skysight-inc/HackerNews huggingface dataset:
A late but still very applicable disclaimer: I do work here!

My original comment had the intent of my own personal opinion as someone who reads/writes tutorials as fun.

But I owe an apology to the readers because I did not add any disclosure, and honestly I shouldve
I'm pretty excited about it
I think you must have meant to reply to someone else, since I haven't written off LLMs as useless here or indeed, to the best of my recollection, anywhere.

That said, I suspect dismissive attitudes toward LLMs would be less common if messianic claims on their behalf were likewise.
My fave theory for the origin of life is that the porous spaces in the material around the vents were full of pockets which functioned as different cells in which sets of molecules would interact. Groups of molecules that cooperated to form a successful self-replicating metabolism that excluded freeloaders would then colonise neighbouring pockets. But free loader molecules that could infiltrate a metabolism and contribute nothing, but use it only for their own self-replication would also thrive. according to this theory the evolution of metabolism precedes the development of the cell membrane, the cell membrane might have begun as incomplete barrier to reduce loss and entry to neighbouring pockets and evolved over time to become a complete barrier that eventually removed the dependency on a vent-rock-pocket.
What I love about this theory is that it sets up the contest between co-operation (cells) and infiltration (viruses) as strategies for life right from the get go.
I worked at Weta prior to the Unity acquisition.

It will be a tremendous technical feat if they have managed to bring the deep functionality of what were Weta's internal tools to a more general audience of artists. The key difference will be that these artists won't have direct access to the developers who wrote the tools, as the Weta artists did.

Packaging powerful graphics tools within an artist-friendly interface and workflow is challenging.
How about we move on from archiac e-mail protocols? About time if you ask me..
It says “pay package” which seems to fit pay + benefits.

Looks accurate to me.
Common lisp and scheme have had proper numeric towers without this problem for decades.
I hope that they didn't make it any more difficult for me to MITM my own phone traffic. The latest Android releases have a couple of painfully annoying methods. The one I did (simplest, IMHO) requires rooting, installing a (somewhat obscure) Magisk module, and several more steps after. Not a fun experience, and I signed up for Android and not iOS because I want to be able to do stuff like that.
Fly.io Status – Elevated error rate in last 48h
I think I've had chronic insomnia for about 20 years now. I sleep 5 or 6 hours on good nights. Sometimes less. Don't have trouble falling asleep. The prob is waking and tossing and turning. Agree that the problem is probably psychological combined with aging. Since i cant forsake work, computer and cell phone screens for a year on a beach in mexico(which I think would fix the problem) I'll try the app.
Gumroad's design is itself a reuse of several design trends from 2021-2023. Wondermind is one example of another site using the same aesthetic. https://www.wondermind.com/
I find that a lot of that can be added as the code is written.

I tend to use a lot of headerdoc-type of stuff, and the last documentation is often running Jazzy on my codebase, and uploading that to the "docs" directory in GitHub.

Error handling should not (IMNSHO) be put off until the end. It should be designed in from the start. We can add "do-nothing stubs," but they should still be there, for when we need to go back, and hook up the reporting.

Localization is also something that I don't think should be left out until the end. I design my code, so that every string is a placeholder token, and is replaced at build/run time. This also allows for easy integration of marketing "talking points," and a "corporate glossary." These may not be a big deal to the coders, but people who sign checks like them.

Etc.

I have a little screed on how I do documentation, here: https://littlegreenviper.com/miscellany/leaving-a-legacy/
My guess is there's likely less value in trying to target those kinds of environments... Just poking random data out of lambda or low end vps neighbors is a needle in a haystack the size of the moon in terms of finding anything useful.

It's more likely useful as part of a group of exploits to hit an individual, targeted system.
So my CPU from 2015 (CPUID 306C3)

- Is not affected

- Doesn’t support Win11

And both are good to know.
Have you considered using an ublock origin filter?

youtube.com##[page-subtype="home"]
> proof of work is unethical in our current energy situation

Stop generating electricity using coal etc.

