skysight-inc/HackerNews huggingface dataset:
Bardfinn is a really, really good representation of this. They're a nutter who controls a huge number of subreddits, talks like they're on a ton of speed, and bans even minor questioning of The Narrative.

Ironically she's a felon who lives in her parents basement. Probably shouldn't be moralizing.
They're hypothetically worth more in a world where they started out in the official app. In our universe where Reddit is fucking those users, they're far more likely to simply stop using Reddit altogether. And many of them will. Reddit will be lucky if they break even.
Ladies and gents, the source of my contempt for most modern Linux GUI "development."

The "desktop" is mostly a solved problem, because it's just the thing you encounter BEFORE you get to your applications; flippin' openbox with a few minor addtional tweaks is fine for 99% of people.
> Additionally the solution you propose comes at the cost of potentially hundred thousands more deaths on both sides, while a cease-fire would come at the cost of some territory for Ukraine. I value life over territory.

A ceasefire comes at the cost of all Ukrainian lives in the territory that Russia has already invaded.

Additionally all a ceasefire does is allow Russia to build up its forces again and invade in the future.
Yeah, I get these. The problem is that the Captchas take forever to fill out (like 5 minutes of challenges). But the worse part is that the captchas are asking for wrong answers. It tells you to select scooter and there's no scooter in the photo but it thinks there is. So you just end up stuck in a captcha loop for a long time.

I am not sure why I get them but it might be due to using anti-fingerprinting tools.
The language fundamentals of "Clojure for the Brave and True" (best intro to Clojure book IMO) is excellent (if you consider Clojure a lisp). I find the author's style/humor engaging.

https://www.braveclojure.com/clojure-for-the-brave-and-true/
You can also make your own executor. That's exactly how it was intended.
Developers should learn the difference between concurrency and parallelism because async isn't equivalent to threading.
If the branch can be mispredicted, and the misprediction happens depending on internal state you don't want to leak (cf. Spectre), then you have a side channel even if the branch is never actually taken.
There’s already a ML-version of Rust, it’s Ocaml
Reject PEMDAS, return to monky:

x * 2 + 1 - 3 % x

https://mlajtos.mu/posts/new-kind-of-paper-2
Till you find out that most human will sell out ring links for a bit of cash with no problems.
This is precisely what happened. When google merged with doubleclick.net the new company should have been named doubleclick.net and not google. The old google ceased to exist at that point and was swallowed by an advertising company.

I strongly agree with this bill hicks bit on advertising:

https://www.youtube.com/watch?v=-gd01vfKfr0
Archive: https://archive.is/e1x4l
Alright well I guess this is an object lesson in why infix notation is bad -- nobody can remember all the precedence rules once you get beyond +-*/^.
Then there would be no evidence, which would mean the court case would be thrown out / one-sided. Instead they settled for a large amount of money. Does that not make you raise your eyebrows?
I'm not Google weirdo
How is that antiintellectual? I must misunderstand - do you mean we should dead name people? I'm confused.
i completely agree with this notion

i've been wanting to out-compete the current schooling paradigm by using kids as little innovators and having them graduate with the skills to set up or participate in a functional business, no college necessary.
If we want to pin it to a single entity I would say one of these two:

AOL's CD mailers, or microsoft/apple including an http browser in their operating systems.
If you can't come together around even one demand, then the message your protest conveys to management is that you are momentarily upset but there is zero risk in ignoring you.
Its not clear at all if there even is a "person" in this context.

Ex: lets say New York Times reporter was let into Twitter HQ for some kind of interview. The reporter noticed that a computer was open, so they stuck a thumb-drive in and grabbed the document.

No human source, but the document is likely valid.

------------

Alternatively, Twitter could have posted some document to an internal Slack or Discord meeting, and New York Times reporter may have the know-how to enter into those private channels or grab something from Discord.

