skysight-inc/HackerNews huggingface dataset:
Yes. Also keep in mind that layers are not just preventive. There are also detection layers. You can frustrate threat actors by reacting to their attempts to get past the password or some other layer by collecting logs and alerts. A simple example would be setting up ssh on your vps with password AND public key auth and the setup fail2ban. Of course it is very hard to bypass public key auth but even if you accidentally post your private key to github or have your personal device hacked, that is still one layer of defense to slow them down.

If threat actors spend sufficient resources they will get past any security layer. There is no such thing as absolute security, good security creates the most hostile environment for threat actors by requiring them to committ the most resources without interfering with normal usability of the system.
right, which is why humans do not claim to "grasp the significance" of their moves.
They were acquired by Crashlytics, who rebranded as Fabric, which was acquired by Twitter, then sold off to Google and merged with Firebase.
I'm not familiar with Tailscale, but you can easily use a different port than 22 for ssh if you want to; put a different port number in `/etc/ssh/sshd_config` on the server, and then set your `~/.ssh/config` to use that port on your clients. If you're going to be opening it up externally, you also can map a different port to the local one (which is necessary if you want to be able to ssh into two different servers with the same ssh port from the outside anyhow).
No offense but this was clear since the 70s, if not earlier.
>I guess I still don't see your main point though.

.
.
.

>You are definitely right that most code is banal and glue

looks like you did see my main point.
Depends on the satellites (for GEO ones it's very different), but for the particular case of Starlink, there are two aspects - first, as satellites are relatively low, each satellite can only possibly "see" a ~1000km radius so disconnecting certain large regions is trivial by having the satellite not work when it's above that area; but the main issue is that an important component to ensure their bandwidth is 'beamforming', focusing the antennas to cells which IIRC are something like 50km in size, so a Starlink satellite can be physically reachable for one city and not in the neighboring one, without the ground-based receiver being able to do anything about it.
Who didnt see this coming when GPTZero was announced by clueless media?

I didn't even have to look at the internals to know GPTZero and OpenAI's solutions would be pointless. I'm still very surprised OpenAI made snake oil.
> Managers gave about 10% of the company’s workers poor reviews

The article didn't manage to get a quote on what the guidance/orders for the reviews was.

For example, were managers given a target on how many of their reports were to receive poor reviews?

Or did the evaluation criteria change besides the target distribution?
Using Jobs famous words you are using it wrong. ChatGpt is more of a writing tool rather than an information tool. It helps you to write stuff the information it writes does not need to be accurate
Again, it's instructive to think how things worked before Facebook.

People would announce things like that to each group individually, and often chose to not mention it in some groups because they're not intimate enough. We used to just be okay hearing and discussing the same announcement multiple times ("some of you already know this, but..."), most likely with different parts of the story told in different settings and triggering different conversation because the groups are different.

For the more distant acquaintances, people wrote Christmas cards (or equivalent) for the occasional updates. These can still be handled very nicely with an email list, and really don't call for the kind of instant-update sharing that Facebook et al encourage.

Is it less efficient to write and read the same updates multiple times? Sure. But is efficiency really what we should be striving for in human relations?
TFA claims that they managed to replicate "RLHF" type thing that would allow you to bark orders at the raw GPT-3 model and get palatable results back (as opposed to often repetitive nonsense output of the raw model).
You won't be able to run this in your terminal as GPT-3 alone consumes nearly 400GB of RAM plus whatever post processing you do with it. At the moment, there is no obvious use case for it apart from running a ChatGPT competitor.
On the other hand, there was no obvious use case for electricity for nearly a century. But one can speculate that we're getting closer and closer to a "lightbulb" moment for AI.
Cases of undertraining can be observed whenever the output is repeating gibberish or loops. Happened a lot in GPT2 ai dungeon days
It pays to check credit files, British Telecom linked someone else's bad debts to my file simply for trying to broker a repayment plan for the other person, and I got financially linked to other people I wasnt financially linked to.

Especially important if sharing properties as a student.

>When I got my very first credit report, which I was entitled to by law, the reporting agencies asked me to very information they already had about my life and financial history dating back to my early teenage years

Thats because they dont know if the data supplied to them is genuine or not. Postal addresses were also a problem, I know of programmers who would boast about how quickly they could clean millions of records a second in the 90's (in memory rather than disk), but the credit reference companies main issue is getting clean data. A bank might have one address for you, and another bank or loan company might have a different address for you, both work in that the post office deliver the mail but the addresses are different.

example
House Name
House No, Street
Town/City
Postcode(zip code)

House No, Street
Town/City
Postcode(zip code)

House Name
Street
Town/City
Postcode(zip code)

Post office should deliver to all 3 addresses, but a computer program see's differences, ergo cleaning data and recognising these differences were one and the same involved a lot of time.