Generate electricity only from:

- Solar

- Wind

- Hydro

- Nuclear

And other non-fossil sources.

Using fossil sources for electricity is unethical, full stop. Doesn’t matter if you are using the electricity for PoW, or for baking cookies or for feeding kittens, or what-have-you.

Fossil energy is the problem. Not PoW.
Do the stuff you hate as part of the project. A lot of that stuff is at least "during" and maybe best as "beginning". Write the docs first, or the landing page first, or whatever and you may even change the very feature you are working on as you realize it makes no sense.
Interesting,
I kinda understand since I work for a big org where everything is very slow because of bureaucracy and fear of changes but here the big projects were already forced to use 2fa.
It would seem logical to force the contributors to use good security practices right from the start. I would have probably started with those.

Anyway, I don't want to complain. I believe its a good step towards securing the software supply chain.

Keep up the good work.
LLMs generate one token at a time, so anytime they happen to generate some garbage for any reason, you get "garbage in" for further tokens for as long as it stays in the context window.
If I try to read the front page of any news website (as opposed to an aggregator like this website) I get the feeling like someone is trying to sell me a product or convince me of something. I think it is the commanding tone of headlines these days. I am probably just crazy.
In reverse chronological order:

1940s: Mexico was the top producer of opiates during WW1 and WW2. After those conflicts ended, the opium planters turned to illegal trade.

The opium poppy plant, the plant from which opium and related opiate drugs are produced, is not endemic to the Americas.

1882: The US Chinese exclusion act caused the expulsion of many Chinese, among them, opium poppy planters. Many of them relocated to to Mexico where they started planting opium again.

1860s: The Chinese immigrants involved in opium trade had opium dens in San Francisco and other places. They became addicted during an opium epidemic in China.

1839: The Chinese as a nation were against opium use, but the British forced them to legalize opium. All that is known as the Opium wars, which was the British weaponization of opium to extract wealth from China to make up for the lost money in the Americas.

1776: The British lost the American revolutionary war and started to accumulate a trade deficit with other countries, notably China.

Conclusion: The East India Company was the first modern narco organization, Lord Palmerston is personally responsible for centuries of drug related violence. The guy was an educated person (in fact, 2x Prime Minister) and knew what he was doing all along.

This comment will make everyone angry but it is the truth.
Thanks for the feedback. This helps us a lot!

We’re currently in a early stage, but more info will be available to public in the next couple of weeks. You can fill out the form, if you want to be in the known: https://tally.so/r/w2ajRb

Thanks again, appreciate your honest feedback.
February 23, 2020 - Daily life with an Offline laptop: https://dataswamp.org/~solene/2020-02-18-offline-laptop-v2.h...

And the one just before that was pretty cool too, lots of fun gear animations:

February 12, 2020 - Gears: https://ciechanow.ski/gears/

Never did anything special with them, same as most submissions I favorite.

It should be noted that I was already freaking out about Covid at this point. I remember going to a writing retreat in early February at a cabin with like 14 other people for two days and being very nervous about it (I almost cancelled).
And maybe just maybe when the Snowden revelations started to come out some people woke up and realised that the companies who design the processors used in the vast majority of computers are from the US.

https://www.theverge.com/2013/12/20/5231006/nsa-paid-10-mill...
unpopular thought perhaps, but with this many companies/teams mandating MFA (especially to technical people, who should already know how to create secure passwords, not use them on more than one site, not spread them around, etc):

The pressure of all of these MFA inputs, especially for products that expire them even on a trusted device/browser, is eventually going to push people into the arms of convenient "password managers".

This will effectively nullify the 'something you have' in MFA because it'll all be available on your one single device again.

Even worse, it'll present multiple high-value targets now, from the centralized server/sync side (ie lastpass) down to individual devices.

Put another way: if you're storing the passwords in the same place as the MFA secrets, then it's not actually MFA anymore.

