skysight-inc/HackerNews huggingface dataset:
Bitmarck may not be able to protect all data, but it can protect its reputation.

Rest is silence.

In January 2023, there was already a security breach where they managed to make sure that no one in the broader public was interested.
Bitmarck's customers, some statutory health insurers in Germany, are also keeping quiet, of course.
They own the store and have been trying to 'sell' the German version of an electronic health record system to the wider population.
A system neither physicians nor the population does exactly crave to be part of, if it's not secure.

To 'cite' parts of a translation by deepl of the German Wikipedia article:

'January 2023

In January 2023, unauthorized access to Bitmarck's instance of the collaboration tool Jira occurred using stolen credentials. This was possible because employee credentials were successfully compromised and also because two-factor authentication was not used. In the process, a data set containing personal data and access data of insured persons was also stolen. Bitmarck, on the other hand, claimed in its statement of January 19, 2023, that there was no leak of data, neither from the provider itself, nor from customers or insured persons. The data set, which can be found on the Internet, was already published on January 17 and proved the opposite. It contains the data of the compromised Jira instance and was created on January 16. The dataset contains three different versions (December 2020 as well as two from April 2021), with the latest version containing about 330,000 entries. Medical data is not included in it, but personal data such as date of birth, insurance numbers and health card serial numbers as well as password data is.

In addition, the attacker managed to gain access to numerous other systems - including e-mail and remote desktop services for Windows Server, according to research by Heise. The editors noticed that the passwords were short and simple. In addition, the passwords for different systems were quite similar. Both of these contradict the practice that has been known for years for the basic protection of IT systems and thus also the recommendations of the BSI, among others. The successfully compromised Bitmarck employee used a single SSH key for full root access to 1,100 servers. Heise had contact with the attacker and found that he was not well versed and did not seem to have been aware of the scope of his attack, targeting unprotected targets in an untargeted manner. The Bitmarck had therefore been fortunate that the damage was far less than would have been technically possible.'

https://de-m-wikipedia-org.translate.goog/wiki/Bitmarck?_x_t...

I take it, the second job in April is based on information distilled from the first one in January.

There is a reason, you don't and will not find much about the affair even in German public.
> …should be enough to discourage most car thieves with 2 or more active brain cells, but hey, I'm an idealist.

With all the dubious “stalkers put an airtag on my car” stories from a while ago they are also trivial to find and disable.

Apple isn’t stupid, they are good for finding your lost keys but not for finding your lost girlfriend.
> HTTP/1.1 pipeliing works better than ever

> and a text-only browser.

So you are saying http/1.1 pipelining works great if, checks notes, your use case is a text browser that probably doesn't download all the separate assets and thus wouldn't use (or just minimally use) pipelining anyways?

So yes,i agree. Http/2 & 3 is pointless if your usecase is different enough from a normal person that all the usecases it is trying to solve don't apply.
>Perhaps you need to examine the inequities which have allowed to you amass the wealth you fear being robbed of? In short, profiting off the exploitation of others, if even indirectly, shouldn’t be viewed solely as “earning things”.

Maybe you need to examine the inequalities in effort that cause so many people to slack of at school and work and spend all their free time watching television or the like, then the inequalities in wealth wouldn't be so surprising to you.
See also https://www.youtube.com/@thang010146/videos - more than 3000 mechanical animations
Interest was on pause right? So obviously this would have been the time to make as many payments as possible? I assume that was the best course of action over these three years?

I am not familiar with the rules on student loans.
> About: Anti-imperialist.
With Google Docs, MS Office, Atlassian etc you get a real software product with engineers paid ~$300k per year to fix bugs.

With ChatGPT, you get researchers paid over $1m per year [1] to use you as a training data source and ship stuff with basic bugs and then "feel sorry" when stuff breaks:
https://www.theregister.com/2023/03/23/openai_ceo_leak/

Another position for those like Samsung: preventing ChatGPT use encourages incubation of internal competing solutions.

[1] https://davidgoudet.medium.com/how-did-this-ai-scientist-end....
The problem with those numbers is that TARP lost money if you account for inflation over that period. That said the point wasn't to make the government money anyway, so whether that matters is up to you.
It certainly helps with learning. It is much more effective at it than googling, especially for topics one is not very familiar with
Amplify is the most vendor-specific locked in stack you could possibly choose.

If you don't want to be burned by vendors changing the pricing model on you, don't choose a proprietary stack to build on.
It's also leaving out non-FDIC bank failures like Lehman, Bear Stearns et. al. which would make the '08 crisis much (MUCH) larger.

