skysight-inc/HackerNews huggingface dataset:
>I personally don't worry about this, it's too outlandish to happen. That'd not only be cartoonishly corrupt, it'd also be cartoonishly dumb.

The serious argument is that their real life battlefield readiness amounts to a joke based on cartoonish[0] levels of corruption, so never say never.

There's a considerably less serious one that has established historical precedent.[1][2][3][4]

[0] https://www.businessinsider.com/russian-colonel-accused-stea...

[1] https://www.youtube.com/watch?v=HtmW0_MV2rk#t=144m53s

[2] https://www.youtube.com/watch?v=HtmW0_MV2rk#t=86m02s

[3] https://www.youtube.com/watch?v=A7xiK-snyJk (context)

[4] https://news.ycombinator.com/item?id=2191634 (further context)
Why are they even threatening? This is pretty scary. They have a specific role, and it isn't judging who is allowed authenticate and who's not! This is an even bigger issue than the network level attempts to censor and much bigger than the DDoS protection dropping. The internet is being fundamentally broken by this sites stalkers and harassers and most of the media and tech is either ignoring it or actively cheering it on!
> US foreign policy apparatchiks

who are, unfortunately, pretty much just that. there is an enormous risk in the US, which has not fought a war on its own soil since the civil war, and has not been in a real existential battle since WWII, that the younger the decision makers get, the more detached from the reality of actual war they become.

the biggest war mongers are generally people who have no combat experience at all and have never face any real adversity in their lives. but even combat experience, when it is limited to being part of a vastly superior force that slaughters its opponents at will, is nothing compared to the experience of having your own country invaded.
Unless by that you also mean running old OSs (e.g. Windows 95... but you probably can't run that already, in a world with UEFI and no A20) then you're fine: they are removing ring-0 32bit, but not ring-3 32bit.
Any idea if anyone will spin a board with a bunch of these and 12G of VRAM for loading LLMs?
There's a difference between reckless and toxic though.

I don't think anyones advocating firing a few nukes at Russia on the basis they can't retaliate, so I don't see decision as being reckless.
Yup. If all these useful idiot protestors are guilty of treason how the hell has their leader who told them to do it not been charged? The federal justice system is fake and political.
> their segmented memory nonsense was also a waste of development time and I'm glad to see them finally acknowledge it.

People tend to remember mostly how difficult it was to program with segmentation in 286's 16-bit mode and earlier.
But in 32-bit mode, user-space code didn't need to bother if the OS didn't use it.

I've read several papers lately about schemes with compiler/OS co-design for securing the return pointer on the stack, function pointers and other sensitive variables from hacking attacks.
This problem was already mostly solved on x86-32 where the stack can be in its own segment.

But to get achieve this in 64-bit mode (and on ARM and RISC-V), researchers have resorted to various tricks such as randomising addresses regularly [SafeHidden], switching access to the (safe) stack on and off with Intel MPK, using the Intel shadow-stack (in CET) for storing variables [CETIS], and even running user code in privileged mode [Seimi], [InversOS](ARM) ...

Some of these these schemes are tricks using the CPU in ways it wasn't intended, and therefore perhaps broken on future CPUs. Several are only available on newer Intel processors with certain extensions, and most have considerable run-time overhead. Therefore, you will never see any like it in a mainstream OS. But the x86-32's safe stack would have been, as "Safe Stack" schemes relying on randomisation already got widespread adoption.

[SafeHidden] https://www.semanticscholar.org/paper/SafeHidden%3A-An-Effic...

[CETIS] https://www.semanticscholar.org/paper/CETIS%3A-Retrofitting-...

[Seimi] https://www.semanticscholar.org/paper/SEIMI%3A-Efficient-and...

[InversOS] https://www.semanticscholar.org/paper/InversOS%3A-Efficient-...
I tried it with Bing (precise/creative) and it got both attempts right.

"Their house never holds fewer books."

"Every night, stars shine above."
This is a good rebuttal.

Right now, Bing Chat is a little bit too Sirius Cybernetics Corporation Genuine People Personality for me[0].

