skysight-inc/HackerNews huggingface dataset:
It's worth mentioning that standalone TPM chips from Infineon and others are a lot more hardened than Intel or AMD's fTPMs. Infineon's TPMs are tested against fault injection attack, package removal, side channels and so on.
Supply and demand. There are interesting dynamics to that basic model because the legacy market is still alive and thriving, but this is still the answer.
People rarely link to research on this site or any other. It's a social network. People want to share their opinion and so they do. I cant remember the last reply to a comment I saw on here that actually linked to research.
I posted this in another thread, but how are parents supposed to set up content filters for social media sites that allow pornography? Reddit's posts are ~40% marked nsfw, and they host hardcore porn of all types on the same domains as discussion forums for minecraft and roblox. Apparently some policy is needed to allow content filters to work in the first place, especially as everything is using TLS these days and it's being made increasingly difficult to install root certificates to do MITM filtering (not that it was ever easy).

I think this is a poor solution; a more empowering one would be to develop a standard for content categorization and require commercial websites and commercially developed browsers (so all of them that are in common use) to implement content blocking via e.g. header exchange, with criminal penalties for negligently providing pornography without the correct headers (have some provision for vandalism when good-faith moderation is in place). Then parents actually could just configure their OS or browser for what kinds of content should be allowed.

A better first step than this bill could also be to require any site that hosts a significant percentage of pornographic content (which I'd place at much lower than the 33% of this bill) to put it on a separate subdomain from any child-oriented content (e.g. forums for a children's game) so that DNS based filtering can work.
Not all porn is just people sticking their penis into someone else's vagina. It can get pretty disturbing. And disturbing porn is not that harder to find as the non-disturbing one. Now it's the age of anyone being able to upload almost anything for anyone to easily see. And people do.

(Anyway, I'm not for the internet wide parental lock. Just noting that things are different than in the past, with ease and breadth of access.)
SEEKING WORK | Copenhagen, Denmark | Remote Only

Freelance Product UX/UI Designer

I am a designer who builds. Switched from Service Design studies to do freelance UI/UX design, build my side-projects and teach myself web development. I co-founded, designed and built Best Writing, a platform connecting writers with hiring companies.

I work with clients globally to create engaging websites, functional app prototypes, and process automations that enable you to focus on what matters most.

LinkedIn: https://www.linkedin.com/in/edgarasben/

Portfolio: https://edgaras.com/portfolio
DustSim particle simulator using GPU
It's interesting to see a possible LLM-ethic starting to emerge in there:

> tokenizes text in a linguistically equitable way

> ensures that linguistic diversity is prioritized throughout the training process
Hey Zetice, I'm the author of this story. Can we have a chat on another platform? Open DMs on Twitter.
it’s not openAI’s API that’s not authenticated
It's reasonable to consider, absolutely. But once you do, and consider the pharmacology in particular, you'll find that it mostly isn't. Cannabinoids including THC can induce anxiety. Synthetic cannabinoids can easily induce psychosis, THC can do so much more rarely.

But that's about where the overlap ends. There are many reasons for this. The main one is that synthetic cannabinoids tend to be full agonists at both the CB1 and CB2 receptors, whereas THC is a partial agonist. This means that there are effects that synthetics can do that THC simply can't. In addition, they're much, much more potent; some such compounds have active doses in the 100mcg range. Cannabis also contains other compounds that counteract some downstream effects of THC most notably CBD, but also CBG.

Weed is not going to box your kidneys. CB2 is heavily expressed in kidney tissues, and extremely potent full agonist activity at CB2 is probably why they're so nephrotoxic. THC simply just isn't potent enough in doses that can be reasonably consumed.

Synth noids are also extremely vasoconstrictive and this is how they can cause strokes. They have vasoconstriction comparable to meth, moreishness comparable to crack, and immobilising effcts comparable to heroin. So what ends up happening is you binge. Hard. Maybe for weeks, all while remaining mostly immobile between doses. All while pumping your system full of vasoconstrictors. Weed on the other hand can be vasoconstrictive or vasodilating, depending on the relative content of the various plant cannabinoids. And it's nowhere near as vasoconstrictive as synth noids.

