skysight-inc/HackerNews huggingface dataset:
> The dumb thing is there are probably an entire two or three teams worth of ex-googlers that could write a new google out there.

It doesn't take Googlers.

But what it does take nowadays is money. And that's why "open source" doesn't fix this problem. Writing the software to make a better search engine is the easy part--runnaroo showed this. Keeping the thing running without revenue as it sucks down more and more resource is the hard part--runnaroo also showed this.

No VC is going to step into the space because they want to be "teh Google". They don't want to be profitable--they want to be a unicorn.
> Is there any example of this happening in the real world? I've never heard of one.

This has happened to Samsung. Some of their codebase and meeting notes were leaked by CGPT.

The company I work for has the exact same policy for the exact same reasons.

It can be difficult to tell who has been effected by this because you might need to know what to put into the prompt in order to have the leaked data leveraged. So this can go undetected by the victim.
Jennifer Pahlka: Why We Need a Culture Shift in Government
I'm also in LA ~ can connect you with some interesting folks!

Agreed that there's not great resources for local discovery, beyond Discord groups and Meetups (which sort of died during the pandemic)
Officials say Oregon DMV hack puts ~3.5M driver license and ID card info at risk
Show HN: At Kickyourstartup.com, we provide entrepreneurs with a db of investors
You don't typically paste an entire document into a search engine for analysis. Further, search engines have a long track record of not leaking searches and not using the info for insider trading etc.

They're to some extent battle tested where Openai et al are unknown quantities.
Same here, I had it checked out from the library continuously for a couple of years and referred to it constantly. A terrific explanation of a super cool piece of work, full of insights. I later bought another ex-library copy that I still have.

That library was so good to me! (In Crook, County Durham in north-east England) As well as providing what was probably, if I'm really honest, the most fascinating technical book of my programming career, it also had a load of LP records I wouldn't have heard anywhere else - the Go-Betweens and Peter Murphy's "Deep" I remember particularly.
https://lemmy.sdf.org/
there are countless people in prison who arguably didn't hurt society with their actions (drug crimes for example), did Kim do anything particularly good for society to warrant being held in higher esteem than them?
Medical staffing with 2k+ commissions for placements with pretty high conversion rates. Again, I am just a dev so I don't see any of that.

Inventory tracking and auditing for Fortune 500 companies in a SaaS before that.
For the moment all workloads are stateless, but you can already connect to external databases. There are "serverless" DB providers like Neon [1].

Persistence is on the roadmap though.

[1] https://neon.tech/
@joshuawitzer : Since your account is new, FYI regarding why your sibling comment may have been downvoted to heavily:

(1) It used hyperbole: "Anytime you post something that someone doesnt like ..." Especially in comments that are critical, avoiding hyperbole helps to keep the discussion grounded and on-track.

(2) It used inflammatory language to describe people: "Reddit has gangs of goons/moderators". As with (1) above, this reduces the chance of having a productive discussion. (IMHO) that kind of insult also just makes conversation less enjoyable.
Slack Begins Forcing 2FA for Workspace Admins Without Providing Notice
Ask HN: What do you read while in bathroom?
So during the hours and hours I’m not coding, there are moments of downtime where I used to look at Reddit in 5-10 minute blocks:

Going to bathroom, eating, short breaks where I walk around or sit on my deck.

Normally I look at YouTube learning sources as a first (3blue1brown, statquest, t3ssel8r) but unfortunately I’ve seen all those videos I want to see and releases are rare

Now since Reddit sucks, and I don’t intend to go back without Apollo, I don’t even know what to look at

I really love learning but I feel I need at least SOME just fun and light stuff to balance.

Right now I’ve been reading about learning R studio deeply and such, and reading about tibbles vs data frames while on can is … fun, it’s just not exactly the same.

I don’t even really know what to look at anymore.

I love HN but it also has a bit of a heavy and serious vibe which is great, but I also need those light feeling fragments content in between. My day definitely seems a bit more dim when I wake up, code, learn, and then even on my breaks I'm learning.

