skysight-inc/HackerNews huggingface dataset:
Math and hard science have political and cultural biases and inertia as well. At a minimum, hard science is still manipulated by justifying funding.

And then there's this: https://esoterx.com/2014/12/03/murder-by-math-the-irrational...

There was institutional pushback on Godel's incompleteness from the axiomatic mathematicians that thought they could prove everything as they reconstructed math from axioms (if I understand that). From what I recall reading the axiomatic reconstruction was basically a huge industry of mathematical work, and suddenly some pissant young guy shows up and says "yeah, that not going to end the way you hope".

The mechanism of tenure alone will lead to political grandstanding. If your research is borderline on tenure but some other research completely undermines it, that is millions of lifetime dollars on the line.

See: MOND vs Dark Matter, string theory, etc.
It's not generating the most likely next word in the 'meta-corpora' of all possible discussions similar to the ones it has been trained on, it is trying to generate plausible text that would be scored well as a helpful assistant - and in the process has transferred knowledge acquired from its pre-training task.
The location for setting mail read on selected is settings-> mail-> message handling-> Mark as read.

Outlook also defaults to not marking messages as unread when the unread filter is on. I presume because profiles were setting the filter and then complaining their messages were disappearing? You can change rose on the same settings page
Can you share comp range?
The article disagrees. But my sense is you are right in relative terms. Much more failing than acquiring.

Article:

> Startup M&A bounced back: The number of venture-backed companies that were acquired or merged with another company increased by 20% in Q1 compared to Q4 2022, with 57% of those M&A deals valued at $10 million or less.
Until there is a viable way to sync passkeys between all devices, all platforms, and all browsers, I will be happily sticking to my passwords. The security benefits provided by passkeys are not enough to offset the ecosystem lock-in that passkeys cause.
The difference is that I can choose my password manager on iOS (and thereby pick my desired security level for password synchronization or opt out of it completely), but not my Passkey synchronization backend: iOS forces these to be stored in iCloud Keychain. (Passkeys are unavailable without iCloud Keychain [1]!)

Ideally, there would be a per-passkey UI option to opt out of synchronization at creation time.

> Security must be a balance with functionality, and this is a huge improvement over passwords.

Sure, but I'm somewhat disappointed that the WebAuthN WG basically forced this huge change of semantics (it's essentially a security vs. availability tradeoff) into relying parties without explicitly collecting their opt-in beforehand, or even providing an ergonomic way of opting out.

[1] https://support.apple.com/guide/iphone/sign-in-with-passkeys...
Sure, but if that key derivation function is protected by a "you get 10 attempts then we wipe the keys" safeguard, the effective entropy is much higher. The question shouldn't really surround the effective entropy of the PIN, but rather the systems in-place to protect bypassing safeguards in the key derivation function which render the actual entropy of the PIN irrelevant. There probably isn't no way around that safeguard, but as more of this gets moved into trusted compute silicon the level of sophistication required to breach it goes up; and is one hardware revision or operating system update away from being made moot again.

This thread really smells like https://xkcd.com/538/. Three things you have to remember, that are far more important than any of the concerns you have:

1) The effective entropy of the current system (passwords) is "shrugs shoulders fuck it not our problem". Services can enforce password entropy requirements. They cannot effectually require users to use a unique password. They also cannot forbid users from writing the password they use in a .txt file on their desktop or post-it note or throwing it in Apple Notes (EVERYONE does this outside of our bubble. Apple Notes and Excel are the #1 and #2 password managers on the planet). A six digit pin + hardware TPM key derivation is, at best, the same thing that was guarding how most people store their passwords anyway, and in many cases far better than the current state (if a user's device has no E2EE, or if they're syncing their passwords.xlsx file with Dropbox, etc).

2) Passkeys do not and are not designed to protect against nation-state level attackers. Passwords weren't either. They also don't protect well against the "grab a hammer and beat it out of him" threat vector; you're going to give up your password, and tomorrow they'll probably have your iPhone and your passkeys will be disclosed as well. Passkeys are designed to protect against unsophisticated (and even moderately sophisticated) attackers; phishing, data breaches, etc.

