skysight-inc/HackerNews huggingface dataset:
> I never ever click those things

> a lot of times I use Youtube is to show something to my kids.

Do your kids use to click on that lowball content maybe? My Shorts and all the recommendations are focused about what do I really use to watch. I do not want to watch Shorts at all, to be honest, but at least they seems to be really interesting. For achieving this level of quality of the recommendations, sometimes I use to "watch" in a background tab with no sound some videos from [1] for letting Youtube think about me as a little bit smarter than I actually am.

> Youtube ads

Why not to learn your kid about how to use adblockers and/or discuss why adwares from Internet are so bad?

[1] https://news.ycombinator.com/from?site=youtube.com
> People tend to compare these frameworks on things that don't matter - often it's performance.

Performance on the end-user device, especially if you're just under/over certain thresholds like 1sec to switch "tabs" or whatever you're using, does matter. Especially if you're trying to get people to buy stuff.

I wish all developers had to routinely try their products on a low-end 2-year-old smartphone. That would take the discussion of whether performance matters to a more informed level.
This is one reason I hate locked down hardware like iDevices, and the whole App store model. If there were not these central points of control such a thing would infeasible to implement. Banning a company like Apple from distributing an App on their app store effectively bans it.

Like you can't install any software on iPhone that has not been "blessed" (aka signed) by one Apple's private keys. Well unless you find an exploit to free the device from their control. What is so crazy about this is Apple does not even own the hardware after they sell it, but they won't let you disable signing in the boot ROM or at the OS level. If it were about security they would at least let you load your own signing keys. It's not though in my opinion it's about control. I even consider it a violation of property rights.

This is simply because if you own something you should be able have full enjoyment of your property without interference. Further, one major fundamental aspect of owning tangible property is the right of exclusion. The cryptographic system Apple has setup allows Apple to control the right of exclusion when it comes to deciding what software the CPU will and will not run. Apple is effectively reserving the right of exclusion regarding what CPU can execute via cryptography. Crucially, when something is sold legally this means all property rights are transferred to the buyer with few exceptions. One being copyright the original holder of the intangible property reserves/retains the right to copy/reproduce. Despite not legally having the right of exclusion Apple decides what can be excluded from running on other peoples hardware even after selling it.

The short and simple is I should be able to decide what to include or exclude from something I own. In this case, one must ask Apple first which shows how your right of exclusion has been infringed.

This also applies to other devices not just iDevices, but anything with locked down boot ROMs/loaders, but Apple is well known for their "walled garden" (I don't like this term nothing garden like about property right violations).

As for tik tok it's an easy target for such government overreach.
I don't think the sentiment in itself is harmful. I agree with the conclusion, but I believe the problem is, there is so much accidental complexity built into this space. Path dependency makes it hard to get rid of it, so rational developers and start ups end up contributing to the problem.
You don't do that.

Why would fetching data depend on whatever is being rendered?

You know what data you need or not need before rendering anything, or you will be in a world of pain.
Edith Wilson Kept Herself–and Her Husband–In the White House Magazine
What does a model of truth imply then? The ability to perfectly classify a statement between "truth" and "lie"? If so, then it's not needed for thinking, because humans can't do that, either.

The only definition that makes sense to me is "some way to classify statements into lies and truth based on inputs", and that fits into what the parent came up with.
dedicated fork:
https://github.com/remixer-dec/llama-mps
Oh so people are getting like facebook-login.tk and catching passwords or something, I guess. I'm sure there are tonnes of (free) @gmail.com or @yahoo.com accounts used for phishing though? Or AWS hosted serves? Maybe Meta should be paying engineers instead of lawyers, to protect users, it is kind of an arms race thing. Easy to blame the little guy (Freenom).

