skysight-inc/HackerNews huggingface dataset:
Everyone should standardize on HTTPS to pull repositories instead of plain (non-certificate) SSH. A username and password (often called an API token) are used instead of an SSH key.

- An SSH key can be revoked on the server, but the client won't register it immediately, and all clients must manually verify the new key signature and update their local configuration. This doesn't happen with HTTPS; the client just works with the server's new cert, no user intervention is required.

- A username can be used in the HTTPS URI to tell both your client and the server what credential to use. SSH method requires the user to load the correct SSH key first.

- Most servers like GitHub allow more fine grained access control for HTTPS tokens than SSH keys.

- HTTPS access method works on all HTTP proxies, whereas SSH is often blocked.

- HTTPS can be faster than SSH.

- HTTPS allows a client and server to use specific ciphers to address regulatory and other requirements.

- HTTPS tokens are supported in a wider range of password managers/keychains than SSH keys.

- Most users don't password protect their SSH keys, but they often have a password manager with a master password that they can keep HTTPS token in.

- SSH key management is much more complex on the user end than HTTPS token management. The former requires ssh-agent, a key generator, and instructions for use, as well as specific filesystem permissions for keys.

- The user often doesn't understand the idea that they shouldn't share their private key. But everyone basically gets they shouldn't share their password.

- Virtually no one ever checks the fingerprint of ssh server keys. Often entire companies have configuration that disables host key checking, completely eliminating the security SSH is supposed to provide. With HTTPS the user is implicitly protected with no actions necessary.

- Nobody ever commits a private TLS key to a GitHub repo, but apparently they do with SSH private keys...
> Debtors over savers. This is well documented in econ textbooks - inflation is a transfer of wealth from savers to debtors, because debtors can pay back their debts with less valuable money.

Wouldn't this be true when interest rates are fixed only? People with variable rates will suffer as interest rates tend to spike during inflation and drive bankruptcy.

Also given wages lag inflation, the debt cost proceeds the payback.

So it feels a mixed case of, this will make some people loose out significantly, but those that can see the other side do well.
This reminds me of a comment I made 1.5 months ago [0]:

I was logging in during heavy load, and after typing the question I started getting responses to questions which I didn't ask.

gdb answered on that comment "these are not actually messages from other users, but instead the model generating something ~random due to hitting a bug on our backend where, rather than submitting your question, we submitted an empty query to the model."

I wonder if it was the same redis-py issue back then, but just at another point in the backend. His answer didn't really convince me back then.

[0] https://news.ycombinator.com/item?id=34614796&p=2#34615875
Absolutely! Food safety is critical!

Let's just be honest with ourselves that these regulations cause us to have less stuff, and consider when they are worth it, and when they are not.

And 100% - making it easier for individuals/businesses to comply with regulations is winners all around.
In other words, his dismissal - at its root - isn't about Michelangelo’s ‘David’. It just happens to be the one that got the result. Like getting Al Capone on tax evasion, and not all his other shenanigans.
>“She wasn’t let go because of the artistic nude pictures. We show it every year to our students,” Bishop said, adding that Carrasquilla “voluntarily resigned.” “The problem with this particular issue was the lack of follow-through on the process.”

So why wasn't this in the first paragraph? I thought the article was sensationalized because of what it lead with, while leaving any counter-arguments toward the bottom.
Performance Tips for C++ Developers
I trieD this in both DDG and Google (using the !g macro with DDG).

DDG first page of results all pointed to zoom.us links. Google (mediated through DDG !g) contained all sorts of spam links to sites like subdomains of uptown.com.

Crazy.
With enough progress in robotics, the redistribution will be preventable.
What kind of candy bars are those? That's like 10 candy bars. A US Hershey bar is only 220 calories which is pretty standard for a candy bar. The real MVP for calories at minimum price is peanut butter. A bottle of Walmart peanut butter apparently goes for $2.18 currently and is 2880 calories total.
you’re retrieving data from a cache, is it so outrageous to say that they should confirm that the data belongs to the account is retrieving it?
> This gives them very little incentive to actually help people at the bottom of the totem pole

Err, votes are the biggest incentive for politicians.