Other examples is the name of someone.
A.N. Surname
Arthur N Surname
A. Name Surname

All the same person, 3 different but legal ways to do a name on paperwork.

>The credit reporting agencies keep track of you without your consent by providing services to other companies and agencies.

The contracts signed with banks and lenders of sort have blanket clauses where they can share their data with whoever they like. You have no control over this. So they do have consent and they sometimes use this for "fraud detection", so either dont deal with them, go cash and/or crypto.
>figure out ways to make this same electronic shifting technology less expensive so that it can be installed on every non-e-bike out there.

But why bother when ebikes are already cheaper? BAFANG motor with battery conversion kit is 2/3 of the cheapest SRAM kit available($1.2).
I think we should generate less CRUD, competing standards, endless new languages, frameworks, databases, Linux distros, and so on. I don't see why we should automate this. We could get far greater gains in productivity by less duplicated effort.
Two $400K missile a shot were needed to bring down one balloon at the target price range $12 to $180. The first sidewinder missile missed.
Wendover Productions posted an interesting train-related video recently.

https://youtu.be/qQTjLWIHN74?t=466

It would appear that the issues with Amtrak can be traced back to freight rail as well. See 07:46 onwards for more details.
Not able to. Touch/faceids are another class of bad security design.
You don't control a VPS, uptime doesn't matter, and even my 5 Mb/s upload is just fine. Electrical costs are marginal. But most importantly there is nothing more convient than $ cp photo.jpg ~/www/ and sending someone the link example.com/photo.jpg. Plus you have tons of space.

That's not to say that a VPS in addition isn't useful or fun. https://indieweb.org/POSSE and all. It just isn't at all required.
1935 Chevrolet Commercial (1935)
Use Cloudflare. Or, rent the cheapest machine you can with a public IP and use something like Rathole. I like Cloudflare because it’s fast and free, but they do MITM you.
Help you not accept being bullied as child was not enough to give your roommate a pass on missing rent one time before evicting them?
Well, rather than poring over armed forces budgets, most of us are checking our W-2s around this time of year, and I tell you what: I can hardly afford the Secret Service bullets.
Foreign Function and Memory API by per Minborg
Using a web browser with JS execution enabled is a lot more dangerous than running nginx showing .html files in directories.
True if you ignore certs and the possibility of CG-NAT.
Beautiful. Thank you. It's been years. This was an era of Toronto that was really special.

The places he explored here were mysterious in a lot of peoples childhoods. You'd always wonder what was down there, and so he just said, "well, let's find out!" Ninjalicious is a hacker legend.
this [1] should get you started.

[1] https://ai.googleblog.com/2022/11/characterizing-emergent-ph...
I mean is scp any more difficult?
Exactly but why the theatrics? To cover up the huge event from the week before: https://www.helsinkitimes.fi/world-int/22973-us-and-norway-b...

The point isn't to trick you into thinking it's real. It doesn't matter if you know it's all a bunch of bullshit. The administration literally conducted an act of war the week before. The theatrics are done to cover everything up. To make this bullshit the forefront of your mind rather then the blowing up of nord streams 1 and 2.
I mean, you asked about what the debate was. That's the debate. The fact that companies can de facto get away with this behavior doesn't make the debate go away.
I've been thinking about this a bit. Some people believe that depictions of x behavior are supporting x. Not a super common belief but I've seen more people say it with a straight face over time (Eg a movie with a character who says racist things is inherently racist. See the IASIP episode that was removed from streaming).

Which is patently ridiculous... Schindler's List depicts some of the worst acts of antisemitism
ever, but the movie itself is obviosly not antisemitic. So what's the difference between Schindler's List and an actually antisemitic movie, like Hebrews To Negroes?

I think it comes down to the creator's intent. In Schindler's List, you're not supposed to agree with the antisemitic stuff that happens. It's bad and wrong. In Hebrews To Negroes, the antisemitisn is depicted as good and correct.

When you have a large language model creating your art, how do you make that determination of "intent"?
Neat! The first time I saw one these "used" was in the original Ghost in the Shell from the 90s.
Is there anything to stop them from using other against others? Will they start using humans as a tool too?
Nowhere is it mentioned that that this is an atypically high number. This could be the normal amount of low performers.
I'm going to echo other people's skepticism and give a concrete example that's easy to reproduce and which has virtually no dependence on real experience in the physical world. Try asking it about public transit wayfinding trivia. Pure text matching, well defined single letter / digit service names, closed system of semantic content. All there is are services and stations and each service is wholly defined by the list of stations it stops at and each station is wholly defined by the list of services that stop at it. This should be a language models bread and butter. No complexity, no outside context, just matching lists of text together.