There's no reason to assume that they worked with a Twitter insider to grab this document. Not everything is a leak. Old school Journalism is basically spycraft, a reporter can sometimes just grab something to get a good scoop.

-------------

Or maybe the slides were just laying around on a table, printed out. Etc. etc. So maybe its not a computer document at all, but a bunch of slides that they dug out of the dumpster.
This seems to happen over and over: something that is working fine is changed. Not to make it better, but in hopes of business growth. Half the time it backfires, the other half there are some mostly middling improvements to the business. The odds aren't great, but there are people charged with "growing the business" and so they must change something, even if there's nothing that pops out as a great idea.

The community of moderators is kind of a symbiote attached to this enterprise. It gleans and curates and makes the end product more helpful to users. "Helpfulness" is a second-order effect of this moderation, and the whole attraction to the business.

After telling moderators to not moderate, moderators should get the message: It's not about AI, its about whether moderation is valuable, and whether helpfulness of answers is valued by the business.
Your previous track record has pretty much no baring on whether you're safe in a layoff. Only the perception of what you can bring to the company in the future counts for anything.

It's hard to argue how that's wrong.
Also UK has way too many issues for long term stability as of reserve currency.
including two of the executives behind “Lightyear”: director Angus MacLane and producer Galyn Susman. MacLane had been at Pixar for more than two decades, serving as an animator on classics like “Toy Story 2,” “The Incredibles” and “Finding Nemo.” He co-directed the 2016 sequel “Finding Dory” before his first solo directorial feature film “Lightyear.” The spinoff of the “Toy Story” franchise, which featured Chris Evans as the voice of Buzz Lightyear, was a commercial dud; Deadline estimated the film lost the studio more than $100 million.

Susman, likewise, was a longtime Pixar employee. She is also the hero of one of the company’s most legendary stories. During the making of “Toy Story 2,” a Pixar employee accidentally wiped the servers of nearly the whole movie. Thankfully for the animators, Susman was working from home while taking care of her newborn child — her backup copy saved the film.

Having done great work in the past is not enough to incentivize others to keep you around.
Except it’s not the people they were expecting. It’s largely students and fruit pickers.

The former because the UK needs the money (and the US has become increasingly hostile) and the latter because they need the labour.

So yeah, it worked for some definition of worked where the thing happened, but not at all in the way or with the outcome they wanted it to happen.
You initially said:

>US policymakers have repeatedly stated their aim is to remove Putin, and they have plans to break up the country.
>
> For the Russians, this is an existential crisis.

Russia decided to invade Ukraine, you seem to imply that was partly due them needing Ukraine as buffer. That bit was a Russian talking point, until Putin said it was an excuse.

When asked for some evidence you give articles where Biden states that the war is a reason for a regime change in Russia. So Russia invaded and started a war in Ukraine. Then US said the war is a reason for a regime change. But Russia started the war for a reason that the US gave as a consequence of Russia attacking Ukraine.

This is illogical.
To be fair, Lightyear was pretty bad. (Really, seasoned space explorers were surprised that time dilation exists?)
welcome to the machine learning future, where anything you do that is a statistical outlier gets you algorithmed by a machine that is incapable of reason but knows when you're different.

As a person who has been a statistical outlier most of my life, I am dreading this. It's bad enough dealing with human impressions and mis-judgment, but now we get it from our computers now, which used to be logical, deterministic havens.
If you want to do science and publish, you need something academia and possibly government. Pretty much all commercial science is closed source. And we’ve run short of English dukes paying for interesting people to come and work.
Does ChatGPT “have it”? I thought it made stuff up and that the magic it does is being very good at making the stuff up.

We’ve had it come up with solutions using entirely made up functions. They had names that sounded like something Microsoft would’ve put into .Net, but they were entirely made up. As in, they had never existed in any version of .Net ever.

