skysight-inc/HackerNews huggingface dataset:
> LastPass breach related.

The unencrypted URLs are such a screw up that no one should ever trust them again. Their security related products would all fail if people understood what a disaster that is.

I was super frustrated by it because I had an old (mostly unused) LastPass vault with a shared folder and a handful of MS365 tenants along with some registrar accounts. That probably puts my vault, and the vault of anyone with access to the share, ahead of many other vaults in terms of being targeted as high value.

Luckily it was only me and 1 other person with access to that shared folder, so it was pretty easy to assess the risk. Both of us had good passwords and hadn't ever used anything weak.

Now imagine in a larger organization. What if a dozen people have access to the LTT channel? All it takes is for one of them to have used a weak password on their vault and now the identifying info that came along with the vaults becomes a huge issue because it allows them to be targeted as a high profile organization and suddenly there's a huge increase in the odds of a weak password causing a compromise.

> Poor opsec from Linus (and by association probably also the rest of their upper management team).

Ultimately they're content creators. Being tech enthusiasts means they're probably doing better than a lot of other creators, so maybe some of the blame should start shifting towards the big tech companies rather than the victims.

My hot take is that by competing to control identity the big tech companies are making the entire security ecosystem significantly more confusing for the average person and I think big tech should be taking the blame for a lot more than they do. How are we supposed to keep up with dozens of complex security schemes from different companies?

Per-user pricing also discourages good security practices because profiles are always treated as users. You see it in everything. I use multiple profiles on Windows to silo work for different people. I have to go against the grain to manage everything and now I'm supposed to buy 4 Office licenses because the licenses have been changed from per device to per user (profile). 99.99% of people will give up and use one big account.

It's the same for password managers too. I switched to Vaultwarden because I can create multiple user accounts and do a better job of keeping different roles separated.

For example, I have some high value passwords that are only ever used from a dedicated machine. In Vaultwarden I use a separate user that only gets set up on that machine. In any other password manager that's an extra user account and, by the time everything shakes out, I'd need a half a dozen accounts just to silo my data responsibly. Not a single normal person is going to pay for that. They'll use one big account for everything.

So IMO big tech takes a lot of the blame for our lack of security because they're building for profitability first and security second.
I'm not sure, but we did not want to be the highest point, hence the run to shore.
There can even be an opposite incentive, where fixing an issue that was wasting time means more or different work is assigned to everyone
I have one extension installed in my Chrome browser: uBlock Origin. This is the browser I use for logging into important accounts, and general day-to-day browsing.

For development and experimentation, I use Chrome Canary, where I have about a dozen extensions installed.

Don't install extensions in your main browser!
Yeah if it keeps improving at this rate $20 for ChatGPT+ will be absurdly low. I can see a future where both this is $100+ per month and the top tier of Copilot is $1000+ per month.
Fox News "depicts or describes, in a patently offensive way, sexual conduct or excretory functions"? That's news (sorry) to me.
This is not a competition in getting it to answer right, though. It’s that the instances where it answers wrong demonstrate its lack of inner mental model of what it is supposedly reasoning about, as well as a lack of meta-awareness. I think we tend to underestimate what mere linguistic correlation is capable of producing, and are too quick to attribute intelligent reasoning and an inner mental model to it.
> people have modded it to make it more like other AAA titles

If anyone is interested in an example, I found this: https://m.youtube.com/watch?v=IP0B45hUPgo
OK. Clear as mud :)
What would you propose as a way to fix censorship of books by Amazon? I can't think of anything other than government regulation in some form, so I'm confused about why the government censoring books in public schools wouldn't be equally concerning.
I provided two other very reasonable alternatives in my prior comment. All three of these options make sense and are used in various contexts. But other than these three choices, I can't think of any others.
> How does a 22 year old get the funding to start something like this?

