OpenVDB. Next time I try this task I'll try OpenVDB and see how far I get. Thanks for the recommendation.
Deregulation and free market alone can’t solve this problem
Google never removed it.

https://abc.xyz/investor/other/google-code-of-conduct/
If everyone designed software like you are advocating then we'd be even worse off.

What's wrong with "users should be careful" and "software shouldn't contain footguns"?
It's still in it in 2023.

https://abc.xyz/investor/other/google-code-of-conduct/
I can’t comment on the broader US/EU perception question, but I would partly attribute Airbus’ success to its harnessing of smaller scale engineering excellence always present in Western European aviation. Airbus merely solved the problem of risk of high scale production which has historically been a challenge for European manufacturers relative to Americans operating in their large, uniform market.
Why Wikipedia Is So Tough on Bigfoot
Linux 6.3 Merge Window to Bring Many Exciting Features
What are the typing-related issues xmalloc has that plain malloc doesn’t? As far as I can see, they’re equivalent in that respect.
The Closing of the Cocoa Frontier
Google is no longer sponsoring Fastlane
What’s the assumption?

We do this all the time so if I’m missing something I’m keen to hear it :)
Have you tried setting clientID match outlook in ~/.davmail.properties

davmail.mode=O365Manual
davmail.oauth.clientId=d3590ed6-52b3-4102-aeff-aad2292ab01c
davmail.oauth.redirectUri=urn:ietf:wg:oauth:2.0:oob

https://sourceforge.net/p/davmail/discussion/644057/thread/a...

FWIW, user for login looks like: user@domain.tld
BeReal is pretty nice for this tbh. Snapchat Stories used to be nice but IG killed that and then Snapchat had to find other niches
The safe-harbor part isn't bad. What's bad is that people can file an obviously bogus DMCA takedown request with zero repercussions.

Companies that host content do basically nothing to actually verify that the takedown request is even from a real person (nevermind the original copyright holder).

A better system would be one that allows the uploader to take the takedown issuer to court, and if the takedown request was clearly malicious and bogus then the takedown issuer would get a penalty. This approach would still allow a legitimate takedown request, but not be forced the issuer into taking a contested case to court.
I was probably unclear. Meant, "we can't know 'others' internal state". We can examine our own, but all we can do is try to express it in language. Someone else hearing our description can only get a vague idea. And vice versa. Each person has their own individual internal subjective perspective, which can't be communicated with 100% clarity or accuracy. Since we can't examine or measure others internal state, we deem it 'hard' and 'impossible'. Because of course it is hard to express something that can't be communicated.

I would say that this examination of the problem of our internal view of the world, versus the reality of the world, subject versus object, goes back thousands of years.

I've also meditated a long time, and I do understand the hard problem. I just don't think eastern philosophies have the answer either. Eastern philosophies definitely had a jump start on the West with examining the mind, and really it was Buddhism that informed western philosophies from Schopenhauer onward. They helped defining some vocabulary and hierarchies, like outlining Skanda's or parts.

BUT, the typical eastern answer, that it is just 'this" and other 'wooo-wooo' answers are just as far from any explanation to the 'hard' problem as anybody in the west has. Meditation can get you awareness of the hard problem, some insight, but it still isn't an explanation. It just gets you another perspective that is still "Internal". I can meditate forever, but any 'realization' is still internal to me, it isn't providing any answers or explanation.

This comes up a lot right now with AI getting so human like (recent advancements), and I would say that at some point we'll create something that will be indistinguishable from a human, and at that time if the AI speaks convincingly of their realization of 'this is it', we wont have any ability to disprove that they really have had the same 'wooo-wooo' feelings. There is no way to prove anything.

So what I am speculating here, is that at some time in near future, we will be able to correlate soft and hard problems, so we have a map from one to another. And we'll have to realize that our own internal 'experience of reality' is just our neural net in our brain reacting and processing to stimuli, and we'll be able to examine the same things in silicon. And we'll have to accept that we aren't some super mystical beings or that our 'consciousness' is not all that special a development in the universe.
Analysis: ChatGPT is great at what it’s designed for. You’re just using it wrong
That someone very likely doesn't care whose databases they break. The operation is probably automated and they try to ransom anyone with a broken server.
s/non-zero //

double x[1], *p;
p = x + 1; /* legal though *p wouldn’t be */
how is it? I've seen it a few times at those 'exotic food conventions' but never worked up the courage...
> NEVER expose a database to the public

They didn't intentionally expose the database; they thought that it was safe and docker bypassed their security.