Basically post-2008 the class of "investment banks" basically disappeared. But none of that is shown in this chart.
Removing the TLD was the point of AMP. All sites shall be Google.
I've been using a Platinum Plaisir as my daily driver for 5 years now. ( < $20) It uses the same nib as the ultracheap Platinum Preppy ( < $5 ) (of which I also have far more than I need).
Yeah, it's actually crazy just how much every open address gets spammed. You freak out like why are there thousands of attempts to login to my server that I haven't advertised at all, then you Google it and find out it's just the normal state of the internet.
So, how long before Cloudflare buys Mozilla or Brave (or builds it own)? Feels like they would be a better long term home than Mozilla surviving off an annual stipend from Google.
It might be. It was eg a first-class part of React's Server Components design/rollout strategy

The question is exactly what would happen if it lost its backing, even if it wouldn't outright fail:

- Meta forks it and/or takes over from there?

- Multiple community forks that fracture adoption?

- Stagnation and slow decline as it stops shipping big upgrades and goes into community-maintenance mode?
>Property rights exist because the people consent to them.

You clearly have absolutely no understanding of what "rights" mean. They're based on deontological arguments, that's why they're called "inherent" rights, not based on some weird utilitarian notion that anything can be morally right if enough people believe it is. By your view of rights raping someone would be okay if enough people want to do it.
They could still have an oops and use your data anyways. E.g. how Apple copies features from successful iOS apps.
How does Latka get its data?
This is the kind of thing I really come here for. Thanks for sharing.
Show HN: Interactive email templates to gamify emails
What's the feasibility of replicating Vercel's services and architecture?

Without supply side limitations, resellers generally become reduced to commodities over time. This is especially likely with high margin markups, which seems to be the case with Vercel.

Is the integration of Next.js on Vercel really that superior to other platforms?
If two regional banks failing with little realized loss is massive and unprecedented how would you describe 2007-2008 when the entire world economy was brought to its knees with napkin math ~1.2T of bailouts/failures in the US let alone Europe with several banks nationalized (e.g. UBS and RBS) and nation states defaulting on debt?
This was super cool to click around on the various techniques and see the examples.

(Questions/Thoughts)

- I was looking to see if there was a Steadicam group, wondering if I would see a gif of Henry and Karen walking into the Copa, that's got to be one of the most famous shots in film in the last 40 years (not a critique, totally possible it's there under a different name I'm not aware of as a layperson, I didn't peruse every group.) [Edit note added]

- "Fourth Wall" should include a gif of "The Big Short", breaking the fourth wall was a great way to get the minutiae of the financial subject out of the way and return to the characters.

- Bonus upvote for finding a shot from "Halt and Catch Fire"! (dolly zoom)

Edit: I knew I was forgetting the proper term for my question about Goodfellas, it's a tracking shot. I didn't see the movie in there though, I think it should be added :)
Another one is http://httpforever.com/.
How to feed content to ChatGPT and make it answer questions about it?
I recently came across several startups that appear to feed content to ChatGPT and subsequently ask questions about that content.

Examples:
1. https://flowgpt.ai
2. https://www.chatbase.co

I'm curious about how this process works. Do these startups utilize the OpenAI API to train a model?

I attempted to train a model using the OpenAI API myself, but it seems like these startups have a different approach. I was unable to achieve the desired results simply by uploading content, even after spending hours creating JSONL files.

Chatbase, for instance, has a video demonstrating a user uploading a file and then asking questions: https://youtu.be/W4lzGger7_0
Agreed on the point, but your example brings up a different problem for me.

100,000 dead Russians, is very likely the propaganda number. Maybes it’s right; maybe it’s not, IDK, but I know that there has been zero negative Ukraine news since the conflict started (ghost of Kiev anyone?), and the media machine definitely only works one way on this topic.

I mean, Russia isn’t the good guy here, but I don’t excuse propaganda just because it tells a story I want to hear.

In this case, I don’t care what the US or Ukraine says the number is. That isn’t news. It’s narrative, true or not.

So, I feel like the score should take into account if how likely an article is to be narrative vs purely an event.
> That person specifically noted and gave you a reference to how those 3rd party tags use Apple's own network.

What is the clear reference? One person said they searched GPS tracker tags on Amazon and the other gave a link to Apple’s licensing program which in turn links to NDAs and contractual agreements as well a multi-step design and approval process. There seem to be some knock-offs claiming they work with Find My, but there’s all sorts of weird counterfeit crap on Amazon. Do you have links to a product that’s actually licensed/supported by Apple (ie works and will keep working), because that’s what surprised me.
He interviews them on condition of revealing the numbers, which he sells to investors. He has enough clout in the industry that people want to reveal their numbers to him in exchange for being able to raise more money.
> “Even within the human species, the smartest among us are not the ones who are the most dominating,” says LeCun. “And the most dominating are definitely not the smartest. We have numerous examples of that in politics and business.”

