skysight-inc/HackerNews huggingface dataset:
Agreed. This has been my experience as well.

Corporations like to have an internal culture and will put on a show to keep up appearances, but deep down what every manager, from the lowest level to the SVPs, what they want is to not look bad and by association, for their team to not look bad. Speaking up attracts unwanted attention across the company and that makes 'waves'.

As representatives of the business, there are lots of 'tools' managers have at their disposal, but none of them will put the company in a worse position, so your best outcome is a situation where both the company and you win. In all other situations, assuming no external involvement, you will come off worse for speaking up.

For example, if you speak up against some sexist remarks made by a company SVP, the corp will put on a dog and pony show at best, and then you will be managed out for making waves.

If you really want to come out ahead, make sure you can do some serious damage to the company so you have some leverage. Naively speaking up with nothing else in your pocket is going to get you crushed like a cockroach or paraded around like a pet at all-hands and 'celebrated' while all the higher ups make sure that no real changes are made.
The site in question: https://web3isgoinggreat.com/
What is CSP?

Edit: looked it up, Constraint Satisfaction Problem.
You can cry conspiracy all you want, but the fact is that even Thunderbird, the flagship open-source email client, does not support JMAP.
Why are you interested in the teaching position at our school?
They also don't have to cater to special education students (although some private non-profit schools do, for sure), and they don't have to subsidize special education funding with normal student funding.

One of the consequences of our state (Washington) going to a state-wide student funding model is that public schools really don't want to lose their non-special education students, because they get a fixed amount of money per student and if they lose too many of the students to private that don't need (and don't get) extra resources, they don't have enough funding to provide programs to the rest.
The community of dancers once I decided to learn Cuban Salsa. It was the best choice for me to feel happy.
All this misses the most important point; Nobody will pay $500 for a standalone high quality VR headset to experience a shitty VR "Stadium" ticket that should cost $30 if you go to a real damn stadium.

Nobody fantasizes about living a virtual life that emulates real life. They want to live a fantasy life. Plenty of people managed that with just mid 2000s era WoW. Metaverse has nothing to offer
> 70k in Europe is totally comparable to 100k in US

Where in the US? It's a massive country with a huge regional variation in cost of living.
(Regarding Uber, not Lyft, but...) It would also make perfect sense to predict which customers are investigators in areas Uber is illegal, and avoid them. Which they did [0]. I would be shocked if they weren't giving more profitable customers higher priority and better treatment.

[0] https://www.theguardian.com/technology/2017/mar/03/uber-secr...
I, too, subscribe to the 'shove all my crap into my bedroom closet when told to clean my room' method of computer janitoring.

Ironically enough I have a folder on my desktop called "Sorted" that I just drag things into when I haven't used them in a while. Gotta love the search function, else I'd never find anything in the rare case that I do need it.

Comes in handy sometimes however, like having the installers for every major version, patch and RC of an indie game going back a decade, or old editions of a minecraft or skyrim mod that the author may have pulled offline in some hissy fit or another.
We could always use a fine-insured bounty system to efficiently route resources that would have gone into increasing AI capabilities into other areas, but that's unfortunately too weird to be part of the Overton window right now. Regulatory capture might be the best we can realistically do.
this guy needs his own lawyer. being a witness (expert or otherwise) in case doesn't mean the lawyers who want you to testify are _your_ lawyers.

these sorts of subpoenas can sometimes be whittled down with only a little bit of effort. and even if they're not, you can bill for your costs to satisfy them.
Nobody is documenting anything because all that matters for people in this area is for existing C/C++/Rust code to run without modifications on WASM, which means whatever low level POSIX APIs they use is what WASI will support. A large number of software has been ported to run on WASM/WASI, and you can ask yourself how is that possible if WASI doesn't even have a formal API? Because the API is basically being reverse engineered.
> He is saying that the name Openfire is already used and semi-widely known as a realtime chatserver.

Oh I see thanks for the clarification,
the name comes after Firecracker, the framework that we use for microVMs
Then there is the fact that many installations are explicitly using small converters, not all installations face the same way (east-west setups are a big thing for farms and other large scale setups). I live right next to Germany and getting 80% of your installed capacity is considered optimal.
If MS really investigates all bug reports that is good. But, it seems like this should be expected?

From misc. articles I've seen (mainly posted here on HN; I don't buy MS products) MS dismisses bug reports as unimportant and sometimes takes an extremely long time to address known security vulnerabilities.

This VM escape was initially reported as an RDP bug that MS dismissed as unimportant, until it was used as a VM escape against their hypervisor.

https://www.bleepingcomputer.com/news/security/microsoft-ign...