It's not that PyPI is wrong to do this, it's that the weight of everyone mandating MFA will eventually either push people away or force them to work around draconian or onerous security requirements.
That's exactly why they should be are so highly paid. You don't want your delivery man to be texting their friends that they just dropped off a high value package somewhere.
How much of a rounding error is the impact of VFX artists
If banks were security minded for their customers they would have enabled read only app passwords 15 years ago. Instead, they made it unsafe to use third party software with their online banking front ends to deter you from owning your data.
Weird. I've been assured, repeatedly, that time seeded PRNGs are never used for crypto and it's not an issue worth addressing.
Strongly suspect you work for Google ;)

My neutral stance is that this is a potentially marginally useful tool. There's nothing fundamentally new about it. Github has an online IDE, as does Amazon, as does everybody. In particular at Github it shouldn't be that difficult to connect it to deployment actions, after which you have the same thing, yet with more flexibility.

As said earlier, it doesn't reduce the complexity of the tech stack nor will it maintain itself. When you create a React/Vue app this way, your shit continues to constantly get out of date. And you'll need to continue to coordinate dev setups within a team.
It may mean the structure of LK-99 found by Kim et al is highly metastable. It does not mean the DFT calculations were useless. Also, for clarity, the original DFT calculations by Griffin do not purport to have “verified” superconductivity, but rather just report to have found a band structure (electronic energy levels) which are encouraging.
Out of all the bad things Google has done, WEI was what made you feel that? I don't even think WEI is unanimously bad.
> Reverse the roles. American ballon

Ok. American balloon over China will be shot down. You know the rules about air space, water etc?

Sincere advice: don't assume you have insights and knowledge that is deeper than those from the experts. This is a pitfall for us HN'ers.
Related:

Stripe has decided to nuke my entire business https://news.ycombinator.com/item?id=32854528

Stripe is holding over $400k of mine with no explanation https://news.ycombinator.com/item?id=34233011

Tell HN: Stripe killed my music locker service, so I'm open sourcing it https://news.ycombinator.com/item?id=36403607

Don't Use Stripe https://news.ycombinator.com/item?id=34035581

Stripe is about to refund €147k worth of payments to my all of my customers https://news.ycombinator.com/item?id=34271815

Stripe is no longer a suitable payment processor https://news.ycombinator.com/item?id=36967159
Jumperless breadboards are a real thing now
The Finalists for the 2023 Pwnie Awards
> Your heuristic for allowing them where they're demonstrably safer is not a bad one, but too limited. Even if they become equivalent in deaths-per-mile terms (something not demonstrated, and something not currently demonstrable given how opaque and secretive these companies are), other factors matter.

What other factors? I think you're wrong about this - at the high level, what matters is do these cars save lives/prevent injuries overall. If you're saying that's not the only thing that matters, what is more important than that?

> Are current self-driving cars better able to avoid hitting a small dog that runs out into the street? It's possible, but I would doubt it.

The way cars are engineered, humans generally can't see a small dog directly in front of the car. Tough to be worse than that.

Remember that most of the complaints about self-driving cars are that they just stop when they don't know what to do. If them stopping too much is the problematic behavior, it's weird to me that you and other folks here are using examples where they might run someone over. It just seems like an attempt to find theoretical fault, which is easy to do.
Truly incredible, thank you!
Companies have many incentives and they play out in different ways. It's possible to have that result in some things that you think are good and some which you don't. At a certain size, there is no longer a unified set of values holding everything together and inevitably, some values will clash with yours. Lumping everything into one pile is dramatic.
Does the number include the employer's portion of social security/Medicare taxes?
Not any more than Earth's slightly-inconsistent spin rate rules out human life here.
The website also advertises "made in Europe," so it seems like a national(-ish) trust/pride thing.
Whatever their capacity for reason or lack thereof, I'll give LLMs this: I've never yet seen one resort to ad hominem for the lack of any more substantive counterargument.
Not OP, but GitLab always cycles for me on LibreWolf, even with "enhanced tracking protection" turned off. It's likely because I disable WebGL?