So as much as I like it, I’m treating it with more caution than google results. Honestly though, most of the time it’s frankly faster to just read the damn manual and figure out things for yourself. I don’t say that as some sort of anti-prompt-programming purist, but wading through GPT responses is as about as hopeless as wading through the gazillion medium, dev.to, stack overflow and whatever else people post their useless stuff on. 10 years ago if I needed to do some obscure Sharepoint programming (waaaaaay out of my field) I could realistically make something work with the help of Google, today the same thing is frankly completely impossible.
Well I'm not being paid to do that, but my professional instinct is, like you do with any other software, you set up a sandbox. Pretty sure an AI specialist could have much better ideas than me. What I don't get is how this narrative is being so wildly pushed without any research sustaining it, even just to say "hey we tried to investigate this huge issue, here you can see the great amount of papers we wrote, but we concluded is actually impossibly to establish the risks because etc etc". This is first class BS.
I don't understand that statement. It seems to be an outright lie, or quoted out of context; not sure which, and both are plausible.

https://www.dupont.com/position-statements/pfoa.html says "While we no longer make PFOA..."
Google is part of a profit-maximizing company. Slowly, they are transitioning from showing relevant results and some ad in a separate box to results that maximize profit directly because they’re sponsored or whatever. The founders even explained it in one of their papers.

Speculation:
Crawling the web is expensive. So it makes sense that they decide for each crawled page if it's profitable to put that into the index. In the long run they might not crawl the web at all. People will just pay them to get into the index.
Private for two days is pretty hilariously ineffective, the mods don't want to close the subs permanently and give up control.

Well not that anything would be effective. They really do need to funnel people to their app, their revenue per user is awful.
Needing a licence to create or possess models is what they’re planning here right? It obviously makes sense for openai and other big companies because it makes it more difficult for smaller competitors but it is really scary. It is probably way more dangerous for society than some theoretical artificial super intelligence because of opportunity cost and that it would certainly lead to more and more authoritarianism.
FORTH is (was?) absolutely fantastic in it's niche. As an alternative to assembly when you were developing for and probably more importantly WITH underpowered computers, it was great. Even better, you could roll the tools together yourself with minimal effort.

Today one's rarely in a position where you have to bootstrap your development environment from almost nothing, so there are better alternatives.

But if you're stuck on a desert island with a computer and a CPU databook, bootstrap a FORTH compiler and then use that to make your LISP. :)
Why UK Inflation Is So High and Tough to Bring Down
There was Voat and Ruqqus, both became INTENSE white nationalist sites. I think Ruqqus shut down?

I know there are a bunch of spinoffs that use that codebase though, TheMotte, Ovarit, and rDrama
Tell HN: Cloudflare is locking out Linux users
It appears that Cloudflare's Turnstile captcha product has decided Linux users are no longer considered "human" and therefore locked out of websites using this product.

While the usual explanation is that there may be a compromised device on the network, I can pass these challenges myself using my Mac, but not on Linux on the very same network. This is from a residential ISP in India, and as you can see in the screen recording, I'm using an incognito window with all extensions disabled, so it's unlikely that the IP address or the browser configuration are at fault here.

* Mac: https://drive.google.com/file/d/1glfS_9OkV5mw5ysU3ASZCwR5c5eCeRT3/view?usp=sharing

* Linux: https://drive.google.com/file/d/1WnNRUlikqfmqdELfcohu7SBfjJr9aNzZ/view?usp=sharing

At a societal level, it is scary how things seem to resemble RMS' "Right To Read" with one corporation deciding to unilaterally deciding what browser should have access, as I've said elsewhere.

At a technical level, I speculate the issues are because Cloudflare is unable to properly distinguish between headless and regular Chrome because of changes in Chromium[1] as well as because of TLS ClientHello permutations[2].

[1] https://antoinevastel.com/bot%20detection/2023/02/19/new-headless-chrome.html

[2] https://www.fastly.com/blog/a-first-look-at-chromes-tls-clienthello-permutation-in-the-wild
Its a screaming red flag that the people who are most opposed to kids being on smart phones are the tech people.