I advocate for open source foundation models so we can all craft personalities tuned to our needs. I think the best tools are adaptable to their user.

I went a little overboard on that. We are all reacting to the somewhat-sudden appearance of this new technology in ways that can be a little bit stress-inducing. I made every effort to at least match or lower the temperature from the tone in the original post.

From my point of view, I treat the tool well because it's good for me to treat it well. I also think, as is the topic here, that it makes the tool function better. I see it as an intellect-mirror, and it is happy to reflect whatever I show it back at me.

[0] https://arstechnica.com/gadgets/2018/12/douglas-adams-was-ri...
“Time off task” sounds like something that should have been in 1984, but I bet even Orwell couldn’t have imagined something so…Orwellian.
Well, unless you consider the NSA eavesdropping on you via internet logging and credit card purchases in your home. I guess the NSA isn't technically a soldier.
This is a very short-sighted take, that relies on the assumption Russians are comically corrupt and incompetent. I'm sure the mechanisms to prevent this sort of theft that are in place in the USA have similar analogues in Russia, starting with inspections of facilities and background checks of personnel.
> part of the shutdown, we are deleting all user data. Apple iOS subscribers, please go to https://reportaproblem.apple.com/ to request your refund as soon as possible.

Seems like a dark pattern what if they don’t find out in time?
Isn't it usually set to re-lock on screen lock (which typically happens before hibernate)?
a reaction to article on https://520.btw.so/when-montana-outlaws-tiktok
> I’ve been extremely happy with it as my switch from google so now I’m left wanting.

I am curious have you given Kagi a chance?
With given access to more resources, it might try to permanently solve skin cancer.
Love Kagi. Love paying for good software like it
Labor market must tighten further to push wages up faster than inflation.
> I'm genuinely unsure if this is a parody of the American Way here

They said 2 of the 3 things we "used to" have we still actually have, and the 3rd thing is a waste of money because nobody wants it. It seems inauthentic to you to say that there's not enough demand to support all night movie theaters?
What a gifted writer. Times Arrow and London Fields are easy to find recommended, and deservedly so. The Information might be one of my favorite books of all, and Night Train was a lot of fun. I haven't caught up on his most recent two.
Space Companies Plan to Build Roads and Bases on the Moon
this is just more of the same thing that i'm pointing out - people who claim these kinds of retorts refrains have no imagination and/or have never been the victims of similar systems. yes, trust me (and absolutely everyone that rages against this), they do and will and must inevitably target every little offense.
AGI is still a concept from science fiction. If we talk about modern LLMs (that are indeed impressing) increasing food production is not what they are about.
But this doesn't mean that technology doesn't help there. Green revolution for example literally made more food materialize.
Yes yes very righteous and unproductive.

My answer: 3 strike rule and semi permanent sequestration by the state.

You get your cheap housing after all.
> And presumably you ran your own DNS servers as well? And ensured your proxy wasn't in turn being monitored?

I'm not defending anything else in the GP's comment (I think they're 100% wrong) but they meant running Squid as a transparent caching proxy. In the dial-up days I ran Squid as a transparent proxy on a Linux box that shared the dial-up connection for the network. You'd set Squid to have a large cache with a long expiry. That way all the styles, scripts, and images for pages would get cached on the proxy. Subsequent page loads, even days later, would be super fast since many of the resources would be loading from Squid's cache.

I even had some scripts that I'd run every week in the middle of the night (modem speaker disabled obviously) to load the homepage to a bunch of sites I visited regularly to freshen the cache. Unlike a browser cache the Squid cache worked across machines and was much easier to set long expiries and just cache way more content.

It improved browsing significantly especially since even with a 56k modem I rarely got better than a 28.8k connection. While for me personally this kind of thing is no longer necessary it's not the worst thing if you've got a slow or unreliable connection. With TLS everywhere setting up such a transparent caching proxy is much more difficult since you need a literal MITM proxy to make it work right.
Of course, it should also be noted that these will create burdens for legitimate users as well, in some cases disproportionately (e.g. new developers will have a harder time getting referrals).
Literary Libations: https://cratermoon.substack.com/p/the-literary-libations
Is there any actual benefit to auto-expiring SSL certs? Presumably if your SSL cert is leaked, you would like to have the ability to revoke it without waiting a full year or whatever. On the flip side, if your SSL cert isn’t leaked it benefits quite precisely nobody to have it become invalid just because a caesium-133 atom has gone through however many transitions.

