skysight-inc/HackerNews huggingface dataset:
A lot of tape usage is in mainframe and traditional big iron systems where data is bulk unloaded from databases in a fairly raw format, and it’s convenient to let the tape infrastructure handle both compression and encryption.
https://privsec.dev/posts/android/f-droid-security-issues/
When is fine tuning worth it, rather than just prompt engineering?
I recently found out that on MacOS, the Preview app can do image background removal it’s pretty good at it too!
I wonder how they reconcile naming themselves "Open"AI, telling people that generated works can be used however they please, except for training a potential competitor.
Well, I think Musk's weird fanbase tend to flag unfavourable St Car stories, but also, well, "new-Twitter is a broken mess" is just getting a bit _old_ at this point. There's only so long that "social network in decline due to poor management" can stay in the headlines.

(See also, HN's coverage of the decline and fall of Digg; started off dramatic, but eventually just slipped away into "wait, that still exists?")
I don't know where you live but I would be very surprised if a restaurant had a high enough operational surplus to pay for any of this. Most resurants, even fancy ones are continuously a couple particular bad services away from bankruptcy.
You can avoid a build step by not using JSX.
Read this in Adam Grant voice.
The latter is actually very burdensome because it affects advertising profits
Why isn't AMD and Intel working on an alternative?
Atlassian issues net zero guide for companies cutting climate impact
Every security design is built out of a matrix of factors, and some (but not all) of those factors can be made zero.

Being unable to verify your trusted identities in a PKI is one such “zero factor.” It makes the PKI strictly equivalent to (crappy) resource integrity at the best, which is when everything is signed. PGP on PyPI didn’t even manage to clear that hurdle; it was worse than nothing by virtue of advertising properties that it was incapable of providing. That too is a zero-able factor in a security design.
Ah I think I understand better. Thanks!
I have a mere 31,000 karma, and I've picked it up over time. I go through periods of submitting interesting articles to HN, periods where I enjoy discussions, and periods when I'm too busy with two small kids and a job that engages me to spend much time on here!

I'd like to know what my highest scoring posts/comments are, and whether more of my score came from posts or comments.
I wrote my Senators after watching the recent subcommittee meeting. I think it was pretty transparent to everyone that it was largely optics, but privately reinforcing that OpenAI isn't and shouldn't be the sole spokesperson for all things AGI is still important. We're all already using AGI, but we're not using OpenAI's AGI, and we don't need their pre- and proscriptive alignment.

It's starting a discussion, and more tacitly, a negotiation. We need to weigh in to the right people proactively if we want to be represented and start defining intelligent regulation.
https://blog.codinghorror.com/the-ten-commandments-of-egoles...

I think of this in two ways. First, in a team, we're all collaborating on the project. Different people have different ideas and different experience, and debating can make for better results. In my last job, there was one particular person I disagreed with all the time (down to hops vs malt) but for that reason was a great person to collaborate with.

Second, there's code review. My last place was very much into its style guides and best practices at the individual PR level (but remarkably bad at higher levels; the prevailing large-scale design rule being ‘ship the org chart’). I think of that sort of code review comment much like a compiler or analyzer message: sometimes it's right, and caught a mistake. Sometimes it's a false positive, and you just have to change something to make the tool shut up.

(Third, I wouldn't be able to recognize an actual personal attack unless it were extremely blatant.)
Just to clarify : What's not true is that Canada jails people for criticizing islam, not that it was claimed :

https://news.ycombinator.com/item?id=36061407#36064645
it can be helpful, for some, to give up on the notion of retirement altogether.

exist to exist the whole way through. do what you gotta do.

many SV people have probably also seen anecdotal evidence the $B crowd has this mindset. it's the $M crowd sweatin the small stuff.
It’s from the creator of Caddyserver
It’s not strictly about the words in those exceptions.

In the case of fraud, it’s not the speech itself, it’s the part where someone gives you money (or other consideration) under some agreement or understanding, and doesn’t actually get what was promised. There’s nothing intrinsically wrong with what you promised, it’s your failure to deliver.