As a potential compromise, an Apple Watch with celular means they can still write to their friends and family, get directions etc.
WWDC 2023 Keynote Livestream Link (YouTube)
Actually 2/3 letters domains were accepted -- maybe not on Freenom though; you had to register on the official registry -- but were also prohibitively expensive.
macOS vulnerability: Total physical access opened when screen sharing is on
I accidentally found this vulnerability that when you remote login into a Mac using Screen Sharing (included in all recent MacOS versions), someone with physical access can take over your session and lock you out of it and then have full, complete, total, absolute control over your machine.

Someone crafty can watch your screen and wait until you type in a sensitive password (like root or 1Password) and decide to take over at that point.

The best part? The person with physical presence can lock the remote user out (you): https://www.youtube.com/watch?v=wbLYKEQk_mM

I reported this to Apple more than 90 days ago. They said it was intended behaviour.

I cannot remote into my machines safely since I discovered this.

Without exaggeration, my wife one day messaged me and said, "your computer is moving," because she could see I was logged into my iMac at home from the office and using it.

Another day a colleague was working late at the office and I had logged into my office machine from home. He messaged me saying, "Did you leave your computer on on purpose?" He knows I always lock my computer because I give him heck for not locking his.

What did Apple Security Research recommend when they closed out the issue? They said I should use Apple Remote Desktop. That app is on the Mac App Store and averages 2.1/5. It retails for $99.99.

Maybe I'm off here. Did you expect someone next to your machine to see everything you do and be able to take control when you remote into it?
Wouldn't you leave the API key, in the server and proxy thru?
That's what I was taught to do, and you give your own tokens to clients to track which client is making that request and block that client if needed.
It seems very dangerous to pass on the reddit API key to the client.
They literally are using their own TLD, ".google".

The comment you replied to is surprised that they did use their own TLD, thinking they should stick with their classic domain on not their own TLD (google.com)
I Am a Writer
> alt.binaries killed usenet.

In 2023 Usenet is solely commercially viable for alt.binaries.
Why do countries in Latin America only speak Spanish and not Catalan, Basque?
Great to see OpenAI upping their game when it comes to providing documentation for how to get the most out of of their models.

I shuddered a bit at "Ask the model to adopt a persona" because I thought it was going to be that "You are the world's greatest expert on X" junk you see people spreading around all the time, but it was actually good advice on how to use the system prompt - their example was:

> "When I ask for help to write something, you will reply with a document that contains at least one joke or playful comment in every paragraph."

I thought the section with suggestions on how to automate testing of prompts was particularly useful - I've been trying to figure that out myself recently. https://platform.openai.com/docs/guides/gpt-best-practices/s...
> Flatpak (and similar schemes) with strict sandboxing should be the only distribution method for user applications.

I think I understand this stance, but really, I would consider this to be a terrible outcome. If that's the direction things are going, I really need to stop procrastinating my move away from Linux entirely.
Depends what you're training it on, I suppose. If you're just wanting to train something to generically talk then sure, a slightly outdated data set is fine. If you're wanting it to be able to talk about recent things then it'll, naturally, not be fine. It's not so much a problem right now, only being a couple of months out of date, but once that turns into years it'd become more apparent.

But sure, there are plenty of other data sources as well. On top of the problem of not wanting to train your data on content you know is littered with bots.
On one hand, that’s shitty and shows how much loyalty corporations typically have to their people (zero).

On the other, they were associated with a flip, and corps are known to be all about $ and ‘what have you done for me lately’.

On a third hand, because why not, job security is being able to find another job and with their track record of saving the day in a big way and operating at that level for twenty years, they’re hopefully already pretty set and if they want to keep working should have little trouble finding a new team who’d be excited to have them.

Which isn’t in any way to diminish how much it sucks. Wish them the best.
Couple more that I found useful:

>List all the entities in the text that are ambiguous. Entities are ambiguous if you don't understand them, if they have multiple meanings and you can't decide which one from the context, or are phraseal terms whose meaning can be different in different cultures.