3) If you want higher tiers of entropy guarding your passkeys, you can do that. 1Password, as an example, already has this [1]. They store passkeys, and encrypt those passkeys with their two-level account & master password keys. Done! If you don't like 1Password, you can roll your own, and I'm sure OSS password managers like gopass/keepass/etc will eventually add this. Passkeys/WebAuthn don't prescribe to anyone how you store the private keys; Apple will do their thing, Google will do their thing, you don't have to use them, many people will, and they'll be better off (see point 1).

[1] https://future.1password.com
> He (Gates) knew that Donn's Basic was way ahead of Microsoft's, so, as a condition for agreeing to renew Applesoft, he demanded that Apple abandon MacBasic, buying it from Apple for the price of $1, and then burying it.

Not exactly EEE, but I see where the inspiration comes from. I always thought the mistrust of MSFT in the community started mainly because of how it pushed IE and its Windows OEM licensing terms, but it goes far beyond that.
What's the main benefit of import-maps?

Reading the article it seems to me you must code the import map which basically defines aliases for your scripts. Then you must use the aliases to actually get access to the scripts you want to use.

You must specify the absolute URL of the imports whether you use import-maps or not so what's the benefit? Does this reduce the amount of code?

I'm sure there is a benefit I just don't see it on first reading of this article.
First - thank you for open sourcing this! It's a real gift to the community to have a model intended for "commercial use" that's actually licensed as such.

I'd be very interested to hear about the choice/evaluation of the ALiBi approach for positional embedding (perhaps in the technical report).

My intuition suggests that while this allows for better generalizability for longer sequence lengths, it penalizes scenarios where an LLM might need to check for things like a function signature far away from where the next token is generated. My initial testing of this model tracks with this intuition but that's by no means a rigorous evaluation.
> I think ChatGPT is good evidence of this. What evidence do we have that this isn't how intelligence works?

The fact that ChatGPT doesn’t behave like an intelligence. (Though it converses like one with radical deficiencies in certain areas, which highlights the narrowness of the Turing Test, which itself is a big step.)

OTOH, it gets less bad at this when you wrap it in a loop that provides recall and other capacities with carefully constructed prompting as to how (“thought” process-wise, not just interaction mechanics) to integrate those capacities, so there’s maybe a decent argument that it models an important component of general intelligence.
Which is a deduplicated version of this: https://www.bigcode-project.org/docs/about/the-stack/

And probably, yes. While it contains 358 programming languages, obviously there's a long tail after the 20 most-represented languages. Some people might not expect without thinking about it for a bit that many of the most-represented "languages" are actually things like JSON, XML, HTML, CSV, text, markdown, YAML, SVG.

Also note that it won't be able to parse natural language nearly as well without additionally being trained on something like the LAION dataset, so this version will be more of an autocomplete like Copilot rather than something which can manifest high level business logic from whole cloth like ChatGPT.
Source for this? SwiftUI depends heavily on Apple/macOS-only APIs, both in use and design.
To clarify, it isn't vendoring to have an external script in your build output. Just because it's technical jargon doesn't mean there can't be a clear meaning of it.
The decline in employee option exercise... is that the canary in the mine? If the team itself is saying less and less that their company's equity is worth taking a risk on -- and they are in a good position to be optimistic, rightly or wrong -- then that's a pretty bearish signal.

Of course there are other pressures on peoples' personal finances that makes money dearer... but still.

Or perhaps with layoffs there is just a lot of people who could be exercising vested options, but won't because (1) they no longer work there and won't be able to contribute or have an insider advantage, and/or (2) they now don't have a job so won't risk the capital in buying out their options.
It’s really weird to me that Americans automatically assume that “soccer mom” suburban lifestyle is just the default way to raise kids. Like it’s normal for kids (children! without jobs!) to need to travel 20 miles per day for their daily activities.