7f3b42d2bee22efb
The differing views I reckon is Startup VS. Older business. We are now veering into "strategy". You need to think about what your "100%" looks like for a project. Lower case agile makes these 100%s smaller by the projects being smaller so you have more information for the next iteration.
Hey Kaveet, I dont know who have all seen the original post but I know you have so I wanted to say I'm sorry. This was my fault. I wanted to support good work as a member of the engineering community but I shouldve added a disclaimer about employment.
Pwnie Awards
Date: Wednesday, August 9 | 6:30pm-7:30pm ( Oceanside D, Level 2 )
Tracks: Pwnie Awards, Special Events

Black Hat USA will once again provide the venue for the Pwnie Awards, InfoSec's premier award show celebrating the achievements and failures of the security community over the past year.

For more information about the awards please visit the official Pwnie Awards website at pwnies.com.

https://www.blackhat.com/us-23/features/schedule/#pwnie-awar...
My kids excelled during Covid. Why? My first grader got thru 4th grade math by summer after Covid started. My 6th grader finished high school world history.

My opinion is that you are being overly dramatic.

We actually kept our kids out of school even when school allowed kids back in person. Mostly due to the fact my wife is immunocompromised.

My rising 5th grader is ahead of where his brother was going into 5th grade and my rising 9th grader is ahead of where most 9th graders are.

All because of Covid happening.
Maybe Mars is spinning at the same speed and time is slowing down.
I'm in the camp that developers shouldn't be responsible for having a transcendental ability to predict future (example) security holes. If one appears, it's really the QA's job to document it and experiment with other similar vectors of attack. The developers are, you know: developing. Bring them back in when the security issues needs to be fixed, once it's found just how big the problem is.
> What's preventing a backend system from saying "Hey, we think you're a bot. Here's an alternative way to contact us."

In what way? If I got flagged and had to take additional steps to remedy a form submission I would probably just never go back to the site. The only way this could work is by identifying the issue in real-time and then sending a CAPTCHA to be completed by the user client-side while they're still handling the form.
The attacker doesn't have to calculate the puzzles in one central place. It can do that on the hacked devices.
Looks like about 4 points.

[1] https://www.accessdata.fda.gov/drugsatfda_docs/label/2023/21...
It seems weird to me that so many of the "falling apart" simulations described in the intro involve planets crashing into each other. I would expect direct collisions to be an extremely rare "failure mode", even once the system destabilizes, especially for the much smaller inner planets. Much more common, I imagine, would be near misses that fling one or both planets into the sun, out of the system, out of the orbital plane, into extreme elliptical orbits, etc.
If we're rational? 1%.

We're not, so let's say more than that, but it certainly shouldn't be 10x. If you have the ability to replace a car that kills 2 people per 100,000 miles driven (not a real number, just an example) with a car that kills 1 person per 100,000 miles driven, and you don't do that, you're needlessly causing a bunch of people to die.
“ We are about to dump 31 Salesforce Tower’s worth of office space onto the market.”

So what? As a percentage of the national stock of office space, that is not very much.
If a phone is already compromised to the point it can make emergency calls without the user intending it to, how helpful is it for the user to have disabled 2G?
You don't seem to be familiar with the root cause. The revisionists rewriting history did they job very well.
What, really? Cool!
I guess 1995 is calling when computers were expensive.
It used to be that microwave links were the alternative for such places. Not sure what's up with that these days.
OrganicMaps is a FOSS fork of maps.me I believe.

I've been using it and it is great.

https://github.com/organicmaps/organicmaps
My numbers are very rough estimates and not good enough to do work on. More accurate information may be made public later.
Out of curiosity I tried it on Bard:

https://imgur.com/a/MpGt0d6

>I hope your ears are okay.

I chuckled at that, not gonna lie.

No clue about this source it provided however: http://books.google.com/books?id=6UWQyKUCgFYC
Good to see them using the macrons appropriately (unlike the title of this post). "weta" has quite a different meaning to "wētā" :-)
The thing is, there’s a fair bit of evidence around the solar system that planet and moon smashing events have happened, more than once.
Should've scheduled it in September. Folks could've popped in after NixCon ;).
Bork Yeah Games will stream the Hypercube Saturday, 8/12.

