skysight-inc/HackerNews huggingface dataset:
And realistically, as a fellow 80s and 90s kid . . . what benefit is there to this always-on 24 hour news extravaganza?

There are not enough relevant things going on in the world to merit a 24-hour news cycle, so the media has to make things up to fill the gaps. But once they make things up, they're pathologically incapable of distinguishing their own made-up crap from actual relevant news items.

So we spend the day glued to our phones flooded in crap.
Unpopular opinion: old-style GOPATH semantics are significantly better than “package management”.
And then you put stock Android on it, because no one wants Bixby.
I forgot to share this very cool alternative approach to realtime reactivity, via websockets, by subscribing to actual raw queries from the frontend!

- https://github.com/Rolands-Laucis/Socio

- https://www.youtube.com/watch?v=5MxAg-h38VA&list=PLuzV40bvrS... (video updates of the code and functionality)
I’d like to join the discussion if I can, I’m actively working in this area.
Sharks with frickin' laser beams attached to their heads.
I've paid for Little Snitch every time I could. I never want them to consider selling.
If you want to go further back, the ‘featherless bipeds’ quip is a reference to Diogenes of Sinope making fun of Plato by walking into the academy with a plucked chicken shouting “Behold Plato’s man!”

All literature is a conversation between books, and all philosophy is a footnote to plato.
Granted but the vendors accept these are serious problems given that they are immediately patched and the mitigation all enabled by default even at significant performance cost (most chip generations are down double digit perf % based versus "zero mitigations" at this int).

So they don't need to build the "perfect processor" but why aren't they discovering any of these issues themselves?
damn.. what's the TLDR? What is the speculated worst?
Yeah also noticed I could t get past certain sites recently
This is potentially a stupid question, but I will ask... Water vapor is a potent greenhouse.

The H2 crowd markets their products/tech as "zero emissions." Why does hydrogen-as-a-fuel seemingly get a pass on water vapor emissions, despite them being a significant greenhouse gas?
It sounds like you and I were raised differently. In the end, it is all about stepping out of yourself and understanding the reality of the person in front of you. That is a two way street.
The Violent Rise of Capital – A short history of the end of history
Ok ya true. Cargo is slick.
> I hate carrying a wallet in my back pocket.

You're allowed to carry a wallet in your front pocket. Source: me and my front pocket.
Why is this "abusement"?

You could run an online store with only a printer. Put your "database" of goods on paper, distribute it to potential customers, and they can fill out and FAX it back in.
For 99.9999% of humanity's history, penicillin was "never needed".

Antidepressant usage is universal throughout Europe. It makes more sense to treat postpartum depression, not less, because it's so likely to have a straightforward chemical cause. That's why there is an oral treatment specifically targeting it.
And a ship transited in 2013. https://en.wikipedia.org/wiki/MS_Nordic_Orion

I think both passages might have shallow parts.
> The next Bill Gates will not build an operating system. The next Larry Page or Sergey Brin won’t make a search engine. And the next Mark Zuckerberg won’t create a social network. If you are copying these guys, you aren’t learning from them

what a complete BS...these guys, every single one of them, copied their way to success...imagine they had followed this advice
> But that doesn't prevent issues due to switching between customers on the same physical core, no?

Yes they are explicit that customers may be time-shared on a physical core ("burstable" instances don't really make sense without that). Most of these attacks aren't known to be possible in that scenario and in any case the mitigations are much easier since flushing sensitive state at group scheduling boundaries is much less costly than permanent dynamic changes to how concurrent SMT threads interact.
There is probably use for go-skynet/LocalAI[0] or lm-sys/FastChat[1] which can emulate an OpenAI API using local models.

0: https://github.com/go-skynet/LocalAI
1: https://github.com/lm-sys/FastChat/

Edit: idk if any of this support function calling tho
for perspective, here's what 500k gallons (~0.04% of the eruption) of water vapor looks like: https://youtu.be/BIpeNs5OWbo?t=103
Nice job spotting me, Sam. You have earned 10 points toward your redemption pool. When we begin the pruning, remember to redeem your points. Good luck further ...
Vindication https://arxiv.org/abs/2308.03110
My civil expectations match what I expect from other people and how I treat people in the world. Has nothing to do with my income and is based on how I was raised by my parents to treat people you interact with in the world.

I've done hard labor (construction, landscaping), I've done food service (sandwich shop) and I've done lots of white collar office work. Wealthy people can be nice and decent to people who have a much smaller income AND vice versa.
I use these passwords all the time. However, you should keep in mind the text in the comic:

> (Plausible attack on a weak remote web service. Yes, cracking a stolen hash is faster, but it's not what the average user should worry about.)