The (in)famous pass-the-hash bug in windows is an example of MS not addressing serious security issues in a timely manner. Windows treats a password hash as equivalent to the password, so you don't even need to crack hashed passwords you've collected from e.g., the registry to authenticate to windows services (MS "protected" against this attack purely client-side). Microsoft acknowledged the issue was real more than a decade before even attempting to fix it.

Apparently it was a difficult bug that included design failures, but over 10 years and multiple versions of windows for an exploit this severe?

A couple days ago a Google Cloud container escape made HN front page. Comments on that article indicated Microsoft Azure had recently suffered the same, but while Google only allowed access to other containers owned by the same tenant, Microsoft's escape allowed access to all tenants on the same host. Google added a second layer of safety in case the first failed (a dedicated VM per host per customer to run each costumer's containers). Microsoft YOLO'd. I don't care enough to research these claims beyond noting that at the time I read them, no one had disputed them.

I don't know if Microsoft is overall still worse than its competitors WRT to security (I suspect it is true). But, Microsoft is certainly not an exemplar for how security should be done.

More on-topic with main thread, nonexistent support is kinda what Google is known for?

At least Google now uses abuse@gmail.com for reporting abuse from their infrastructure instead of forcing the reporting party to go through a god-awful web form (when I handled mail at past orgs, I didn't even bother reporting gmail abuse due to the hoops they made you jump through back then; I also used the RFC-Ignorant RBL to punish them and other sites that did not use the RFC mandated email addresses for reporting abuse with a higher bias toward triggering a SPAM tag on their mail).

Perhaps time for an RFC that mandates security contacts?
“Turtles all the way down”
Modern CPUs are so complex you need simpler ones to abstract it! Very cool breakdown of how power9 does this.
I think he is both:

* he is a witness for the Amazon vs CA case

* he is also, separately, being sued by Amazon, where he is a defendant

From the (shitty twitter thread) article:

>But nothing happened until November 2022 when the state of California filed a complaint against Amazon.

>They cited me and made me a witness.

>And in response, Amazon served me with a lawsuit.
Liveview v1.0 is the next step with this release out; 1.0 will be the main target for tutorials, documentation, examples and libraries to build on.

Easiest way to get component usage examples ATM is to generate a phx project, and run a mix phx.gen.auth and phx.gen.live command.
Are there alternatives to the database service with similar API or is it leaving a gap in the market?
> They don't want 25k they want jobs in the next presidential administration

Academics shilling for OpenAI would get them jobs in the next presidential administration?
The church is like a second family for me. I made so many great friends there!

Of course it will not be for everyone, but if you are open to it you can try.
SHA-3 Buffer Overflow (Part 2)
I thought miners decide which transactions to include after they win a block (which is extremely rare).
I think this is a pretty reductive way to look at what's happening.

My personal take - it's more like the infinite monkey theorem.

---

a monkey hitting keys at random on a typewriter keyboard for an infinite amount of time will almost surely type any given text, such as the complete works of William Shakespeare. In fact, the monkey would almost surely type every possible finite text an infinite number of times.

---

except for each letter, we're jostling the monkey's hand a little based on the letters he's already hit, and the training data.

Ex: There is a total problem space of "Valid Python" or "Valid JSON" and these machines are designed to explore parts of that problem space directed by the user and their training data.

And just like it only takes 52 cards to make any given shuffle essentially an entirely new & never before seen section of the problem space "decks of cards" (see: https://www.mcgill.ca/oss/article/did-you-know-infographics/......)

I don't really know of a clear way to distinguish what it's doing from "human inspiration & creativity" because those activities also tend to recombine previous experiences and data to create new but related works.

Basically - we also tend to explore related problem spaces based on what is currently happening around us and our life experiences (This is why the arts have period specific themes and styles).

This thing just does it a whole lot faster than we do. Whether that's good or bad is a different question.
I think that is a fair assessment of that chapter. The goal of the chapter was to take a project that has never done any kind of optimization and to show an optimization engineering pass. Basically one has to be sure the implementation doesn't have any obvious easy to fix leaks before considering a different algorithm or something like that.

So I would argue that the real message of that chapter is demonstrating, step-by-step the methods used to find the memory leaks: info-table profiling and biographical/retainer profiling and ticky-ticky profiling.
Iguana: Fast SIMD-Optimized Decompression
> I disagree

Cool, I guess. While I have my opinions too, I'm not about to share them as that would be bad faith participation. Furthermore, it adds nothing to the discussion taking place. What is to be gained by going off on a random tangent that is of interest to nobody? Nothing, that's what.