> because IMHO the whole thing is your fault

How so? They had a working firewall, and then docker bypassed it, which they had no way of knowing to expect.
Forward Pass: The Security Implications of Email Forwarding Mechanism and Policy
Very nice collection. My favorite C feature is actually a gcc/clang feature : the __INCLUDE_LEVEL__ predefined macro. It made me code&maintain my C projects exactly twice as fast as before because file count dropped to half : https://github.com/milgra/headerlessc .
If you don't need all that cloud operations/deployment infrastructure, self hosting a website from home in 2023 is as easy as it was in 2003. Get a DDNS, do the NAT port forwarding, run some apache/nginx/whatever and push your files with sftp or similar to the server. In contrast to 2003, upstreams got better -- even Germany has average upstream speeds of 20mbit/second nowadays [1]. With 20mbit/sec you can do quite something with a page-only website and contemporary event based webservers. And thanks to SoC systems, energy consumption is a no brainer.

[1] https://www.statista.com/statistics/1338657/average-internet...
"just like how GPT-3 ... immediately disrupted by open-source models as well."

Which open source alternatives to GPT-3 have you seen that most impressed you?

I've not yet found any that are remotely as useful as GPT-3, at least for the kinds of things I want to use them for (generating SQL queries from human text, summarizing text, that kind of thing)
Be interesting to see when these features showed up. I learned C from the K&R book back in the day and it doesn't mention most of these.

Designated initializer is something I'll try to remember, seems handy.
> He said the price would be more than Twitter blue

This is the other thing that pops up, in the rare instances where services like this are offered, they're often pretty inflated. It's notable that Youtube Premium comes with a music service and it's impossible to de-bundle them. I honestly think that part of the reason for this is to make people think that ad-free services aren't economically feasible.

I'm supposed to believe that the cost to Twitter to deliver ad-free and tracking-free text streams is higher than the cost for Netflix/Google to stream unlimited HD video to all of my devices on demand.

> The question is, how many premium ad-free subscriptions can one person get? YouTube? Tumblr? Twitter? Facebook? Insta? It could easily be $100 per month.

The thing is, what we're seeing is a push to monetize more services through subscriptions anyway. Like, this is a better argument if Twitter and Facebook aren't both pushing people to give them roughly $10 a month anyway.

I think that the advertising industry and traditional media companies have sold people on this idea that ads are somehow magically keeping the Internet free and and it would collapse otherwise, but if the trend continues and they all start charging anyway, then...
> “the generative-AI eruption”

I really think we should stick to Nick Bostrom’s (or pls fix attribution) term “intelligence explosion”
To be clear, they moved it to the bottom - but I still can't comprehend why they did that. It did no favors to the public relations, LOTS of senior staff resigned, there was no legal binding to it - so they even could have just kept it there at the top and just... not mean it. Maybe I need perspective.
they benefit because it IPO'd at $20 and then went down to $10 so they are happy to get out at a premium price of $15. Instead of losing 50% on their original investment they are only losing 25%.
Ask HN: Where will AI's progress slow down next?
Of course, it can be argued that any technology will reach a certain stage in a certain time. But when AI progress slows down and appears to stagnate from the outside, what do you think it will look like?
A lot of content moderation / censorship isn't by algorithm.

Recommendations, sure, but not the removal of content.
When the article says that implicit conversations from void* "shouldn’t be necessary" they seem to mean they feel that, philosophically, it ought not to be necessary. Certainly it doesn't protect against obvious compile time mistakes, which ought to be the point of a type system:

/* Compiles in C */
int* x = malloc((sizeof)short)

// Does not compile in C++
int* x = new short
Definitely simpler than setting up everything from group up. Though ATM I would argue that It would take me the exact same amount of time to get another app online :). Regarding IP, in the blog post further down I'm explaining that I also don't have fixed IP and how you can setup DDNS.
Thanks for reading!
> We're going to need AI to sift through all the BS.