By having SpaceX and Blue Origin on your resume. Noone was also in front of the FAA as a student, which turns heads.
You can pick up the Framework Laptop DIY Edition with no OS or OS license included, and bring whichever distro you want.
Tomatoes were also viewed with suspicion initially in Italy and used only ornamentally. It wasn't until the 18th century that tomatoes really became accepted in Italian cuisine.
Gmail also had a live counter showing your storage space increasing every few seconds. The storage space definitely seemed astronomical relative to the competition at that time.
They seem to be live/public now.
Here are a few...

https://www.ai21.com/
https://www.anthropic.com/
https://cohere.ai/
https://huggingface.co/bigscience/bloom
https://goose.ai/
https://bard.google.com/
https://ai.facebook.com/blog/large-language-model-llama-meta...
We would absolutely love to see a Tenstorrent Expansion Bay Module.
Funny, just the other day I was wondering how they deal with the fact that this same subdomain is used for image uploads. That seemed like a security risk to allow user-generated content on the same domain where you could log into Reddit. So maybe that's why they removed it?

Also, obligatory pronouncement that if they ever remove old.reddit.com I will never be back (well, ok, I might use it through Apollo, but I certainly won't be browsing through any of their web interfaces).
<< Until that happens, let's not insist that one side fight with one arm behind their back when the same tactics are widely employed on the right.

What are you proposing here exactly? Drop all the rules until everyone behaves?
That article is very annoying as it is anchoring into silly technicalities. Yes, modern pizza came from Napoli and Italy (as a unified country) didn't even exist back then. But it is a complete sillyness not saying modern pizza is not Italian.

"Let me repeat that: Pizza isn’t Italian.

Pizza is Neapolitan. It’s a distinct speciality of Naples, developed at at time when Italy didn’t even exist as a nation. Saying pizza is Italian is like saying haggis is British. It might be technically true, but not really. "
They do use different mainboards in order to enable all of the functionality that exists in the Framework Laptop 16 (6x Expansion Cards, the Expansion Bay, and the Input Module system).
yeah, I can forgive the outriggers. I wouldn’t want to drop a 4800 lb. bicycle on my leg. It would be cool if he had the wheels tuck in when he reached a high enough speed.
I find the Guardian's ideology annoying most of the time, but I occasionally click through HN links to their articles. When I find an interesting one that I might not have found elsewhere, I PayPal them $5. I probably give them $15 a year in that manner. So, thanks, and keep it up.
See https://www.youtube.com/watch?v=gA1sNLL6yg4

To be clear, nobody thinks GPT itself is capable of doing anything really bad. (They actually tried to coach GPT-4 to escape onto the internet and it failed.) It's that more that 1) they think we're definitely within 5-10 years of creating something which could become SkyNet, and 2) we don't actually know how to ensure that that an AI wouldn't decide to just kill us, and 3) the nature of competition means everyone is going to try to get there first in spite of #2, and therefore 4) we're all doomed.

I'm not as pessimistic as Yudowski, but I do think that his fears are worth considering. It looks like OpenAI are in a similar place.
> Why is that a stupid thought? What is so preposterous about "just statistics"

Suppose you have N variables x_1, ..., x_10 and you want to predict y_1, ..., y_10. You know that each y_i depend on each x_i in a complex, non-linear way.

How many samples would you need to to make sense of distribution? How does number of samples grow with N?
Pure ad hominem: don't address the content, criticize the speaker
How could this:

> Stanford now has more than 10,000 administrators who oversee the 7,761 undergraduate and 9,565 graduate students—almost enough for each student to have their own personal butler. (There are about 2,290 faculty members.) These bureaucrats make up an increasingly powerful segment of the university population, as they expand their portfolio and send the message that all conflict should be adjudicated by them. (OCS reports for the 2022–2023 school year have not yet been released.)

Lead to this:

> “I’m sitting in two-hour-long interviews on Zoom with lawyers who are trying to verbally and rhetorically trap people,” he said. “I had young kids that were 18, 19 years old who are international asking me, ‘Hey, can I talk to this attorney and tell them I drank a beer, or am I going to get my visa revoked?’ ”

I guess if you can't make it as a student there, you can always become an admin to bully those who put the work in to get admitted?
I wouldn't call her "professional"
Hey!