But I agree with other commenter - the amount of data Meta is scraping, and time wasted to addiction, is potentially more damaging than a few domain names.
Surely ChatGPT has been trained on vastly more data than most humans have?
And there are known examples of children/young adults with phenomenal problem-solving skills even for problems very unlike anything they would have been exposed to previously.
It seems to me extremely unlikely human problem-solving intelligence largely relies on looking for patterns in snippets of language we've previously been exposed to. I'd agree we rely on it for knowing how to express ourselves in a given language though.
There seem to be two competing definitions
A friend of mine recently bought a computer with a really decent GPU (he needs to process significant amounts of non-English content through Whisper, which requires him to use the large model), and Whisper was running much, much slower than expected. It was a custom build, assembled by a small-ish company here in Poland. He opened the machine up, and it turned out there was some kind of foam inside that the company put there to secure all the components during transport. Thankfully, it was discovered and removed early enough not to cause any damage, but we were all very surprised.
Right, I'm not speaking against GOG or id Software. They run businesses and it seems like a totally reasonable decision to exclude these. Doesn't change the fact though, that it is good to have the original releases properly archived.

It's not really a new situation. We've dealt with tons of cases like this and generally decided that it's not a good idea to remove media from history because we've found their authors to be horrible people. Contexts, like the one you described, should only add to the history, not remove from it.
Needs (2021).

Discussed at the time (133 comments): https://news.ycombinator.com/item?id=27968900
> When using React I usually just use MobX and everything just works.

Same. React as a UI library is great. React as a state manager (hooks) or a framework is (hooks or hooks+next) is not good. Writing and fusing business logic to a framework is always a bad idea
People in EA donate lots of money to causes that help people today. AI is just one of the more interesting subjects they often talk about.

AI safety isn't about Roko's basilisk, or the idea that AI will take revenge on us for our moral choices. It's about the risk that an AI smarter than us will be made and built to pursue some goal without caring about our well-being.
Easy! Article 44 of the GPDR explicitly prohibits the transfer of private information outside the conditions of the regulation. The cloud act requires the transfer of the private information without consideration to anything but US laws.

GP's advice is solid. Avoid US cloud services for handling any private data.
The slippery slope fallacy turns out to be accurate far more often than the people who resort to invoking the slippery slope fallacy would care to admit.
PoPHPularity – Is it decreasing and what to do about it?
The first thing ChatGPT reminded me of was the précis in Neuromancer.

`Panther Moderns,' he said to the Hosaka, removing the trodes. `Five minute precis.' `Ready,' the computer said.

It wasn't a name he knew. Something new, something that had come in since he'd been in Chiba. Fads swept the youth of the Sprawl at the speed of light: entire subcultures could rise overnight, thrive for a dozen weeks, and then vanish utterly.

`Go,' he said. The Hosaka had accessed its array of libraries, journals, and news services. The precis began with a long hold on a color still that Case at first assumed was a collage of some kind, a boy's face snipped from another image and glued to a photograph of a paint-scrawled wall. Dark eyes, epicanthic folds obviously the result of surgery, an angry dusting of acne across pale narrow cheeks. The Hosaka released the freeze; the boy moved, flowing with the sinister grace of a mime pretending to be a jungle predator. His body was nearly invisible, an abstract pattern approximating the scribbled brickwork sliding smoothly across his tight onepiece. Mimetic polycarbon.

I guess we’re still months/years away from it stitching together an intelligent sequence of video clips, though.
> With Linux, crypsetup and lvm I wanted to kill myself.

With what, Linux from scratch or something? Eg: Debian has had "encrypt disk" in the installer for a long time. Granted, if you want a super custom setup - it's trickier - but then it kind of is inherently more complex.
"that would mean lower profits for employers (who contribute a higher percentage of their income)"

No, for equivalent 'net money on your wallet after tax' a company pay more tax for employees than for company owner.