Yes, that's the only way to deal with it. Humans alone can't cope.
Verification won’t even fix it, anyways. People taken in by the scammers aren’t gonna go hunting for a verification badge.

“You are already friends with someone by this name” warnings would be a lot more helpful.
Part of the confusion is, as others have pointed out, that "liquidity" isn't really the same thing as "money".

If you're talking about money, then that's exactly what happens - the creation of "high-powered" central bank money leads to a multiple of that amount of new money appearing in the economy as it's used (and reused) in the financial system to make net new loans (the multiplier effect).

Ultimately as the money gets passed around then some market participants will use the money in ways which reduce either liquidity or money supply or both (repaying loans for example) so there's a decaying effect which is why the multiple isn't infinite. As the money dissipates throughout the system it will end up in the hands of participants who are either slower to reuse it or more likely to put it in something which either is or looks like a central bank deposit - hence the "liquidity" eventually dissipates too.
Gaslighting, love bombing and narcissism: why is Microsoft Bing AI so unhinged?
I find this* graph most helpful. In one graph it displays all of Californias reservoirs with their current level, their historical average, and their level 1 year ago vs their capacity. It also shows the relative sizes to one another.

The reservoir from the article (Oroville) is one of the only ones to have made such a recovery.

* - https://engaging-data.com/ca-reservoir-dashboard/
Nobody has done this well enough yet. What's required:

1. Transcribe your speech using Whisper (in that case you don't have to make an effort to speak clearly so long as you're in a relatively quiet room)

2. Get a TTS system that actually sounds good (e.g. Descript, Eleven Labs, etc.)

3. Have RAPID responses like a normal human conversation (mostly on OpenAI's side... so hopefully ChatGPT Plus fixes that)
It is just really expensive to ride. I use it sometimes where there are no good public transport options and it is like half a cab fare. I can’t see them maintain a market if they increase prices. Maybe if we had longer lasting batteries they could drop the prices since they would not need to be charged so often. But as it stands it is either a curiosity or replacing something already expensive like a taxi for a small subset of taxi rides.
Let's see - on Facebook the rules were always you had to use your real name.

Now they're charging us for it?
Maybe I've misunderstood here but it sounds like you're comparing the revenue brought in from a customer to the cost of attracting them in the first place. Doesn't that ignore costs like ongoing customer service and maintaining the systems the customer is actually using? Or are all those numbers rolled up into "cost of acquisition"?
the days where "lol" meant something was truly funny have long past.

Just like in real life, the quality of your conversation depends on the company you keep.
I don't make many, especially nowadays. I had to make them occasionally when repairing instruments, meters etc. It's a fiddly business if you don't do it regularly and I'm often impatient (it's not something I like doing, it's just a means to an end).

Moreover, trying to figure out what the threads are is often pot luck (thread gauges down there are nigh on nonexistent-in my world anyway—and you need a microscope or thread viewing metrology stuff which I don't have). British instruments before, say, 40 years ago usually used BA (British Association), US—UNF and European and Japanese—ISO metric, but then there's also the pre-ISO metric to contend with on old stuff.

Surprisingly, when they're that small it often doesn't matter. Guesstimates combined with brute force and ignorance usually got the job done.

It's fair to say I'd rarely tackle anything below 0.8mm although I once filed a smaller one by hand. Fortunately, most of the time I scavenge screws from old instruments, clocks, watches and laptop PCs (these however are larger, usually between 1 and 3mm). I never throw away old stuff without disassembling it for the screws.

Nowadays, it's not a problem because it's easy to get packs of just about any size screws one wants, it wasn't so 40 or so years ago. Incidentally, my grandfather was a watchmaker and jeweler and my father a mechanical engineer so I saw watchmaker's lathes at a very young age.

BTW, my fulltime profession is moving electrons about (or trying to). They're somewhat smaller than those tiny screws so I can only guess where they are by proxy. ;-)
> The safe-harbor part isn't bad. What's bad is that people can file an obviously bogus DMCA takedown request with zero repercussions.

The takedown process is part of, and only relevant to, the safe-harbor provision.

