skysight-inc/HackerNews huggingface dataset:
Show HN: Abide – Prevent employees from leaking API keys/NDA data to AI tools
Hi HN,

We’re the founders of Abide — a tool to prevent employees from leaking sensitive data to AI models.

Over the past month we’ve spoken to lots of friends at tech companies, law firms, creative agencies, and more. There was a consistent theme: companies aren’t sure how AI tools affect their data privacy and security processes.

There are concerns that when employees use LLMs to write code or send emails, there's a security/compliance risk (e.g., accidentally sharing an API key in a prompt) or violation of privacy agreements (e.g., using AI to draft a memo about non-public client work).

The companies we spoke with have done one of two things: (a) outright banned use of LLMs until they figure out a plan or (b) sent a memo to employees telling them to be cautious.

We want everyone to have the 10x productivity gain of AI, but compliance is important for a business to do right by its customers, its regulators, and keep its name out of the news.

For now, we’ve built a straightforward product that does two things: (a) an app for compliance teams to upload words that cannot be sent to AI models and (b) a tool that monitors AI usage on employee laptops to enforce those policies.

We’re in beta with a couple of customers, but we’d love for you to checkout the demo on the website! If you’re interested, join the sign up list and we’ll set up an account for you today to poke around. Welcome to any questions, feedback, ideas, etc.!

Thanks!
Jitesh & Vaibhav
OP said:

> they want to know the posted price, so that they can decide to buy or not

It's trivial to know the price of the coffee with tip: you just add one dollar. To make it sound like this is task is so difficult OP would sooner not buy a coffee seems disingenuous to me.

For your convenience, I've included the top two definitions of "disingenuous" below. I think the second one is particularly apt.

1. Not straightforward or candid; insincere or calculating.

2. Pretending to be unaware or unsophisticated; faux-naïf.

https://search.brave.com/search?q=disingenuous&source=deskto...
Then have the business owners increase prices of their products.
I'm surprised to see that healthcare providers would be allowed to send patient data to OpenAI under HIPAA.

According to OpenAI's security page[0]:

OpenAI has experience helping our customers meet their regulatory, industry and contractual requirements (e.g., HIPAA). Contact us to learn more.

But there are no further details. Does anyone know what they're actually doing here? Do they have a way to legally process PHI, or are they depending on some sort of anonymization method to claim that it's no longer PHI?

[0]: https://openai.com/security/
No, but one is easier to understand than the other. Spending a ton of intelligence capital on a complicated clandestine demolition operation just to impoverish a region under context just doesn't make a lot of sense, even for Putin. At best it's a side benefit.

It also requires that you assume Putin genuinely believes he's going to lose Crimea in this war, which seems questionable (a Ukrainian military conquest of the peninsula is a *huge* ask, much more so than just retaking the occupied Donetsk territory).

The tactical explanation, and especially the timing, really seems much more likely.
If that's true, then why did the SEC approve Coinbase's IPO and not doing anything about it until years later? Even in spite of Coinbase meeting with the SEC hundreds of times and testifying before congress. This is a complete change in their stance by the SEC.
I thought this was already prohibited by Twitch and conversely YouTube Live?

Will this change actually affect any existing Twitch streamer practices?
One strategy to follow when companies A & B merge, but one company has a very old IT architecture. Use the cloud...
Not so sure about that, people unable to spell YouTube seemed to do more harm to Universal Tubing who owned utube.com than it did YouTube. If you hadn't heard of them before, how many ts in Twitter? Is TikTok spelt with the letter c?
> You can also get the theorem prover itself to hang or crash; if you work with theorem provers often, you'll even do this unintentionally, many times!

Proving something false is a grave sin for a prover. On the other hand, failing to prove something true is not only forgivable, but inevitable as per the incompleteness theorem. While ideally this failure would presented in terms of a nice error message, crashes are preferable to unsoundness. Crashes can even be deliberately induced as a defensive measure: https://hal.science/hal-04096390/document
Obsidian's editor is "show codes on cursor" by default. As you navigate through the rich text expression it changes to the markdown format that produces that expression. You're always in a line / block of Markdown, but the rest of the document is rendered.

"local modal editing" is most often seen in richer IDE experiences like Darklang v0.2's IDE and the Hazel type-directed-holes experiments.