It is probably the case that extremely heavy cannabis use can cause enough immobility over time to increase risk of stroke. But it would take years and years, not days.
Transforming Parenting Lessons into Business Decisions
For reference it is about $20B for cigarettes.

The more smoking, the more healthcare costs related to lungs etc. so it is good to have tax revenue to support the societal impact.

People will disagree with how much people should be allowed to harm themselves when society picks up the mess. Our compromise is taxes :)
You whitelist domains that can access your server (in my case I have env vars with whitelisted domains list that the Go code picks up) and that should be all you need to do.
Yes, politics and people, those two are interlinked in a democracy. Blaming capitalism is a convenient scapegoat, since this shifts the blame from both politicians and voters.
Guys, the incel “movement” is just dudes not getting laid and whining about it.

It’s as old as time. They just happen to be on the Internet now and we’ve atomized society to the point where they’re super common.

Most everyone is an incel until they’re not. After all - there’s a point where you want sex and aren’t getting it. Thus, an incel.
https://www.dietaryguidelines.gov/food-sources-potassium

This is a better list and everything is per serving. Spinach and potato are rocking banana's world at about double the potassium per serving.
This works up to Zen 3. This is going to set the PC consumer space's security back even further than it already is compared to mobile.
I am - GrapheneOS is excellent. I do unfortunately run sandboxed Google Play Services for access to Google Maps & Google Play through which I get my banking app.
Pretty much everything else (launcher, podcasts, VLC, Firefox, FluffyChat&Element for Matrix messaging, ntfy.sh/UnifiedPush) is via f-droid, and works great.
> Now do one about the South Korean sex trade in Silicon Valley.

I'm totally out of the loop on this one. What's the backstory?
Not if you aim to pass your exam.
Poor middle management, those should be the majority of the people to let go.
Only for Slightly Cheaper Oil?
Artory | Blockchain Engineer | Full Time | Remote or Berlin, Germany | www.artory.com

Work at the exciting intersection of art and tech—the laboratory for the rapidly developing opportunities to bring real-world assets on chain. Artory is looking for a talented Software Engineer with a proven track record developing blockchain applications, who is passionate about Web3. This position is based in the Kreuzberg neighborhood in Berlin, Germany, but fully remote is also a possibility.

Artory is the world leader in diligence certification and tokenization solutions for artworks and collectibles. Artory connects the art market with the digital-first, financial ecosystem. Combining leading technology, art expertise, digital certification, and tokenization, Artory secures on the blockchain verified artwork information from expert partners who verify and sign off on validated data. Artory was founded in 2016 by art market leader, Nanne Dekking. The business team is based in midtown Manhattan and the product and technology teams are in Berlin and remote.

Languages: TypeScript, Python.

See more and apply at https://apply.workable.com/artory/j/165F2E977A/
That link does not say it will work fine. It says it is not recommended or supported and if it blows up it is your problem. Additionally it says you might not get any updates. Certainly, it sounds like it might just be some ass covering on their part but they were also testing a nag watermark for unsupported installs like this so maybe not. Either way it doesn't sound like a really solid path forward.
Initial Preview Release of Private Extension Repositories for VS Code
To explain to a six-year-old I would start by telling them that there are many different kinds of infinity, not just one. Some infinities are odd, others are even, and others are neither. It matters whether you are asking "how many" (cardinals) or "in what position" (ordinals). For regular finite numbers, cardinals and ordinals are (more or less) the same, but for infinities they behave differently. Then, if they want to get into the weeds, you can introduce them to transfinite ordinals, diagonalization, and all that fun stuff.
There is also a Youtube video discussing the paper.

https://www.youtube.com/watch?v=iSYAQ9IPNWQ

I found it quite interesting.
People enjoy them because it resonates with them because it's intentful self-expression with an attention to detail. There's a reason that generative art is very uncanny valley.
> Up to 35000x faster than Python

If their language is Turing complete, then I'd bet there are things Python does 35000x faster than Mojo too.
> In math, epsilon is basically "it's not zero, except when it is."