Without detailling too much (and by choosing an 'arbitrary but realistic situation') the are two ways of getting money from your company to your personal bank account :

- a specialy taxed "company owner" salary (you can make simulation here : https://mon-entreprise.urssaf.fr/simulateurs/eurl , yes I choose a specific company category, but it's a common one, you can compare with a the 'standard' employee tax numbers : https://entreprise.pole-emploi.fr/cout-salarie/ ) which give you benefit from the social security system and which cost a bit less (for a standard company owner range of pay) than an employee salary.

- A 'company profit share' at the end of each year. You 'decide' how much you company profit was this year and that you want to give to owner, you pay a "less important tax than on salaries" give it to the owner, and then they pay their personnal income tax on it.

The optimisation game is to ensure yourself a sufficient salary to have a good social protection (and other perk like being abble to rent/buy/loan money easily) but also benefit from company income share wich is less taxed.

I dont even talk about legal trick to avoid parts of the company income tax, wich is way more complex to handle than a salary.
Brief Notes on Computer Word and Byte Sizes
I have my money on the good old "configuration error".
Good point. I thought the fresh ocean winds would dilute those, though probably most of that takes place in closed environments.
The current system requires more workers ( with decent salary) than number of retirers...
Given the population if getting older this creates an a very prévisible imbalance...
Consider the difference between spellchecking an essay or fact checking an essay. The two are very different actions, you can ask a human to spellcheck an essay and he will mark spelling errors, or you can ask him to fact check it and he will mark out statements he thinks are wrong. So humans know the difference.

So a spellchecker isn't a fact checker, you don't call the automated spellcheckers we have "truth models" or "truth checkers", they just check the spelling. ChatGPT is the same as that but more advanced, it just checks that the text looks nice, it doesn't care about the facts in the text. Humans can do that too, if you give a novel to a human and ask him to read it with comments, he wont go and ask for proof that the novel has happened or that everything you wrote is possible or factful, he will just check that the story makes sense.

Edit: So we know that humans can tell the difference between these kinds of actions. We might not be able to define a strict rule for them, but since human can tell the difference a general intelligence should also be able to have a truth model, a grammar model, a story model etc. ChatGPT has just one way to evaluate texts, it doesn't have the many ways human has that lets them evaluate the truth, the grammar or the story separately.
I still don't think you're really providing any examples or arguments that make your point, though. You're just coming across as really salty about IPv6. I'm not downvoting you.

IPv6 has link-local addresses that aren't routable, so you can't really get more local than that. Unlike a typical IPv4 setup, typical IPv6 hosts have multiple addresses, and you can make your own for local traffic and only rely on ISP prefixes for internet access if you want to.

Sure, the internal host's internet routable IP address is visible rather than being masked behind the router's IP address. Pretty much all operating systems periodically randomize the bottom 64 bits, making it effectively as opaque as NAT. You could call that a hack, but people call NAT a hack. There's tradeoffs.

The CVE links you provided are just lists of vulnerabilities with "firewall" in the name. Skimming through them, I don't see how they're specific to IPv6? Most of the vulnerability descriptions I read seem equally problematic for NAT setups. The one IPv6 specific one I saw had to do with a bad firewall rule allowing access to LAN facing services running on the router; it could have just as easily been a bad IPv4 rule.

I agree, consumer network gear all sucks. IPv6 is bolted on as an afterthought, and is probably buggy in a lot of them. More features means more opportunity for bugs, but that's true of anything. IPv6 isn't being deployed for no reason; there's limited IPv4 addresses to go around. I still don't follow why IPv6 is fundamentally riskier than IPv4 when traversing a router. Sure, with NAT an incoming packet needs to have a port number that's been dynamically mapped back to an internal host and port, or have a static port forward. In IPv6, an incoming packet needs to have a destination address and port that's been dynamically mapped back to an internal host and port, or have a static firewall rule. It's basically the same, but also less complicated for the router because there's no translation involved. In time, less complexity is good for software hardness.