> Is a shelf stacker in Sainsburys a high skilled job? No. Is it absolutely crucial in order for Sainsburys to have a working business? Yes.

Not really, they will soon use robots.

> The same is true for the cleaner in a bank. If a bank is covered in dirt and stinks people are not going to bank there. Likewise with cleaners of trains and pretty much any other industry.

I think in Japan cleaning is robotized already.

> When you pair the fact that governments are funded by the same people whom are also funding a divisive narrative throughout all media outlets you end up with a grim and bleak outlook for society.

Governments funded from taxpayers money.
Based on what I saw on that website, only a handful of people couldn't draw a bike well enough to get the point across. A few more than that posted designs which can't function (fixed front wheel), but are easily recognizable as a bike. Most are fine. Certainly not supporting that 90% of people won't be able to do so. A diagram isn't a spec. It's designed to convey higher level ideas of which most of these bike illustrations are fine for.
Why do you think people will respond rationally when they have an irrational problem?
I think it's more that Google has gotten noticeably worse, not that Bing has gotten better.
I think the people who can code well and write good technical documentation are going to transition well into the fully AI-assisted world. So much of what I'm seeing involves not so much the ability to code well, but the ability to write clearly about what you want your code to do. I think the people who can write decent code but struggle to write good documentation (comments and formal docs) are going to struggle to make the transition.

The tools are going to write more and more of the code for us. We're going to be spending more time writing about the code and less time writing code.

(I posted this as a comment on the article, but there's more active conversation here so I pasted it here as well. I'm curious if anyone else has thoughts along these lines.)
Using FastNetMon Advanced with FerretDB and PostgreSQL Instead of MongoDB
On the one hand I feel empathy towards the engineers because I know third party bugs can feel somewhat unfair and obscure.

On the other hand if I understand correctly, the bug arises from an edge case from an error that was very common. I constantly receive these errors using the chat interface, and that’s an organization issue. There should be an SRE team or someone to notice them and try to fix them.
> According to the BNPL industry, fees and interest make up a small portion of their overall revenues. Whether that's wholly accurate is another story.

It may also be irrelevant; I'm more interested in their forward-looking forecasts than their current revenue sources.
Exactly, a massive aspect of public / traditional schooling is anti-socialization.
I do not believe it's necessarily nefarious in nature, but maybe more specifically it feels kind of like they're implying that this is actually a valid escape hatch: "Sorry, we can't possibly audit this code because who audits all of their open source deps, amirite?"

But the truth is that actually, maybe that hints at a deeper problem. It was a direct dependency to their application code in a critical path. I mean, don't get me wrong, I don't think everyone can be expected to audit or fund auditing for every single line of code that they wind up running in production, and frankly even doing that might not be good enough to prevent most bugs anyways. Like clearly, every startup fully auditing the Linux kernel before using it to run some HTTP server is just not sustainable. But let's take it back a step: if the point of a postmortem is to analyze what went wrong to prevent it in the future, then this analysis has failed. It almost reads as "Bug in an open source project screwed us over, sorry. It will happen again." I realize that's not the most charitable reading, but the one takeaway I had is this: They don't actually know how to prevent this from happening again.

Open source software helps all of us by providing us a wealth of powerful libraries that we can use to build solutions, be we hobbyists, employees, entrepreneurs, etc. There are many wrinkles to the way this all works, including obviously discussions regarding sustainability, but I think there is more room for improvement to be had. Wouldn't it be nice if we periodically had actual security audits on even just the most popular libraries people use in their service code? Nobody in particular has an impetus to fund such a thing, but in a sense, everyone has an impetus to fund such work, and everyone stands to gain from it, too. Today it's not the norm, but perhaps it could become the norm some day in the future?

