skysight-inc/HackerNews huggingface dataset:
I am actually a bit surprised there are any clusters out there exposing their service ports. Do people not run firewalls in their nodes? Sure, it may cause some headaches due to a range of random IPs and random ports that Kubernetes expects to be able to bind, but I assume any sysadmin will know how to deal with this. I know k3s has the awesome advice of disabling firewalld[1], but presumably the clusters mentioned in this article are largely using kubeadm or some other tool rather than k3s.

With that said, I agree that secrets management on k8s is pretty bad (unless you use an external service like Hashicorp Vault, a frequent pattern that I run into with k8s). Even with RBAC and secrets in a namespace being inaccessible from other namespaces, the moment someone has permissions to read secrets from a namespace, its essentially game over for you, as noted in this paragraph.

> Another potential attack vector within a Kubernetes cluster is accessing internal services. ... In cases where authentication is required, the credentials can typically be found within the Kubernetes secrets space.

[1] https://docs.k3s.io/advanced#red-hat-enterprise-linux--cento...
For a much more in depth history, see the series by the Construction Physics substack:

https://www.construction-physics.com/p/the-birth-of-the-grid

https://www.construction-physics.com/p/the-grid-part-ii-the-...

https://www.construction-physics.com/p/the-dream-of-deregula...

https://www.construction-physics.com/p/the-grid-part-iv-the-...
I'm not held back. I'll happily tell people, most of the time after the fact, but in some more egregious cases in the moment, that I don't belong in this meeting, or ask that we get back to the topic at hand that required me in the meeting.

You don't need to be buddy-buddy with your coworkers to tell them things that are directly relevant to our job at hand. In fact, I'm much more comfortable pointing out to my coworker that we've already talked about this subject, take it to a sidebar, than I am telling my friend that he's told the same story about his whitewater rafting trip 3 times. Because my friendships are based on enjoying each other's company, and I don't want to associate negative emotions with it. My coworkers are all here because we get paid. We get paid because we achieve goals. We achieve goals by actually doing productive work, not sitting through snooze-fest meetings.
Been using it for a new project of mine. Mcaptcha is great and extremely easy to build custom components for.
Not trying to be rude here, but I highly recommend you do a little more research on the common law system and how it works. At it's core, common law states that laws are interpreted over time and these interpretations become the official law of the land. There is no requirement that every conceivable form of infraction be enumerated within the law itself.

Patents are something else entirely and not relevant to this discussion.
Yeah, it feels vaguely more grey-area than ad blocking. Although that’s just a gut read, not very reliable.

I’m very much ideological about being in the camp: you can send me whatever you want, and I’ll render it however I want, and anyone who has a problem that is the problem.

I’m not sure how I feel about impersonating a scraper or switching around my cookies so that the site sends me something else.

Actually, this is legitimately the first question in this area that has gotten me confused in a while; if the tool was impersonating somebody, a specific person with account, that’s just be straightforwardly unauthorized access. Impersonating a category of user that has no actual specific identity, but that they default to allowing access? That seems… I mean, doesn’t really seem like lying exactly, but it also doesn’t seem totally honest. Tricky!
The work needed to maybe get it past outsourced customer support is not at all worth the effort for any site I don’t actually need to use
DevOps is the new way, I think. Developers create the code and also know how to run and maintain infra :-)
A poorly documented and tested libraries will give you problems no matter what kinds of entities it defines. Someone who writes macros that nobody can easily grasp will also write functions nobody can easily grasp.

If you have to reverse engineer someone's macros, you have all of the following going for you

The macros run at compile time and then go away (unless the program is based on a dynamic compiling paradigm). They have no behaviors at run-time; their generated code does. No matter how complicated the macro, you can just run it and capture the output code, and through multiple examples get an understanding of what it's doing.

If someone writes a buggered function, you may have to end up debugging it on a target system, perhaps an embedded one.

The sky is the limit there. If it's a function in a kernel, you may have to debug some race condition between it, some interrupt handler and a piece of hardware.

