skysight-inc/HackerNews huggingface dataset:
“The guy” controls a pipeline that did not sanitize its inputs.

The DB equivalent is letting a drop table statement run against prod.

It’s where supply chain attacks occur.

Full transparency would mean opening their code, CI/CD pipelines; all their tech stack would be public. So yes, that is what I want. Not this South Park “we are so sorry.”

This all really should be openly available and accountable to public scrutiny if we’re going to call it the future of the internet.
We ran a phone check at a Y Combinator event in SF
I love building analog things that measure digital output.
While snarky, this is a pithy comment. You made me chuckle (and wonder what we're in for).
You can and should implement auth on those endpoints if you have any concern about them being accessed.
> The short position is fundamentally the belief a venture will fail and historically there is three ways for that to be a successful bet; 1) be lucky 2) do your research thoroughly and then be lucky or 3) cause that venture to fail.

This mirrors precisely the ways for a long position to succeed. A holder of shares in a venture can work to cause that venture to be successful. This is pretty common, in fact.
Customizable Icons with Font Technologies [video]
Me too! Pol-Joel-lee~

https://www.youtube.com/watch?v=frXL4tdaxqQ
> poorly documented or changes quickly

[otherwise a (code) monkey could do it] is missing the point of programming.

I know managers who code (occasionally) who think similar. I thought so personally before I had actual prolonged experience with professional programming.

It is hard to express it concisely: why it is fundamentally wrong (category error: like thinking that perl regexes can be reduced to DFA--it is impossible in the general case even if DFAs can [sometimes even should] be used in many cases instead).

It is the same reason why waterfall programming fails most of the time. It is the same reason why generating code from UML diagrams produced by analysts is also a failure in the general case. It is the same reason why log normal distribution can be a good model for software estimation https://news.ycombinator.com/item?id=26393332

And no, you can't replace all programmers with a LLM prompt for the same reason (at least until [if ever] it reaches AGI and then humanity would have much bigger problems).

"agile" became a noun but if you look at the origins, you might get why "craft" may be applied to programming. Try "The Pragmatic Programmer" book.
The article mentions chips, stacking, packaging, memory and yield in the second paragraph, and foundries, dies, silicon, ICs and PCBs in the third (and that’s just 10% into the article), I thought it was obvious pretty quickly.
Do people realize that it's analogous to being polite?
According to this is not fixed yet...
https://github.com/redis/redis-py/issues/2624
> I get all these developer-focused, SEO-optimized blogs that are kind of helpful but often not, and I have to scroll all the way down to get the official docs. I really wonder if that has to do with AI-generated content becoming more ubiquitous

No. There's a cottage industry of content writers that just churn out this stuff by the bucket.

I have tried to hire writers in the past that should've been niche experts but just regurgitated content like this, and had SEO experts trying to convince me that we should actually aim for low quality because higher-quality articles will be too dense for people. (both contractors got the boot and the "content" went into the bin)
feels awful but i bet the dopamine hit the engineer got from finding and fixing the bug felt fantastic
My issue with it, for open source projects, was that it was not really clear what exactly would happen, and then my understanding of what would happen did not please me at all.

My understanding was that I had 30 days to migrate my projects away (or pay, but for many open source projects there is no money). If I did nothing, I would lose access to my images on their registry, but the image would stay (and rot) there, which is even worse than the image being removed.
Sure, though the manifests and specs are public as far as I know, but confidentiality is a very different thing to a security issue.
It's a really bad way of finding the "best" team too. I think this was written about by Babbage criticising the tennis tournament at Wimbledon but I don't have the reference to hand and my memory is unreliable.
For now ChatGPT will refuse to solve any bon-trivial programs, but i expect that getting behavior just right will require a prompt so specific that its actually hard than just writing the source code yourself.

It's one thing to ask GPT to write a high level script to trim 5s off a video using ffmpeg. It's another thing to ask GPT to make ffmpeg, or even to make a specific modification to ffmpeg.

