skysight-inc/HackerNews huggingface dataset:
This attack reminds me of that viral photo [0] of an LCD billboard on the back of a truck (ironically called "The Safety Truck") that played a video of the road ahead of it. The criticism of it was that it could cause a self-driving AI to misinterpret the video as the actual road. Some people also suggested that a malicious actor could project a false image on the screen, such as a red stop sign or a pedestrian crossing the road, causing it to brake suddenly on the highway. So this prompt injection attack reminded me of that because it shows how an LLM AI might be similarly vulnerable to a malicious prompt "in the wild."

[0] https://news.samsung.com/global/the-safety-truck-could-revol...
The question is, how much can you focus it? It would be enough to boil one vessel in the brain, to kill someone.
Probably because people aren't acting on it, or sticking with it long enough to actually see results.

Especially in today's world when they can just take a pill and loose 10-15 pounds, nobody wants to do something they probably don't like doing (consistent exercise or healthy eating) as part of a short-term or long-term process.

A lot of people, especially those in food deserts or without access to adequate nutrition on a consistent basis (or those who cannot afford quality food, or those unable to prepare it properly) are not going to undergo something where change is gradual versus taking a magic pill, side effects be damned. Sad, but that's the world we live in.
Participation trophy culture.
Thanks, didn't know that. Gives a different meaning to my message.
China: The Linchpin of the World's Electric Vehicle Production
actually the pulses went back in time and killed the systems inventor. So it no longer exists.
Surprisingly they seem very capable of taking down drones uninjured. They have very strong legs, and with a flexible attack from below they can avoid the props.

Here's a video of some french trained eagles showing how easy it is.

https://m.youtube.com/watch?v=b8kZupqPbJs
Well they don't. Azure doesen't in fact it's the complete opposite. Not sure about GCP though, but I'd also be surprised...
Or like someone who watches the Super Bowl for the football game.
Losing money while you grow isn't neccesarily bad.

Venture Capital at its best allows a company to take losses until it can achieve economies of scale.

I'd say it turns predatory when even after achieving scale(Like Uber or Amazon) a company still runs an unprofitable business to choke out competitors.

How can you prove this in court? No clue. Maybe the company has to articulate the explicit economy of scale it hopes to achieve and how?
I did not bring up US public transport as an example of "best practises". I agree that Berlin has a extensive and well-developed public transport, and that is commendable.

> Turnstiles don’t solve homelessness.

Nobody claims they do. My anecdote illustrated the opposite direction: barriers remove one related cluster of reasons, related to personal safety, why some avoid public transport and prefer to drive by car, namely the fear to be accosted by vagrants, pickpockets, and other forms of sociopathy.
Easier still:

- Prewrite essay with ChatGPT.

- Ask ChatGPT to rewrite the essay in the voice of someone 5 years younger.

- Submit the juvenile copy as your rough draft.
I build drones that fly over 5G, the link os also encrypted, and use the same medium that other UEs (cellphones) use in the area, it is hard to impossible to detect even with DPI, or at least by the time you detect it, the drone would be far gone. The only vulnerable point though is the GNSS, it’s weak, prune to interference and jamming, however, there are fail safe mechanisms that if that happens then it returns or land.
Well, that is one way to do job ads.
I think his strategy is to exit to Amazon/Walmart/…
And maybe remove touch screens and touch controls?

AM Radio should be mandatory world over. They can be useful in emergencies.
If that means no more papers whose thesis statement is "the theme of Hamlet is revenge" I'm all for it.
i tend to choose hazy over clear beer. i associate hazy with more rugged, natural, manly ... clear seems industrial, commercial. hazy beer also seems to taste more complex. is that just bullshit? is properly brewed beer always clear?
It's trained on their stock art and under-performs Stable Diffusion and Midjourney.