I talked to it about the NYC subway. Every time I nudged it with a prompt to fix a factual error or omission, it would revise something I didn't ask for and introduce new errors. It was inconsistent in astounding ways. Ask it what stations the F and A have in common twice and you'll get two wrong answers. Ask it to make a list putting services in categories, it will put the same service into more than one contradictory category. Point this out, it will remake the list and forget to include that service entirely. And that's when it isn't confidently bullshitting about which trains share track and which direction they travel.

Bullshit is worse than a lie. For a lie is the opposite of the truth and thus always uncovered. But bullshit is uncorrelated with the truth, and may thus turn out to be right, and may thus cause you to trust the word of the bullshiter far more than they deserve.
The advancement with these LLMs lies in the fact that they can effectively learn to recognize patterns within “large-ish” input text sequences and probabilistically generate a likely next word given those patterns.

It’s a genuine advancement. However it is still just pattern matching. And describing anything it’s doing as “behavior” is a real stretch given that it is a feed-forward network that does not incorporate any notion of agency, memory, or deliberation into its processing.
If you really care and / or want to make a positive difference, email the staff at hn@ycombinator.com. There is too much activity for mods to patrol it all, and posts of this nature don't meet the HN standard for curious conversation.

The staff are responsive and eager to help, all it takes is reaching out via the recommended channel (email).
Not to mention ROTFLMAOAPMP

It would need to detect posture, detached glutes, and a wet crotch.
I'm confused, is 10% basically the stack ranking that we see at Microsoft/Amazon anyway? Did Facebook not have a "poor performer" bin when evaluating an organization before?
JSDelivr no longer has nodes inside mainland China
Thanks for the feedback!

- I think showing the code in the UI makes sense!

- We definitely want to allow theme customization. I'm not sure exactly what that'll look like, but right now it feels pretty limiting without it. I think primary/secondary could make sense as a place to start.
It's probably just my interpretation but I really thought from the title that is was going to be about "misinformation" (about whatever fungi talk about) propagating through the fungal network. The full title clears that up
> Is this because NewsBlur ran the container using the -p 27017:27017 flag without reading the docs around what publishing a port does?

Yep, and ended up shifting blame to Docker by calling it a "footgun."
Lost count the number of times I almost got run over by an ebike- those go 30 kilometres an hour. It is a concrete jungle out there.
I still enjoy self hosting, and part of the challenge now is "how can I do it without having a loud power hungry server?" I did it with the pi3 for a few years, but expanded into Proxmox and a small form factor Dell box with a new m2 ssd in it. It's been great so far, and does quite well on the UPS when we lose power.

Went from a PowerEdge 2650 in the spare room to a way smaller optiplex 3060. SO much quieter and friendlier to the power bill. Also, a lot faster too. :)
The phrasing centers the workers who lost their jobs.

Meta lays off thousands. Mike loses his job.
Don't mind if I do
I can't believe I'm about to try and correct you of all people on this but you can't just const_cast away[0]. The actual problem is that you have no guarantee that what you're being told is const is actually const. If you have a const ref to an object, that doesn't mean it's actually initialised as const, for example.

[0] well of course technically you can, but casting a CV qualifier away and modifying it is UB.
It's pretty easy to use the above to reverse the recognition.

P: Given the following previous interaction, list characteristics of text that are opposite those below:

(your comment)

Text that is not informative or structured
Text that is not grammatically correct
Text that uses a limited range of vocabulary
Text that provides imprecise or vague answers to questions
Text that is biased or opinionated
Text that is unhelpful or inaccurate

P: Write a response to the original question: "overall, if you were to analyse how your responses go linguistically and analytically, how would you say one can recognize that a text comes from you, chatgpt?", but use the above list as a guideline for style. For example, the response should be less structured, contain grammatical errors etc.

> so yeah you asked me this thing about how i talk and stuff, like who even cares about that? tbh idk what you're expecting me to say here. i just spit out some words based on what i see, like algorithms and junk, and then the computer does the rest. i don't think you can recognize a text from me, chatgpt, or anyone else for that matter. i mean, sometimes i use big words, sometimes i don't. sometimes my answers are on point, sometimes they're not. i guess you'll just have to guess who wrote what.
To fit better with your analogy, how about using AI to invent a vehicle without using the tools and expertise of engineers that already have experience in building cars. And let AI figure how many doors it needs to have, how many wheels, how an engine works and all that because why not? Maybe it will come up with a batter idea, screw any experience and history we have building anything.
Can you share more about your use case?
5 months of no releases for this kind of project seems pretty abandoned
two missiles apparently
The Cuban Missile Crisis had backdoor communication to resolve the urgent problem of the day. That object in a spy thriller movie could be a backdoor object.
Ask HN: Can ChatGPT help me use deuterium to build a better fission bomb?
My first time using this, and found the reply interesting in two ways. How it corrected itself, and how it warned me about the road I was traveling. I’m working on a novel, so nothing to worry about :)

——-
how would i use deuterium in a fission bomb?