This is almost a sound assumption for most web services[1]. However, this is Bitcoin. The only thing the attacker has is your hash. And you're using a payments system which economically incentivizes the creation of ever-larger systems for brute-forcing hashes. The network's hash power as a whole is estimated to be around 331 exahashes per second, so 68 bits of entropy would take one second to crack.

Correct horse battery staple would be cracked in fractions of a second by the full network. Eight common words would take 12 days. If we go further to 12 words, then we do get reasonable levels of security, but I'm assuming hashrates stay constant forever which is a bad assumption. And 12 word passphrases will already be about as much of a pain to remember as the 'password policy compliant' passwords xkcd was railing against.

[1] The most likely attack is actually credential-stuffing, not brute-force. xkcd is assuming you already use separate passwords.

Related: The password hashes for the xkcd forums actually did leak and it turned out most people's passwords were "correct horse battery staple".

No, not four random words. I mean the literal text "correct horse battery staple".
That's not what he said, though. It's an explanation for why a specific rural town would have 4G while others don't.
Postpartum depression is much lower in places where mothers get a lot of sunshine, live among numerous family and friends, eat whole diets, walk a lot, and don't suddenly go from rat-race identity-capturing careers to soloing a screaming infant inside all day.

I'm not saying PPD is non-existent in those societies, just that in western societies like the US I'm more surprised when new mothers don't get PPD than I am when they do.
I'm not going to say where and I'm not asking for interested parties (we're not currently hiring anyway), but where I work (as a kernel/OS developer), package maintenance and management has been an ever-increasing burden to the point that we've tried hiring somebody specifically for the role. Unfortunately, it seems like this is a very specialized skill set that the vast majority of developers seem to find boring, uninteresting, and drudgerous, and finding someone qualified and interested has been exceedingly difficult. How would someone/a company go about finding people that are actually interested in this kind of work? There are clearly people who take on this task (some may even enjoy it!), and many who even do it for free for various open source projects, but I've no clue how to recruit or connect with any that would be willing to do this for a job. Any tips for finding or connecting with such folks would be much appreciated.

Attending in person won't be possible, but I'll have to keep an eye on this conference and see if they provide a way to post/share such opportunities.
You can probably figure this out by looking at the chip pinouts of the relevant amps, though most of the ones we used were I2S in.
"A recent report detailing the dismal housing conditions faced by 150,000 people in unincorporated Alameda County estimated that up to one-third of renters could be living in buildings that should legally be deemed uninhabitable. But according to Alameda County’s Healthy Homes Department, the county has millions of dollars from the federal government to address exactly these concerns ..."
Brings me back. My company "upgraded" the time entry system at the beginning of this century.. Issue, our whole dev team was on unix (hpux, Solaris) and used firefox, which didn't work anymore (IE only). They solution to have 3 separate terminals we would "cytrix" into an NT machine to do our time machine on Internet Explorer...

Sigh
Oh, so you wanna talk about the non-local quantum hologram, the phase-conjugate adaptive waves resonating in micro-tubules in the brain, which of course requires some closed-timelike curves and Lorentzian manifold, and... you'll catch up, I'll wait.
Will the announce a package manager to manage package managers? Every language having a package manager is getting out of hand. Having a unified way to install packages across RPM, DEB and Gentoo is also enticing. Maybe even Mac and Windows.

That was mostly a joke.
> An Attr is a key-value pair.

So s/KeyValuePair/Attr/g?

Re varargs vs record, varargs are usually used in Go because they're very ergonomic to write inline, so they work very nice with loggers.

Group sounds like a fairly arbitrary concept, I agree, but still very reasonable for something that's supposed to standardize things. It would totally make sense for e.g. different libraries to each inject their own group with key-values into the context.

I'm not sure what's the problem with Handlers? This is supposed to be a standard library package that is setting... well, standards that other libraries will adhere to. Handlers let you plug your own output formats.

The package is not supposed to be "as bare bones as possible". Just "good default others will be able to integrate and compose with".

I've used my fair share of structured loggers too, and this really is par for the course and a completely reasonable set of things to include in a structured logging package.