It's really poor, comparatively.
+1 on this experience. Langchain is great at wrapping simpler tasks, but once you start to decouple components you start to run into issues.
I don't think you can play the alternative universe easily. Will there be another Apple? Will there be another Microsoft? There is some uniqueness in Amazon execution that didn't enable a competitor to survive, even when they were a startup.
Thanks for the additional comments. I love (but cannot understand 95%) Road to Reality and would love to have a community around the book, so super excited about any such effort.
https://archive.is/6n2Ub
What will happen to all the advertising money?
Just one of the many aspects of so called "Requirements Engineering" (which some unfortunate souls have even somehow ended up spending their entire academic career on) which is more or less complete utter BS from start to end if I'm allowed to be clear.

I have yet to see a single successful software company that attributed their success in any significant manner to practicing any or all of the mumbo jumbo that is taught in this pseudo-discipline.

Reality has taught us over and over again that absolutely nothing beats just doing the damn job! Certainly not circle jerking around the bush with some nonsense User Stories.

/rant
> I’ll pay cash thank you.

And if that's outlawed I'd pay in cigarettes, ammunition, or my kids marble sets before reaching for Blockchain based currencies when commiting crimes.
Interesting statement here:

"We rewrote our data layer to treat the database as a simple persistence layer rather than an application. We eliminated all the triggers, stored procedures, and row-level security rules. That logic lives in the application now."

Reminds me of the article and discussion here[0] over whether to put logic in the database or not and to what degree.

[0] https://news.ycombinator.com/item?id=35643432 "Use Databases Without Putting Domain Logic in Them"
> Despite AWFUL national and international reporting on the Supreme court, their powers are actually quite limited. Their authority is restricted to interpretation of situations where written federal laws do not already exist.

This is pretty directly refuted by Dobbs. Roe v. Wade was not ambiguous and was a settled matter of constitutional law until the new court decided they didn't like it.
Sure. There were a few people, perhaps you, who tried pointing out how he was a charlatan, how Tesla's profits were wholly due to carbon credit sales and the core business was a disaster, how he rarely delivered on his insane promises, how the new Roadster, the Cybertruck, and the Semi were vaporware, how there was nothing revolutionary about SpaceX reusable boosters etc, who were roundly and consistently downvoted because the HN zeitgeist was to huff Elon's farts.

Literally one month after his infamous Ukraine tweet, it was completely reversed.

My comment really isn't even about Musk, it's about HN. HN doesn't care about facts or rational arguments, despite the relatively high IQ here. It's politics, and always has been. And this abrupt change demonstrated that quite well.
> This is a non-kinetic weapon, because it does not damage the target through kinetic force.

It is literally the kinetic energy of the photons and nothing else that is disabling the drones. The photon kinetic energy is transferred to electrons that either overheat components or destroy control electronics with excessive voltage (the article did not specify which).
As a passenger on commercial aircraft, I don't mind reducing the bird population near an airport.
I'm pretty sure my 2017 Macbook Pro (Intel, no Touch Bar) doesn't have a Secure Enclave chip, yet it supports Passkeys.
A note on attestation, since that's a part of Passkeys (and Webauthn) that's frequently misunderstood: WebAuthn has a broad understanding of "attestation," including "self attestations"[1] and no attestations at all[2]. To the best of my knowledge, Passkeys do not impose any further constraints on attestations, meaning that compliant authenticators don't need to send any attestation at all.

Relying parties can of course reject authenticators for any reason, including for not having an attestation statement (or not having one from a particular vendor). In practice, I'm not aware of any major public service that does that: actually verifying vendor attestations introduces yet another PKI, and has dubious security benefits outside of corporate (meaning fixed hardware) contexts.

In other words: while understandable, I think a lot of concern about vendor lock-in and lock-out are pretty overblown. There's no indication that services like GitHub will even find attestation handling feasible, much less desirable.

[1]: https://www.w3.org/TR/webauthn/#self-attestation

[2]: https://www.w3.org/TR/webauthn/#none
This comment highlights why you shouldn't get legal opinions from tech discussion sites. I don't think you demonstrated any knowledge of why the supreme court exists in practical or theoretical terms, but you are quite confident in your view.
Not at all easily. Blood pumps quickly through the brain and back through the torso, quickly distributing heat. And probably the first thing a target would do when feeling heat would be to protect their head.