There are more interesting takes as well (Lighttable's live forms, lots of Vic's experiments) but I'm definitely seeing more instances of the first two experiences these days.
There are a number of places in my city where if you add a tip on at the PoS, the employee will look at the amount and remove that amount of cash from the till and put it in the tip jar.
Mastodon's issues are:

(1) poor discovery

(2) if I am on one mastodon site, I can not just retweet that post, I have to go to my server and then cut-and-paste a link to that other site.

(3) no quote tweeting, important for vitality.

(4) and most importantly, no ranked/AI-managed feed. Thus it is filled with noise.

In many ways, Mastodon is a purposely janked product because people don't want to make things easy to go viral. But that reduces engagement and interest.
ThinkTask is an AI-powered work collaboration and project management tool, which also provides an all-in-one digital workspace, where individuals and businesses can use AI to think, write, plan, summarize, report, manage tasks and more.

We created ThinkTask to provide a more complete and more efficient environment for teams to collaborate, from task management to content creation and collaboration. We support data Integration with ChatGPT & OpenAI, Teams & Projects, and Single Workspace for All (Tasks, Content, Collaboration), Personal/Team Summary and Dynamic Reports Powered by AI.

Our product includes a full task management system like Asana, a content creation platform like Notion, a reporting and summary page, and a data structure that is integrated with the newly released ChatGPT. All are powered by AI. Users can create multiple tasks by simply copy and paste task details using AI, they can use AI to auto-assign tasks and create tags based on historical data, and they can also use AI to generate personal/teamwork summaries and reports.
I was trying to emphasize how trivial this was, especially for readers here. Perhaps the point was lost.
If not for patent protection they'd be trade secrets inside Apple and if anything they'd talk about them less.

Whether or not those trade secrets were likely to leak before or after the expiration of the patent... well... in theory the patents mean you get the info out there even for the failed companies where leaks wouldn't be interesting. In practice you've got patent trolls.

I think it would make sense to shorten the patent length for certain things, based on how fast the state of the art in that industry is moving, but it would be hard to make everyone happy with whoever was in charge of deciding those terms.
MeZO: Fine-Tuning Language Models with Just Forward Passes
This was on Swedish news too.

Our investigation is not done yet.

But the explosion happened near us, so this is big news.

There were also Russian ships spotted going back and forth over the area before the explosion.

I really don't know what to believe on this, it's very interesting.
Entrepreneur are risk takers, and they do move the needle. We easily forget to thank them.

Would you say the same about music streaming, as companies were launching services without all the due dues, but knew they would finally have leverage once they have a significant user base to negociate deals for legitimate offerings?

Anyhow those big risk takers are not losing because of the roulette factor here, they are hit by some political stance that wants to keep a statu quo, with crypto entering more mainstream at each cycle, legislators work hard at putting a stop to it.

Just read what the head of the SEC said, verbatim "the US does not need other digital currencies". As if it was the SEC to tell what the US need and doesn't need. This whole war against crypto isn't about unregistered securities being sold by unlicensed businesses, it's about using whatever they have to tame what has become a threatening industry, a competition to the traditional financial system. It's about keeping the statu quo.

Yesterday bitcoiners were drug dealers and terrorist, today they are illegitimate investors and exchanges are not following financial regulations, the law, abusing innocent uneducated investors. These laws are impossible to navigate, after countess demands from businesses and those competent in that tech along with the law: Provide clear direction and regulations for a legitimate crypto field. But no, let's sue businesses who insist to operate and keep the rules impossible to adhere to so that we can sue, shut down, after the demonising that stopped working so well after a while.

I would like to be less one sided but the simplistic views on the crypto situation can only make me more radical in the view that the whole thing will be, or should be some may say, absolutely not regulated. Those who get into it don't want some imposed pseudo protection, they just demand the freedom of money. If its the SEC or the danger of being rug pulled, more and more will chose the second.
Banned for twitch partners. So it won't affect major streamers, but smaller ones yes.
Mind you, the two kinds of RAM are not directly comparable.
Thanks for reminding me why reddit is garbage, what a shitshow that link is
Everything about this seems incredibly suspect. Reddit wouldn't ever ban anyone for suggesting an alternative (there's a whole subreddit dedicated to that). This just seems to be a shill capitalizing on the news, plain and simple.
Ahh the classic "Gen (insert generation younger) is doing (thing) wrong" article...

Most _people_ don't like their jobs. This isn't generational, this is just how it is. When people have to work to survive and there are limited jobs out there, it's natural that people will complain about working and want to retire early.