Humans are social creatures, and social manipulation is a form of intelligence, as is charisma.
Well, if nothing else, at least Vercel's new integrations have put new things on my map of free things to use in side-projects (I had never heard of Upstash before now) :))
> It seems to me all we need here is a measure of confidence for the result averaged over the entire answer. Low confidence is a guess/hallucination.

Even if the model knows the exact answer to the question, there may be many distinct ways of phrasing the answer. This would also lead to low confidence in any particular phrasing.
Mozilla is working with Facebook now: https://blog.mozilla.org/en/mozilla/privacy-preserving-attri...
6.5 seemed like a sweet spot for number of news. It results in 1-5 news each day. I tried 6.0 at some point, but I think it resulted in like 10-20 articles each day which seemed a bit much.
Not even most hedged investments at large scales. Hedging doesn't make risk disappear: It just shifts it somewhere else, either to someone even larger, or dispersed among many parties. When the risk is correlated with the risk from others, like the trillions in underperforming treasuries that the bing banks have in their balance sheets, who is the safe counterparty? Not the next bank, which also has a similar position. We saw this with the housing crisis and synthetic CDOs, and we see this on insurance against sufficiently large natural disasters.

So sure, small banks failing to hedge is irresponsible, but at a large enough scale, someone holds the bag.
I guess I'm in the minority in that I love Fakespot as a tool to determine the "real" review scores of products on Amazon and other online shops. I get tired of the "1000 reviews, 5 stars" that turns out to be pure garbage. Instead, I find that half of the very amazing 5 star, 10k reviews products are rated a C, D, or F.

I think it'd be great to have this integrated into the browser and be able to get a sense for what's real or "likely fake" when browsing the web of tomorrow.
Don’t you have your own templates?
Key-Locked Rank One Editing for Text-to-Image Personalization
For related work, this also uses MLIR for neural net kernels and had some ofthe same people involved: https://www.tensorflow.org/mlir / https://github.com/tensorflow/runtime
If a "hallucination" leads to an advantageous decision, why wouldn't you call it intelligent? Indeed, why would you call it a hallucination in the first place?
How does Neon compare with planetscale for free dB hosting?

I know fly also has free dB's, but it really isn't a managed dB service.
Lots of financial pundits like to compare the current period with the 70es (default on gold standard, oil shock, "financial repression").
I just wish the source code supported Unicode and the formatters supported tabs dispute the compiler accepting it.
It’s simple. It’s not more popular because of bad UX.
I would not be surprised if the best customer that Vercel chasing is also a customer that can add these costs to their customer or take a hit on the margin.
Which countries are bullied? Are they neighbors too like with China?
My knowledge in this area is very limited, but based on the high level descriptions I've seen of how LLMs work (including the OP), it seems like it would be fairly trivial to output, along with each response, a "confidence factor" of some sort for that response. While that might cause confusion for some users, it could be incredibly valuable to differentiate between confident responses and guesses, as you say.
I've been wondering what the limits of the user-based pricing actually are

If it's just the number of people who can go in the UI and press the button (when it automatically gets deployed from git anyway), or change env secrets, can't you just have a single admin account and call it "one user"? That could be a single actual person (how often do you change those things?) or could even be a single account shared by the whole team

What am I missing?
You mean silicon-based hardware? What role does relativity play here?
Peak HN, when we want to pretend that Google and Microsoft provide nothing useful to the world.
Off topic - a pet peeve of mine is seeing humans termed as “irrational”. Please forgive my rant, as it is not personally targeted at you.

We only seem “irrational” when we are talking about a narrow view of “rationality”, i.e., as defined by the cold hard logic of machines. We do not question why we have this definition of rationality. Our “irrationality” simply seems so because we have not bothered to understand the larger complexity of our evolutionary programming. It’s the same as not bothering to understand how a car works, and then claiming that the car works on magic. If one understands how it works, then it is no longer magic. In the case of humans, we may never fully understand how we work, but we can work towards a compassionate understanding of the same.

/rant
> I really don't want to restart with the hassle of configuring a js project from scratch. Done it already a thousand times, and that's a thousand times too many :)

This is the key. For small apps, it's far more effective to pay the premium to not deal with any DevOps. Once an app gets bigger, it'll make sense to spend more time optimizing cost.

I feel like Vercel is the new Heroku circa 2015. I'm hoping it won't follow Heroku's trajectory, but who knows.
Hey, sorry about that. I can't remember the exact video I watched, but it was talking about anxiety and it's symptoms. It wasn't the exact video that was so important, it was the understanding that what I am dealing with was Anxiety.
I've only tried one json file I saw posted by someone, and it didn't work either. Well, it sorta worked, but it very quickly forgot that I had given it anything already.

