skysight-inc/HackerNews huggingface dataset:
You're very correct about the various terrible fallbacks. In some cases your own email client, totally capable of "E2E" encryption, might send out letters unencrypted (against our explicit request) without a warning! However I don't think all of email's current use-cases have to be covered perfectly with each attempt at an improvement to achieve a meaningful increase in integrity or confidentiality. This is also why I really wish these issues are kept as separate as possible.

Am I wrong to assume that our difference in perspective is how absolute of a confidentiality we're trying to achieve? The level I think you're describing is very difficult if not impossible even with the best we have right now. However I don't think that should be a showstopper.

I also disagree on the part about a "wholly new email", it's not really practically achievable.

Email is very unique in the sense that it's a massive ecosystem, but the components are really rather independent. Say if clients did S/MIME well we wouldn't have to care that much about MTA-STS for example, we absolutely should, but we wouldn't have to.

A bit of a tangent, but something like letter-strict-transport-security (LSTS) would be totally doable, we could add a header that makes email clients add additional safeguards against potential downgrades. "The letter you're trying to forward was requested to be kept confidential, are you sure you want to send it unencrypted to this recipient x?" After a decade passes we'll probably have a lot of clients that prevent basic mistakes.
Only one data point but I asked a question to my boss and he sent me a GPT reply (which he's starting to do rather too much these days) which was very incomplete at best, possibly outright wrong but also very misleading even if it was right. It certainly read authoritatively, caveat emptor.
How much do you think people would pay for a plugin that makes a style transfer that makes movies brighter?
Yes. That is how biometric data works; if my finger gets cut off I can no longer unlock with touch ID on my iPhone.

Wonder if they have a backup ID method of some sort or if it’s solely iris data
So the attack vector is: you need to flash a device in a certain place. That means, you need to open the device and do other things.

Honestly, who has an Amazon Echo dot on a private network in a public place?

Yes, it is a valid attack vector but I would vote the likelyness and importance at very very low risk.
Management earns the big bucks because they are supposed to be accountable. If the expectation is that software engineers should be accountable and not management the money should go to the engineers instead.
Yeah, so instead the Serbs became refugees and dead and most of the Christian history of Kosovo was wiped out under the watch of the Americans[1][2].

[1]: https://en.wikipedia.org/wiki/2004_unrest_in_Kosovo

[2]: https://en.wikipedia.org/wiki/Destruction_of_Serbian_heritag...
Every company that uses GSuite probably uses Google drive as their shared file storage, which obviously includes a lot of files critical to company's operation. What else would you expect?
If you're watching TV with shades open, you should adjust your gamma settings. The standard 2.2/2.4 gamma is meant for watching in a dark room.
Is It Imperative to Be Declarative?
The first column of the output is the lines
Maybe try and use Huginn ?
Ask HN: Generative AI makes me want to quit the industry
I appreciate the hype, I get it, productivity booster yada yada. I just don't have the energy to keep up with it. I got a Masters and got into ML thinking we had time. My domains were mostly about NLP, even though I never enjoyed it much. For most applications businesses have, GPT4 is sufficient. It can behave as a general purpose classifier and even recommendation engine. It's just too big.

I feel like my options are to try a pivot towards non-generative CV or IoT/Forecasting/tabular data, but even those have mostly been commoditized.

I feel like your only shot of doing interesting work in software is to get into a group working on a foundational problem that's high risk.

Otherwise I think this field is on a slow death march. I don't think we will recover this bubble and achieve a ridiculous job market ever again. Companies are all getting wise to what GPT4 can do, and GPT5 is coming within the year.

Honestly progress is great, but humans are getting left behind. That's fine I guess, I just want to be able to plan for it and adjust.