Bullets are more effective against flesh.
I switched from QWERTY to Colemak about 5-10 years ago for a solid year or so.

My WPM decreased by around 25% and I actually found Colemak to be rather uncomfortable; with QWERTY (and DVORAK) you tend to alternate stroke between hands. Even if there is more finger travel, it just feels right to me.

Also, having a different layout than the peers around you is an absolute pain.

My conclusion is that having an alternative layout is not worth the marginal improvements if any it may offer. If I was forced to try another layout though, I would try DVORAK.
PSA: The "clear" tool can clear the wall of the orb as well.
The godfather of ASMR.
so classification of non-kinetic weapon versus "non-kinectic light wave pulses"

seems like grammatical confusion to me...
His ranting about X is from someone who has no idea what he is talking about.

X had 3d from a long time (PEX, OpenGL).
And although 2D is despised by some, it is heavily in use everyday. A window is 2D, a pdf is 2D, gimp is 2D, Chrome is 2D etc
the comfort in typing with colemak is mindblowing once you get used to it.
There are a million of these. It's a super crowded space.

https://civitai.com/

https://lexica.art/

https://openart.ai/

(Many more)
Mine die after a while...
Adobe AI is a crap compared to Midjourney
The article said Apple/Google tries to become the guardians of private key. That isn't true according to my understanding. Private key can stay on private devices owned by the user and never leaves the devices.
Drones can fly safely with gnss denied environments, a system we tested it was in a mine with a very narrow areas, and at a relatively high speed too, being open in the sky would be easier.
The last time they didn't do this, they ended up carrying MANPADS into battle.
These are easily defeated with small devices in the ear and shoe to guide the human. These are popular in Asia.
tldr: Language is bulky and LLMs can infer a lot of missing tokens. A simple optimization such as removing stop words with a probability `p` could lead saving around a lot of token costs, especially over a large number of API calls.

There's a lot that can be done but for now we provide a set of preliminary optimizers and their performance evaluation here: https://github.com/vaibkumr/prompt-optimizer#evaluations

There's a lot that can't be done because we don't assume access to model weights, logits or decoding process. We are stuck with optimizing the number of tokens in input prompts.

No free lunch: The reduction in cost often comes with a loss in LLM performance as can be observed here: https://github.com/vaibkumr/prompt-optimizer#cost-performanc...
I'd argue that building your app based on a quickly evolving library is not a wise idea, esp. if the library is not well documented.
This is not from Supabase, but as a community contribution. See upthread [1]: "at StackGres we have built a Runbook [2] and companion blog post [3] to help you run Supabase on Kubernetes."

[1]: https://news.ycombinator.com/item?id=36006308

[2]: https://stackgres.io/doc/latest/runbooks/supabase-stackgres/

[3]: https://stackgres.io/blog/running-supabase-on-top-of-stackgr...
> OpenAI already offers private ChatGPT instances hosted on Azure.

> They don't use it for code/confidential data though.

Yes, private isn't enough. They need to offer self hosted, for these types of clients. I imagine most orgs who need self hosted would already have a datacenter to run it in.
Ok, so the public service was in "documenting" some scenarios of unvaccinated people dying, if they can manage to figure out what is actually real and what was just karma farming from an audience that is very hungry for exactly that kind of content.

And this will somehow be useful (tremendously important even) in the next pandemic.

We're just going to have to agree to disagree on this one. I think it's about as important as Fox news keeping old men angry and scared. HCA served the same purpose just for a different demographic.
> If you’ve ever sampled “wort” (beer before fermentation) you’ll know what I mean. It’s foul. Hop water tastes like bong water.

are you kidding? that's one of my highlights when brewing to sip from the wort. it tastes sweet and delicious. i love it.
> Accounting has notions of fixed costs and marginal costs. The startups you are referring almost all lose money on fixed costs, but sell things at per-unit economics which make sense at scale because they are below marginal cost/COGS.