It's hard to say how good GPT will be at real-world programming since we currently can't try it out. Maybe it can scale to the task, or maybe it can't, but i wouldn't say that programming is "finished".
The code compiles and runs very cleanly and smoothly under win32 and linux mint. This is probably an issue of size_t being different sized in a platform or the code using int64_t everywhere but int is 32 bit. Thanks (and is not ironic).

Shogun
That's too extreme. The economy would fall apart and a lot of people would lose their livelihoods.

Think about second order effects. YouTubers. News stations. Newspapers. Film crews. Publishers. Writers. Marketers (who do more than just ads). All impacted.

Many of the products we use everyday would no longer be viable. Even the premium tiers are supported by ads.

Engineering salaries would be broadly impacted.

The economy is driven by hustle, sales, and ads. I'd rather live in this world than one than one that has no ads. We'd be less productive: less employed, less eager to buy, less eager to work. Maybe some aspire to that, but that society won't be building rocket ships and inventing immortality.

I do hate ads, but they're better than not having them. And I understand their utility and the overall ecosystem they support.
I think OP is getting at the replacement of the potential models who Levi's would need to hire
Let's be clear here. Even if a company commits to something in a public statement, it's no guarantee.

Even if the writer of the post explains lessons learned and policy changes they're making, it's no guarantee. The people who learned the lessons can leave the company. Policies can be changed at a moment's notice or simply never be enforced.

The best anyone will get is a contract that can be legally enforced, and that won't ever happen for free users.
Also they literally say in the postmortem that the same bug was resulted in exceptions most of the time and only sometimes leaked data. So all those exceptions were right there as a giant clue.
Google actually did build an IDE that they use internally called Cider, but it's so tightly integrated with their weird monolithic VCS that it wouldn't make sense to release it publicly.
Depends on the type of audit. Subtle bugs are often uncovered by fuzzing, for example, but a race condition might not be found without substantial load.
This is an interesting perspective of how ML can influence standardization. I have been thinking a lot recently about the dichotomy of structured and unstructured data and how each eb and flow. I have felt like a data plumber for quite some time and optimizing that process is a hobby of mine lol
as someone that has accidentaly destroyed two laptops with liquid spillages, i have never understood the programming in a coffee shop thing, but doing it in a bar???
RUM monitoring does 99% of what you want already. Anomaly detection is the hard part. IMO too early to say whether gpt will be good at that specific task but I agree that a LLM will be in the loop on critical production alerts in 2023 in some fashion.
Not long I bet, the DevOps space is ripe for automation.
Amazon CEO says job cuts to exceed 18,000 roles
That is not accurate. If a US citizen buys, for example, an extra $1000 in euros that are not spent, and the exchange rate changes, it is a taxable event.

The specific line item is on Form 8949, to report gains from foreign currency exchange transactions, Part I and it absolutely applies to vacation travelers, not just FOREX investors.
That is assuming that they would make the same image-related changes if doing it required hiring more actual minorities, which is purely speculative.
Isn't the internal version of "copilot" (for Cider) pretty good, though?
This is good that individual stories are not externally censored.

But.. I don't know the org structure of NPR, but it's possible that over the long run for the NPR suits to fire journalists who don't toe the "party line", or refuse to give them promotions or salary increases. If they can, or have in the past, there would still be self-censorship of stories by journalists.
Underwhelming.

Much better to drive south of Amarillo an hour and spend some time in Palo Duro Canyon, which is magnificent.

Or visit the Goodnight Ranch museum. Small, but interesting.

Charles and Mary Ann Goodnight Ranch State Historic Site
+1 806-944-5591
https://maps.app.goo.gl/roWMrpW6YJXkeqBp9
Wall Street Journal, financial times, the economist, and Hckrnews :-)
> Countries don't all use their own currencies

Sure. I think this missed the point.