The Hypercube is "four GameCubes... to a Wii running Crystal Chronicles, allowing all four GameCubes to serve as Game Boy Advance controllers for the multiplayer."

Parsec connects everyone to a screen.

Open Broadcaster Software (OBS) to stream.

Their YouTube channel:

https://m.youtube.com/channel/UCU9_Way3YnrcPjtzyZbEzhA
Exploring Proof of Work (PoW) as a substitute for CAPTCHAs is an interesting idea (PoW was originally conceived as a spam deterrent, after all), and one that I have considered (and use) in some web properties I manage. Not only does it obviate 'trusted' third parties, but it also has the potential to reduce the risk of accessibility issues often associated with traditional CAPTCHA. It also seems like a solution that scales nicely, as each 'proof' is made by the client and verification is cheap, and like a solution that finally ends the arms race against malicious traffic by bypassing the need to 'prove humanity'.

However, it's one of those solutions that look good on paper, but upon close inspection break down entirely or come with rather substantial tradeoffs. Ignore the environmental discussion about energy consumption for a moment, and let's face the reality that computational power is ridiculously inexpensive.

As a thought exercise, imagine you're trying to use PoW to ward off spammers (or the attack du jour), and you decide that a 1-cent expenditure on computation would be a sufficient deterrent. Let's say that renting a server costs $100/month (a bit on the higher end), or 0.004 cents per second.

So, if you wanted a PoW system that would cost the spammer 1 cent, you'd need to come up with a computational task that takes about 250 seconds, or over 4 minutes, to solve. That kind of latency just isn't practical in real-world applications. And that ignores that 1 cent is probably a ridiculously low price for protecting anything valuable.

Of course, you may consider this as an alternative to regular CAPTCHA services. A quick search gives me that this costs something like $3 for 1000 CAPTCHAs solved, or 0.3 cents per CAPTCHA. This changes the above calculation to about 1 minute of compute, which still seems rather unacceptable considering that you might, e.g., drain your users' battery.

So, overall, while I'd like for something like this to work, it probably only acts as a deterrent against attackers not running a full browser and who also aren't targeting you in particular.
Same goes for AI...
Fun fact: if you have user accounts, the act of logging in is literally the act that consents to storing and handling PII (unless you're so bad at writing a signup agreement that you forgot to put that in there).

If you don't require users to be logged in to serve content, e.g. the overwhelming majority of web content, then a visitor's session id, by definition, cannot be linked to their personal information, because there is no personal information to link to.

However, if a session id is used to track "the same user across different websites", building up a behavioural profile, THAT would require explicit consent. But since cookies are per-domain, and browsers have severely locked down cross domain access, that's basically a non-existence concern (as both a blessing and a curse. The wild west web is long gone, for better and for worse).
> it's tough to hold onto it (as a human) when you're being threatened and/or injured/maimed/killed by robots.

It's tough to hold onto human dignity if you're dead or maimed because a car hit you. If we can reduce the number of people who are dead or maimed by cars by introducing self-driving ones, why would we not do that? Why is it better to live in a world where more people are dead or maimed and humans are driving than one in which fewer people are dead or maimed and cars are self-driving?

> the idea of yelling at a robot and having it ignore you is pretty fucked up

So what about the inattentive driver looking at their phone? You yell at them, they don't hear you because they're in a car and it's loud, and they hit you and severely injure you. Is that not fucked up?
Worse: by default it's not CPU but VCPU - a single core with multithreading = 2 VCPU
Given it's seeded with system time, depending on the resolution, that may in practice be as low as tens of thousands of possible values (as in time(2) )
As I feared, it is no use at all at this stage to claim anything about LK-99 as every synthesized LK-99 seems different each time. We have to have a thorough analysis on the sample directly provided by Lee and Kim.
Note that benefits will include insurance as well, so realistically base salary might be around $80-90k with the option of additional overtime, so not shabby by blue collar standards, but definetly not as comfy as similarly compensated desk jobs.