Threatening people? The illegal part is not that you used words at them specifically, it’s that you caused them to credibly fear for their life and safety. You could just as well do that without words, just standing outside their place with a baseball bat making menacing gestures. Harassment similarly may use words, but the objectionable part is often subjecting them to your words or actions or presence directly, to cause distress, instead of leaving them alone in peace.

“Hate speech” as a problem generally is about the content of the speech itself. You might wish to convince people that others in a group are bad and worthy of being considered bad. Your audience is typically people like yourself, or third parties who you wish to sway, and if you are in a public place you are mostly not following around an individual to be hated, or telling them you are about to do them violence. (If you do, it may in fact be harassment or intimidation.)
I think the API is quite nice. I've always been a fan of the Elm-like `div`, `p`, `span`, etc. individual html element functions for templating.

The approach to local state is also similar to Preact Signals, which is cool.
So dumb when you’re handed a menu by a waiter then when you try to order be told to go on a website where you have to sign up and all sorts of rubbish.

One of the more insufferable ideas from the long line of dumb Covid ideas that solved nothing.
Getting stronger through stress is not the solution, but a common initial path to the larger solution.

I think you're closest when you say "A high criticism tolerance is learned by understanding that ones self worth is not attached to output or delivery"

The compassion part is unnecessary.

Any criticism you take personally is ultimately a fictitious story you're choosing to accept about your identity. We are the ones choosing to take an event like a comment, apply a label of snarky, and allow it to set our emotions in the moment.

The snarky comment itself has no objective meaning. It only takes on meaning when we decide to interpret it negatively. We could just as easily screen the comment for actual valuable feedback, and if there is, implement it. And now you have a win. How smart of you, you should feel good about that.

The real approach is rising above and seeing things for what they really are, and seizing opportunities to look at things differently for an optimal outcome.
Rust's community is huge and I'm a fairly late adopter. I haven't seen any shilling or fanboying.

Let's not judge a whole tech stack by a few loud evangelists?

That tech stack has undeniable advantages. I'm focusing on that and don't pay attention to the emotional types.

And it's IMO a flawed judgement technique to distance oneself from technology because some randos struck you as fanatics.

Go and judge for yourself on the ground, experimenting. It's the only way to be sure.

Glad you're coming around btw.
I agree writing something that needs to be compatible with, say, PyTorch is a significant undertaking, but why is that necessary? I also agree some models like MaskRCNN is not static, and people will not change their model code, but I don't think it matters.

Let's say you want to run LLaMA. LLaMA is a tiny amount of code, say, 300 lines. LLaMA is static. It doesn't matter people will implement LLaMA with PyTorch and not tinygrad, geohot can port LLaMA to tinygrad himself. In fact, he already did, it's in tinygrad repository.

What I am saying is while running all models ever invented is harder than running LLaMA and Stable Diffusion (Stable Diffusion port is also in tinygrad repository), that's not necessarily trivializing the problem. It is noticing that you don't need to solve the full problem, there is enough demand for solving the trivial subset.

While developers will choose usability, users will choose cheap price. If they can run what they want on cheaper hardware, they will. I already have seen this happening: people don't buy NVIDIA to run Leela Chess Zero, they just run it on their hardware. It doesn't matter everyone working on LC0 model is using NVIDIA, that's irrelevant to users. LC0 model is fixed and tiny, people already ported the model to OpenCL, OpenCL port is performant, it runs well on AMD. The same will happen to text and image generation models.
Individuals will always be able to do this, but it might be enough if it's illegal and a bit of extra effort. You don't need to eliminate 100% of AI-generated spam, just make it risky and unprofitable enough that it's not a common practice, and have people call out those who seem to be doing it. I'm not sure it's possible, but it seems worth trying.