I didn't say/intend "a country / army needs to be backed by a unique currency"

I said, "For a token to be a currency, it needs to be backed by [at least one] army and [at least one country's] taxes".

e.g. The Euro happens to be backed by multi armies and at least Germany's taxes.

> Some countries don't have any armed forces unless you count the police.

Again, it isn't "their army" but it is "an army". e.g. Liechtenstein is backed by "Austria and Switzerland under an informal agreement among the three countries." https://en.wikipedia.org/wiki/List_of_countries_without_arme...

Anyways, if we disagree that is ok too. All of this is quite fuzzy really.
> What does GPT know beyond what we have (directly or indirectly) taught it? Could it have figured out how to extract five seconds of video from an MPG file if that knowledge had not been made available to it? Would it have invented the MPG format (or something comparable) on its own? Would it have developed the web and HTTP protocol on top of TCP/IP?

Would you?
I've been listening to Breaking Points with Krystal and Sagar a lot lately. Still not sure I "recommend" them, but they have solid representation on both sides of the political spectrum, and their takes are unique and usually interesting.

They do overwhelm my ears, however, and I can't often make it through a full episode in one sitting.
Utah isn't even the first US state to do this. California, Texas, and Louisiana led the way
Judge decides against Internet Archive
I understand where you're coming from. But there is certainly an audience for this kind of post that would like to read about the objective source of the bug without connecting it to some expectations around responsibility.

I read this post, and I don't see it assigning blame to anyone other than themselves. See this bit copied from the post:

> Everyone at OpenAI is committed to protecting our users’ privacy and keeping their data safe. It’s a responsibility we take incredibly seriously. Unfortunately, this week we fell short of that commitment, and of our users’ expectations. We apologize again to our users and to the entire ChatGPT community and will work diligently to rebuild trust.
Looks to be standard USB 2.0, just a special connector and a few extra pins I'd probably don't need.

https://github.com/FrameworkComputer/InputModules
I don't see a standard 90 day certificate in the phrase "even shorter-lived certificates." If it was a 90 day certificate, it wouldn't be shorter-lived. It seems to me Let's Encrypt was referring to the possibility of exactly what you asked for, separately from revocation.
isn't that why RISC exists?
Or ads in yellow boxes on the side, as it used to be
> Did they promise it will be free forever?

No, unless having a free tier means forever.

Docker announced they would end the free "teams" tier and that people would need to migrate to a paid plan to retain their teams. The communication was rocky and non-specific as to the details of the impact and only gave a 30-day notice.

They quickly (next day or two?) followed up to give more specifics as to what that means (and doesn't mean).

Now a couple of days after that they are pulling back on it completely due to backlash.
Probably they could have gotten away with extending the time-frame... I'm not sure why anyone would think 30 days would be ok, but I suppose it is the free tier.
That link honestly makes a good case for why people should pay for Docker Hub. I'm not kidding.
Maybe it was but with a different title? Who knows.
I'm surprised with some of the responses you've received on this.

But I absolutely know what you are talking about. I often SSH into new machines, that I may not have root access on, that may not even have internet access, or be a distro with a package manager (e.g. some switch running a custom distribution).

In those situations it is a huge advantage to know the tool, rather than try to do some gymnastics to get your tools onto the box or the data off the box.

These "old" and "broken" tools are installed as defaults on all these systems for a reason.
100% this. If this wasn’t Docker’s first time making a bad decision maybe I would think that this decision is on hold indefinitely.

But it isn’t and they don’t deserve the benefit of the doubt. I will be continuing with my original plan of communicating ideally not using DockerHub internally and making every effort remove our reliance off of it.
I assume you mean Nintendo using the iNES file format to distribute NES ROM files?

All evidence currently points to them simply using the format (possibly because they hired an iNES developer way back in the day), not them selling you pirated ROMs.