What is out there that I’m missing?
There are distinct patterns of use. While search engines as typically used could collect some sensitive information, there's only so much you could divulge in a query. You could e.g. reveal what you're working on and using what technologies, but not the specific designs or algorithms, because putting the latter in a search query makes zero sense. Not so with LLMs.

If anything, the underappreciated vector of accidental data leaks is the (annoyingly idiotic) combination of two distinct "features" - merging separate address box and search box into an omnibox, and "instant search". This means that whenever you're using your browser bar to e.g. force the text in your clipboard into plaintext, you're also sending all of it to Google (or whatever your browser is). So is the case if you're trying to type in an URL part - it may end up being treated as search before it starts matching something in your history.

As for the rest of things - en/decoders, base64 en/decoders, prettifiers, format converters - I'd say they're in the same category as ChatGPT: you shouldn't be using it with any sensitive data, because there is a very good chance they're collecting it. ChatGPT is at least run by a high-profile company (read: easy target for scrutiny and lawsuits). Random helpful utility for data conversion? There's a good chance it's been made specifically to collect data pasted by careless people.
> Doing all those things at once, it's usually cheaper to knock down and start from scratch.

This must be regional. In the PNW we'd never knock something down for that. Stripping the drywall out and redoing the plumbing/electrical/insulation is quite a lot less expensive than putting up a whole new structure.
I joined this instance: https://lemmy.world/

So far, so good.
I do this to separate personal and company repositories on the same machine, and it works flawlessly. An example config looks like:

~/.gitconfig:

```

[includeIf "gitdir:~/Personal/"]

path = ~/personal.gitconfig

```

~/personal.gitconfig:

```

[user]

email = {personal email address}

```

And you can have arbitrary numbers of "profiles" like this, as long as each is in their own directory.
First, this advertises this as a PC which have longer lifetime and higher security requirements than embedded.

Second, embedded systems have reliability requirements. Something will not work and will need support and updating to fix. The big advantage of normal distribution is that somebody has probably already fixed it.

Third, devices get repurposed. My five year old Raspberry Pi has had multiple jobs, and when it is done running Home Assistant, I'll find some other use. Plus, with normal distribution, I can easily install the packages I need.
Can suggest this enough. Getting outside of the internet has been great. Try replacing Reddit with the outdoors. Lock your phone so you don’t open it as often and your brain will find things outside of your phone to fill your time with.
ChatGPT Is a Virtual Veterinarian. Surprisingly Good
The website works fine unless you enable javascript. That's usually the way it is with these sort of things. The webdev or CMS creates a perfectly functional website using HTML and CSS, then some javascript is added to shit the whole thing up. Disable javascript by default for a better web experience.
Your pricing is around 50-100% higher than vast.ai, a relatively mature competitor in this space who offers the same GPUs and more with beefier rigs.

For example. An '8 core/16GB RAM/3080 Ti 12GB' is 50% more expensive on salad than on Vast.

In fact, I can get more than double the resources for the same cost as Salad in the form of a '28core/32GB RAM/2x3080 Ti 12GB' on Vast.

So, what is your differentiation? Why would I ever use Salad?
Hence the “not easy” part.

Freelancing is probably not the way. Really, I’m trying to get away from the notion of selling my time altogether and instead build things.
> you're not getting any value out of it

Speak for yourself. There are many great niche communities from which I have derived pretty tremendous value. The front page is generally worthless and toxic, yes, but that doesn't condemn the entire site.
The CIA’s Venture-Capital Firm, Like Its Sponsor, Operates in the Shadows (2016)
Intel is officially killing off the ‘I’ in Core i7 – as it goes Ultra
I disagree that sequence diagrams are the only useful thing in UML. I will say the the most taught diagram type (class diagrams) is not only by far the most useless, it is downright detrimental to use.

Wouldn't be surprised if the main reason UML ended so despised is 99% to do with class diagrams.

