skysight-inc/HackerNews huggingface dataset:
The first link said nothing about TPMs. The second link is nonsense. The third link says the NSA "teams" with the TCG, which could be concerning indeed, but there's no details there. The fourth link is light on details and full of FUD. The fifth link says roughly the same as the third, and is equally light on details. The sixth link is like the fourth but it does have some actually useful information that says you're wrong:

> It is also important to note that any user concerns about TPM 2.0 are addressable. The first concern, generally expressed as "lack of user control," is not correct as OEMs have the ability to turn off the TPM in x86 machines; thus, purchasers can purchase machines with TPMs disabled (of course, they will also be unable to utilize the security features enabled by the technology). The second concern, generally expressed as "lack of user control over choice of operating system," is also incorrect. In fact, Windows has been designed so that users can clear/reset the TPM for ownership by another OS of they wish. Many TPM functions can also be used by multiple OSes (including Linux) concurrently.

This refers to the fact that you can:

- disable the TPM if you don't want to use it

- change the platform/endorsement/owner hierarchies' seeds, delete all the platform and endorsement certificates, and thus render any agreements between the NSA and the TPM manufacturers useless to backdooring the host (unless the agreement involves voluntary vulnerabilities in the TPM's firmware)

The last article you link to is much more interesting because it actually involves thinking about how the NSA (or other such agency) could have a backdoor inserted into the TPM:

> However, such “trust” can be easily misused to break security. In the talk, I used TPM as an example. Suppose TPM is used to implement secure data encryption/decryption. A standard-compliant implementation will be trivially subject to the following attack, which I call the “trap-door attack”. The TPM first compresses the data before encryption, so that it can use the saved space to insert a trap-door block in the ciphertext. The trap-door block contains the decryption key wrapped by the attacker’s key. The existence of such a trap-door is totally undetectable so long as the encryption algorithms are semantically secure (and they should be).

Er, well, this fails because there is no way to compress cryptographic material, and we're talking about random or pseudo-random keys being compressed (which, you can't) then encrypted. So this particular idea fails immediately.

That doesn't mean that there aren't other backdoors. For example, the ciphertext could be larger than necessary rather than use a compression of the plaintext. But this too fails because the sizes of the ciphertexts are easy to determine from the plaintext sizes.

The best way to add a backdoor is to have secret commands that use public keys for authentication (and even encryption) so that you have to know the backdoor in order to be able to use it. I cannot prove that there is no such backdoor, but if you have the means to decap and reverse engineer a dTPM then you can do this.
That won't happen, we'll have fact-checking AI chatbots. And if we don't, it's on the user to do their own research and withstand every psychological trick thrown at them, or they deserve to be fooled. The Internet was full of fake news anyway, now there's just more of it. The confetti has left the cannon, this was inevitable, just get used to the new normal you luddites. Oh well.

Did I miss any?
It’s an odd choice for sure.
> ... and/or doing the right thing.

As long as it is ethical, doing the "right thing" is doing what you're paid to do. If that means, for example, ship code that you might not like or think is not perfect, that's fine. It's not your code.

Don't worry, if you're still coding at 50, you'll have learned that you are not your job. As Elsa says, Let it go.
It's math so you can start your explanation with "Assume your 6 year old has a PhD".
Open Assistant now has plugin support
> they mentioned the illustration is AI-generated in the end of the article

This is a really dark pattern, which is clearly being used for deception and plausible deniability (the article is reposted with the embedded picture - everyone sees the picture and assumes it's a photo without checking - it's not us, we warned you it's generated, with a tiny line decoupled from the picture nobody ever paid attention to).

Such use of generated images is extremely myopic and will backfire, or already backfired, sowing doubt in everything they and their side writes, regardless of their credibility. The case will be heavily abused by the opposite propaganda as well.
Even as a ARM/RISC-V cultist I had to chuckle at that.
I think Haskell gets this close to right, actually. If always adding the type to every function is always better, I can do that. But as it turns out, occasionally during development looser error locations if I hit a relevant error is a reasonable price to pay for not having to update a signature or two while I iterate. Haskell community norms say you should annotate top level functions before you share the code, and any particular team can make that stricter. I don't think there's actually a good reason to require it on every single build regardless of the purpose of that build.
Replace coffee and beer with noxious weeds soaking in tepid water?

Hard pass.
Generally agreed on all points, they're pens that feel good to write with and have little aesthetic joys to them that make writing more enjoyable. I like unscrewing the top of a pen. It's a little spark of joy. But it's mostly aesthetic and is likely fairly subjective.

> It's actually less work and strain with a ballpoint NOT to join all your letters together.

This to me is the biggest observable, practical difference that comes out of the capillary system of the pen. Anecdotally, my handwriting improved quite a bit when I started using a fountain pen.
> The converse is very much the problem.