In the math I know, it’s not necessarily small, but it is larger than zero. https://mathworld.wolfram.com/Epsilon-DeltaDefinition.html:

“An epsilon-delta definition is a mathematical definition in which a statement on a real function of one variable f having, for example, the form "for all neighborhoods U of y₀ there is a neighborhood V of x₀ such that, whenever x in V, then f(x) in U" is rephrased as "for all ε > 0 there is δ > 0 such that, whenever 0 < |x - x₀| < δ, then |f(x) - y₀| < ε.”

(Also used in proofs. https://mathworld.wolfram.com/Epsilon-DeltaProof.html)

https://en.m.wikipedia.org/wiki/Limit_of_a_function#%7F'%22%...:

“For every real ε > 0, there exists a real δ > 0 such that for all real x, 0 < |x − p| < δ implies |f(x) − L| < ε.”

> it's something where we can handwave its qualitative size depending on what's convenient.

Aha! You’re doing physics, not math. Mathematicians only handwave when they can prove it doesn’t affect results ;-)
Many rights apply broadly and not just to citizens. The following article covers some of the nuance:

https://www.pbs.org/newshour/amp/politics/what-constitutiona...
Good idea, but looks like ChatGPT has already Cheggmated them.
Giving you the benefit of the doubt that this is serious but being influenced by biases or the fact that humans can be manipulated is in no way equivalent to the model's alignment being disregarded with a single well designed prompt.

Let's take Nazi Germany as an example of extreme manipulation, it was not reading Mein Kampf that resulted in indoctrination, dehumanization of the Jewish/Romani/other discriminated minority peoples and their subsequent genocide. Rather, it was a combination of complex geopolitical issues combined with a profoundly racist but powerful orator and the political machinery behind him.

Yet with prompt injection a LLM can be trivially made to spout Nazi ideology.

What we're discussing with prompt injection in the context of LLMs is that a single piece of text can result in a model completely disregarding its 'moral guidelines'. This does not happen in humans who are able to have internal dialogues and recursively question their thoughts in a way that next token prediction cannot by definition.

It takes orders of magnitude more effort than that to do the same to humans at scale and AI/tech needs to be at least an order of magnitude safer than (the equivalent position) humans to be allowed to take action.

Instead of being facetious my standard is not 'a serif PDF that some grad student provably lost precious sleep over' but if your assertion is that humans are as easily susceptible to prompt injection as LLMs the burden of proof is on you to make that claim, however that proof may be structured with obviously higher trust given to evidence following the scientific method +/- peer review as should be the case.
It very much lines up with the historical context.

In Hammurabi's Code fathers could literally sell their kids into slavery. This seems strange, shouldn’t society protect kids? But it turns out that’s a relatively recent idea, instead there were rules around what happens when both parents die but children were plentiful and many where injured or even killed by their parents without consequence.
I clicked the subtle 'Red Canary Mac Monitor' link at the start of their news text. I couldn't find it from their homepage either.
Normally I'd say... "They'd better write it in the bylaws that Mozilla isn't allowed to buy any more companies" but a system for identifying fake content on the web might (unlike all the other Mozilla acquisitions such as the thoroughly pizzled Pocket) improve the web browsing experience.
Towing and asserting the official line doesn't make it true.

The British monarch has all those powers on paper. They never agreed to relinquish them. Then, random commoners (with no authority) keep asserting that the monarch has no powers, or no intention to use/abuse those powers. Nobody seems to agree which ones are not supposed to be used ever, which ones are supposed to be used sparingly, and which ones are OK to use recreationally. Then, occasionally somebody discovers some secret privilege the monarch has, and the people have to decide on the spot whether that's OK or not.