Well yes, because they are selling software or other products which require a very high investment into R&D and have minimal marginal cost...

Other markets don't work like that so I don't think this is particularly relevant especially considering the a huge proportion or the majority of those startups (which received the most VC money) are yet to turn a profit (until they do it's still 'dumping' in this sense).
Also, a Zen monk will have a different perspective about value. There are people who value the entertainment from TikTok while others prefer to read a book.
I'd expect kernel devs to carry lots of bad habits and poorly calibrated intuition from their noob days. Example: "for loops are fine."
The correct title is "Finance 101 For Recent College Grads - Updated for 2020!"
Did you change it to "Software Engineers" to get HN users' attention?
Sus.
It doesn't mention anything about SE's in the article.
I believe I've at least been shadow-ignored for excessive flagging on various platforms. As another poster said, the flag option is mostly there more as a placebo rather than because they really want attention called to something, at least for post sites.
This article is mostly about rediscovering the distinction between interruptible and non-interruptible waits.

At the end there is some sort of deadlock between namespace teardown, signal delivery, and FUSE, but... it isn't articulated in a way that is super comprehensible to me. The kernel flushes open files on exit and also kills things in the namespace on exit. But that means the race condition was always hitable if you killed the FUSE daemon at the wrong time relative to the FUSE client shutdown? It's not totally obvious to me why this would impact other non-FUSE filesystems.

Signal delivery and multithreaded process teardown in the kernel is certainly tricky, and it's really easy to get these weird edge cases wrong.
(btw If you click on the line numbers in Github, you get a three-dots popup, click that and you can "Copy Permalink" to get a link directly to the line which has #L255 on the end, e.g. https://github.com/freebsd/freebsd-src/blob/40b287054521f0a9... )
I find it interesting how there are entire disciplines now built around doing exactly what was outlined in the OSS Simple Sabatoge Field Manual https://archive.org/details/SimpleSabotageFieldManual/page/n...
IMO it is just a cultural reflection of our general safetyist cultural.

Safety has become a near sacred value. Near my house a new light at a cross walk has a computerized voice that says "stop stop stop" , "walk walk walk". A cross walk to a dead end street with basically no traffic ever.

I can almost hear the city official who had it installed "if it saves just one child's life..." even though it is a near certainty no accident ever occurs at that cross walk either way.

AI safetyist are basically that city official to me. What you posted is besides the point. It is about lowering a probability no matter how remote that probability is and even if the whole exercise is basically pointless. The gods of safety will be pleased by our offering.
I don't use supabase, but am a big postgres fan:

> that stuff in unmaintainable

Wrong. Version your functions and use something like liquibase to apply migrations.
All I can think of is this chair seemingly spinning after all humans are dead from the next pandemic. Ahaha
Oh, right, I forgot that C's library/package management situation sucks so hard that makes the awful syntax look like a comparatively small problem.
This is negligible compared to all other energy sources. Sorry for that :)
Not even close by several orders of magnitude across two dozen disciplines. But yea, we're heading there.
I'm pretty sure I played a similar game in like '95. It was called Logo. It had a turtle, and you could use the turtle (and your imagination) to draw pretty things on the screen. You probably played it too.
> “next” can show some previous page

That is usually a non-issue. The cost in DB operations is usually much more relevant than it.

When people do actually care about fully enumeration and unicity of the items they they are querying, "pagination" itself tends to be a too messy concept.
https://archive.ph/cqKr5
You can visit one city to capture this experience. Berlin was largely destroyed in WW II, many neighborhoods in the west and east were redeveloped with the support of the US and USSR, respectively.
Can someone ELI5 me how a gas that occupies 400ppm (0.04%) of our atmosphere creates a massively scaled “heating blanket” around the entire Earth? More than “scientists have determined”. What is the physical effect that enables the minuscule presence of an element to multiply to such effect.
Framework for building exceptional product engineering teams
The value of the data can be as simple as knowing what negative messages/videos you'll continually watch and how those videos, in part, impact larger swaths of the population. And with data sharing between apps and devices, you could likely track actions across much of the web to the influence of these videos.