I also get anxiety from trying to wrap my head around IPv6 address assignment. It is nuts. It's very comforting to work in the effectively 8-bit address space of a /24 IPv4. I suppose it's true that you can't control internet routable IPv6 addresses in that they are dynamic and ephemeral in their nature. Coming from IPv4, it feels messy. I've experimented in detail with configuring my own ULA, DHCPv6 configuration, and SLAAC. I've tried to embrace the benefits of IPv6, and having used a few of the features I can appreciate them for what they are.
I haven’t it since Chrome was big.

Does it have allow searching by folder yet? It’s the killer feature that I need in Acrobat
HomeAssistant Supervisor Authentication Bypass
Just because the author wanted to write an optimising compiler doesn't change the fact that this might be better served as a library. The author could have written an optimising compiler for a language with a purpose that couldn't be served by a library.
I have to agree and to be honest, I was having an objective go of Mid Journey today, honestly, I think it's kind of underwhelming. I know I'm not supposed to say that but it was mixed feelings for me, kind of amazing, but also a lot of regurgitation. The model seems to have it's own style it has trouble escaping for a lot of the images requested.

I mean it's amazing that image can be generated from text but honestly, you have to take what you can get, it has it's own "style" you need to just accept what it gives you, even if you prompt it for a long time. There seem to be certain cases where it really excels and others where it just fails really hard. It was interesting to see the way people were trying to use it and how far off the mark it was.

However, what really struck me though is how it's such a blatant rip off factory. I asked it to generate some images of musicians I like as sketches, and in some cases it was reproducing famous posters etc and in styles and with similar outlines to those I've seen before. Then the way it takes "styles" of say Ghibli studio and rips it off is just, trash.

Most artists just wouldn't do that, they might imitate a style for study, borrow ideas for inspiration (of course) but a professional / respectful artist would develop their own style not to rip someone off so hard.

It's quite ridiculous the thing is legal. IMO MS PR must be going into over time convincing us this is all ok.

I can't wait till people start ripping off MS product with it and see how they feel.

Those who make the argument not allowing this to continue because it's holding back "AI" have really drunk the cool aid. It's fine people research, but to charge money for using other peoples work like that, it's disgusting.

I'd say most artists would be ok to lend their art to AI to actually improve and push the boundaries of art itself, but this whole "draw me a scene from x movie, or copy blah's style so I can use it for anything, including commercial purposes", what a load of crap, ha.
Knowing a few plumbers, I'm sure it can be, but it can be a very feast or famine trade. And most that make that own their own business, so still blue collar, but not exactly an everyman kind of job.
The synchrosqueezing or reassignment is a technique for sharpening a time-frequency representation
> The videos are great for those low on attention span

I have kind of an opposite experience because I can open a long video and just do not care about it while doing my own business. But I can not not to pay attention while watching some short videos because in few seconds my computer will stop talking and I need to invest some attention into it for loading the next video.
ENS has DNS import via TXT Record verification proof, so the entire DNS tree can coexist in ENS trustlessly as long as future ENS-only TLDs are chosen wisely (seems simple: just use 0x80+ Unicode.) For example, try resolving my domain, "raffy.antistupid.com" in ENS.

I believe, the ENS registry only contains "eth" as an rogue node (also "[0-9a-f]{40}.addr.reverse" is used for wallet names). Recently, ".art" started offering tokenized names, where you get both DNS and ENS.
> beyond allowing others to send/receive messages

Just publishing the specs will not allow anyone to send/receive iMessages. It's built on a closed loop CA / certificate system.

Remember that Steve Jobs actually announced on-stage it would be an open protocol without actually discussing that with his engineers? The architecture is designed to be closed from the get-go, and opening up the iMessage ecosystem in it's current design is simply not possible without giving 3rd parties considerable access to Apple internals, affecting a ton of stuff beyond iMessage, and pose serious security risks.