And if someone is operating a troll farm in another country, this won't help.
Unless you want to deal with Fedora's release cycle, you're not going to push software through their repos. This isn't a Tailscale thing, this is a "just about everyone" thing.
This is mostly driven by a small number of countries. Many countries are dropping their usage and replacing it with renewables.
I agree with this. After entering my card into Toast once, now from any restaurant I can scan the code, enter my tip amount and I'm done. So much better than using either cash or a card.
Sometimes I have to type passwords into apps or websites that my password manager does not work, or on other devices like my TV or game consoles. There's a middle ground between your options that's perfect for these scenarios.

My password manager can generate passwords like

> DWOW!psap.rair2vim

It's split into 3-4 character groups, with numbers and symbols used to delimit each group. It's memorizable without (intentionally) using words, and fairly easy to type with a remote or controller.
Ask HN: Examples of desktop software with 20+ years of longevity?
Some desktop apps have been developed for 20+ years and still running and available. There are not many desktop apps with longevity (and rewrites).

Examples of apps still available:

- Quarx: QuarkXPress (1987)

- Corel: WordPerfect (bought by Corel in 1996), CorelDraw (1989)

- Xara: Xara (1994) - a Windows vector illustration app still in development

- Fontlab: Fontlab (1993 for Windows)

- Bare Bones Software: BBEdit (1993)

- UltraEdit: UltraEdit (1994)

- Borland/Embarcadero: Delphi (1995)

- Fantaisie Software: PureBasic (2000 for Windows)

- IBM/Eclipse Foundation: Eclipse (2001)

What other examples of desktop apps 20+ years old and still in development? (Excluding Microsoft, Apple and Adobe examples because everyone recognise their apps.)
(I'm a dev on the project.) We've not decided on the exact term of the credits, but they will be long-lasting, so you can pay $5 for 250 images and use that over the course of a few years. We'd make them non-expiring, but that creates an unbounded liability.
What's the point of nitpicking userland if we're concerned with processor build-in management engines?
Will It Re-Render? React Game Show [video]
How to show your friend group are rich professionals, without saying your friend group is rich professionals.
Unix didn't require paged address space, and several were running using 286 segmentation only (some even without that, but that was pretty much without any protections, while 286 gave equivalent memory management to late PDP-11)
It's definitely solved some things for the restaurant, just not for the customer.
Oh thank you, I always forget about this thing.
Found it.

https://www.bbc.com/news/world-africa-37243190
> If the AI regulations are reasonable and AI companies can't operate, the technology just isn't ready for wide-spread adoption yet. See also: Tesla's Autopilot.

It couldn’t be that the EU regulators are clueless could it?

And you don’t see a difference between the harm that ChatGPT could do compared to the harm of an AI controlling a self driving car?
VAT, employment taxes and regulatory fines are hard to avoid paying in the EU, even if corporate profit taxes get moved around a bit.
Tailscale. I have a “gaming PC” (my son calls it an “AI PC”) at home and my kit on the road is an iPad and a Bluetooth mouse and keyboard. I run a web application on that computer that I access on my iPad and if I need to do more I just log in with remote desktop. It took like 10 minutes to set up: zero trust means zero maintainance.

Conventional VPNs are a big pain in the ass, in AWS for instance, AWS doesn’t offer a VPN service that “just works” instead you have to run your own EC2 instance with a VPN and there was the time I provisioned a VPN on a tiny instance that was supposed to cost $5 or $10 a month but it went swap crazy and cost more like $300 a month in I/O.
Is "ca" "can" or "can't"?
> I see this as one of my major flaws and try hard to mask how I feel. But I just hope to learn to stop feeling bad for honest mistakes

I propose this change in attitude: this is a part of you, accept it & learn to use it to your advantage.

Some people don't care when they're criticized, some do. Who performs better at a task: the person who doesn't care or the one who does? Use this desire to not be hurt to fuel you to improve yourself (you've already started with this post, i'm just redirecting the energy.)

The other thing to be aware of is to make sure you're not blaming the other person for the bad feelings. Your feelings are a signal to you, a signal that something is wrong and that you need to do something to fix it.