Looking into getting the AMD one for Linux! Has the Battery Life issues been fixed?
I rather disagree!

Writing and discussion are great ways to explore topics and crystallize opinions and knowledge. HN is a pretty friendly place to talk over these earth moving developments in our field and if I participate here, I’ll be more ready to participate when I get asked if we need to spin up an LLM project at work.
announced their intention to leave... to the company... in response to the company making an open offer to people of terms for them to leave.

That seems like a slightly different prior, in terms of our Bayesian assessment of the probability that those people remained employed at the company afterwards, than your hypothetical engagement to Ms Johannsen.
We don't have any benchmarks we can share yet, but we absolutely expect that there will be press reviews that do comparisons between Intel and AMD-based Framework Laptops.
I think so, but I'm not sure.
That's correct, it is a 16:10 16" display.
Nor D. :)
But "Airspace access" IS controlled by the FAA? If I want to fly a plane into the sky over the US, I have to ask the FAA for permission. I'm trying to understand what you were alluding to in your previous comment.
Timeshares too I hope.
> If this happened to Stripe, do you think that Stripe couldn't publish information about their AML compliance process

TBH, they're limited in what they can talk about. Publicizing details about AML processes (e.g. about specific patterns of behavior that the company associates with fraud) is likely to make them less effective.
> And OpenAI talks on and on about 'Safety' but all that 'Safety' means is "well, we didn't let anyone allow it to make jokes about fat or disabled people so we're good, right?!"

No, OpenAI “safety” means “don’t let people compete with us”. Mitigating offensive content is just a way to sell that. As are stoking... exactly the fears you cite here, but about AI that isn’t centrally controlled by OpenAI.
You have to accept the sites cookies to play the embedded video
Ah we're on the Foundation path just without the psychology.
Hey 93po, can you please temporarily add your contact details in your bio, I would love to write you and regularly check in on your career pivot! I'm also interested as well!
Of course they can! For now.

Next step: this porn type needs to be filtered out

Eventual step: all LGBT+ material isn't legal in this state and must be filtered.

Also: "Providing such a passcode to a child would be forbidden, except when done by a parent."

Better hope no one posts it online. Won't someone think of the children!
I don't understand what you mean by "the other way".
> Instead, she hijacked the event

Did she use a gun to hijack the event? Did she use a knife? Or did she walk up to the podium, with the speakers permission, and perhaps got a little carried away from the stated intent of her speech?
It's extraordinary, openai could probably licence this to Google right now and ask for 25% equity in return
It makes total sense! A half worn out battery may no longer be useful to you inside of your laptop, but can still be useful as an external power bank.
I can't speak for WA, but Google doesn't have my phone number, or any other PII. OpenAI does.
"For the past several years, Stanford has required students to adhere to a Student Party Policy, which includes a highly detailed “Harm Reduction Plan” mandating multiple sober monitors and designated alcohol service areas, and prohibiting the serving of any hard liquor.

Party hosts must also provide “EANABs,” or Equally Attractive Non-Alcoholic Beverages, to “contribute to an inclusive and inviting experience” for all partygoers. Hosts are also required to take an online “Party Planning Course” before submitting their applications. "

Is this normal!?! I feel sorry for this generation. Attempts to make their world risk free has turned it into "fuck up once and we'll destroy you".
CrunchComp – Equity Calculator
Crunchcomp helps you calculate your taxes on equity compensation, including RSUs, ESOPs, and ESPPs. With Crunchcomp, you can input basic information about your equity compensation, such as the grant date, exercise price etc and get a rough estimate of your tax liabilities and net profits when you exercise, vest, or sell your equity.
Well, she's basically a traditional Democrat, but the woke activists woke her up.
Sometimes it isn’t a big deal, depends on the context and whether unexpected failure modes have dire consequences.