Could Apple re-design a messaging system which would allow this and roll it out transparently to all it's users? Absolutely, but that would require a ton of engineering work, and won't be there tomorrow.
The rules do work on the AST but the current cookie rule is not as advanced as it could/should be. For example, we really should treat encryption as sanitizing the value.

We'll take another look at the rules with this in mind. If you are able to share the (rough) approach you take to build the cookie string it would help us to ensure we're covering the specific case(s) you have.
It'll die with the environment it helped destroy, that's for sure.
Doesn't that have a corollary: if their web app is faster than everything else they use, won't they love it?

Anecdotally, those 90% of users are not happy about their experience, they just tolerate it.
I generally expect Lowe to present findings engagingly and as fairly as I can expect to see in the lay press. And that's about it for me.

I literally have a bag of erythritol in my pantry and I am literally eating from it with a spoon. I am eager to see follow-up studies. That said, the fact that the authors found a substantial effect and identified a clear mechanism of action is what makes me pay attention. And I appreciate Derek Lowe bringing it to my layman's attention.
Speaking for myself, I have already gotten more use out of 2 weeks of chatgpt than I have out of 16 years of Bitcoin
> Frameworks like Preact, Vue, Angular, Marko, Solid, and Svelte have all adopted some form of fine-grained reactivity. They’re called signals, stores, or observables. The semantic differences might be important, but I’m going to refer to the concept as a signal.

I would call this concept noodle. Because when there's a lot of them you get back your tasty spaghetti. The whole reason for React was avoiding it whenever possible.
How to Use a Yubikey with Fedora Linux
> Hardware bound encryption like with a TPM is not supported. Also Linux is still exploring here as far as I can tell (no installer offers that).

True, OTOH AFAIK you can add tpm unlock to a typical luks setup after installation, see my other comments:

https://news.ycombinator.com/item?id=35067375 (ed: fixed)
Hello AWS China regions. Both of them are completely independent from AWS.
Buy the average $400 windows laptop and $250 android phone and you'll see.
Ask HN: How do you feel about AI-generated writing?
I wanted to get your perspective on AI-generated writing. If I were to come across a blog post here that I found interesting but later discovered that it was generated by AI, I would feel a bit off about it.

However, if the post contained all the valid and relevant points, does it really matter if it was written by a machine or a human? Is the authenticity of human writing always necessary, or can AI-generated content be just as valuable?

I'm curious to hear your opinions on this matter.
How Britain ceased to be a computing superpower
Not sure if the evidence is credible, but over at The Reg is an interesting thesis that women would rather go full darksider than flirt with vague immorality.

https://www.theregister.com/2023/03/06/in_brief_security/
Youtube Enhancer can convert controls for shorts videos into regular controls. You can do it by hands, just replace in address line "shorts/" with "watch?v=".
Discussed extensively last year: https://news.ycombinator.com/item?id=26776956

One key point there is that it’s still easy to trigger cases where you need this hack, because the cleverness is only stable for up to four arguments; so and, or, and parentheses all exceed the point of safety.
> current best practice is to stop messing with themes and just use modus

Bold statement. Those look mostly terrible to me.
I don't understand the animosity around useEffect. It executes a function based on a list of dependent variables. That's it. Once you understand that, its purpose becomes very clear.

You don't want to rerender? Use useEffect with an empty array! Or don't use any state variables!

You want to show something new to your customers / users without rerendering? Well sorry, that's impossible, regardless of any framework you use and you should go back to UI development 101.

Bottom line: if you write clean code and are aware exactly of what your local state / redux variables are (or whatever state management you are using), you should never have a problem with too many rerenders. I've been writing React for 6+ years now and have NEVER had to reach for useMemo or useCallback.
What Plants Are Saying About Us
The rationalist and EA communities are often credited for taking Covid much more seriously sooner than most and the media did. https://unherd.com/2020/12/how-rational-have-you-been-this-y...
Thank you! Spoke to Apple support and will now send them in. This seems to be the problem.
How Islamic Rule Changed India