For one, none of Nintendo's ROM files match any pre-existing ROM files you can find on the internet. [1]

During the gigaleak (an event where Nintendo's internal network was breached and many files were stolen), it was found that Nintendo has a vast archive of master ROMs that they pull from whenever they need to re-release a classic game. While they may use community-dumped ROMs for internal testing, they are highly insistent that they ship their own original copies in retail products. In fact, it was even found that they had a tool to convert from their internal format for storing NES ROMs (CHR and PRG ROM data stored in separate files) to the iNES format. [2]

[1] https://www.reddit.com/r/emulation/comments/uaszvp/no_ninten...

[2] https://luigiblood.tumblr.com/post/682410911082921985/no-nin...
When I read the title I was just blown away by the stupidity.
>After listening to feedback and consulting our community, it’s clear that we made the wrong decision in sunsetting our Free Team plan. Last week we felt our communications were terrible but our policy was sound. It’s now clear that both the communications and the policy were wrong, so we’re reversing course and no longer sunsetting the Free Team plan

Seriously, what else do you want? This kind of pointless whinging is just noise. They flat out said they were wrong in the first place.
I just skimmed this. Somewhat seems like a lightweight federated overlay OS. The shell bit is nice, like that. It's like finger for apps.
I bet againt it
"A decade ago, we had no idea that the rocks beneath our feet could be so vastly inhabited."

Over 30 years ago Thomas Gold published "The Deep Hot Biosphere". A review in PNAS is here [1].

[1] https://www.pnas.org/doi/10.1073/pnas.1701266114
This is a huge fumble, but it will be inevitably swept under the hype train and forgotten about.
So does teaching others.
Love the analysis steps, it's wild how many utilities out there exist for this work, it can be maddening to keep track.
The ad based revenue model is done, yes. A lot of sites will still exist though behind paywalls.
I think maybe "Floats" and "Ints" in this case are not referring to numerical computation. Perhaps not the best terminology.

The point being, that typical components are organized on a 2D wafer's surface, aligned with the 2D's surfaces two axes. Transistors are not normally oriented with arbitrary rotations in the 0-360 range of possible rotations.

One reason for this alignment, is that a consistent angle between transistor layout and the silicon's preferred crystalline plane direction, allows for control of material stress and device electron mobility.

That would hold even stronger for 3D structures. Transisters are still likely to oriented in exactly the same way on the 2D surface of each wafer. Not oriented to any of three possible 2D grid orientations of a 3D grid (think: the three 2D surfaces that come together at a corner of a cube).

And certainly not oriented with arbitrary rotations across all three dimensions.
At this point in the timeline I would be proud to declare myself a Neanderthal.
What are you working on?

How would you EEE Microsoft?
Do you guys write for yourselves, or write to present ideas to others?

I mostly write for myself— that's where ideas get figured out. Most of this happens in an Apple Note or in Notion.

I'm apprehensive about all the time I'd be spending polishing something up to put on a blog somewhere, mostly because of the time it takes to explain stuff. We all know that if you take shortcuts and don't speak to a predefined audience, at some point it'll get picked up on HN and torn to shreds...
The site has a way to change the theme (custom accent colors), so I think the site doesn’t actually use default blue link colors
Some people certainly believe so[1], there are also plenty of other links if searching for ’facebook myanmar genocide’ (though I would assume they a few common sources). But intentions are of course hard to prove.

[1] https://www.amnesty.org/en/latest/news/2022/09/myanmar-faceb...
You could just not have the expectation that people are robots who are the corporate definition of productive, 24/7.
«Open source» was in the opening line of the statement as if it was something to blame.
I've adjusted my habits and now every time I start a podcast I immediately hit the "fast-forward-30-seconds" button 2-3 times and just start listening from whatever spot that lands me on. Once in a blue moon I'll rewind a bit if I really want more context. And for stupid podcasts (that I still listen to occasionally for some reason (like The Fifth Column)) I'll just keep fast-forwarding 30 seconds until the joking has stopped and there is only one person speaking at a time.
California (I’m not bothering to fact check Texas and Louisiana) did not pass a law requiring proof of age. California passed a law requiring certain sites to estimate the age distribution of their users, which some outside observers opined might lead to the sites imposing some kind of proof-of-age requirement. [0][1]

Utah adopted an age verification requirement.