Gen Z is coming into the working world in an era very different and in many measures worse off than the working worlds Boomers or Millennials did. Housing is more expensive than ever, healthcare costs are continuously ballooning too. And the US minimum wage is $7.25 per hour. Companies are proud when they offer $15 an hour, which is now a starvation wage in most areas. Meanwhile, a lot of Gen Z is deciding if they're going to college and if so, how much debt they are willing to take on. 17 and 18-year-olds are deciding if they will take out potentially hundreds of thousands of dollars in loans to go to school, another sector that has ballooned significantly over time.

Maybe let's not blame the literal children here, and instead push for changes in our government. We need price caps for medicine and healthcare yesterday, we need more affordable housing, we need to increase the minimum wage, and we need to slow the ever-increasing costs of education.

Finally, we need to consider that the 40-hour work week is arbitrary and has only existed since the '40s. Many companies have tried 4 day works weeks to much success and maybe, just maybe, as technology develops at increasingly faster rates around us people will start to realize that not everyone needs to work 40 hours a week to get their job done (this is already exceedingly common in office jobs) and then maybe it won't be so common for younger people to want to retire so early. A lot of jobs aren't really that bad, it's the amount of time per week that gets to people.
Good question! If you already have GKE or EKS + all of your CI/CD pipeline then we can help automate other manual tasks that devops or platforms have to do today. For example, the ability to easily clone and replicate environments for developer self-service, or to get ephemeral environments. We're working on releasing blue/green deploy and multi-cloud features as well. This would require a migration to Nucleus, so you would have deploy your services on to Nucleus from your existing clusters.
Honestly I remember jokes from my childhood 25 years ago about how Brazil in 10-20 years would be the next big emerging economy, and had been like that for at least 75 years.
I make snowballs, then I just eat them.

Eg. tidiness slips in small actions, accumulating, then at some point I just clean it all up as one act and I may-or-may-not break that act into smaller bites (that probably just make sense from an order of operations/batching standpoint.)

Also, generally for things like tidiness, I keep a couple rules. Pick up daily before bed. This covers 80%. But sometimes I'll let that go or only clean halfway, then I must catchup on Sunday. But, cleaning is definitely a full mode I put myself into. If I started doing small unrelated tasks hoping it prodded me to get up and clean, I never would.
> That aside, I'm curious whether it will be more like the mac or more like the iPhone. Will we be able to "sideload", i.e. install things without papa apple's approval? Can we use a web engine that's not WebKit? Things like that will make the difference for me, not the price.

This is where the product gives me pause. I am very happy to early-adopt this thing but if I cannot "do what I want" then I will pretty disappointed as I would not expect a comparable product to enter the market for another 5+ years as all this specialized hardware experiences commoditization.

I am very happy using my Linux desktop, slightly less happy with my Linux laptop (fingers crossed the 15" Framework changes that" and am not kidding myself by holding any expectations for what the F/OSS A/VR future will look like in the near-to-mid-term.
This sounds like a great premise for a sci-fi novel
> risk their lives to do their job when it's necessary

It wasn't necessary, because they had an alternative way to accomplish the goal.

> like they signed up to do

Cops don't sign up to risk their lives. They sign up to help police their community. They are sometimes called upon to risk their lives, but that doesn't mean they should risk their lives when alternatives are available.

It's not an extrajudicial killing if the dude is actively murdering people from a window. Police, or really any random person, are well with the rule of law to kill that person without getting the okay from a judge.
From my personal experience, it's quite useful but not as much as a lot of people thought it would be. The ability solving 'simple' questions is great. I used it more as a smarter google.
I'm not one to blame external factors on my shortcomings.
Kind of curious what WebGL report [1] would be for one of these devices. Does the extra RAM make maximum texture sizes massive and allow for thousands of textures or is that a software limitation?

[1] https://webglreport.com/
Using it in a context where you need to make money, it's a bad bet. Fine for academic ideas and such things, but really hard to build a business around. And the tooling, community, libs, and docs show how it just can't punch the same weight as other languages when at the end of the day you need to get shit done.
If reddit backs down , their are losing future shareholders. Markets like companies that are complete @holes and monetize their unfair advantage.
Except for reading thru some shared Reddit posts or Google search results, I find Reddit very unintuitive.