Is anyone else just done?
No. There isn't a single person who was disenfranchised by this internet meme.
Why would you believe in a company? It's not God or your wife.
This is because OpenAI already knows your name and a lot more about you.
You didn’t ask that
Understand Python Environment management through a hiking trip
Check out YourGPT, the all-in-one platform that offers you to build & Integrate GPT for your personalized needs. With YourGPT, you can train models on your data, integrate them seamlessly, and quickly monitor and refine them..
Golang is far better when it comes to go path and compile speeds
> You do realize we've just at least doubled the amount of cognitive bandwidth on earth right?

What you mean? Human population is now past exponential curve and entering the saturation point.

Or do you mean adding ChatGPT? Then it's not doubled. Pretty sure that's centralized.
Long-press and open in new tab is a good workaround until browsers wise up and stop sending referer headers.
It would be fairly trivial for HN to add rel=noreferrer to links

https://developer.mozilla.org/en-US/docs/Web/HTML/Attributes...
So how many logic gates / transistors does it use in total? I tried to find this number in the article, but couldn't quite find it.
Not to mention golang sub second compile time and all the productivity boosts coming from that
But don't you need the preimage of the hash to generate it in authentication?
Eh. It's certainly not great practice though not stunning given how utter crap 99% of IOT WiFi seems to be. That said the author gets a bit overdone, and not just in brushing over the physical access requirement bit.

>Storing passwords in plain text is a major security risk in hotels or businesses using the devices on their internal or private wireless networks, giving any potential attackers access to any other equipment on this network or allowing them to create a rogue network and redirect traffic or conduct a MITM (man-in-the-middle) attack.

Nah, unless it's a truly awful network even for a prosumer let alone any organization. Even with IOT, ever more widespread PPSK support (which I'd consider a must have for anything greenfield at this point) makes segmenting devices onto their own tightly firewalled VLANs trivial. Normal user interactive devices (computers, smartphones, tablets etc) should all be using VPNs for internal access and just not trust the WiFi at all, or at the least again have their own VLANs. These devices should all support WPA-EAP as well so that's another option, and can just use certs and do away with passwords entirely. If IOT wasn't such crap that'd be an option there too but such is life.

It would be fair to say this is all still more complex then it should be, all the tech pieces are in place to make this vastly easier even for the non-technical, the UX is poor in a bunch of respects. And I'm sure there are plenty of small businesses who just run flat networks, maybe with a guest wifi. But that's an issue anyway, and I don't think someone physically stealing an Echo and dumping its eMMC to get at their WiFi password is floor level on their threat model. More like "the desk machine has a password of abc123 and is left unlocked while the elderly B&B lady goes and makes breakfast for guests" and frankly who is breaking in looking for that anyway? It's egg on Amazon's face for sure, absolutely embarrassing for a company of that size and product line that big, and that it's exposed in plaintext on the fs might chain a remote exploit in interesting ways, but not if physical access is required. And again, organizations actually facing threats really just shouldn't be trusting WiFi much anyway. It's not that secure even in theory and implementations are a mess and probably always will be.
Modern, more powerful, more compact, equivalent:

https://www.raspberrypi.com/products/raspberry-pi-400/

By the way, people say it's a great learning tool for kids but when I search for "kid using pi400" on youtube there are zero results.
I was sleepy, I meant to say that it WASN'T trained on data of Meta users.
LLMs can perform cognitive labor. Moreover they can increasingly perform it at a level that matches and/or surpasses humans. Humans can use them to augment their own capabilities, and execute faster on more difficult tasks with a higher rate of success. In addition, cognitive labor can be automated.

When bandwidth increases, latency decreases. We're going to be able to get significantly higher throughput than we were previously able to. This is already happening.
I feel like either Mozilla or the EFF published a website on this about ten years ago.
Ok, can the table and query design in this article actually scale to millions of rows ? With hundreds of concurrent queries ? I have generally become a skeptic of doing anything fancy on a RDBMS.
Well that's exactly the thing. They haven't. We're talking about a group of people here who live inside scientific papers and jupyter notebooks. They're able to make machines literally think, but you'd be pushing them out of their comfort zone if you stuck them in front of something like Emacs with C. Some people like GG, Jeff Dean, etc. are strong in both skill sets, but they're outliers.
Exactly, and you can also derive all other devices' pairwise session keys from the password hash as well, i.e. intercept their traffic.