Sequence diagrams are really nice though.
By VCs I meant the staff on commission that has a budget and picks bets. They don't own the money, LPs do.
Lightweight is good, but above all I want a productive JS library. Perhaps I should just make the switch from React to Svelte.
Scoot on then
It’s not just you: Steam suddenly looks nice
Language User Interfaces – The Hero We Deserve
It's good to be wary.

You can trust the ACME CAs listed on this site: https://www.acmeisuptime.com/ (Although, I think that list could use some updating. I'll ping the author.)

Personally I would use Let's Encrypt, ZeroSSL (Sectigo) and Google Trust Services. There are, of course, others. But which ones you choose depend on your requirements and such. (Some offer business support, for example.) SSL.com and Sectigo also offer ACME but I am not sure how performant their CA software is.
Google is not the only high paying company. Some companies are paying a lot more for equivalent levels.
You aren't being charitable. Please stop fussing it's rather immature. People have addressed your points, please actually respond to theirs.

It's not helpful to keep saying "look there still some people writing C" and use that as an argument for how C has somehow solved the problem where C programers regardless of how good they are ultimately write bugs that lead to takeover of the program counter. Rust makes the world better. If you don't want to pay the semantic price of that then fine, but it means you're okay with still writing horrible bugs. Some of us aren't. I promise Rust's semantics are better than C++ even though Rust has its rough edges and could be improved.

What would be helpful to your cause is to mention the examples of people starting to add tooling to C to solve problems people are solving with Rust, but without the semantic price of Rust.
> Are the protesting moderators allowed any moderation of their coordination channels in your mind

No idea it is their channel

The issue is, they should not be allowed to coordinate site-wide. The whole point of subreddits is to have separate competing communities, not to coordinate.
The Metropolis and Mental Life
Google is not claiming that LLMs will harm employees.

The infinitely bigger point is that this company is gladly pushing out a suite of products that it knows perfectly well to be carry a significant risk of harm. Of course the harm in this case is done to the -companies- where it is used, not the employees. But that's just a minor, and entirely tangential detail.

You should read the article.

I'm sorry that the pervasive toxicity of this industry has rubbed off on you to such an extent that feel you need lash out at others in this way.
From the first 10 jobs, 5 are SW.
Near zero unit cost is fundamentally different than “bringing down unit cost”. It just isn’t the same.
1981 - Raiders of the Lost Ark

https://www.youtube.com/watch?v=CR7Kh77aNnU

because who doesn't want to be Harrison Ford
It's really disturbing just how bad Google search has become. For so many cases Google actually is only useful as a search interface for Reddit, StackOverflow, and other sites that accumulate (and actually garbage collect) knowledge. Without such a qualifier Google will just give you absolute SEO trash results for many types of searches.
That's a lot of hemming and hawing with no solutions, which leaves us once again with a status quo that guarantees a violent black market, guarantees impure drugs and associated deaths, fails to make drugs less available (and makes youth access easier than for alcohol or tobacco) and costs an unfathomable amount of taxpayer money.
Every time I've participated in a small sub where the mod went AWOL it's been just fine. Often much better than your average Reddit sub.

You can even see this with smaller active subs that only have one moderator. The sub doesn't fill up with spam when the moderator is sleeping.
A bad critique of the term. Systemic harm isn't binary.
"real UML has never been tried"

significantly more interesting technological failures deserve dibs on this excuse
Now why would I do that? You originally asserted "Conversely Debian broke Firefox's ability to update without requiring a restart" and now you know that Firefox doesn't have the ability to update without requiring a restart. Any further shifting of your goalposts is your problem, not mine.
MN, so "remaining 47"
I'm seeing a lot of visual snow with bright backgrounds, which is very annoying. Makes it close to impossible to focus.
I tend to think the continuous color palettes don't look very nice (no matter what the colors are) in various data visualizations. So I often prefer the color brewer discrete smaller sets, https://colorbrewer2.org/#type=sequential&scheme=BuGn&n=3

I use the viridis inferno on occasion as well, https://github.com/sjmgarnier/viridis, although sometimes it is too dark.
You are correct: https://github.com/google/certificate-transparency/blob/mast...