Compared with the actual constitutional monarchy, where there are actual rules spelled out clearly. The Brits are masters of wordplay, but "unwritten constitution" is really unironically "trust us, we're making this up as we go along".
You can use pumped hydro to address two different, but related problems:

a) What to do with excess power at any given time.

b) How to address production shortfall at any given time.

Idle industrial capacity only addresses how to extract value from a), but doesn't really address b (except indirectly by giving you some incentive to just really overbuild your capacity).

So from a system standpoint, the idle capacity approach doesn't just have the extra capital cost of your industrial plants, you also have the capital cost to build out your generation capacity even more.
Meta workers have lost faith in Mark Zuckerberg
Ehh it's definitely not just the ultra religious conservatives who are raising issues with pornography.

I see a lot more "health bro influencer"/Andrew Tate types warn against watching porn because they think it makes people weak minded, which I would agree with when it turns into an addiction and actually impacts your ability to form real life relationships.
There is Shaarli and Wallabag (archives pages to read later)
Both open source and self hostable.
What a sad world we live in that we need to self-censor opinions on the Internet. I long for the "good old days" which were in fact not that long ago.
don't forget to add social credits into the equation
That such scripts would be ineligible for copyright protection seems like it would be a significant issue.
Not people this time but I suspect the hype is going to bring about companies making claims about developing/using AI as a way to get investments because they are <insert marketing buzzwords>. There should be some self regulation around usage of the terms AI, GPT, bot, etc. so that everyone doesn't jump on it to the point of committing fraud about its usage. Some industry agreed upon definitions of levels or something to that effect that can be marketed broadly so that people are aware of what they are either investing in or dealing with in interactions.
"Getting buyers and sellers to both behave responsibly is mutually exclusive."
US Bank Failures over Time
"It's hard so don't try."
It was always the case that IBM stuff was way overpriced compared to alternatives but a senior manager who bought it could rest easy, knowing that if he called and complained, they'd be right on it. Even 10 years in the future, they'd be right on it.

That's worth something to some people, who really don't give a shit about technology and just want the problem solved.
reveddit and unddit (and many more) archive copies of comments very frequently. To not have your comment archived/copied, you'd need to delete it within just a couple of minutes of submitting it. Reddit itself has no real way to prevent this from happening.

I don't know if there is a way to have a forum-like reddit clone that would allow comments to be truly deleted and forgotten. Heck, I'd like it if there was infrastructure available for sites to verify GnuPG-signed comments.
The routes of Tor traffic are dynamically changed, so a node can just pinpoint the pattern during a small period of time. So compared to a VPN which may monitor you constantly, Tor should be preferred.
just have mass public housing. easy. then you can plan based on population level needs instead of what will make people money.
See this thread of people requesting an opt out: https://community.signalusers.org/t/dont-want-pin-dont-want-...

See this thread where objections over the new feature and the security issues surrounding it were mostly ignored (they did allow pins longer than 4 digits, but they continued to call them "pins" which to many users is a 4 digit number): https://community.signalusers.org/t/proper-secure-value-secu...

Here's a great comment on the communication issue (although the entire topic is a good example of the confusion they caused): https://old.reddit.com/r/signal/comments/htmzrr/psa_disablin...

Here's an early post calling out the fact that privacy policy has never been updated: https://community.signalusers.org/t/can-signal-please-update...

At this point, I consider the fact that the very first sentence of Signal's privacy policy has been a lie since 2020 to be a dead canary. I suspect that the folks at Signal have been telling people their service cannot be trusted as loudly as they can.

Perhaps that'd also explain why they've made some other odd choices like removing the ability to use Signal for both secure messages and plain old SMS/MMS and adding cryptocurrency features.
Jsonformer: Generate structured output from LLMs
First Republic rescue fails to arrest slide in US regional bank shares
Honestly moving from GitHub to Azure Repos is kind of a braindead move lol, at least if your objective is to get away from Microsoft.
I really love my Lamy Safari, but tbh my experience is limited. What did you follow up with?
What I had in mind is the programmers' view of the code: in K&R C, every function call was visibly either direct or indirect, `f()` or `(*f)()`. My main concern is not actually performance, but comprehensibility: an indirect call is a conditional branch, where the condition can be arbitrarily far away in space and time and is not statically determinable, so it should not be invisible.