It sucks at first, to be extra sensitive, but in the long haul it is an advantage.
I remember a gmail outage circa 2008 where they said they were restoring from tape, and people found the idea comically retrograde even back then. But I started at a company with large Commvault tape archives in 2011 and they mentioned that it was just more economical at scale for the workload (the backup team had some sweet gear that was apparently purchased with a kickback program on their LTO(4?) tape purchases; perhaps that assisted the engineering decisions) . However, by the end of that decade, they had migrated to mostly using large drive arrays with tape used only for offsite, so my impression was that tape was indeed a shrinking, niche method of data storage.
For me it is convenience as tooling like fmt, testing, etc. are build in and they try to keep api close to browser api's when possible.
Cool but what is the threat model here? Why do this?
Feels like a first step in a long dance performance. Good that EU regulators are already looking at this space (given that nobody else does).

The main risk for them is that the actual risks from use and abuse of AI in various domains will only start showing up later. So early regulatory work might appear silly or misplaced. But that is not a reason to adopt a "wait-and-see" attitude.

There is so much recent precedence in the software domain: the privacy disaster from targeted adtech and the speculative manias of crypto. Once large numbers of users are lulled into certain behaviors under false pretenses it becomes much harder to reverse the social damage.

While privacy is a connected risk here too, there are much wider possibilities for abuse once algorithms are on the loose, processing and influencing without any transparency or accountability. We know that people will try anything that is not explicitly illegal if it gives them financial or political leverage. Gray areas of missing regulation are an open invitation for "creative" thinking and regulatory arbitrage.

The noise "not to suppress innovation" will be enormous. But the concepts and tools for sandboxing and keeping a close eye on developments are there. The idea that the only way to innovate is to move fast and break things is just a transparently self-serving dictum that should be put to rest.

They should keep an eye for oligopolies too. There is no reason to endure more decades of gratuitous "winner-takes-all" dynamics. The technologies are exciting, there are clearly positive scenarios. Let us hope we are smart enough to properly regulate smart algorithms.
No, there are many forks before that one.

If this stuff interests you I would like to recommend Dawkins' 'The Ancestor's Tale', it is pretty accessible and walks you back through time step-by-step.
That would be an anti trust problem.
If you write message without defining a topic it will be in (no topic) topic.
You can move messages from topic to topic https://chat.zulip.org/help/move-content-to-another-topic
> If you’re part of an online community where bad intentions are the norm, I’d recommend moving on to another. Why spend your time with a group that frequently makes you feel bad on purpose?

Indeed, that's precisely what I ended up doing after what has been ~3 years of trying to make the community better.

What's somewhat interesting is that it seems the community in question went downhill as soon as the pandemic started, the underlying issue was a lack of serious moderation and an unwillingness of the powers that be to introduce it and while that was okay for many years, once a critical mass of people with bad intentions arrived the environment just became toxic because they were largely unchecked.
Fun anecdote... Many years ago, we had to send a large dataset from the east coast to the west coast. I think we had a 10 or 100Mbps WAN connection (this was the 90s). It was faster to freight airship the entire storage device than send it over the wire (which we did).
When you're starting to run into context limits.
It's actually this bill - https://bills.parliament.uk/bills/3197 - which has been completely passed already (received royal assent).
(I'm a dev on the project.) The privacy policy is an old and generic one that we use across a bunch of sites. It should be updated. Our retention policy on this site is as stated on the front page FAQ. After five days, the records are deleted.
It’s nice that they’re committed to user privacy, and this post really gives me confidence that my privacy will be reasonably protected.

…but why is that a goal for PyPi? As a publisher of packages, it’s a nice-to-have, but as an end user it’s kind of scary. I don’t want to use software packages published by anonymous and potentially unaccountable people. That’s probably why they have so many malicious packages.

Maybe you live in an oppressive regime who will imprison/murder you for publishing some code; ok, but that’s an outlier, and there are a lot of ways to get around that situation.