A black box AI algorithm that generates shirts in a video game? Sure, sign me up. Worst case scenario the shirt looks weird or the game crashes. I’ll live on the edge a little and file some bug reports.

A black box AI algorithm that handles critical safety systems? This requires more thoughtful scrutiny.
“Give me a lever long enough and a fulcrum on which to place it and I shall lift the world” - Archimedes.

It’s like this guy took that idea and applied it to bicycle gears.
Amusingly, John Wiseman's classic SAS survival handbook has advice for this situation.

> You can sometimes sense that a lightning strike is imminent by a
> tingling in the skin and the sensation of the hair standing on end. If
> you are standing up, drop to the ground AT ONCE, going first to the
> knees with the hands touching the ground. If you should be struck,
> the charge may take the easiest route to the earth through your
> arms - missing the torso and possibly saving you from heart failure
> or asphixiation. QUICKLY LIE FLAT.
The first three activities lead to depression and anxiety. The fourth, interestingly enough, has properties that can reduce depression, though they have to be the right kind of games, played the right way.
I did read the other page and google around... but you and the other comment nailed it for me, thanks.
The Expansion Bay interface repository is now up (as well as the Framework website).
Can I prove that: yes. That was my opening statement. I have their statements, and I have my account transactions.

There are three key numbers here: the net amount reported in the app, the net amount listed on their buried report, and the amount paid. The net amount in the app is correctly calculated according to their own report of settled asset value and amount. The net amount in this buried report and amount paid do not match that.

Since these numbers again, are not estimates and never change, including after any settlement period, there is no legitimate explanation for the discrepancy.

You mention audits as if audited companies never commit financial crime.
The article suggests that the best course of action in that case is to squat lo.
Business alignment (what “Open”AI care about) and human race related alignment are completely different thing.

Imagine chatgpt says something factual but not politically aligned about US military–industrial complex.
Again, there is no line between individual relationships and life altering consequences. You piss off the love of your life, you lose your spouse. You piss off the dean of your college, you lose a chance at an education. You piss off your boss, you get blacklisted from a company. Actions have consequences and part of your freedom is that you have the option to screw up your life.

Freedom of speech means you're not going to go to jail for what you believe in, you're not going to be fined, no one can legally beat you or invade your home or do anything else to you that they are not allowed to do to everybody.

But the idea that a bank has an obligation to you just because you really need a bank is absurd. If I believe you to be damned forever because you looked at me funny, the government has no right to force me to believe otherwise, because that's what freedom of belief really means. I'm sorry that you live in a real world where being ostracized from society is extremely undesirable, but maybe consider doing things that don't get you ostracized from society. Alternatively, go live alone in the woods. Those are the options we all have.

If you think people should be compelled to endorse the speech of others, then just admit you don't believe in freedom of speech.
My memory was that they were worried about GPT-2 if society weren't ready for it. So they've been trying to make people aware of what its capabilities are. I think ChatGPT really did an amazing job of that, as I said. Now everyone knows that computers can write low-quality drivel for pennies a paragraph, and as a society we're starting to adjust to that reality.
You think that's bad, look at the "I know it when I see it" ruling that was literally 6 old white men ruling that they could decide what was pornographic based on their own personal opinion.

https://en.wikipedia.org/wiki/I_know_it_when_I_see_it
If you think books talking about a kid having gay parents are sexually suggestive, the problem is with you, not the books.
"all eggs in one basket" to the extreme.

You couldn't describe better what a startup must do.
You can say the same thing about humans... our greatness over the rest of the animal kingdom comes from tool use.

Microsoft researches just put out a paper about 'proto-AGI' in the last 24 hours or so, and tool use was a big part of the paper.
same...I feel weird because I learned AT&T syntax since day 1. And even with that, I think Intel syntax is just another way of writing, period. No hard feeling at all. Don't quite understand why the author is so...pissed.
Closer to a pedicab as far as definitions go.
If you say "I don't see the grounds for banning or regulating porn" but you mean "I disagree with the concept of consumer protection regulation altogether", you're wasting people's time.