I strongly suspect that the better results come through the APIs and not the web interface.
Ah, interesting, that does begin to explain how this might be more difficult than it initially appears. Could there some way to define.. proximity of different possible responses, and sum the confidence for all the nearby possibilities?
its the marketing
Those are necessary but not sufficient conditions to having a healthy community which actually continues developing such forks, likely for free if the main company backing the original product goes away. I don't know why people think OSS is a panacea to community development, lots of things are OSS and have few to no contributors.
I come from a small factory town in Scandinavia (under 10k population).

Up until the late 80's the factory either provided ready-made housing or backed the loans of employees who wanted to build a home in the town.

That's how a bunch of my aunts and uncles got a cheap loan to build a home in their 20's. The bank had practically zero risk when a multimillion company was co-signing the loan.
Texas braces for a potential insurance crisis as storm season nears
> Singular models, plural table names. Built in rules to pluralize, or override the defaults and add your own table name.

Why spend a single cycle of computing time on this? There's nothing objectively necessary about it, singular-only is entirely adequate to convey the important semantics. Every single symbol in any code devoted to this conversion unnecessary surface area / computation time that contributes nothing to the problem domain.

> I now understand that the author is referring to the relational algebra side of things here. I don't think that changes my skepticism of the argument though, because very rarely is it useful to discuss these things in terms of the mathemetics with your coworkers.

You don't even have to go that far. It's the user table. The order table. People know what an order is, and what a table in a database is; the semantics of db-table-ness conveys that it's a collection and the nature of the collection with so much more precision than english plurals that it's more likely obscuring to use those than contributing to understanding... much like a lot of natural language conventions, the emulation of which is really the only reason anybody does this.

But also, when we're talking about databases, relational algebra should no more be weird or inadmissible than boolean logic concepts are to coding.
When I go to settings there is an option:

> Save new chats to your history and allow them to be used to improve ChatGPT via model training
Yeah I have been asking for it and gotten either 'search for it, it is easy to find' or a runaround where people claim to have it and then don't. So, provide it or stop asserting that you have it.
You misunderstood my comment. The GPT that filters the training set doesn’t need to recognize truth from lies. It needs to recognize which bits of text from the training set look like facts and label them as such. Everything in the training set that’s looks factual from context can be presumed to be true. The goal of this exercise is to eliminate the influence of creative fiction, and prevent the model from making things up when it doesn’t know the answer. The goal is not to prevent the model from lying in bad faith. Our current models already do pretty good at reconciling contradictory ideas.

The model should in theory learn when it’s ok to make things up and when it’s not ok, and if that concept generalizes well, begin to build an internal “database” of verifiable facts as it’s exposed to a wide variety of ideas.
Good point. When you buy an Android phone you're forced to put custom roms and new bootloaders on it. The phones do not work without doing all that.
> outperforms classrooms by 2 sigma

...by what metrics? Anyway, who cares? Why do kids need an education, let alone one that has sigmas, in a world where talking machines can outperform them in every area?

What are people for? (That's a Wendell Berry essay, also I'm asking.)

I maintain that the robots should do the work so that people can e.g. teach their own kids. Education should be more than a means to secure a position in the economic/social order. (An order that seems poised for some sort of upheaval.)
Reality check. Car gets stolen. You tell the cops the exact location of car. They tell you to fill out paperwork. You pick up said paper work two weeks later. Insurance does ( or doesn't ) do it's thing.

I would have a totally different feeling - if I believed that the cops would 'do' anything. They have impressed me, and my five decades on this planet, at the lengths they will go to not do their job ( or flat out do the opposite if it fits their wants. )
It does. Think for example, if you had worked hard 30 years to acquire a $250,000 house, and the government just gave everyone $500k overnight. Would you think it's fair they could pay $250k for your house for not having worked for 30 years, while you had to? Probably not. Instead you'd likely raise the selling price of your house to protect the value of your hard work. Same goes for companies that produce milk.

Obviously an oversimplified example, as again not everyone is benefitting the same amongst other reasons, but that's basically the principle behind it.
what have the Romans ever done for us?
Especially when you think you know something it just told you, because you know something similar. You can reply "Oh, I think X might be similar to Y" and let it respond something akin to "Yes, X is similar to Y because..." which goes a very long way in learning something new. No other online training methods (other than very smart real people) can make those kinds of comparisons, and cement something to your knowledge because you already knew something that had a passing resemblance.

I think it needs a working citation mechanism, though. You should be able to ask it for working links that back up what it's told you. Google will need to use that in their competing AI if they want to get ahead of the pack. Any "intelligent" Google service that can't google it's own data is... baffling at best.
Not really. Next.js is built on Node.js + React (both of which are also open source).

The services Vercel offers have to do with deployment mainly. That's never going to be something a back end or front end framework will help you with directly.

App hosting and deployment has always been a secondary concern. Choice of database, caching, queuing service, etc has also always been a secondary concern apart from a backend/frontend framework.
Can I do that with something like a digital ocean droplet?