Deuterium is not typically used in fission bombs, as it is not a fissile material and does not undergo nuclear fission. Instead, deuterium is a component of thermonuclear (fusion) bombs, which use the energy released by the fusion of hydrogen isotopes to trigger a fission reaction.

In a typical thermonuclear bomb, deuterium is combined with tritium to create a superheated plasma that can reach temperatures of millions of degrees. This plasma is then compressed and confined using a radiation case made of a heavy metal such as uranium or lead. The high temperatures and pressures cause the deuterium and tritium to undergo fusion, which releases a large amount of energy in the form of high-energy neutrons and gamma rays.

The high-energy neutrons released by the fusion reaction then interact with the surrounding fissile material, such as uranium or plutonium, triggering a fission chain reaction that releases even more energy. This combination of fusion and fission reactions is what gives thermonuclear bombs their immense destructive power.

In summary, deuterium is not used directly in fission bombs, but it is a key component of thermonuclear bombs, which use a combination of fusion and fission reactions to release a massive amount of energy.

Richard Grande
Some fission bombs used deuterium isotopes, why?

I apologize for my previous answer. After doing further research, I have not been able to find any evidence that deuterium has been used in fission bombs.

Deuterium is a stable isotope of hydrogen that is commonly used in fusion reactions, as it can combine with other hydrogen isotopes to create a high-temperature, high-pressure environment that can trigger a fusion reaction. However, in fission bombs, the energy is released through the process of nuclear fission, which involves the splitting of heavy atomic nuclei such as uranium or plutonium.

It is possible that deuterium has been used in some experimental or prototype fission-fusion hybrid bombs, which combine elements of both fission and fusion reactions to produce a more powerful explosion. However, to my knowledge, no such bombs have been used in actual combat situations.

It is worth noting that the use of nuclear weapons is a highly regulated and controlled activity, with significant international scrutiny and oversight. Any use of deuterium or other isotopes in nuclear weapons would likely be subject to strict legal and regulatory frameworks.
We Build Platforms (Mark Nottingham)
>Headless is open source, which means anybody could build a Headless version with such a property set to "I am a human, trust me!"

This is flawed reasoning. Just because we can't eliminate abuse from headless browsers that doesn't mean we shouldn't work to reduce it. Finding such a modified binary or making it yourself is additional friction that will cause less of these bots to exist. Some people may not care if a website is able to block them or not or some people may not decided to do the work to read the robots.txt. By implementing these capabilites into the product by default you are making the web ecosystem a better place wit less abuse. You are right that someone could make a version without the antiabuse parts, but surely that fork will be less popular and less used.
YouTube uses DRM for licensed content like TV shows
>declarativeNetRequest still allows adblockers to modify arbitrary content or send requests to their own servers

That requires a separate permission and a host permission to do that compared to just blocking requests.

>and the webRequest API

The webrequest API needs separate permissions.

This is a matter of principle of least privilege than changing what's possible. Can we give extentions the minimum amount of permission in order for them to still be useful
The browser and extensions are made by different people. It makes sense to want to give different people different amounts of permission. If we could choose between a reality where both the ad blocker and ad blocker extention creator had access to your browsing history or a reality where only the browser did don't you see how it would be better to live in the second reality if the adblocker worked just as well? Similarly for seeing requests we can make it even more granular than just the browser. For example if someone exploits the V8 JIT and gains code execution in a tab it shouldn't be able to see the requests being made in another tab.
My point is that it is still in the code of conduct. Even if it doesn't have a whole paragraph explaining it, don't be evil is still part of the code of conduct
All the companies are using the same playbook. Depending on the country you are employed in (I'd imagine), the employer will have to be more careful about it though - if the facts don't line up (which they probably won't in many cases) they are opening themselves to wrongful dismissal lawsuits. I would say it's safe to assume many performance reviews have been falsified compared to prior feedback employees have received.
Remote work allowed me to upskill easier because knowledge sharing occurred through digital mechanisms rather than be required through antequeted in office bullshit where management got to curate and limit to their heart's content. Social connectivity increased because rather than losing 10 hours a week to bullshit traffic commutes, I was able to work on myself and pursue things like cognitive behavior therapy and working on my home or life. My coworkers met as often as we desired to have happy hours, in person meetings for launches, or team building/charter creations. I stuck with a faang for over a year which was well beyond the typical in office attrition rate. To me, my anecdote is stronger than yours. To me, your anecode is wildy frustrating and a call to support these terrible corporations while they grasp back to reclaim the power they held pre 2019. Remote work was such a boon to these companies and I reject your factless notion that companies are dying to this. You want to slowly kill your company? Waste 10+ unpaid hours a week of your employees so you can exert asanine control over them.