To bring us back on topic to try and salvage things, it remains that it is established in this thread that the objects of destruction are the danger. AI cannot be the object of destruction, although it may be part of an implementation. Undoubtedly, nuclear missiles already utilize AI and when one talks about the dangers of nuclear missiles they are already including AI as part of that.
You can connect FastMail to gmail and never look at gmail. Your employer may not approve if you hillary your emails like that though, but that's what I did at a previous employer where this wasn't an issue.
Spock eyebrow /
> I don't really want my atoms to be ground up to add storage bits

My understanding is that the AI needs iron from our blood to make paperclips. So you don't have to worry about this one.
Didn't they predict ice ages at one point?
Correct, but there is a bit of an unstated threat any time you do this to one of your own witnesses where the witness may give testimony that is not as persuasive to your version of events as you’d like.

“The car was blue.” versus “Well it was dark out and I didn’t have my glasses on but maybe the car was blue.”
Unfortunately judges want evidence submitted so unless it is an impossible request, they usually allow it.
This isn't a recent development. People misusing useEffect just to update state has been a thing in React since they were introduced, even though a close reading of the original hooks docs should have conveyed that that's not what they're for. I think the new docs certainly make it clearer what the correct usage is, so now lots of people are finding out that their mental model isn't quite right.

Some of this predates the introduction of hooks, as much of the useEffect misuse is identical to the way people misused componentDidMount/componentDidUpdate/componentWillUnmount.

I don't think you're right to say that you should almost never use them. You should use them for doing the things which they're designed for, like attaching event listeners or dealing with timers (neither of which are that unusual in my experience). But like I said, they've never been a tool for dealing with rerenders, and the React team has been trying to explain this to people for ages. The original docs did explain this, but it was less clear than the new ones.
https://news.ycombinator.com/item?id=36127623 claims that they did contribute back most of the data they gathered
This made me think of trash panic on PS3 back in the day too.

It was like tetris but with random pieces of trash you dropped a dumpster. Heavy trash could compact lighter trash, you could find a piece of trash that would explode or burn other trash, etc..

Definitely not as elegant and perfect as Tetris but very amusing.
Woah, really? That many people believe the future is so without hope??

As in "I think the world will such a bad place to be a human being, that not being a human at all would be preferable"?

That's a lot of fear and fragility …
I would expect that the first engineering employee of any of YC's "Top Companies" would have equity >$1M at time of exit.

There are currently ~350 Top Companies out of ~4000 all-time investments https://www.ycombinator.com/blog/yc-top-companies-feb-2023

So conservatively, 9%.
This policy has a "unintended" side-effect of making Amazon always cheaper, since the face-value price has to be the same or higher, and Amazon's advantage is their logistics network it means that cost + shipping is a calculation that Amazon will always win.

I get why Amazon is afraid of this, a bunch of retailers setting Amazon prices higher to drive sales to their own site, but this would really just push Amazon to quantify and charge directly for their value as a discovery platform.

This doom situation really has to explain why it hasn't killed Target and why retailers wouldn't be willing to pay Amazon a premium for an additional sales avenue.
Entire graduating class at charter school accepted into 4-year universities
You're saying that if a company is sued, it is legal malpractice to not target opposing witnesses with individual lawsuits?
Not on topic, exactly, but my current hill to die on is awareness that despite its current promotion and popularity, ChatGPT is just one product in a vast landscape of AGI-peripheral technologies, does not represent all LLMs, and doesn't make the OpenAI company the arbiter of all things LLM or AGI.

The Senate subcommittee said they wanted to "avoid the mistakes of social media", and they can start by not prematurely appointing someone the official face and spokesperson of regulation of an incomplete product and vision.

I was pretty surprised (ok, annoyed) by a conversation with my partner where she referred to what I've been doing for the past year as "ChatGPT" and that she didn't realize that it wasn't synonymous with "DL/ML/AI/AGI".
Maybe a slightly off topic question, but with the recent-ish news of Corellium winning against Apple in court to sell an iOS virtualization service. How is it that virtualizing macOS (on non-apple hardware) is still NOT ok (illegal?)?

Cloud providers are forced to host mac instances on real mac hardware for example (with a lot of strange restrictions).
> Lyft seems to really lack any imagination if _that_ was considered impossible.

Depends on how you are making the maps. If you're paying someone to trudge around/trace out satellite photos, then yes, its not very imaginative.

If you are using SLAM to generate maps automatically, then thats a different beast entirely. Only a handful of companies were able to do that in 2019, two got bought by meta (who then fucked up the tech, well done zuck) two went bankrupt and one was aquired by lyft.
Plain old witnesses, yes. Expert witnesses get paid when you pull them in to support your case.

The State of California should also have some reasonable interest here in protecting their expert witness from retaliation, so they can continue to obtain qualified expert witnesses in future cases.
The risks are definitely real. Just look at the number of smart individuals speaking out about this.