Go to any other civilized country and you’ll see children biking or walking to their daily activities, or riding public transport alone (ever heard of a school bus?) if they really need to.
> Auth is as secure as the weakest link

True if you are being specifically targeted, but there are whole classes of vulnerability that you are better off not having even if you have less than perfect opsec. To take an extreme example, my personal server may have an unpatched vulnerability that a determined attacker might exploit, but that doesn't imply I might as well share the same password across all my accounts.
Presumably the argument in this thread is that lugging around an Electron app just for HTML is overkill if you could put the same functionality in a much smaller package.
I disagree. If you play around with ChatGPT4 enough you can see it understands the concept. That is, it's able to model it and draw inferences from the model in a way that's impossible through just words and their relationships. "Sparks of AGI" paper gives some good examples, for instance where it's asked to balance a book, 9 eggs, a laptop, a bottle and a nail. I recently asked it to design a plan for a bathroom. It wrote and SVG mockup and got most of details right. For instance, it understood that sink and tub required both cold and hot water lines but toilet only requires a cold water line. These things are not possible with just words, you can see it's able to create an underlying world model.
While Apple is far from perfect, I have zero motivation to ever go back to Windows (or go work at a company that primarily uses MS tech) for reasons like this.

Between these UX-hostile behaviors, ads embedded in the OS, the awful MSN news integration... it just baffles me that how much MS is sinking despite some rehabilitative moves a few years back.

I'm not even mad, just (constantly) disappointed.
It's not being sold as long-form autofill. It's being sold as something which will respond to queries, and there is an expectation that the information it replies with should have some accuracy.

I am not in disagreement with your generalization of how it functions or that it lacks empirical knowledge. Some responses are accurate, some are not. It will always give a response but does not always produce a disclaimer saying that the response might have been inaccurate.

So, in criticism of the existing nomenclature used to describe this phenomena (hallucination), I simply suggested something more appropriate.
Sure they are, JPMC just recently acquired a small startup.
Let me introduce you to tonic. Because this title suggests it has never heard of it, let alone seen it.
That's basically what is happening here, except you create `e` ahead of time instead of a do-anything-you-want lambda. But they essentially the same thing, though I think `ExecuteActivityAsync(MyActivities.Ref.DoPurchaseAsync, etc...)` is clearer that you are referencing an activity. And since it's just a delegate that an attribute is on, you can write a helper to do what you have instead.
I've thought similar.

At the very least it's promoted by a coalition of true believers and those who see it as a power-building opportunity.
Firefox on a garbage macbook: Site loads in a few seconds and causes no problems. It's just a bunch of text and hyperlinks, why would that be a problem?
Dumb questions:

1. what's the backup login mechanism when you lose your mobile device?

2. with Passkeys enabled/used, will this stop google from randomly locking my account because I happen to be a person who travels a lot and they constantly think I'm a fraudster attempting to log into my own account.

3a. can I use my google passkey for logging into non-Google sites?

3b. can I use my google passkey (biometric) to log into sites that don't accept "Sign in with Google"? (meaning, other sites tap into my same enrolled passkey biometric)

4a. is the way to think about Passkey is that, it's basically turning your mobile device into an open-standard Yubikey? (meaning, Yubikey is a hardware biometric that you need to be in possession of to login. Passkeys turns your mobile phone to functionally perform the equivalent of Yubikey)

4b. Or is the way to think about passkeys is that’s it’s effectively just a password manager (like 1Password) that you use your biometric to unlock?

5. is FaceID a "passkey"?

6a. can a Passkey be paired with a mobile Drivers license, to effectively create an eID?

6b. if so, would this be a competitive threat to all the KYC offerings that exist in the world (because now you have a verified biometric login that can be used for new account openings)?
It's 100% accurate. And I get why it may not seem helpful, but I think this is simply due to this industry trying too hard to cater to people who want things to be 6-year-old level easy.