Not really. What I currently do prevents any health flare-ups, so it's working for me.

I might be effected by sub-detectable levels of pollution. I definitely would be effected by detectable levels of pollution. So I know I'm better off, which makes me happy.

I do not confuse this with perfection, but this level of cost/benefit tradeoff is "good enough" for me. Some of these tricks might be helpful for other people too!

> Moving from constant levels of pollution to intermittent levels of [pollution]

This is not my situation.

> And again, both articles ignore the possibility of having better filters.

I didn't write the articles, I just cited them to support the fact that recirculate results in lower pollution levels in cars.

I, in my life, very much do not ignore air filters. :)
Or maybe someone's KPIs are aligned towards cloud growth.
You're dancing around a point.

> for-profit companies who are weighing the value of a good relationship with me versus one with the US government

For-profit companies shouldn't need or care about a relationship with the US government beyond selling the same product they do to everybody else. That is my ideal. How to get there is the contention. You would like to give the for-profit company to the US government and thus removing the relationship. I would like to see the power the US government has over for-profit businesses reduced and preferably eliminated. Giving banks to the US government results in less private sector and a larger government. A larger government makes more people dependent on the success and benevolence of the government. History has proven unequivocally that governments cannot be trusted to remain neither benevolent nor successful. Concentrating power makes the temptation for government malevolence too great. Power will be abused by someone eventually. That is human nature. Concentrating power is just creating a ticking bomb. The way for more people to succeed is to reduce dependence on government and distribute power among businesses that serve only their customers. Business that are reliant on the trust of their customers will think twice about betraying that trust. If their customers ever learn of their betrayal it means the death of their business in competitive markets.
GPTyped: A small, but powerful NPM package that calls GPT in a type-safe way
Welcome to GPTyped!

A small, but powerful NPM package that lets you interact with OpenAI's GPT language model in a type-safe way. With GPTyped, you can send objects as prompts and receive structured responses from LLM AIs in a breeze, whether you're running it on the Web or on the Server.

Features

- Sends TypeScript objects as prompts and receives TypeScript objects as responses.

- Fully customizable with interceptors to alter requests or responses at any time.

- Comes pre-loaded with an OpenAI client for easy integration with GPT.

- Validates returned objects schemas using Zod.

- Support for common prompt patterns, like memory and metaprompts.
The commercial bank has something called a "privacy policy" in which they explain that they will choose not to respect my privacy. A government entity isn't allowed to do that. There are actually stricter laws for government invasions of privacy than corporate.

To your concern that these three-letter spooks will spy on you: what would they do that they're not already doing? That isn't to excuse the spying; I'm just pointing out that these are separate issues. Tackle the fact that the NSA compiles all unencrypted HTTP traffic separately from the fact that JP Morgan Chase knows my financial history and doesn't have to care about keeping it private per my idea of private.
I don't think this makes much sense at all. How can a gpt based machine learning solution arrive at a model that can be explained? Explanation is not simply understanding what the model knows about a system. If that were true then shap values and partial dependence would be all we need. We also need to be able to understand how a model arrived at a given solution. And not simply which neurons fired but what is the actual structure of the system of study. You could have a full 3d view of a fluid flowing with an infinite number of trackable particles and a perfect computer to calculate a neural network to predict where the particles will go. That model will probably perform very well even with a very high amount of turbulence in the system. However you will be no closer to producing navier stokes equations then you were when you started. The model cannot tell you what those equations are even though it is able to approximate them to high precision. Why would adding an LLM to this process suddenly produce these equations? Because the LLM scraped the internet and more or less will figure out it's a fluid and assume navier stokes applies? What if we replace the system of study with the singularity in a black hole where we don't understand the physics? How will the LLM explain that?
Relatedly, it would also be likely to expect a shift in "THC tourism" dollars, as legalization increases, in the people that might before visit the next state over or a remote state and "stock up" some amount of supply for some amount of time between visits versus when they can buy it on demand closer to home and don't need a longer supply cache.
By... compromising the SP, thence the fTPM, but compromising the SP is sufficient to compromise the whole host so...
If I say someone had many of something, then I know for certain that they must have either an even amount or an odd amount. Same goes for few.
The browser wars are basically over

That's silly. More than once, browsers have had more marketshare than chrome. IE's highest marketshare makes chrome look silly in comparison.

Now, is not the same as "what will happen".
> The name of the class you’ll store the data into is singular (User). You therefore have a mismatch, and in ORMs (e.g., Rails) they often automatically pluralize, with the predictable result of seeing tables with names like addresss.

Laravel gets this right. Singular models, plural table names. Built in rules to pluralize, or override the defaults and add your own table name. (EDIT: Rails gets this right too)

> Strictly speaking, we’re not naming a table, we’re naming a relation.