You can embed CT attestations (SCTs) in the certificate itself, so yes, provided the CA is in cooperation with CT log operators, and deliberately does the pre-certificate -> SCTs -> real certificate dance, it is possible for a browser to validate embedded SCTs without an online check.

However, that assumes that the CA actively does that, they don't have to. Neither does the server. What's compelling them to is _policy_, set by Google and Apple, that their respective browsers won't accept certificates _without_ CT attestations. Google's policy specifically requires that one of the SCTs on a certificate must be a CT log run by Google. Google also controls the list of CT logs that Chrome will consider as valid CT logs, as part of deciding if an SCT is valid. Antitrust, anyone?

I was trying to make a similar point about Firefox - policy vs code. And rather than saying that it's specifically the CA/Browser Forum setting policy (which it does, but only baseline policy, which does not include CT), each org in the CA/Browser Forum has their own root cert inclusion program with their own policies, that all draw from baseline policy then add to it. You are right, _baseline_ policy does not require CT....

... and neither does _Mozilla's_ policy, now I've scanned through it. It actively acknowledges that CT exists (in that it mandates that if you issue a precertificate for CT, you _must_ issue the completed certificate), but it does _not_ require CAs to use CT. In stark contrast to Google and Apple.

Perhaps this is why they also don't implement CT checking in Firefox?
This is a horrible way to get the mass market. It seems like a perfect way to recreate the issues with desktop Linux
Pure uninformed speculation follows ...

I suspect sub-interpreters are a punt and a feint.

My guess is that there will likely be exactly 2 sub-interpreters in most Python code. One which talks to an old C API with a GIL and one which talks to a new C API without a GIL.

It's going to be a lot easier to manage handing objects between two Python sub-interpreters than to manage handing objects between two incompatible ABIs.
I think when looking back through history, the continued torture of the entire North Korean population is going to be one of the most tragic events of the 21st century. Despite the regime originating earlier, it feels to be most tragic now; long after any maligned geopolitical reason for the regime to exist has since disappeared. It’s something we don’t think about often currently, because it’s almost become a joke. The crazy hermit kingdom. But I really feel like we’ll look back at how we ignored it for so long shamefully. I don’t know what we could be doing though of course. I hope that will become clear soon.
Maybe this is a good time to mention the Web Archives browser extension [1] that offers links to various cache / archive providers for any page you visit from a toolbar button. There are many such extensions, this is the one I've been using occasionally. Simple but very useful.

I haven't tried since the beginning of the Reddit strike though, I don't use Google and I only very occasionally run into Reddit pages. I know ArchiveTeam has asked help to archive Reddit [2].

(not affiliated to anything mentioned)

[1] https://addons.mozilla.org/en-US/firefox/addon/view-page-arc...

[2] https://news.ycombinator.com/item?id=36254172
What you're saying here sounds to me like "I think the current moderators are bad, get rid of them all and get new ones who will be much better"

I have some ...doubts about how well something like this would work in practice. Burning large systems down and starting over is generally not more efficient than tweaking the system you have.
Google should probably just buy Reddit and run it at a loss.

This may not be good for us the users, and might end up killing Reddit in the long run, but it's better for both Google and Reddit than the current situation.
Connections are only part of the danger. Browsers need to access the internet and they can have security bugs. Also, people download files and the programs that process them have bugs. People download programs and those can be dangerous.

For the kernel, it is important that it protect against dangerous programs running on the system to keep them isolated.
This is not using a custom Controlnet for QR codes.
Addiction is hard to understand unless you're yourself an addict. Especially on an emotional level.
I'm sure if you looked at the cost per unit of CO2 emission avoided the CA HSR project was still completely ridiculous.
Which is why I used the past tense.
I wonder how much better my GPA would have been if I had troubled bowel movements. Unfortunately I'm in and out of the bathroom in about 2 minutes.
My experience: I was in the middle of typing a message when I was immediately locked out with a modal. I was really concerned at first that there might be a phishing attempt happening or something like that. Not the typical UX I would expect for an application recommending or even requiring 2FA.