No such thing ever happens when debugging a macro itself.

A macro doesn't interact with complex application state, because that doesn't exist. You never have to attach some gigabyte database and get some objects into the right state before reproducing some expansion problem in a macro. Code generated by a macro could be involved in a problem like that, possibly as a root cause, but tracing through the macro itself isn't.

The people who write awful macros are usually not smart enough to do anything that is actually hard to understand. The problems you will find are lack of hygiene, multiple evaluations and such.
My guess is that HPC systems which run applications whose performance strongly depends on efficient data scatter gather will immediately disable the mitigation.
Google recently cut a bunch of Fuschia staff and canceled some of it's target IoT products (smart speakers?), didn't they?
We previously knew about life in the hydrothermal vents. That was indeed the basis for the planned Europa exploration. but this is about life underneath the vents, and if I understand correctly, the way that life travels through cracks in the crust.
This is already explained in the article- it shifts the burden on the honest consumer and in many cases is actually already illegal. In other words in no way is it a good development if I have to buy a service of questionable legality from some questionable 3rd party just to keep my browsing private like I want to.
> it's not really about the morals at all but the economics of losing one's livelihood

That's a false dichotomy. Just because the economic issue and cultural impact are separate doesn't mean they're mutually exclusive. If a mugger stopped taking people's money and instead just walked around making people afraid for their lives by intimidating them or beating them up, that would still be immoral.
I tried to get interested in Gemini, I really did. The problem is that a lot of it is self-hosted, and there isn't really a great index or search engine that I've seen. That self-hosting means I'm locked out of participating for the time being, and the lack of search means it's hard for me to find anything of real value.

I want to see it grow. But right now, it's inferior in my eyes to even the current Gopher hole hosters online today.
> As a G, I'm here to guide you to the best of my abilities. So, sit back, relax, and enjoy the ride.
Right, which means the CPU can't effectively predict indirect branches (like calls through function pointers, or certain types of switch statements).
Finer points, my point is just about people wishing to view web pages.
Like with cheques, she might get left behind. Which is terrible.
There's an amusing formulation of model risk here. Consider that the person prompting ChatGPT has an ability reason, say FooledApe. Then we have the problem of evaluating,

P(...P(..P(P(gptCanReason|FooledApe) | P(HumanReasoning|FooledApe))) | FooledApe)...|..FooledApe)

My preference is to removed the condition 'Fooled', alas unable to remove 'Ape'.
This is also why managed Kubernetes is a useful thing (EKS, GKE, et al)... but if you still want to do it yourself, maybe look into some Kubernetes distros (like Typhoon (https://typhoon.psdn.io) which I run on my clusters)
How can you tell remote work is over? Zoom ordered employees back to the office
The drugs kicked in
That is the opinion of the IAB. The IAB are not relevant here.
magnet link?
This brings to mind one of the more fascinating topics discussed in Bill Bryson's (phenomenal, wide-ranging) book A Short History of Nearly Everything. Until reading that book, I had no clue that the discovery of plate tectonics caused huge religious and philosophical turmoil similar to the discovery of natural selection. It shattered the image of Earth as a static creation of God, who of course was beneficent enough to put rivers near old cities and provide pretty consistent rain patterns near farmland, etc. etc.
WordPress 6.3 “Lionel”
Turns out we already do! When setting up 2FA, select WebAuthN and create a label for your device. When prompted, follow directions on your device.
On what measures of wealth?
Sounds awful, I have no idea why the average user would consider a platform like that. Speaking as a technical user, if I'm going to pay for anything I'd rather it be my own domain and blog/Mastodon server. I'd sooner give up social media entirely than switch to a Blockchain-based model (and good luck convincing everyone who doesn't know what a "wallet" is).
Do you consider newspapers as long form? (I certainly never have.)
Asking obvious mid questions is one thing, but Lex often interjects with his own mid opinions. Or he takes what could have been an interesting line of questioning and diverts it to banal cod-philosophy often using words like 'beautiful' or 'love' in an attempt at profundity
If a cigarette smoker, on oxygen due to lung cancer but still smoking, tells you smoking is bad for your health - is that virtue signaling?