I don't think so. We're naming the collection. The relation is the foreign key. that's why you would see `user_id`, not `users_id`. EDIT: I now understand that the author is referring to the relational algebra side of things here. I don't think that changes my skepticism of the argument though, because very rarely is it useful to discuss these things in terms of the mathemetics with your coworkers. Ambiguity around whether you're talking about a User (relation) and User (tuple representing a user) and a User relation(ship to other data) makes this go sideways in my opinion.
> This company will literally do anything else than work hard on their browser.

OK, I'm not a fan of Firefox anymore but this isn't the case. They undeniably worked very, very hard and poured a lot of money into the revamp of Firefox.
Very cool development. There is too much busy work going from development to test to production. This will help to unify everything. OpenAI Triton https://github.com/openai/triton/ is going for a similar goal. But this is a more fundamental approach.
I don’t want the government to get into lending because there is a lot of opportunity for corruption or really destructive populist policies. I think regular banks should do that, that’s what they’re supposed to be for, they take your deposit and lend it out so you get a nice little return.

What I’m proposing is less like a full service bank and more like a lockbox or mattress where you can stuff dollars for later. You wouldn’t get interest (or if you did it would be tiny) in this system, because the money would not be lent or otherwise put to work like it is in normal banking
It's a reference to a Phillip K. Dick short story, see

https://scatter.wordpress.com/2018/03/13/thoroughly-pizzled-...

A group of people who are receiving manufactured products of an automatic factory that they don't want get a chance to fill out a feedback form and write "the product was thoroughly pizzled" as a deliberate neologism to confuse the computer. The factory sent a representative who asked what this meant and they defined it as "unwanted".
This is not true at all! Julia usually being JIT-compiled makes it very unsuitable for real time applications (and there's no reason why it should be great for it). GC is the least issue here, and I say that as a fan and daily user of Julia.
… Using decimal notation.

Goodness this is like talking to GPT at times.
“The User model” sounds so much better than “The Users model”.

Plural is defined as the Noun plus an S, but is configurable in Django.
I don't think it's the issue here.
Products like PS, 3DS MAX are VERY intuitive to learn and use "right now because I need to get this done ASAP". Try Blender - you'll feel like on some alien spaceship.
It’s a continuation of the trend that led to them removing Extended Validation indicators: https://duo.com/decipher/chrome-and-firefox-removing-ev-cert...

Here’s how they used to appear: https://pbs.twimg.com/media/EBxdA7EWsAIQtc0.jpg

While I buy the reasoning that consumers simply ignore them, EV indicators would be really useful in a corporate setting to mitigate phishing attempts against employees. It’s much easier to train employees to “look for your company’s name in the green bar” before they sign into a site, than to understand how domains work and why login.yourcompany.com is OK but login-yourcompany.com isn’t.

Does anyone know if it’s possible to restore EV indicators in Chrome via MDM software or similar? Does anyone work at a company that does this?
You cut off the "including the firmware signing keys" part, that's critical. Otherwise the vendor could be coerced or subverted to sign malicious firmware which then subverts your system at runtime.

Only when you can bring your own keys for the entire boot and trust chain can you untether yourself from the vendor once you have purchased the hardware.
>estimate the percentage of that weight that's THC (20% is usually safe)

In my state, every package of THC product must contain a label with test results for that batch, including percentage of THC. There are rumors from internet folk from other states saying test cheating is rampant, but I've never experienced an unexpectedly hot or weak batch.
Location: Novato, CA (Bay Area)

Remote: Preferred, Hybrid or Full.

Willing to relocate: Only closer to Silicon Valley, otherwise no.

Technologies: Rust, C, C++, Java, Python, Bash Shell Scripting, UML, Qt, GTK

Résumé/CV: https://www.linkedin.com/in/schmidt-tyler/

Email: schmidt.tyler@protonmail.com
Can you confirm that compromising the SP can compromise the whole system, therefore the focus on fTPM is a bit hyperbolic?
Check out JetML.com (I'm the founder). Happy to help get you started with a demo if you want to reach out nick@jetml.com.
Another very similar approach to guardrails which manages to avoid XML that I've been using with some success is langchain's OutputFixingParser: https://python.langchain.com/en/latest/modules/prompts/outpu...
As its IBM we might see a first here, firing AI's.
If you put diet, exercise, sleep, and social support on a sliding scale, can you honestly say that you're doing everything in your power to maximize each one?

I don't know your personal details, but most people who think this way are not actually trying their hardest in each category. Sure, some small percentage is going to face monumental challenges. But look at the data in the US for example. 70% of our deaths are caused by NCDs. Most of that 70% has enough control of these factors to reap their benefits
> "The planned closure of Nordstrom underscores the deteriorating situation in Downtown Mogadishu," said a spokesperson for the mall. "A growing number of retailers and businesses are leaving the area due to the unsafe conditions for customers, retailers, and employees, coupled with the fact that these significant issues are preventing an economic recovery of the area."