The argument that anybody can build this in their basement is not accurate at the moment - you need a large cluster of GPUs to be able to come close to state of the art LLMs (e.g. GPT4).

Sam Altman's suggestion of having an IAEA [https://www.iaea.org/] like global regulatory authority seems like the best course of action. Anyone using a GPU cluster above a certain threshold (updated every few months) should be subjected to inspections and get a license to operate from the UN.
Assuming that timeline, can we agree that we have some time (years?) to hash this out further before succumbing to the ideals of a select few?
I think that depends on the use case and full data lifecycle. How is data acquired and added to datasets? How is it consumed?

An online, database-like product is most important if you need to coordinate concurrent activity by a number of data producers and consumers while maintaining a coherent view of the growing data. If you can break it into distinct phases with individual actors, passive serialization formats can make more sense. Adoption of bject-storage semantics would help eliminate some of the corruption/concurrency hazards mentioned in Cyrille's post. You write entire files and expose them to read-only consumers once they are valid and complete, side-stepping concurrent writer/reader scenarios.

However, object-storage still has coherence problems. If you expect metadata to need rounds of editing or curation, you don't want it embedded in bulk objects, where mutation is expensive, i.e. rewriting an entirely new version of the object. It is easier with a companion file strategy, where you can regenerate smaller metadata files alongside immutable bulk data files. The object store can ensure that concurrent users are only encountering a coherent snapshot of each metadata file, i.e. before or after it was replaced. But it does not provide coherent views of multi-file changes. You avoid low-level codec failures from concurrent writes to shared files, but you may still have semantic inconsistencies when interpreting the evolving multi-object dataset.

A hybrid approach would be to have some other data-management system with database-like properties to track the objects. The database stores a coherent catalog of which data objects are available. New objects are added and registered in the catalog for others to read, but you don't mutate them afterwards. The catalog should contain metadata needed to coordinate the workflows of production and consumption of objects. You could benefit from using the catalog as an authoritative store of metadata that is still being curated/refined. But you can also export snapshots of metadata into companion objects at appropriate milestones in the processing workflow. These could even be versioned to record well-defined "data releases" or provenance info related to individual processing tasks.

Of course, this still leaves the question of what file format(s) to use for the individual objects in the system... one could do all of the above and still choose to use HDF5! But these individual files would be simpler, i.e. to store a single N-dimensional numerical array in one file. Microscopy projects might choose OME-TIFF for individual image stacks, or something even more mundane like a directory of individual 2D TIFF or PNG files, if that maps well to how their acquisition or processing pipeline works. Sometimes, the right file layout is just as important as choosing chunking parameters within a format like HDF5. Naive pipelines often process whole files in RAM, so you end up choosing appropriate file layouts to align to the kind of sparse or sequential access needed by data producer and consumer programs.
Yes, I've done this too, but I don't think it's feasible for the MS TypeScript implementation, which is implemented quite differently.
Have you tried to send SMTP email lately? Most residential ISP's block SMTP ports and all the encrypted variants of it.

If you want something that works for everyone, it has to be port 443 and webby.

And any mobile push notifications better be via Google/Apple notification services, because modern OS's don't let applications leave a hanging TCP connection open anymore.
WADComs: Offensive security tools and their commands to be used against Windows
I like reading his tweets so I'm inclined to be generous, but just to be clear –he's the Chairman of an IP Enforcement firm [0], so the difference between a subpoena and a lawsuit should be elementary for him.

[0] https://www.edisonlf.com/about
Author here. This is very much the case for a computer system as a whole also. Basically a network of cooperating microprocessors, including in I/O peripherals etc.

PCIe in particular is literally a packet-switched computer network - it has a physical layer, data link layer, and a transaction layer which is basically packet switched. There are even proprietary solutions for tunnelling PCIe over Ethernet.
Brave releases its Search API, bringing independence to the search landscape
It's not a problem, just wanted to let people know lol
Hard disagree. There is a lot of space between people being completely free to leave a job they dislike, and being held in a job by explicit threats of violence, and there's not a sharp line marking where practices get exploitative.

Consider your own situation, and ask yourself "what must be true for 'I can't afford to change jobs' to also be true?" There are definitely situations where whatever must be true is not that unlikely, and there are definitely employers who use them as leverage against their workforce. Non-compete agreements applied to employees of fast food restaurants, and no-poach agreements between fast food restaurants is a famous example of this.
Pretty sure there are people looking into nuclear deterrence, bioterrorism defense, planetary defense etc. (We didn't have a nuclear war or some bioweapon killing everyone, for example, despite warnings).

There are people studying how previous societies got into existential risk situations, too.

We also have a huge amount of socio-economic modelling going into climate change, for example.

So I'd say there should be quite a few around.