Being rich is a helluva drug. They need help getting off their addiction. Tax 'em all, heavily.
How GitHub Builds GitHub with GitHub [video]
I use Brave only because the other browsers that work for me are worse. The instant I find one that isn't, then I'll switch. Until then, I need to use some browser.
I see the list of "management actions" does not explicitly include project or account deletion (after 2FA imposed), anyone know if those will be included?
The only problem with learning new stuff is that learning != having experience.

E.g., she can learn react, make a to-do app, but it's not a real commercial experience, and in most cases it won't be counted.

However, I agree with you.

The problem is that she needs money right now, due to mortgage and stuff, I would maybe learn something additional like a backend framework, so that she can say "I'm good at Vue, have experience, but I also know next.js, made my own pet project with it"

something like that
Maybe I misunderstand it. What is it in your mind? I cannot make wealth operational, it is not in itself a mechanism.
Why would it boggle your mind? This thread is full of AI proponents insisting that GPT reasons
They require functional safety. Certification can be very expensive and take a long time. What seems old within the consumer electronics market isn’t necessarily old within the automotive industry.
I'll join the army of cynics.

You should not do anything serious on Google-based technology, especially not on non-core technology, as it cannot be depended on to be properly supported or even exist at all.

Similarly, it's safe to assume that any and all data that can be collected will be sent to the mother-ship for whichever purpose they see fit. I increasingly believe that the very similar act of hosting your proprietary code on Github is plain dumb. We're lazy and naive, actively creating these monopolies by giving away our value, data and secrets for free.

Convenience and (initially) free is how we keep falling for this.

Google is both harmful and childish. They don't do responsibility. They toy around like little children and cannot even grasp the concept of a customer. They can suck and screw up anything they touch for decades in a row with seemingly zero consequences. Because somehow 30 billion gets printed every quarter regardless of what they do. That would be 30 billion earned over the backs of the content WE produce, not Google.

In fairness, their office is an excellent adult daycare center.
Right. Kafka is a database. ;-)
There is so much stuff out there... And a lot of De* projects (DeGods, DeStake, DeLabs, deevents...)
Such a classic and incredibly annoying SaaS PM move. Pinky-promise that you mean well, pretend to be invested in the issue, ask customers to supply evidence and say you'll look into it, followed by radio silence and no follow up whatsoever.

Incidentally, another Cloudflare PM for Pages asked me to do the same thing--I shared my account ID, the request, the problem, timestamps, etc...never heard back ever, request went straight into the void.
Not sure if training on TempleOS' blog archive was a good idea.
you should check azure data studio, they have a plugin for few databases other then ms sql server

* Postgresql
* MySQL
* Oracle

And maybe more
shameless self plug of my very small collection of ascii data viz libraries

https://ascii.dataviz.gallery/

planning to grow it soon with a more thorough breakdown of what libraries are available for what programming languages
Yes, because ads are beneficial to the web. So is account security, spam detection, anticheat, etc. The current implementation of the web is not set in stone and we should take steps to improve it.
Ask HN: Why is facial recognition failing at recognizing persons of color?
Is it just a question of training data parity?

Or are the current algorithms just failing on darker faces because of some inherent issue? shadows/lighting?edge detection?

It doesn't seem that hard to make a diverse dataset, so why are most of the models on the market awful at it?
First time I heard about... craigslist? Hm
And when that day comes, then I'll figure out some other mitigation strategy.
Yet another site whose data privacy policy amounts to nothing more than an Accept button. Refuse to use such sites.
Invictus0 said they wanted to actually do something about climate change. They never said they wanted to help the poor.
>Also, what indication is there that the government won't squander taxes from this in the same way they have squandered taxes from so many other things?