The only thing you can't get from the hash (without reversing it) is the password itself, so if you use the same high-entropy one for a different SSID or non-WPA-PSK purpose (but why would you?), it helps a bit in that specific scenario.

Apple has annoyingly decided to share the password hash using the "share Wi-Fi password with nearby devices" at least in some versions, which makes it impossible to actually manually copy-paste over a password received in such a way. I consider that pretty poor security-by-obscurity as well.

If you need your network to be resilient against such attacks, you need WPA-EAP ("enterprise"). PSK was never designed for that threat model. That said, it's a shame WPA-EAP is as complicated to set up and poorly supported by most routers as it is.
Cassandra DB
Ah, really curious if it'll balk at the age old problem or just answer based on the code provided since it does inspect the nearby code to understand context for the generated code.

I'll have to try that when I get back to my desk!
Hm, I tried mirroring it now then... https://imgur.com/0znBo7v

Anyway, they are both clearly designed to imply an affiliation with the campaign. It's one thing to state that you support X, it's another thing to claim that you are speaking for or represent them.
As someone with GraphQL problems I am excited by GraphQL API glue lol.
Turns out you can! https://tailscale.dev/blog/headscale-funnel
Interesting observation, I have noticed too that contradictory opinions are very frequent. My completely subjective impression has been that there is a loud contingent that just likes to have a contradictory opinion, a form of mansplaining that is frequent in engineering circles.
Or maybe it’s just that people in general are driven to give their opinion on things they disagree with.
i like this! really captures the spirit of the fun, collaborative, distributed and humanistic internet.
>might be used to "flood our information channels with propaganda and untruth."

Surely that raft was flushed down the Sewer some time ago!
Chess: Moving from online chess to over the board events
Seems to be a Postgres-specific advice?

Others, for example SQLite[1], seem to advocate using UNION ALL over UNION.

[1]: https://sqlite.org/lang_with.html#recursive_query_examples
I Didn't Read A16Z’s Reading List and Now You Don’t Have to Either
I’ve often fantasized about building a movie database that averages the lightness of all pixels in all frames to create a sortable score. I hate watching movies where for 120+ minutes it’s night or dark.
No, it's serious. "A new era of transparency by no human in particular". It's so blatantly self-contradicting that it's funny.
Musk said from day one of his Twitter purchase that there will be mistakes. Move fast and break things as that other guy said. :)
How does it compare with remi? https://github.com/rawpython/remi

Looking at the examples, for quick UIs, REMI seems simpler. And PySimpleGUI (https://github.com/PySimpleGUI/PySimpleGUI) offers REMI as a backend to deploy on web too (PySimpleGUI is pretty simple to learn).
Sure, but the stated goals of the end of impressment and the trade restrictions with France happened. Both were more because Napoleon lost, but those were still the stated US aims.

I see it more as "let's attack Britain while they're busy in Europe" than offensive defense. The US banked on France winning in Europe, lost the bet, and still gained Florida in the deal. Not a win, but not really a loss.
> 100% disagree. Waiting multiple seconds as the tool starts up just to get to the point where it actually invokes a compiler is infuriating to me

I think Java’s startup time is often overblown, a hello world literally finishes in less than 0.1s, and that won’t significantly grow at the size of a build tool. Plus daemons are a thing. Also, there is not much point in starting the compiler when you don’t even know whether it is necessary.