The only benefit I’ve heard voiced is that it forces organizations to develop processes for cycling said certs - but that’s absolutely bogus. Imagine if S3 auto-deleted all buckets after a number of days and said “This is a good thing! Us auto-deleting these buckets forces you to set up processes to deal with us auto-deleting these buckets! You’re welcome.”
Stating alignment is synonymous with AGI seems a semantic confusion. Goals alignment does not demand AGI at all.

The hammer is aligned with a functional requirement to be a lever swung with force against a surface. If doesn't make it synonymous with a platonic ideal lever moving the world. More to the point, the lever to move the world is a questionable thesis, just as AGI is.
>because now every request has to hit origin servers

That's not even close to true.
I find lots of value in chat-augmented search. But, Bing is not ready yet. It is slow, hallucinates, only vaguely cites its sources and is therefore not trustworthy.

On the other hand, I am really happy with https://phind.com and find myself using it if I struggle to understand some concept.

For me, the power of the chat based apps is that I can explain my mental model and they can directly build upon that.
The more I read HN, the more I see that Tech competency is completely separate from Geo-politics, international relations, Economics and anyone can be independently and incredibly misled and naive at either of them.

Strong polarization of believes that not backed by ground truths but just indoctrinated by mass media is staggering, and it will get much worse, the more quality of education will drop in western world and more censorship industrial complex get smarter at fabricating and bending reality according to interest of particular elites.
You typo'd Sleep Sort
He did pass judgment though by implying GPT is not "authentic and trustworthy". That what got me thinking, not his desire to focus on other things (it's his time, he can do whatever he wants).
If it kills just 100k americans that's a cost too high to pay.
Congratulations you're using Magic Links.
I am not a lawyer, but based on some horror stories out there, so I doubt it.

It is fairly common for individuals to be assessed support based on "earning potential" earnings. This means that obligations are not reduced if someone changes to a less lucrative, but potentially more fulfilling career, or if they voluntarily retire when they could still be working.

In my opinion, it is pretty twisted when earnings aren't based on a % of variable income.
that's 4A and its state sucks ass. NSA is not military so they are of course welcome to stay!
Did this affect routers with the Merlin version of installed? I don't run stock asus on my routers and had no such incident.
Sorry, can you please rephrase your question? I'm not sure how to answer.
> I could go on, but the whole process is like running in wet cement.

just quit. seriously it's not worth it. no job you have (not even low-latency work in HFT) will compensate you enough to make investing time, blood, sweat, hair, and sleep into this work worth it. there is a better, more rewarding, with an actually transferable set of skills, software job waiting for you somewhere out there.
No, i think elon musk should never be allowed in space.

We can keep both space and home clean. But as a species we should grow into space. You know, there’s virtually endless … space in space.
"In 2007, Apple significantly dialed down its MacBook manufacturing business with Asus and the company had to respond. That same year, they announced that they would hive off their original design manufacturing business into a 100% owned subsidiary called Pegatron. Management hoped this would reassure their customers that improper information cannot be shared across lines.

But the conflicts of interest persisted. And even got worse when Asus released its hit Eee laptop product. The first so-called netbook, the low-end PC sold 5 million units at the start and presented a real threat to Pegatron's customers. They were eating in other companies' market share. "

https://asianometry.substack.com/p/asus-explained-a-rare-tai...
Well, you can buy a MEP. For example Eva Kaili. Best known for the work on CRA :)

https://www.euronews.com/2022/12/12/eu-parliament-vice-presi...
Waves from a perch overlooking AUS and Giga Texas.

I've run into enough NVIDIA and AMD engineers at The Domain to surmise this is true.