Still, in any case... I don't really mean to imply that they're being nefarious with it, but I do feel it comes off as at best a bit tacky.
Yet without stackoverflow chatgpt wouldn't be particularly helpful
I'd bet closer to six (6), and that can probably be verified (or at least ballparked) by looking at some of their SEC and other disclosures like franchise info.

But that's just direct bosses-boss levels. Doesn't take into consideration things like... PMs, suppliers, customers, Health & Safety (which will vary by locale), unions, security, accounting, HR, public relations & the media, the board of directors, and all of the myriad depts. that will pop up in odd or varied ways.

Maybe not 100 levels, but certainly dozens and dozens of interested parties.
ASUS laptops, as of 6.1, I think, have kernel support and a userspace CLI and GUI to trivially configure this stuff (`asusctl`). In Windows, you can use GHelper and avoid the hundreds of megabytes of gaudy crap that is Armory Crate to configure this as well.

`asusctl` (the CLI), and `rog-control-center` (the GUI) lets you configure fan curves, "ultimate mode" (mux switch), LED lights, effects, panel overdrive, battery charge limit and more

And then `supergfxctl`, when "ultimate mode" is disabled, allows you to configure "Hybrid" or "Integrated"(-only) graphics modes.

For completeness/disclosure, flipping the mux switch aka Ultimate mode on/off) requires reboot, though it seems this may become unnecessary with new/future hybrid graphics tech in laptops.

ASUS should shower the developer in money, this G14 2022, all AMD is the most satisfying, best, complete out of box Linux experience I've ever had. And I've owned a lot of Lenovos, Dells, etc.
There's ESP32-C3. I think it sells in decent volumes. Note sure where did they license the RISC-V core on it (they otherwise use Xtensa).

There's probably more parts with data sheets in Chinese only.
GCC: Via an old, unofficial port: https://github.com/itszor/gcc-6502
Well, Sundar and Google leadership have been massively outmaneuvered here by both Nadella and OpenAI. It's really quite embarrassing, particularly in the context of the fact that Google was the undisputed leader in AI for over a decade.

As a Alphabet shareholder, I won't be sad to see Sundar go.
Where do I find more people like you when I'm job hunting? :)

I used to work as an attorney before getting into software engineering, and I clearly took for granted that other educated professionals (particular those in a field where precision is required) would write clearly, logically, and succinctly. My expectations have frequently not been met.

It's particularly humorous, as everyone who has hired me has acted like they were taking a big risk because of my non-technical background. Yet, each time, they quickly realize it was a good idea to hire someone with a strong command of the English language and a ruthless attention to detail.

Of course, the technical skills are required as well, but I don't think people appreciate how easy those are to pick up for someone who is capable of reading and distilling voluminous amounts of information in a short period of time.
How would you know if you are discriminating against men?
Business idea! I have a fig tree in my backyard, and will happily ship a few leaves anywhere in the country so people can tape them to marble statues. Free roll of tape with every purchase!

(If the USDA wants to complain, I'll sue on religious grounds)
The second most terrifying thing would be an expert university professor on the warpath because they have to correct every single passing remark ever coughed up.

We are giving critical experts way too much responsibility to hold the untrained chatgpt-er masses to account.

Open-standards fact checking, or a global heirarchy of reputation could be plausible solutions.

I really don't want to listen to another set of public academics, so a global resource like wikipedia, with a secure (or conceptually secure-ish) blockchain-alike technology to ensure the untampered communication and authenticity of the original fact source, to relay "base factual" information on the web, would be preferable to my mind.
> Kids submit GPT homework and it’s either correct (rendering the skill the homework was testing worthless)

LLMs are trained entirely on content produced by people. If people stop developing the skills required to produce well thought out content, the models will stagnate and even decline. They are completely dependent on humans for content input, so the skill of creating it will always be worth something if the language model is worth something.
Well - they have had more bugs and will have more bugs to worry from.

https://twitter.com/naglinagli/status/1639343866313601024
I have noticed that too. Google has become so useless. And with all the little knowledge stuck behind reddit dark patterns, discord locked and utterly unsearchable world. And the modern forum stuff a mess of slow JavaScript that loads on demand. It's like finding knowledge is a fine sand fallings between the fingers. YouTube has some bit of interesting content, but it's 10min for 30s of info plastered with sponsored content. And finding something is harder and harder. ChatGPT and the like won't resist long becoming the same.