Maybe Reddit never put in many dopamine triggers like other social media (but Twitter is more than dopamine hooks). And maybe they didn't monetize hard also.

These days, building community is better in other tools now: eg. WhatsApp works (shrug). Knowledge-share type discussions is better even in google groups tbh. Maybe Reddit is a good place to vent haha?
Who is making fun of it?
Ah, yes, there were no videos of what the brave liberators did with people they identified as collaborators.

>The Ukrainian government explicitly recommended taking the papers if coerced to do so

How can anyone be coerced to get a passport?
We can carry on his spirit through our work. Lemmy is a great example of that spirit.
People might want to avoid having the same thing happen with a reddit clone 10-20 years in the future. Federation allows communities to decide their own fate instead of having decisions handed out from on high
That's part of my point. There are 100s of organizations using it at scale, but it only needed to be trained once.
congrats! I was just listening to your changelog interview from months ago in which you said you were going to move on from this after you brush up the code a bit, but it seems the momentum is too great. Glad to see you carrying this amazing project(s) forward!
This hasn't happened to any large coins though, whereas people have had their bank accounts frozen for political reasons.
Well I guess I was not very clear with my words then. I didn't say it was a problem for them, and they seem to be perfectly happy at the idea of their big epiphany coming from LSD. But I wasn't taking issue with that, I believe they believe that. I simply meant the "problem" with ascribing the epiphany to LSD is there is no way to know in an individual case if LSD had anything to do at all with it, because we know very little on that subject at the current time.
Is Musk running Reddit, now, too, as a hobby? This all feels oddly reminiscent of Twitter at the end of 2022, when you could briefly be banned for merely uttering the dread word 'mastodon'. Reddit seems to be doing a mistake-for-mistake replay of Twitter's recent API restriction/protectionism screwups.
Another common condition for being a country is legal recognition of statehood by other countries or international organizations like the UN. Is this country's claim of independence recognized by any other countries?
We have both Akka and http4s in use, and are migrating to http4s for those services. We need to do more things more quickly with fewer hands. TS and Python are just easier and better tooled for the majority of our (CRUD) work.
If I could give HN comments reddit awards, I'd start with this one.
You know how people in California claim that the homeless problem there is due to them having programs to support the homeless, and that if other states did a better job their state would have less of a problem? Well if you are basically the only website that allows all legal speech, you are going to see a lot of stuff that was censored elsewhere. I'd love to see a version of this created by a more left wing group of people to balance things out, and whouldve recommended it here if it existed, but they seem to have abandoned free speech as a concept entirely.
My thoughts would expand like a fractal and it would take active effort to make it all the way back out. I probably can't really communicate it to someone who hasn't experienced psychedelics before, but it makes me feel like I am conscious of every bit of mental effort I am spending. Pulling myself out of deep thought feels like a long, manual process, even if it's actually instant. An analogy I liked to use is having to arrange all the neurons manually or something.

After every instance of that, it felt like I had spent so much time in that fractal that it was difficult to recall what had happened previously. It's not like ADHD where I get distracted and lose something from my short-term memory—it's that I had so many other thoughts that it was difficult to backtrack past them all.
CoreML has various models already built-in, although as black boxes that accomplish some task like OCR or rectangle detection. There's also a "feature print" model which I believe are intended to be used as hard-coded features for simple ML tasks. In either case I strongly suspect that when you use them, they're not being embedded in the app.

Another thing to consider is that you don't have to embed the model in your app; at least in CoreML you can download (and update) the model weights over the network.
And given the number of cryptocurrency exchanges the SEC has been suing in the past several days, it is rather unlikely that the SEC is targeting Coinbase because of Coinbase's criticisms: had Coinbase said nothing, the SEC would still be suing Coinbase.
The money behind the coming wave of climate litigation
Another default policy to consider is any Lambda function role. They never specify which Lambda can assume them (because that would create a cyclical dependency). That means anyone with permissions to create a Lambda will be able to technically assume this role.

Just like you, I'm not arguing the defense in depth part. Always a good idea to put fine-grained permissions where possible. But I also find the "vulnerability" part a tiny bit overstated.
Agree here. The worst moderators are the most visible - it's a power position. Anyone with tact, humility or a life will lie low and not exploit it.

The bright line for me is whether they can handle direct criticism. Everything else is window dressing - is your ego strong enough to handle someone saying they don't like you? If not, you won't make good decisions.