Security is HARD. There's no getting around that. Your data is valuable and protecting it is not an easy task. At some level, security and convenience is a zero-sum game.

As for old people, my dad writes down his passwords on a text file in his laptop and has a printed backup in the house.

And, yes, he does have to bug me sometimes to re-login or change a password, but we've never had a security problem, which is way more than can be said for a lot of people who tried the INHERENTLY unsafe "3rd party manager" thing.
Can't find it now but pretty sure BigCode said somewhere they explicitly looked for it and removed it. Also subjective measure does match up to the benchmark. Our finetuned model performed +50% on HumanEval and then when using it felt at least that much improved.
It might be that finding vulnerabilities is easier than fixing them (think AI-driven fuzz testing).
Why would you duplicate the massive amount of helpful functionality and styling HTML+CSS already provides? What's the point?

It's one thing to build panels and buttons for a video game. It's a totally different beast to build a text layout and editing and selection engine, accessibility and screen reader compatibility, clipboard support, date pickers and file dialogs, and ten thousand other things.
Fish farms create those surfactants anyways, might as well put them near wind farms to harness the insulation effect. At the moment those farms are to close to the shore, since building them further out increases the price.
Sure but this currently means a virtual authenticator that puts unwrapped passkeys in the same memory as other applications, leaving only the OS and no other physical measures to protect a direct-memory read. That might be acceptable for your threat model, but no other currently adopted WebAuthn authenticators work this way other than password managers that don't want to be left out.

Hopefully in the future OSs will have better APIs to allow third-party tools like 1Password to leverage hardware components like TPMs and Secure Enclaves to build a sync fabric that's not tied to the hardware vendor, but this does not currently exist and is not trivial to implement without significant consideration about phishing.

I think YubiCo and password managers have a tremendous opportunity here to partner up to build sync fabrics bypassing OS vendors that might not be as incentivized to provide these APIs now, but I don't believe it's moving, currently.

Additionally, when you say you wouldn't trust Google or Apple to be the _only_ place your passkeys are stored, it's likely that even if we can have third-party sync fabrics, that these will never be interoperable. I don't believe you'll be able to "export" a Passkey from your iCloud ecosystem and import it into the 1Password ecosystem as you can do today with passwords. Doing so would break assumptions about the strength of the authenticator as far as WebAuthn is concerned, and would weaken Apple's security posture as well. Instead you'd probably have to maintain _both_ sync fabrics independently with every service you sign up for.
And the likelihood we're going to bite it "soon" (as in the geological/universal time scale sense)
So much this. Metal is so elegant to use. I've tried reading through Vulkan docs and tutorials, and it's so confusing.

Also, this seems like some major revisionist history:

>This leads us to the other problem, the one Vulkan developed after the fact. The Apple problem. The theory on Vulkan was it would change the balance of power where Microsoft continually released a high-quality cutting-edge graphics API and OpenGL was the sloppy open-source catch up. Instead, the GPU vendors themselves would provide the API, and Vulkan would be the universal standard while DirectX would be reduced to a platform-specific oddity. But then Apple said no. Apple (who had already launched their own thing, Metal) announced not only would they never support Vulkan, they would not support OpenGL, anymore.

What I remember happening was that Apple was all-in on helping Khronos come up with what would eventually become Vulkan, but Khronos kept dragging their feet on getting something released. Apple finally got fed up and said, "We need something shipping and we need it now." So they just went off and did it themselves. Direct X 12 seemed like a similar response from Microsoft. It always seemed to me that Vulkan had nobody but themselves to blame for these other proprietary libraries being adopted.
In order to exploit the 6-digit password across the web, the attacker needs 1) the password, 2) web access from anywhere in the world. To exploit the PIN guarding your phone, the attacker needs 1) the PIN, 2) your phone. You can't prevent the attacker from having access to the internet, but you are probably reasonably good at protecting your phone physically.
Deno has a similar thing... fwiw. esm.sh can do some of it but it ends up being kind of a shit show.
Ah yes so parents should be more likely to be depressed, become unfit, lose motivation for life because they need to 100% be with their baby at all times. You are aware how that's not a viable long term solution right?
One thought about AI. Testing for correct answers is not a useful metric for AI.
People can learn something that is wrong as easily as something that is "less wrong", as long as it makes sense. Sometimes things that are very counterintuitive are proven correct, and our intellect has to kind of reason a way to believe it.