This allows the LLM to identify parts of previous prompt that the AI did not fully understand.

>List all the entities and relationships to other entities. Be precise, avoid duplicates, list each relationship only once.

This allows to compress the past context for longer tasks.

>Make a list of Google searches needed to build a factual answer, one sentence per search.

You get the list then

>For each sentence extract the main entity, decide whether to find more information about it on Google, wikipedia, ..., answer in json

This is my "ghetto" agent, it's not iterative, but it's stable enough to handle the unexpected

> It's the context enough to answer factually the user question? Answerer yes or no. Only answer yes if you are sure you can answer

To make the agent able to loop, or ask user for more context.
We'll call it even :-)
https://www.dupont.com/news/dupont-reports-fourth-quarter-an...

Look at these numbers, extrapolate them to the decades they've been in business, and then compare them to DuPont's payment here of $400 million. The numbers aren't even close.
> I mean the absolute basics

Which are...?

I'm guessing, depending on the niche you work in, your basics are very different from many other niche's C++ basics. If you're working in FPGA development you'll have very different basics then a fintech. Likewise, game development is very different from backend web dev. C++ at Facebook is probably very different from C++ at Microsoft. Microsoft Kernel development C++ is probably very different from Microsoft Windows 11 adware C++.

I'm glad that interviewers exist that think they can pwn the interviewee by quizzing them on the "extreme basics", because it's an immediate red flag to me that the interviewer is acting with extreme hubris to claim that such a thing exists at all. I go back to this all the time, but when the guy who has literally been writing entire books on the esoteric features of C++ for 20 years says he doesn't trust himself to evaluate potential errata[0], I highly doubt any single person is capable of understanding the voluminous pitfalls and complexities of this large, bolted, amalgamation of a language.

[0]: https://scottmeyers.blogspot.com/2018/09/the-errata-evaluati...
"Security" really ought not going to be much of a selling point, since no one is particularly good at it these days; I'd be shocked if this thing could actually point to meaningful, as opposed to theoretical, security advantages.
What cultural boundaries are there to cross?

You're asked to point out the designated crossing area for pedestrians across a street. Sure, some places use crosswalk stripes perpendicular to the street, others use squiggles, others use lines on the sides, and some don't use any markings at all, but it should be plainly obvious to anyone, anywhere in the world where the designated area is based on there being some marking, or control devices, or literally people walking in the photo.

This isn't rocket science. Using contextual clues to figure something out is literally one of the most basic human abilities.
I've wondered if it isn't intentionally impossible to solve, because "the algorithm" decided that you're a bot or malicious and they want to spin your cycles endlessly. The affect on me know is I won't even try anymore, I'll just take a different route. That may even reinforcement teach the system that I was a bot that couldn't solve it
For people favouring to the old reddit interface more, I created another federated alternative: https://github.com/mariusor/go-littr (with an example instance at https://brutalinks.tech).

Sadly it received less publicity and mind share than lemmy, so not everything might be up to the expectations of the HN crowd.
They ain't got none of the meds I take that are the most annoying to refill. Too bad.
Sam Altman has a talent of utilizing any narrative in a way that benefits his company. It is sad to see legislators jumping onto AI space out of fear rather than to facilitate innovation
> there's this stockholm syndrome about compile times. It sucks, and it's not the type system or borrowchecker's fault.

What do you mean?
Nice. Do you have some open source samples? I would like to see your style!
Absolutely nothing about preventing or mitigating prompt injections.

Any other "best practices" for any other sort of platform, database or language, should include suggestions on how to keep your system secure and not vulnerable to abuse.

Coding for LLMs right now is a bit like coding with PHP+MySQL in the late 90s to early 00s, throw stuff at it with little thought and see what happens, hence the wave of SQL injection vulnerabilities in software of that era. The best practices haven't even really been established, particularly when it comes to security.