We need a funnel towards training highly-skilled blue-/light-blue-collar workers to feed the strategic needs of said fab industry if the US were serious about building domestic capabilities and competitive independence.

Right now, I don't think the current state of the US education system from national to local levels is promoting the fundamentals needed to attain this goal.
Hi, glad you enjoyed(?) it! It was a fun video to make!
Infinite Alchemy Game: Little Alchemy + GPT
Hi all, sharing a recent side project experimenting with a sort of AI game generation.

"Inspired by Little Alchemy, Infinite Alchemy is a game where you combine elements to create more complex ones. Drag and drop elements onto each other to combine them. The goal of the game is up to you, but you can try to create as many unique elements as possible or pick a thing and try to craft it (e.g. flowers). The twist is that the elements and the images are dynamically generated by AI (GPT4, DALLE), hence "infinite"."
No it's not. Speculation can be a bet on the outcome of an economic or other real world system that is not a zero sum game.

For example you might speculate on how likely it is that people will strike oil on a given patch of land by investing in that land and some drilling. If you're right and oil is discovered there is more wealth in the world as a result of this speculation.

Gambling is not like that. Gambling doesn't have any connection to productive activity, it's just people transferring money around with wealth going from some people to some other people. That's what crypto is.
Not OP, but even GPT-X and ML reaches limits due to lack of compute and/or datasets.

For example, CNNs were largely known and discovered by the 1990s-2000s, but the compute simply didn't exist yet until GPU manufacturing became commoditized.

OpenAI's massive quantum leap is thanks to the massive corpora they were able to leverage, which until the past 5 years, simply didn't exist.

This is why we've seen massive jumps in Mandarin Machine Translation and Computer Vision from the PRC due to their massive corpora/dataset of English+Mandarin language news from CCTV/CGTN and local surveillance camera data respectively.

This compute limit is a big reason why the US Federal Govt has been working on the Exascale Computing Project for example.
Knuth is surely above us mere mortals.
Very nice. The Romans were no longer dividing Iraq in half, thus severing Persia from Arabia.
Nah, the die space you save here is absolutely minuscule. Intel saves on the validation of core designs -- forever.
What's the cost of commodities in building a tank? Yeah fine both an Abrams and a t90 have a few tonnes of steel in it. That doesn't account for a fraction of the final cost though.

Maintenance requires labour. Labour has different prices in different countries. You can compare that labour cost.
The most elegant is certainly sleepsort. Maybe not the most efficient, but definitely elegant.
Putin has nothing better to do than reading random blogs. He could also setup Twitter account and threaten nuking random countries when Medvedev is in drunken coma and can't do it himself.
Economy has taught us well. There is nothing to gain.
Ideal for deploy-ability is a single binary/container and database (for most small single machine projects you can even get away with SQLite).

Django is not that, by default.
I wouldn’t be surprised if half the Internet does not know that a ballet is part of a larger show.
Russia has ratified the https://en.wikipedia.org/wiki/Comprehensive_Nuclear-Test-Ban... the US has not. But both Russia and the US are bound by https://www.jfklibrary.org/learn/about-jfk/jfk-in-history/nu...

Russia is honoring its treaty commitments not to test nuclear weapons.
Language models struggle specifically with token games like this, since they can’t see them at that resolution or something.
"Hey everyone, I'm working on [commercial product]" from someone who isn't already an active member of a community will be seen as spam most places regardless of big tech influence. A bit of searching finds a couple posts about Neeva on big subreddits, which typically didn't get any traction[0]. Of course, the conspiratorial answer is that reddit lies about votes to suppress things it doesn't like, but I have seen no reason to believe that.

My Mastodon server has seen six posts mentioning it since September 2022. Most of them are tagging Leo Laporte, a well-known tech journalist presumably trying to get him to talk about it. He did[1], but apparently not enough to generate much buzz.

[0] https://www.reddit.com/r/technology/comments/10diym9/neevaai...