My only hope is that it will eventually bring back the notion of trust. Naybe finding a programming job will be harder outside of your network of friends. But won't require silly interviews anymore. Maybe we will get back to lifelong tenure at work?

Anyways I am just rambling here. What do I know anyways.
It's absurd how Google will simply ignore the keywords in my search to feed me whatever it's trash algorithm decided fits my search.

And the decline in Google Maps has been shocking. Maps has gone from always reliable to being "trust it if you like wasting time and burning fuel" bad.

I don't know what the hell happened at Google, but it ain't pretty.
I basically learned to decouple the services from the OS it's running on (back before containers and all were a thing) so I focused on making it easy to spin up a new machine and restore a service. Over time, this made OS upgrades immaterial and made it easy to spin up an additional instance.

This led to containerization and virtual machines being a good fit for my habits.
You're quite correct - but poor people's money also does that. Rich people's wealth is generally less productive in being accessible for loans since it's generally tied up in speculative investments... compared to less well off folks that are more likely to have a pile of cash in a bank account.
But where the rubber hits the road seems to be in niche stuff like accelerators (which is indeed a great application for RISC-V) and low power embedded stuff.

Other countries (like Russia, and China's MIPs thing) have pursued novel architectures for higher power general purpose computing, but its mostly for government use I think. China pulling off a societal transition to RISC-V would be quite a coup.
Freshdocs is incredible. A lot of people are stuck in the old mental model where Google released a new index every month.
I agree with your business analysis, though I take no position on "green man bad."

I'd add to your analysis that, given the immediate IPO-driven need to demonstrate they can increase margins, raising prices sooner is probably better than later because RISC-V is not yet a viable competitive alternative for ARM's most attractive customers. However, later it very likely will be and if RISC-V proves to be a threat to ARM's blended margins, ARM can drop prices then because at least the IPO will be over.
The commuter rail as-is is too infrequent, too packed and too polluting with all those stops & a diesel train.

Overhead electrification on the commuter rail lines or even battery-electric trains would allow the T to run Green line style trams further out into the 'burbs out to I95 and let the commuter rail trains focus on the I495+ outer burbs/medium distance without having to stop frequently on the inner part.

Reusing the existing commuter rail lines with trams is much cheaper than building new T lines as they did with the Green line into Medford (and if you don't live in Medford, it doesn't help you!).
Hah, yeah, but who knows how long they can keep this up? They already had to let go of the open-source aspect of it, and instead stabbed the concept in the back. I hope StabilityAI can do better.
Because home prices are tracked so closely, sited widely, and used as a barometer of economic success and political success.

But yeah I think that's weird and destructive. Wouldn't it be better to prominently track and celebrate how much new housing is built?

OTOH, many people have all or most of their net-worth tied up in their home price. So even though NOTHING CHANGES when that price goes up or down, it has a psychological affect on them, who vote a lot.
> I'm of the opinion that it should be illegal for companies to offer the ability to buy ads for registered product names or trademarks.

I'm of the opinion ads themselves should be illegal. Companies can "advertise" in a catalog I can choose to look at, but would no longer be allowed to invade my attention with their bullshit constantly.

We've let marketers ruin too many good things as it is, lets just kill off the entire industry for the good of society.
Those are deflationary. They reduce transactions (because you want to spend less) and they reduce the money supply. Wealth taxes reduce the money supply as well, but they increase transactions because you have to buy the currency to pay them in by selling your assets.

That's because you still have to pay wealth taxes in currency, not just by giving up your "wealth". You can't pay taxes in 1/4 of a house or painting.