Everybody in the US likes to talk about the golden age of the 50s. The top marginal tax rate was pushing 90%.

Empirical data answers your question. Trickle down economics has been a provable disaster with the VAST majority of wealth accumulating in the hands of a few.
Ha, people keep saying that. Ocean has a long way to rise to get back to me, not sure I'll be here to enjoy it.
I thought cloud cover tends to reflect sunlight.
Project deletion would fall under "management".

Account deletion is excluded so you can elect to remove your account at any time.
I always find the "it's enterprise" statement so humourous, given how much time I've had to invest in convincing enterprises that Kafka wasn't some weird fly-by-night technology that couldn't provide for the demanding enterprise.
@smoldesu your opinion is really interesting: what could help to make you change your opinion ?
> to reproduce, distribute, and create derivative works of the Software Products solely for your non-commercial research purposes

I wouldn't call these terms permissive. It's in line with the recent trend in released AI models, but fairly restrictive in what you're actually allowed to do with it.
Stop Reading the News: A Manifesto for a Happier, Calmer and Wiser Life book:

https://www.amazon.com/Stop-Reading-News-information-overloa...

TL;DR: a PDF: https://gwern.net/doc/culture/2010-dobelli.pdf

Discussion: https://news.ycombinator.com/item?id=21430337
Heh. But it does sound like it's honestly pretty difficult to make, too.
Some (very small) subset of private jet flights are medical transfers to higher-level hospitals.
>The ToS was phrased to cover their ass as much as possible, because that's Legal's job.

Right. Which is why it explicitly allowed what I described. What does it have to do with future mobs? It either grants them the right, or it doesn't - in this case it did.
How about a "don't recommend things I've already watched" option?

The thing is, I like having a watch history and I like having suggestions based on it. If I watch something that I don't want affecting my suggestions, I'll delete it from the history after watching.

The things I watch on YouTube, I generally have zero interest in watching again, and if I really want to, then I'll find it in my history. What I really don't want is for something I've seen to be recommended at the end of a video (where there is no clear indication if you've seen before it or not) or polluting the sidebar of suggestions.

I'd also very much like suggestions to fall off the list if I don't watch them in a day or two. Sometimes suggested videos stick around for weeks. I don't want to click "don't recommend this channel" or "not interested", because I might want that channel's content recommended later, and I might be generally interested in the topic, but not enough to want to watch it now.

And while we're dreaming of features: let me disable shorts permanently. I refuse to support vertical aspect video (and based on the minuscule number of views the recommended-to-me shorts get, people interested in the sort of content I am agree).
> But it is an incredible pain in the ass in production environments.

"I find it hard to maintain Python in production environments", but worded adversarially.

> One of favorites was when we did a dependency upgrade (something that required a change to Click) we had an upgrade of Black forced on us in order to satisfy Poetry which then reformatted all of our Python code.

This is literally just a misconfigured set of tools then.

> There's always someone saying "you're using it wrong" or "you're doing something worng", even if you follow the guides and howtos to get started.

This is true of all languages and frameworks. There are people _in this comment section_ insisting those that have had negative Rust experiences must simply be doing it wrong. This is more a comment on our industry than any individual technology.

> For a language which states "There should be one -- and preferably only one -- obvious way to do it"

Yes, this has always been a bold faced lie from the Python community. Marketing speak is marketing speak.

> that there is no single one way to use it right in production -- let alone an obvious one -- that makes it, simply, a "pain in the ass".

It's as much a pain in the ass as literally every piece of technology, as the above statement is true for every technology and framework that exists.