As for ZFS, what do you mean? Not familiar with the situation, it is open-source and several open source OSs use it without any trouble. It’s just Linus’s overprotective stance against mixing two open-source licenses that makes it unmergable into the kernel, but I do use ZFS on linux every day, so where is the evilness of Oracle?
France have a border with South American countries, and is facing illegal incursion from Brazilian gangs in it's territory (and an army guy died for it last year if I remember correctly), still the gun violence in Guyana is pretty low (lower than Marseille). Not an excuse.
How ungrateful. That was not your original question.
Python became popular without being the 'web language', the Lisps didn't.
Not inherently, no. But it's also not automatically not a crime.
It seems to me that most of these arguments boil down to “it didn’t think or respond like I would expect a human to, therefore it isn’t intelligent.” This isn’t open minded to the diverse possibilities of non human intelligence, nor is it demonstrating a lack of understanding or real limitation. It doesn’t seem to have any sense of self beyond playing characters it was asked to play, yet those characters are able to intelligently select actions towards goals they were assigned by a prompt using creativity, complex reasoning, and deep understanding. This is a difference that isn’t an inferiority or shortcoming.

I would even argue that humans are more similar to that than we think. The main difference is that one of the characters is locked to the surface most of the time (not even very perfectly).
Python Might Remove Math.pi?
Proposal to remove pi from the math module in CPython
The studios seem to think "everybody", judging from the 100s of sequels, prequels, reboots, and nth installments of movies, where everything is a "franchize"...
Just create a folder for your project

And then

Python3 -m venv envdir

source envdir/bin/activate

bin/python3 -m pip install --upgrade pip

And similarly the rest of the packages needed for the project

This does not mess up the system library or other python projects
There are so many more low hanging fruits that makes the architecture (in relation to arm vs. x86) completely irrelevant to the equation.

When we get to those kind of details, maybe you shouldn't rely on drivers that were written without proper information about the hardware?
DeBoer is just describing the phenomenon: We needed terms for ideas which are increasingly prevalent but resist labeling. So we appropriated “CRT” for that purpose. Words mean things, of course, but they can mean multiple things according to popular usage. “Nicole Hannah-Jones thought” is the dominant meaning of “CRT” today. Almost nobody means to refer to some obscure branch of legal academia.
Sure. And my general attitude is that if my employer can replace me then they should, so I can do something more productive (where I will be harder to replace). And to state the obvious: when you run your work life like this for 20 years you get pretty hard to replace.
I can't speak for parent, but there is a point at which I just stop caring. Either thinga will get bad enough and people will revolt like they tend to do when its too late or they won't. Nihilism is one hell of a drug.

Separately, on a personal level, I find social justice annoying.

But then I have coffee and play with my kid and no longer wish to destroy the world.

Duality of man in a nutshell.
Ask HN: Recent post or comment about DIY speech-based, note-taking personal AI?
There was a recent (~3 months ago) post or comment from someone who hacked together their own personal assistant (like Siri or Alexa), probably using the Open AI Whisper api, and maybe a raspberry pi.

Some features I remember:

- it was trained to recognize their own voice

- when a certain phrase was spoken, it started recording what was said after until the same phrase was spoken to stop the recording.

- the daily recordings were aggregated and summarized nightly into some kind of report, maybe an audio or text report emailed to the author

- the author used it to record daily activities like money spent, ideas to remember, things read during the day, etc

Anyone else remember and have a link?!
Having a limit of 5 million files is perfectly reasonable. Failing to document that such a limit exists and refusing to publicly confirm it (which apparently is STILL the case) is extraordinarily poor customer service/communication.

Google KEEPS setting new records for poor customer communication, to the point where I (and much of the HN crowd) now expect it. Android developer banned from the app store? There is no meaningful way to appeal but you'll probably never be able to find out why. Your best hope is to post on HN and hope someone with power at Google notices.

Leadership at Google ought to recognize this; they ought to make an effort to improve the channels by which "customers" can communicate with Google. But I see no signs that they are even aware of the issue; I see no effort to change anything.