These are not the same thing.

[0] https://www.axios.com/2022/09/16/california-law-websites-chi...

[1] https://www.techtarget.com/searchcio/news/252529455/Californ...
> Inflation is happening because everyone is making more money

Real average weekly and hourly earnings have decreased.

> and everyone got a bunch of during covid

Several thousand dollars is more money? That’s one rent or mortgage payment.

> and now a lot of people are having large swaths of debt cut from their lives

Where?
I think the mention of exactly where is useful to this audience. Other people using the same open-source library might realize --- oh, we've run into that bug but never realized it. Low probability, sure, but nonetheless.
Parent poster was expressing distrust. I get it. There's emotional turbulence from flip-flopping on a important decision within a week.

The tiresome aspect is also putting his own words into the CEO's mouth, to make his point. Even though parent poster is probably somewhat right and we are feeling similarly, the cynicism shines through.
Without spoiling anything, I do think The Judge is in my top 3 all-time fictional characters.
Have you tried getting it to explain the code to you
Oh wow, I didn't even realise they had reversed the decision, I moved my email domains to a different setup with the Cloudflare email routing and never even heard about the reversal.

Although, I just went to try and click the 'Confirm account for personal use' button and it gives me the error 'Your account is ineligible to switch to the no-cost option because you first need to upgrade to Google Workspace Business Starter. Then do this process again.'

Which isn't particularly obvious what they want, are they asking me to pay so that I can click the button? Who knows.
Driving A Tesla Upside-Down [video][12 mins]
Eamon games - Computerized fantasy role-playing system for the Apple ][
I know it’s bending the rules a bit, but a mere upvote doesn’t do your great service justice. Thank you, I love learning about xkcd gems. I guess I should go through them all!
They do indeed. but their argument was/is that their CDMA licenses made it so that your phone/tablet/etc design was feasible at all. ARM could make this claim too but in ARM's case, it doesn't have standard-essential patents required for network interoperability. That's the bit that pissed Apple off so much that they ordered their suppliers to stop paying the royalties.
Yeah, but we don't have that kind of tech yet. When someone figures out how to build something that learns like a human does--where, even though all the books I ever read sucked, I am still a better programmer than any of those authors ever were and notably better than I was yesterday despite not reading anything new--then the world is going to change in a fundamental and potentially devastating way... but while that day might come literally tomorrow, it also isn't obvious it will ever come, and just because GPT exists doesn't imply it is going to happen. GPT is not that, though, and no matter how much data you throw at it it isn't going to become that without a fundamentally different architecture.
I've always been curious: Would it be more appropriate to ping connectivitycheck.gstatic.com instead of 8.8.8.8 or google.com for connectivity check purposes?

Google probably doesn't care one way or another at small scales like personal use cases, but the saying goes that there's no such thing as a stupid question.
that is quite low for FAANG level SRE/SWE .
A game designer talks a little bit about talking to computers.

I like that she highlights how personal using your voice is. A perspective that deserves more attention.

I also like the flying spinning pizza on her website.

https://nicole.pizza/
Redis latency is around 1ms including network round trip for most operations. In a single threaded context, waiting on that would limit you to around 1000 operations per second. Redis clients improve throughput by doing pipelining, so a bunch of calls are batched up to minimize network roundtrips. This becomes more complicated in the context of redis-cluster, because calls targeting different keys are dispatched to different cache nodes and will complete in an unpredictable order, and additional client side logic is needed to accumulate the responses and dispatch them back to the appropiate caller.
During my sojourn in The South I learned quickly that every Southern Belle fancies herself a descendant of Pocahontas when Id charm them by asking:

"Are you part native American?"

(In fairness to them though, native blood in the South is not unlikely after several centuries)
Anyone saying that developers gonna be replaced with AI just don’t trully understand what software engineering profession is exactly about.