Also, AI doesn't need to be "human" to be very useful. The argument of birds vs. planes comes to mind.
But on every machine I've put the new FF on, the
startup time for it ranges from 2-5 minutes

What? Is this a typo? Do you mean seconds?

I've never seen that on any machine and again, this is many dozens of computers over the years, including one company where FF was the standard browser for the company enterprise/intranet app so thousands of people were using it all day long.

and the initial load time for web pages is
achingly slow (sometimes up to a minute or so).

This is absolute madness.
There were so many attempts to create something similar but modern that it isn't even funny. WinFS was first announced to be released in 1993, and the last I saw it was announced in Windows 8. This was one of the core ideas of BeOS, AFAIK they never really did give-up on it, just de-prioritized. The KDE people played with it at least twice...

It never works. There are insurmountable problems you notice once you try to design such a system. And yeah, AS/400 is an example of it not working too, as it was only usable as a hidden database layer and never survived contact with the users.

On the other hand, the obvious extension of the concept into development tools is a great idea that has been used to create novice-friendly toolsets all over. The tools always seem to "mature" away from it for some reason, and usually lose popularity on the process.
Magnetic coupling is clever. I always figured they used centrifugal force instead. Perhaps some do.
I wonder what it'd take to make sqlite a filesystem driver for linux. Plop an sqlite blob onto a raw device, interact with it via the "posix filesystem" schema...
Lies. Bullshit. Con artistry.

It's not perceiving reality incorrectly, it's presenting wholesale fiction as fact both coherently and with absolute confidence. It even forges supporting documentation ad-hoc.

GPT is not a poor schizophrenic suffering from delusions or innocuous "hallucinations." It is the world's most advanced liar.
A Guide to Handling Errors in Preact
They gotta track you enough to pick the right tower to ring your phone.
It's not as mature as other platforms, but it's built extremely well from the base up. Unity has a huge ecosystem and tools, but it's built on a shitty/messy platform full of bugs and hacks.

If I was to make a quick & simple 2d or mobile game today, I'd go with Unity. If you want to make something that will require more effort, but work well for years, Godot is better.

UE5 is the choice for anything 3d and complex.
If you want to hire five developers, Haskell makes that easier. If you want to hire five hundred developers, Haskell probably makes that harder, although it's not something I have experience with.
No, the post links to the offical trailer posted by Warner Brother Pictures, that runs for 2:24, and shows only new scenes.

Your link shows a fan made trailer, that runs a bit longer, but contains mostly scenes from the first movie, and from the teaser trailer (which is only 0:46).
It ain't about $$$ value. Your shitbox could* be stolen if at any point that platform or it's parts become desirable for any context whatsoever.

for example, the fabled acura integra. While not cheap, it's certainly not going to make a thief rich. At the end of the day it's a vtec honda civic with 2 doors and standard transmission.(I'd argue that a 97 Acura Integra IS your definition of a shitbox.)

Because of that desirable engine, they are still the most GTA vehicle in US.
Is there even that much crypto mining happening in the US anymore?
Can rust do linear types? I thought it was limited to affine by the exception machinery
I wrote about this:

https://albertcory50.substack.com/p/how-to-finish-a-software...

The key thing to note is: It's not just big software projects; it's ALL big projects

The California Bullet Train is a poster child for this, as is the Big Dig in Boston, and (probably) your kitchen remodeling.

Once you accept this, you can learn from the way other disciplines handle it. Or fail to.
I'm going to guess the timing algorithm has something wonky. Because no, not enough time to go backwards then forwards.