Although I'm pretty sure an 80% wealth tax would just collapse the economy because people wouldn't own their homes or businesses anymore. Maybe you could take 80% of their debt too?
This is the long-standing joke with enterprise software.

Company: how much money does your product cost?

Seller: how much money do you have?
Disabling a key does not help with the spacial issues having a key there in the first place adds for some folks.
This is complete nonsense. Yes, people overeat, but it only takes a small surplus of calories to put on weight.
The Evolution of LeanStore
The existence of things like "git implemented in awk"* serves as a great reminder that there are a lot of developers out there who are far, far, far, far more talented than I will ever be. I salute them.

*Especially keeping in mind that these people wrote things like this for fun.
Doesn't help that many Stackoverflow results at the top of Google had their last answers in...2015.
The blog post mentions how this does help with the push for shorter cert lifetimes.

> ARI can be used to set subscribers up for success in terms of ideal renewal times in the event that Let’s Encrypt offers even shorter-lived certificates in the future.
Team DDG, anyone? https://spreadprivacy.com/duckassist-launch/
For the same reason people claim to be underpaid. At some point, its not worth the investment.
I don’t love the lack of quantitative comparison to Alpaca but a commercial model (which sounds like it’s in the works) would finally move the needle on democratizing access to LLMs.

Will also commend the authors for not falling into the “LLMs can’t perform without 200B params!” fallacy. For anyone reading, 6B params is enough to train on a 3090. A PC rig for training or running inference with this would put you back maybe 4k$.

The end game here is likely getting the model to perform well in millions of parameters on specific tasks. Most business uses of ChatGPT are pretty closed domain tasks, it wouldn’t be a huge step to distill this model on a specific task and get it down to 150-350M params (which is roughly BART size and can run on AWS Lambda even).
I think you are reading a bit between the lines, and didn't feel them blaming the library as much as stating that the bug happened because of an issue in the library. Maybe they could have sugarcoated it between 10 layers of corporate jargon but I'd rather take this over that
Donald Trump Shares Fake AI-Created Image of Himself on Truth Social
> Like it would have to evolve into an entirely different class of life

what do you know what it would have to do? sure, bleach dissolves bacteria cell walls, so for a change to make bleach coming into contact with cell walls not dissolve them would make the cell walls not belong to a bacterium, but what if the bleach that you apply to a surface to kill bacteria is prevented from making contact with the cell wall of a bacterium through some unforeseeable adaptation of that bacterium? now it's resistant to bleach but still a bacteria, and now it's out-reproducing other bacteria.

what adaptation would cause that? no one could say, it's _unforeseeable_.

the actual situation of interest isn't bleach coming in contact with bacteria, it's humans trying to disinfect surfaces by applying bleach.
Yeah, I don't particularly see the value of having the founders back - they haven't been hands on for a real long time.
There's a very short path from a Galton Board to Pachinko. Down that path lies the dark side?
Los Angeles?!

He clarifies that it's probably due to a low sample size. But still... LA?

It seems like the "surprising" success of the US might be due to skyscrapers being largely built by the private sector, which is pretty good in the US, while American public sector construction is, unfortunately, something of a running joke.

Good on him for recognizing the mistake (autocorrelation) in a previous article.
Apple had a secret x86 port of MacOS System 7 in the early 1990s ("Project Star Trek"). Similarly, Apple continued to maintain a public x86 port of Darwin and a secret port of Mac OS X ("Project Marklar"), prior to Apple's transition from PowerPC to Intel. They no doubt have a secret RISC-V port of macOS today.

https://en.wikipedia.org/wiki/Star_Trek_project

https://www.macrumors.com/2012/06/10/a-bit-of-history-behind... the Mac OS X on Intel Project "Marklar"
Oh, well, OK, if it was only some basic crowd-control gear such as machine guns and what-not, no biggie, I guess. We cool.
That chart shows a net increase in M2 of about 5% for the UK, rather than multiples - the Y axis doesn't start at zero, which might be misleading at first glance.