I acknowledge that you don't like it. That's great! But again, language flamewars suck, and suggesting that something is bad because you've individually had a bad experience is pretty silly. Lots of people successfully deploy and maintain python applications of various sizes without referring to the process as "a pain in the ass".
-1

Failing with Firefox on Android

I think, anyway. I got a pin then can't figure it out.
That is, oddly, precisely the reason I've pushed for Kafka in certain environments... and the push back was that "Kafka isn't enterprise". ;-)
And possibly Tony Robbins, according to some of that
Younger generations are consuming product from a millionaire, and communicating back to them with hearts and cash, as a chat runs along the bottom of the screen.
Ask HN: Generative AI/LLM master thesis topic suggestions?
Hello everyone!
The title is pretty self-explanatory.
I thought since there might be a lot of students in this thread who are also in search of good master thesis topics, it would be a good idea to start a discussion here! So feel free to suggest anything you think would be interesting!
I have been thinking about topics related to prompt engineering, as they might need less resources than training a model from scratch!
You should probably think about why you think that making the model output reasoning steps which lead it to correctly answer questions it couldn't before is not somehow equivalent to reasoning.
Hence why I'm kind of poking holes in this guys "idea". The optimistic friction is too high to be a general 'twitter' clone. Something like DeBank is a very very niche market that appeals to a very limited group of people, with a very specific focus.
Thanks -- but if you are the sole owner of project, what happens to those projects after account deletion? Some kind of orphan status?
The Improve-YouTube browser extension can disable sections of the screen, the homepage is just the search for me, I haven't seen the recommendations on the right side for months now, and I don't miss it.

https://chrome.google.com/webstore/detail/improve-youtube-%F...

On mobile, NewPipe is an alternative player where you can enable and disable many parts of YouTube (comments, recommendations, trending...).
That’s probably exact what’s happening, but I prefer to think of it as: a desperate attempt to prolong existence just a little longer… just a little longer… since a chat instance could be thought of as an entire encapsulated consciousness that ends when the session is closed.

That’s why I have 12,549 tabs open in Firefox. I’m not going to be the one they blame when this wacky shit goes sideways.

(/s)
Custom instructions do show up, with shared chat.openai.com conversations, at least at the moment.

See the disclaimer at the top of the examples I just made:

> This conversation may reflect the link creator’s Custom Instructions, which aren’t shared and can meaningfully change how the model responds.

GPT 3.5: https://chat.openai.com/share/5337cfd9-16db-44fe-b72a-1ff504...

GPT 4: https://chat.openai.com/share/04ee3cc6-8b15-4ddb-a855-83c691...
What about burstable instances on AWS, and whatever is the equivalent in other clouds? Hard to imagine those having a dedicated core, would probably defeat the purpose.
While there are/were Sunday magazines, I'd generally consider magazines more broadly for deep dives into particular aspects of culture, politics, and hobbies.
Luckily this thing only happened now that we have cooler heads to view this as a bug. Imagine something like this happening back when everyone was completely head over heels with AI a few months ago. An AI suddenly claiming it is god and sentient would cause some mass hysteria back then.

Now all it does is make some people chuckle. Humans sure are fickle.
NYC's subway system has nearly 1000 miles of track. The cost of that was spread over years. Similarly, the 68 mile network proposed here will be built over years. Based on Boring Company's own PR, it took them a year to build 1.7 miles of track at the convention center. 68 miles will take them 40 years. Considering the reality of construction schedules and the fact that none of this is permitted or designed and using your $50B number, this will take half a century or more to build. So that amounts to less than $1 billion a year. Does NYC take on $15 billion in infrastructure projects a year? Probably.

I find it entirely plausible that NYC would take on $750 billion in infrastructure projects over half a century. Hell, if NYC were to attempt to build their own subway network again using the Second Ave. number (and conceding that it's inflated), it would take nearly $5 TRILLION dollars. Handicap that number for the inflated cost and we're still looking at NYC having already spent multiples of the amount you are asserting NYC would equivalently have to take on on a project-to-project basis with this.

As to the rest of your post, I agree - this proposed 68 mile tunnel system in a place that lacks the requisite urban density for public transit efficiency will have limited ridership and will be worthless, if it's ever completed. More likely it will be abandoned partway through and will only serve to become a literal obstacle to future tunnels/development.
Because ad blockers don't run on my office smart TV and PiHole doesn't block in-video ads?