[1] https://www.twit.community/t/twig-707-heartlessness-as-a-ser...
People keep talking of nuclear winter or complete destruction being the big unacceptable cost, but really even loss of 100k americans is an unacceptable loss. This doesn't mean we shouldn't help Ukranians, but an example of a devastating retaliation against US would simply be smuggling one tactical nuke and blowing it up in a major city. I also don't think that killing millions of russians is itself an acceptable loss of life. For all the horrors of ukranian war the total loss of life is less than many single cities.
FD: I’ve done some work on PyPI, but I am not an admin and everything below is an independent opinion/understanding.

PyPI’s operational costs are, to my understanding, mostly covered: hosting is graciously provided by a sponsor, and the PSF currently funds roles for its develop, administration, and security. More funding is always good and I believe the PyPI admins are looking to enable payments through the newly released “Organizations” feature[1].

Edit: and to make it more clear: payments for Organizations would be principally aimed at corporations and other groups.

> Additionally, if pypi provides keys to developers, pypi can also revoke certificates for developers making malicious packages.

There are currently plans in progress to allow PyPI users to upload Sigstore[2] signatures for packages.

That won’t directly address the spam issue, however — signatures will be opt-in (by necessity, due to the size of the packaging ecosystem), and no codesigning scheme can prevent a spammer from simply assuming a new identity (especially when new identities are “free,” as they normally are.)

Separately, revocation itself is a nasty problem for packaging ecosystems to deal with: ecosystems with trillions of dollars of value behind them (like the Web PKI) struggle with it, so it’s not immediately clear that it would be anything other than an additional operational burden.

Similarly for reputational systems: they’re difficult to operationalize without additional maintainer burden. That’s not to say that they’re necessarily bad or impractical for PyPI’s purposes; only that I’m not aware of a successful use of them in an open source packaging ecosystem. Compare, for example, PGP’s WoT failures.

[1]: https://blog.pypi.org/posts/2023-04-23-introducing-pypi-orga...

[2]: https://www.sigstore.dev/
The actual vulnerability:

> KeePass 2.X uses a custom-developed text box for password entry, SecureTextBoxEx. This text box is not only used for the master password entry, but in other places in KeePass as well, like password edit boxes (so the attack can also be used to recover their contents).

> The flaw exploited here is that for every character typed, a leftover string is created in memory. Because of how .NET works, it is nearly impossible to get rid of it once it gets created. For example, when "Password" is typed, it will result in these leftover strings: •a, ••s, •••s, ••••w, •••••o, ••••••r, •••••••d. The POC application searches the dump for these patterns and offers a likely password character for each position in the password.

https://github.com/vdohney/keepass-password-dumper
"sequestration"

Incarceration.

Slave labor.

Because you saw a penis three times.
The source is https://www.bleepingcomputer.com/news/security/keepass-explo... (as referenced in the article). It goes into more technical detail, and skips the antivirus sales pitch.
From what is publicly available they at one point had 1M users and only 20k paid customers, so roughly a 2% free to paid conversion rate. So it appears that acquiring users was not an issue, acquiring customers was.
One of those things no one ever wants to test.

What is the equivalent of Pantex in Russia? Who services them?
It's been so volatile, with the prices dependent entirely on hype regarding adoption, so there is certainly no conclusion at all to be made about deflationary currency - the impact of inflation on prices is essentially negligible compared to other factors. It also remains to be seen if the hype cycles will continue, because it hasn't been long since the last one.

Adoption as a payment method has likewise been dominated by regulation and expectation about hype cycles affecting the price.

I can't see why any of that would be different if the narrative differed to not include deflation. As long as it's new tech and a new unit of value to distribute, this is what you get
Openbsd encrypts it's swap by default, you can jump through a couple of hoops and encrypt your swap on linux. on windows, i don't know, however, if you have an encrypted disk your pagefile(if on that encrypted disk) will also be encrypted.
Web Security Testing Guide
a 50yro cartridge has no up keep beyond keeping it in a sealed box. And yeah, it'll likely work just fine.
Practically no one actually lives in the business district. It would be ridiculous for those few thousand people to set policy for the City. It would make more sense for it to be under the control of Greater London but no one wants to abolish the historic Corporation of London.

In the UK different police forces have different specialities. The City force specialises in financial crime.