I appreciate that this doesn't fit Zig's call syntax, which is unlikely to change, so the long-term best case is probably some LSP marking based on the callee type.
I would not want to run an unsupported OS of any variety.

Modern web browsers will stop working on older operating systems - so will other apps.

Not only is it a massive security risk, but it will simply become impractical for most users.

Besides, if you're afraid of the TPM vulnerability described in this article, you ought to be more worried about running an out of date OS!
Any hacker group would love to boost about it for the street cred or try to monetize it if they ever did, or there would be at least some chatter on the darknet about it which would be reported on in the media anyway.

Nation states wouldn't, but it's safe to assume powerful nation states are already in every cloud provider, at least the US glowy boys anyway according to Snowden.
As a CMU alumnus, I resemble that remark. Of course it’s a real conference. It has a review committee and proceedings and LaTeX and everything!
Instead of deleting the comments, could you just replace it with some gibberish that includes “RCN” and other ISP names and some piracy adjacent terms?

One thing we all know about Reddit is that their search is garbage.
> As for dealing with merge conflicts, it's called

That sounds like a lot of words for "try really hard to avoid having merge conflicts, because they suck to deal with"
Let’s not pretend it was antinuclear environmentalists who passed the bill with the votes of a grand coalition under a CDU chancellor following and SPD chancellor who turned out to be a Russian asset.

The narrative that somehow environmentalist managed to pass this bill against the will of conservatives and social democrats is a nice Dolchstosslegende
Case-in-point: why do some biz succeed under one CEO then fail under another quite unexpectedly? The former CEO likely understood their market, their product, their business model, maybe they even dogfooded and used what they made.

The "why?" is frequently more important than the "what?" with biz. An LLM doesn't really have an understanding of how the world works, so I would be very sceptical of its ability to write a sensible business plan. It doesn't even understand the product/service, and the nuances of what it does because it can't experience it.

The LLM is a yes-man with no experiences.

Imagine taking a year-old old book about what worked for someone's biz years ago, then naively assuming it'll work for yours today without considering how the world, market, people, technology et al may have changed in that time. This is the same thing. It assumes x is x. Usually x is not x. People used to compare their biz to Apple, despite not even being in remotely the same industry.
> It’s probably not a net gain though

Relative to what? If weed was still illegal and untaxed, there are additional policing costs not taken into account here.
If you mean relative to a world where nobody wanted to do drugs, then sure, but that's fantasy.
They do authenticate it: it's disappointing how many people have 0 understanding of what happened and are commenting.

OpenAI authenticates their API, and was getting paid for every query. OpenAI loses absolutely nothing from what these people were doing.

Who was losing was random customers who have APIs and products that call up OpenAI. In some cases those customers even secured their API keys, but by the very nature of their product, you put in some input, and get some output from OpenAI.

It's like if someone made a directory of apps that use Google's search API to show you results, so instead of paying for Google API access, you started slamming all of those apps with your queries. It's not cool to those apps, but Google shutting it down would be for the apps' benefit: they get paid either way.
If only a few people at an event publish photos and video there's a lot of dead space/time to insert stories, but if nearly everyone publishes their video feed the majority of the event will be locked down.

And not just multiple angles of something, but distributed images through the entire crowd while it's happening. Let's say they show a fight, does the rest of the crowd move appropriately to make room for it? If they show a politicians speaking does the crowd surrounding the closer videos cheer in time with the distant crowd, or are they perhaps spliced together?

Forensics will get harder and only more data will give us a chance. Ultimately, analyzing the data is easier than faking it consistently and scale is our advantage.