> "[Unibail-Rodamco-Westfield] has actively engaged with city leaders for many years to express our serious concerns, which are shared by our customers and retailers. We have urged the city to find solutions to the key issues and lack of enforcement against rampant criminal activity," the statement read.

Spot the difference.
That same one also has far more mechanisms and legal avenues for accountability, vs the other that tries to shuffle people off into arbitration and the like, while at the same time spending money to lobby against legislation that might impact its business model.
Best in market? Why?
IBM is a public company, doesn't that mean they have to give some details to shareholders? I would hope so, this is a big ambitious plan, I hope they have to present an actual plan somewhere. You can't just say stuff, right?
I knew a similar one called GPTyped, just posted it on HN https://news.ycombinator.com/item?id=35793056#35793057
Good food I can see as a luxury. How is exercise a luxury though? It seems like going for a walk or a run is available to almost everyone.

If anything it seems like those on the lower income level would be forced to be outside doing physical activity more than the wealthy.
It is absolutely critical to good mental health and having healthy coping mechanisms for stress.

Social support structure doesn’t necessarily mean staying out all night drinking and partying with your friends like a college student. It can also mean spending quality time with your family, neighbors, and acquaintances that you share hobbies and activities with.
NLS came from SRI not Xerox PARC. NLS was in fact commercialized and sold by Tymshare.
It's the latter; I'm also not a mathematician, just a guy who worked through Halmos's "Naive Set Theory" in intense detail...

But your question actually hints at my most profound takeaway from that whole book. I think what you're saying is right, AND that foundations-of-mathematics folks spent a long intense period searching for different set theory axioms that did NOT lead to transfinite numbers. But anything anyone could come up with that included "the axiom of infinity" led to transfinites leaking in.

Which begs the question of how to think about these things. Are they "real"? Are they an oddball side effect that we shouldn't take seriously?

I think you've arrowed right to the philosophical heart of all of this.
The lifespan of T cells varies from months to years (memory T cells). T cell development begins in the bone marrow and continues in the lymphatic tissue and periphery. During their lifespan, these cells circulate in the body and migrate based on chemical gradients.

What happens when you exercise? Blood pressure increases, blood vessels dilate. I honestly would not be surprised if what these authors observed was just existing T cells in capillary beds being kicked up into circulation, only to adhere and begin to intravasate a couple minutes later.
Balaji would have gotten more attention if he went through the original bet as is. This will just barely get the limelight.

Only thing I see is there was no conviction, and today the price isn't $1m.
Is someone holding a gun to your head and preventing you from eating fruits and vegetables?
Exactly, it's basically offensive to put any product in a customer's face.

I remember how Microsoft killed OneNote (a rather good note taking application) by (1) trying to shove it up your fingernails, into your armpits, etc. (I remember there being three onenote icons pinned to the task bar) and (2) going 100% cloud as opposed to the XML files OneNote used to leave on your computer that were very easy to parse and build tools to process.

People are automatically going to assume a bundled product is crap because we're so used to drive-by downloads and other dark patterns.
For me one of the most practical benefits of singular table names is: not having to think about the primary/foreign key names, because you can always just assume that it's "[table name]_id".

If you have a "users" table, you either have to name the column "users_id", which is incorrect (because per row it's the id of a single user), or you have to use mental cycles to de-pluralize the name (or even worse, try to remember whether you called it "users_id" or "user_id" on a case by case basis).
> Hmm, that could potentially cause confusion later [...]

(Q: Do you have kids?)

Our experience is that pretty much everything parents tell young children could potentially cause confusion later.

In no particular order: Father Christmas aka Santa Claus, The Tooth Fairy, Where Babies Come From... it's a long list, our eldest is 13 and we're not done yet.
But it has a double "r" not double "u"
Can this produce a static AOT compiled binary ? This seems to be currently one of the biggest limitations to Julia (and even Python) in terms of distribution, especially in the embedded space. PackageCompiler.jl helps, but binaries are still huge
Protecting people's privacy is not the sole job of a browser. The web in general needs to look at the needs of all of the stakeholders and come together to find a solution that all parties can find agreeable. A browser should care about not just the users, but also the rest of the people in the ecosystem. If Chrome shipped an update that blocked all ads it would kill many sites and would cause a disaster to the health of the web ecosystem. Chrome should try and improve the ecosystem.
My understanding is that eating Cannabis plant matter does not induce the drug effects because it requires a heat-induced chemical change before the THC can bind with your receptors.

Don't keep your edibles within reach of your children, because they like candy and at least one infant has died from consuming weed candy. But that's no different than keep your sugar coated advil out of reach of kids.