Users report being kicked out of huddles and issues with signing in with 2FA.
You might enjoy looking a little deeper. For one example:

> I'll also concede that state diagrams are good, but well.. they are also quite simple.

One of the goals of state modeling is to simplify. A sufficient metamodel will include (in addition to states and transitions on events that people might see in automata theory and misc. CS education) less-simple features like concurrency, superstates, transition guards, maybe real-time constraints.

When you need a nontrivial system to actually work, in all cases, (not just toss your sprint task over the wall, and then do bug tasks later) good use of the abstractions of this "simple" diagram, and inspecting it, will tend to avert problems that even an unusually conscientious programmer might miss in just code. And it also helps communicate less-ambiguously to others who come later and need to evolve the code. Unlike formal proofs, it's pretty accessible to read.

(It can be too accessible, in that people who are accustomed to seeing hand-wavy business diagrams with ad hoc notation used inconsistently think they also get the gist of this diagram, while not realizing how much more rigorous it is. But that's not a big problem -- you just have to walk them through it, ask questions to confirm facts expressed, emphasize when something has to be precise and exhaustive, etc. The problems are more when the diagram is poor, yet the technical appearance confers an undeserved aura of respectability, and people who can't tell the difference, act on that, but that's not unique to these diagrams.)
Yes. After leaving Google it took me a number of months to give my head a shake and start restoring old connections and networking habits from before I got stuck there. Google at least is a bit of an echo chamber, and company policies around external open source contribution, etc. plus the arrogant internal engineering culture tends to de-emphasize networks and approaches from the outside. I imagine this is common across the SV BigCorps.
Disagree, while it's obviously bad to spend all of your free time on a screen, there are some good middle sized subreddits that provided me value for my job or my hobbies.
https://zapad.nstr.no/

It’s my instance that I set up. Hoping to get some more people to join it.

Here is a post with some info about the instance:

https://zapad.nstr.no/post/31
Not even networking events per se, but I've been at many local cheap/free conferences because I was interested in some of the topics, was speaking, etc. And, especially if the industry was in a bit of the doldrums at the time, you'd have a ton of people intent on exchanging LinkedIns or trading business cards and fairly obviously solely there to try to get a lead to a job somewhere.
I've been happy with Kbin so far. It has a pretty standard sign-up process (username, password, email, verify email), followed by subscribing to a few magazines (subreddit equivalents) and then you're free to browse and post. There's enough new content flowing that I personally don't feel I ever run out of things to browse.

It's federated with Lemmy and Mastodon, so posts from those platforms seamlessly appear in the feeds, and they behave as though it's all under the one Kbin instance.

https://kbin.social
You have a high bar. Compared to where most people hang out online (Instagram, TikTok, etc.); many subreddits feel like debating in the agora with Pericles.

I agree HN is better for the kind of subjects HN covers, but for others I tend to go to Reddit.
Could be some kind of map
That's not what I'm saying.

* Make posts linking to X on platform of choice.

* Google starts linking to X (not the posts about X).
No.

An arbitrary person can't ask a public gmail endpoint, "what websites is u/bluefishinit subscribed to and what are their other usernames?" and expect to get a reply.

The concern is that the information added to CGPT is getting incorporated into the public models for everyone in the world to access. That's the difference between Docs or whatever and CGPT.
Congratulations!

Old similar thread. I hope you can find something useful there: https://news.ycombinator.com/item?id=33490250 (79 points | 7 months ago | 153 comments). (My comment: https://news.ycombinator.com/item?id=33496275 )
Some people like desktop Linux and don't care whether it's for the masses or not.
The bottom connector looks like a BBC micro:bit so there is an ecosystem at least on the hardware side
I think we can omit the tobacco analogy entirely and just state the reality: "company whose entire business model is based around secretly hoovering up accidentally-disclosed private data cautions employees against accidentally disclosing its private data".
Sorry, I don't play this game. If you haven't figured out the situation by now throwing an explanatory pearl before swine isn't going to help.