It's in China's interest, and others, to destabilize the populations of it's enemies. Traditionally this could be through propaganda, but a potentially more powerful force could be to make the population depressed, angry, confused, and distracted. This impacts the real world in your day to day, the communities you live in, and the quality/intentions of elected officials.

Now this could easily be accomplished even with the best intentions from the company creating the software. So how nefarious or not this actually is, or how much manipulation the Chinese government is applying here is totally debatable.

I'm not arguing for one side of that or the other. My point is data is super powerful, is often tied to apps and devices you don't realize, and can be used to motivate action at large scale, so the holder of the data really does matter.

That said, US companies and others outside China also have tons of data and use it for their own profit and potentially to spread propaganda and destabilizing information. In the US, however, the chance of malintent being the driving force is less probable and, as far as I can see, tend more to be influential actors or groups. In these cases, the software company and regulators are more likely to to moderate or suppress this because it can be bad for business. When it's a geopolitical foe who is or simply can cause issues this way, the intentions and lack of regulation are far more problematic.
It's been a "fad" for about 15 years or so and has a long history before that. I've personally been collecting for 25 years and pinball has never been more popular except in the 1970's.
i've been brewing about a dozen times. but only from kits. doing everything from start to finish. but the yeast is provided. i just assumed it's basically an optimized baking yeast. also when talking to professional brewers they never really get into the yeast but talk about hop all day long. so i assumed that's where it's at.
Micron to Bring EUV to Japan: 1γ Process DRAM to Be Made in Hiroshima in 2025
Every Constraint Is an Opportunity
The footprint for small drones is almost negligible, and flying at lower altitudes make it even harder to detect.
Providing hosting, or an Internet pipe, is pretty different from accepting user submissions and adding them to your own systems to be presented to others as you see fit, often with broad claims of ownership over submitted content.
The new, terrible ‘bat bomb’!
For high risk government efforts. This isn’t a bad strategy. NASA can rely on blue origin for future competitive bids.
It’s just a regular office chair, you press a button then get up and walk away. It will then wait between 4-38 minutes before turning at least 100 degrees. If you press the button X times, it would shutdown after X hours. It really works (as in people tend to remember the last position of the chair) if you leave a sweater or jacket or something on the back.
Devex: What actually drives productivity
On the other han, euro crash tests are absolute (as far as I know). You can see the decrease in safety in smaller car models, down to which part of the body is getting crashed in which type of collision in a smaller car, but is intact in a larger car.
neat. gave me an atari 800XL vibe. battery power aside.

the latest inside news on the apple "XR" headset is that the fight was for portability vs beaming the info from a mac mini. that latter of course having much more power and being able to do much more, at the expense of being tethered.

it will be most interesting to see how this plays out. clearly the spacetop is more of a POC build level, but for anyone not Apple it's smart to test the waters this way.
Nothing I said was the least bit sarcastic. The direct application to the upper atmosphere cooling isn't exactly what I meant, but 'counterintuitive things happening which are outside our experience of what can happen' is completely down to chaos in action on a global scale.
Well to be fair Uber is almost profitable at this point (just -1.78% net margin) so if they actually wanted to they could be profitable in a quarter or two..
> Apple's passkeys do not provide attestation

Apple has their own anonymous attestation format[1] that some (unclear which?) of their WebAuthn authenticators support.

In principle the relying party could use this to verify the authenticity of the authenticator back up to Apple's WebAuthn root CA[2]. In practice, I'm not sure if that attestation is included by default (or whether significant portions of users opt out of it, when prompted by their browser).

[1]: https://github.com/w3c/webauthn/pull/1491

[2]: https://www.apple.com/certificateauthority/Apple_WebAuthn_Ro...
>That an LLM can ace the LSAT or GMAT is mostly an indictment of those tests.

These kind of comments are always the funniest. You can just tell the person who makes them has never looked at those tests nevermind attempted them.
Who is Rollo May?