> Companies that host content do basically nothing to actually verify that the takedown request is even from a real person (nevermind the original copyright holder).

Because not complying with a correct-in-form takedown puts them outside of the dafe harbor. The uploader can, of course, challenge the false takedown (and the host can decide they don't care about safe harbor, but they won't in practice, nor will they normally care as much about safe harbor against claims by the uploader, so counternotice compliance may be less enthusiastic than takedown compliance.)

> A better system would be one that allows the uploader to take the takedown issuer to court

You can do this. A false takedown is false, damaging statement of fact and actionable as such, it may also be actionable as tortious interference, and a number of other things.
What's ignorant about it? Or wrong, for that matter, since it can't be "slander" if it's true. Docker does bypass default firewall rules and expose container ports to the public. If I run anything else on a server (apache2, say), and tell it to bind to 0.0.0.0:80, it doesn't matter, because the firewall will block it. If I tell a docker container to bind to 0.0.0.0:80, it magically skips over any other protections and immediately exposes itself to the world.
This is amazing. More devs should build stuff like this for themselves. On the extreme one of the scale there is the amazing Andreas Kling building his own operating system. Building a whole system will give you unprecedented control and understanding. That is what being a hacker is all about.
Yes they are, and they should be shutdown.
With dynamic dns static IPs are not as critical. Most routers support them natively. What it does is quite simple - every time the router receives a new IP, it updates your dns entry.

Not to mention that most “dynamic” IPs change only while the router is offline and your lease is up. So as long you don’t power it off, it may not change for large intervals of time.
Well not really. If the average age is increasing it’s not heading in the direction of empty.
And running a database without authentication.
This is especially true if, as if often the case, only a segment of the company uses the software in question. Engineering probably doesn't use Salesforce. Sales probably doesn't use JIRA.

A flat fee based on some tiered size of the company might still make sense and reduce some friction. But the amount has to work for both the buyer and seller and per-user pricing is just a natural fit in a lot of circumstances.
I wonder if we'll get a cat-and-mouse game with miscellaneous TPM manufacturers "accidentally" leaking their keys, getting blacklisted, creating new ones, etc. I'd like to think that there's at least a nontrivial amount of the population wanting to subvert the authoritarian corporatocracy and with the skills to do so.
It’s not better, but at least it wasn’t personal, which would be worse.
Before C++11, std::string with non-ASCII characters was terrible. Old programming languages/standards tend to disregard i18n.
You guys need to understand, that the skill ceiling for AI art is very high. Its not some iphone-selfie tier technology.
Go to Civitai.com and huggingface, to start comprehending how many AI models there are, and how powerful the latest models are.
It takes at least two weeks of intense usage to get the hang of the basics/parameters and produce good output. AI art in the end will probably be dominated by professionals because of the increasing skill requirements.
Ask HN: Is C++ making a comeback? “modern C++” versus Golang/Rust/Zig/Nim/D?
I'm hearing the term "modern C++" bandied about.

I'm guessing it means "C++ has evolved to something worth considering versus more modern languages".

What do you think? Given a real world project, what might lead you to use modern C++ instead of Golang, Zig, Rust etc?

Or is C++ too old and dusty despite its updates?

Some references:

"Welcome back to C++ - Modern C++" https://learn.microsoft.com/en-us/cpp/cpp/welcome-back-to-cpp-modern-cpp?view=msvc-170

"21 New Features of Modern C++ to Use in Your Project" http://www.vishalchovatiya.com/21-new-features-of-modern-cpp-to-use-in-your-project/

"What is modern C++"? https://www.reddit.com/r/cpp_questions/comments/tgs6ir/what_is_modern_c/

"C++ is the next C++" https://www.open-std.org/jtc1/sc22/wg21/docs/papers/2022/p2657r0.html

"modern c++ features"
https://github.com/AnthonyCalandra/modern-cpp-features

C++ 23 to introduce module support "https://www.infoworld.com/article/3662808/c-plus-plus-23-to-introduce-module-support.html"

"C++ 2023" https://en.wikipedia.org/wiki/C%2B%2B23
It's more about connections to acquaintances and mutual friends... maybe you just had to be there in ~2009 but there's really nothing like it today. For better or worse.