Just say the more general thing in the first place so people don't have to bother trying to argue the finer points of the specific case.
I guess they are betting that openAI will be such a big platform that many companies will need this capability.
Not a bad idea I guess
Aaand another even simpler one: https://github.com/egoist/openai-proxy

This one uses Reflare under the hood: https://github.com/xiaoyang-sde/reflare
Here's a good start: https://community.frame.work/t/what-is-the-best-way-to-dual-...

See also https://gist.github.com/Informatic/49bd034d43e054bd1d8d4fec3...
I see what you are saying. Agree. Seems we need some set patterns in NN models that will reliably remove reversibility without effecting loss too drastically.
No. The laws don't expire; we are mostly ruled by laws that we were not in any way represented for.

Everyone who was of voting age who could have voted for senators who ratified the income tax amendment is dead now. There is no person now living under the sixteenth amendment that was involved in its passage.

None of us alive today were voting for congressional reps back in '33; correspondingly the securities act applying to us is not in any way related to representative democracy. It might as well be dictatorial edict for all of our involvement.
I’m sure the regular employees will love enduring an entire day dedicated to the sociopath’s dog and pony show.

The CEO should just go work in a coffee field for a day. What an ass
I'd not heard this on my tpot. But I absolutely agree, the ground is moving so fast and the power is so centralised that the only thing to do is spin up quickly make money, rinse and repeat. The seas will calm in a few years and then you can, maybe, make a longer term proposition.
GPT-4 Creator Ilya Sutskever on AI Hallucinations and AI Democracy
I spoke about this new technology with Ilya Stutskever, a co-founder of OpenAI, about battling hallucinations and OpenAI's army of human disciplinarians to make GPT-4 behave.
Reddit Registers Domains for Defensive Domain Registrations
The question is how fast can you replicate it?

People will use the best solution. Chrome came after firefox and ie and opera and become more populare because it was better.
Is this your personal blog? Rather Labs seems like a rather large firm. No knocks on anything though the website is great
maybe "centrist"?
The problem is, this will have downstream effects. Google funnels people onto third party websites and these third party websites are able to sustain themselves thanks to the ad revenue they make from traffic. We need other players to make money other than the middleman.
Highway inevitability is a fallacy. They could've built a railway.
This might be the biggest threat to Google search (apart from OS vendors changing defaults) in a long long time. One problem Google faces is that they have to make money via search. Several other products are subsidized via search, so taking a hit on search revenue itself is out of the question. Compared to Microsoft which makes money on other stuff, search (and knowledge discovery) is more like a complement, on which they can easily operate on near break even point for a very long time (maybe even make it a loss leader).

If Google had to launch something similar to New Bing to general availability, the cost of search for sure would go up and margins will go down. Is the google organisational hierarchy even setup to handle a hit on search margins? AFAIK search prints money and supports several other loss making products. Even GCP was not turning a profit last I checked.
Pure politics, nothing technology related.
This article is timely if you happened to listen to 99% invisible's latest episode on Wilderness[0]. There was a whole tangent on why wheeled vehicles are not allowed, even wheelbarrows. Turns out it's because someone realized humans always want bigger things. :-)

[0] https://99percentinvisible.org/episode/the-wilderness-tool/
I guess one question is, why don't you want people to have read access to the code? IMHO if they aren't trustworthy to view code, they probably aren't trustworthy to be submitting tickets (or employed in any other roles in the org as well).

To actually answer your question, you can have projects that span multiple repos, but you can't have repos that only have permissions for issues.

In my org, we have a few different repos for documentation + issues related to specific groups and utilize those repos heavily. We also have a couple code repos and anything specific to that codebase is stored there. We use zenhub though as well to help organize / track stuff.