I would try to tell them but... there's no communication channel. Maybe I should post about it on HN.
The secret life of fsync
There are a handful of games where my best experience is playing the Windows version on Proton/Linux. For a few games, this has been better than native Windows on Windows or native Linux on Linux. It seems weird, but ...
> people in general are driven to give their opinion on things they disagree with

I’m definitely more likely to reply when I disagree than when I agree.

I do try to make a habit of giving positive replies also (and not just building on what was said before, as I’m doing here, nor just upvote silently), as constant contrarianism is… kinda dull, especially from the outside.
Facebook Finally Allows Nudity on Its Platform
Show HN: Ask Mr Darcy – what Ask Jeeves could have been (GPT-3.5-turbo)
Salutations to one and all.

I hereby present unto thee Ask Mr Darcy, a straightforward use of gpt-3.5-turbo employed for the purpose of constructing a question-answerer and translator fashioned in the style of Mr Darcy.

--

I had fun building this as a gloried "GPT hello world", especially using ChatGPT to help me with the frontend.

It was also interesting to tweak the system and user prompts on the backend to get the behaviour I wanted, i.e. making sure when translating it doesn't try to "answer", etc.

If anyone plays with it and has any feedback on the responses then would love to hear.

Pray engage in mirthful activities with great fervor and zeal.
A Reply to Josef Prusa
It is likely recording the whole time - e.g. also while the person is moving their iris in view of the camera.

So, I would expect them to have captured a seriously significant AND deduplicated (through the iris) database of faces as well.

Obviously, this is an extremely valuable database on its own merits, because it contains biometric data on a ton of people from "non-restricted" countries and may well solve some of the systemic biases current biometric systems show, due to lack of a representative dataset to train on.

These systemic biases are currently one of the major arguments _against_ the use of biometric systems at an even bigger scale and thus solving it will take away a big tool in the privacy-rights activists toolbox.

Are biases still systemic if at one point a significant amount of people from every geographical location on the planet has been included in the training set?

I can imagine arguing _for_ this position at the very least becomes a lot more complex.
That's pretty much what GPT is.
Isn’t the “I’m not interested in this tweet”, “Show me fewer tweets from X”, etc options working for you? They seem to have an effect on my end.
That’s not my understanding. The entire point is the model can’t fit in RAM. mmap allows lazy loading from storage.
It also had not occurred to me that serious businesses use GSuite. I cannot imagine depending on Google, given their history. I realize I am out of touch. I remain astounded. Market opportunity!
As I mentioned in a reply to another comment there's a lifecycle issue to consider. People frequently upgrade their devices (IoT and otherwise) or dispose of them entirely. Often times these old devices are disposed of in insecure curbside trash bins. With every old IoT device being tossed into the trash without though it's starting to look like this is a more and more effective attack vector with each passing day.
Use Guix, everything gets compiled fine, no matter what. If you need non-free because of $HARDWARE reasons, use nonguix, (or just a non-free kernel to avoid polluting the userland), but I won't help you on that.

Altough you can install guix on any GNU/Linux distro, on top:

https://guix.gnu.org/manual/en/html_node/System-Installation...

Then, run

guix pull

as a non root, and next,

guix package -i lmms

Don't forget to follow the installation instructions well, so your XDG menu items from GUIX get correctly enabled after the user logins in.
Still a poor excuse. Had they written this in Java and things wouldn't be so difficult both on performance and maintainability.

Never understood why people think that indented languages are any simpler when in fact they bring all kinds of trouble for getting things done.
Just the title feels misleading, Yugoslavia didn't exist in practical terms when Nato bombed Serbia (Croatia, Macedonia and Slovenia was de facto gone).

I've to this day not heard a single good argument from the "anti-imperialists" of what the world should have done after multiple attempts with large peace treaties being violated.

https://m.youtube.com/watch?v=czQrU0OPIR8

Here's a much better video showing the time line.
Thank you for this — I had no idea you could do that.
Can you share the intermediate files? They're taking ages to process on my 16GB-RAM laptop