I just don’t see the benefit of privacy in this situation? Is it just to reduce the administrative overhead of collecting/verifying identity info? I’m genuinely curious to learn about a realistic use case that justifies the risks to all users.

I know you can self host your own package index, but very few users have the resources to do that.
I appreciate the QR code menus in busy spots in Amsterdam (almost every terrace when the weather is nice). It means I could spend more time with family instead of standing in a line with people fumbling around. Service usually sucks anyway, and so the less time I could spend in line ordering the better! The PDF links are useless, but busy places will often link to a portal that also allows ordering, paying, customizing, and sometimes even has a quick repeat option for drinks. It's easier for the business (they don't have to explain the menu to everyone in the line) and also reduces friction for customers; who doesn't have a phone anyway, especially those with kids.

While there might be some tracking or what not, it's probably less harmful than all the other tracking going on, including even the carrier's own systems.
They just asked me again.
Ask HN: When do independent people realize they don't want a boss?
And should such people go to university?
They have had a 60% plus margins for years, I think they're just out competing. Or the others have stagnated. The valuation is ridiculous but they have built a product/sales pitch that is extremely difficult to disrupt/replicate.
The book that had the Cain/Hendrix "Small C" compiler, runtime library, assembler and tools was a fantastic resource that taught me C and compiler construction at the same time.

In general, reading (lots of) source code is a good way to learn how to do things in a new language, i.e. to move from the lexical and syntactical level to the level of idioms for problem-solving. On reflection, I find it strange that in programming teaching, larger pieces of existing well-written source code are never discussed/explained/critiqued.
> But conservative/republican's belief in the rugged individual, and belief that companies are individuals, then all manor of dog-eat-dog brutal competition is ok, even if Big Corp gets big enough to re-write laws to remove the ability to compete.

A "fact" one often reads on social media. I wonder: could being exposed to the same idea repeatedly have any effect on individual perceptions of whether it is true?

https://en.m.wikipedia.org/wiki/Illusory_truth_effect

Another popular truth online is that democracy is our most sacred institution, yet it isn't it democracy that brings us this?
If the criticism isn’t personal then it shouldn’t be a problem. But, if it is (I’ve encountered this with 1 coworker and 1 manager in 20 years), then figure out a way to never work with that person again asap.
Some incorrect assumptions:

* Rust does not have slow compile times compared to C++. They are often faster. Linking tends to be the slow part. C++ compilation speeds suffer heavily from header files.
* Lifetime semantics can be confusing in any language. In C++, you ignore it, you get crashes from dangling pointers. In Rust, you ignore it, you don't get it compiling - which forces you to think about them. The lifetime concerns are always present unless you're using a garbage-collected/reference-counted language.

My experience is that the Rust community is very tolerant and patient. Can you cite an example where a "loud evangelist" shames other people? Also, in my experience, when that happens they are criticised by the same Rust community.
"A bad workman blames his tools" - if you're implementing a solution and you choose the wrong tool for the job, the tool is not to blame. If you need a secure protocol, don't use an insecure protocol.
There are still ample use cases for the insecure protocol.
You are not really getting anything in the size difference between this and something like preact, you are going to end up bottlenecked on something else like waiting for CSS to load. This is fine if you just want to write the code in a minimalist style, but I really doubt cutting things back to this extreme has tangible performance benefits for like 99% of applications.
Nobody outlawed cars.
Good point, had the same analyze.
How does this compare to fine tuning something like BERT?
From what I've seen, it's when embeddings get too large for the token limit or the embeddings drive the cost up too much because you're always operating near the max token limit. In those cases, it may be worth the up front training cost and slightly higher per-token cost to dramatically reduce the amount of tokens in the average request. If you're building a higher throughput solution, the difference in cost can be quite large.
Social sign-in is not secured: ATO on Booking.com, Codecademy and 100 more Apps
Why Color Is In The Eye Of The Beholder
It prohibits anything that competes with OpenAI services i.e as long as you're not literally providing an LLM API commercially you should be fine