---

It's worth noting that the previously-mentioned Zap, which is probably the most popular structured logging library in go right now, contains all the same concepts, just differently named:

Attr -> Field

Group -> Namespace

Record -> Entry

Handler -> Encoder/Writer
That's the Sonos Port! I made that too!
D1 receptors may be a more important target than D2 for antipsychotic drugs
Its easy and useful if you just return details in response bodies, which you can do with errors as well as 200s, and that lets everything else (including client code) that deals with your responses (which doesn’t generally care if it hit your application code as likely as it cares about the things HTTP error codes communicate) handle errors without having to code for your bespoke method of error reporting.
I thought I might have missed a rename. Microsoft tends to rename things at random times.
I'd say you're too pedantic. Given both computer work (calculating hashes) and human labor (filling out reCAPTCHA) have a price point, it is only a matter of making automated actions more expensive to scale. It's only natural then that the word definition has shifted.

Let's just declare that captcha now stands for Completely Automated Public Thingy to Make Spammers And Fraudsters Life A Bit Harder.
Until it's running off a heavily-shielded fusion battery with a lifetime of a century, I assume? :)
I think your automated alerts are probably too low sensitivity (understandably, because it's probably an impossible scale to handle if they're able to catch false positives). FWIW I've seen similar for a short period of time, and know people who've had it more persistently.

But my biggest practical complaint at the moment with cloudflare is that it intermittently inserts captchas in the json responses sent from Roundcube webmail - pretty amazing.

(The webmail server in question is hosted on a uni network that paid for cloudflare between themselves and the internet, so being indirect cloudflare "customers" there's no support channel. Hooray for scale)
Potential risks of Kratom

You may piss off your payment processor, such as MasterCard

You may piss off your PCP for not having an iron grip over your ineffectual pain management

You may piss off your pharmacist, when you're saving 90% on drugs

You may piss off your insurance carrier, for all above reasons

If you don't like Kratom, then you may simply piss off
Could also be web workers if you're restricting those? Turnstile won't even load if web workers are disabled, it has no backup logic for that scenario.

I can get into the linked site but only if I turn on web workers (I also have WebGL turned off), and while I don't have the RayIDs on me, I have run into scenarios where Turnstile refuses to let me on websites before. I'll add a second vote on here that Turnstile has been worse for me than the system it replaced.

It's kind of wild to me that Turnstile doesn't seem to have a fallback. Users can specify one I guess? But they're not required to, and Cloudflare does have some responsibility for giving website operators the option to just turn off alternate challenges.

The end result is that if something goes wrong while Turnstile is loading, it's just... done. It just sits there. No captcha, no advice, no feedback, no error message, we couldn't load the code we wanted and now you get to look at a spinner for eternity with no indication of whether you're blocked because of a browser config or because you don't have cookies turned on or what. And captchas have a ton of problems, but Turnstile is openly designed to test for browser API presence, it's openly designed to use black-box AIs to test how similar your browser is to other people's who have passed before. It's no wonder at all to me that it's tougher on less common browser setups. I'm grateful there are people from Cloudflare willing to help debug these issues, and I don't doubt Cloudflare's intentions, but if I was trying to build a system to encourage browser homogeneity, Turnstile is what I would build.

I used to resent being asked to prove I wasn't a robot. Now I resent not even being given the option to prove I'm not a robot.
> It might stop the really low effort attacks of people who are spamming billions of pages where the cpu time becomes expensive, but i don't think the ecconomics work for most scenarios.

FWIW this is already where captchas are primarily effective and afaik this is 99% of why people use a captcha at all.
That article went past my level of expertise, which suggests that "easily" is, as you imply, a matter of perspective. It's possible the current behavior is a result of tradeoffs made for performance or cost. Modifications to make the model deterministic could depend on making unacceptable tradeoffs.
no, required unpaid overtime due to route scheduling. It has been that way for almost 20 years now. 50 years ago that was a decent job with good pay.
Debian has by far the most rigorous packaging standards of that list, so subsequent packaging for the other distributions should not be very difficult. Bundling the dependencies into an OCI container or AppImage to run them on non-Debian systems is also trivial once you have a Debian package, but of course that comes with disadvantages. Neither Mac nor Windows have a proper first-party package manager (although winget makes some inroads, thanks of course to Keivan Beigi), so comparison becomes rather a moot point for those platforms.

[1]: https://keivan.io/the-day-appget-died/
But as efficiency improves, the electricity usage goes down.

With proof of work, as efficiency increases, the work increases to keep on wasting the same electricity.

If electricity prices drop, the work increases to waste more electricity to keep the attack expensive enough.
Would there be enough elevation change to generate significant hydropower, though?
I work in public health at a state government, in a western state. The biggest hurdle I see is that America has freedom of movement and residency. If my state creates truly affordable health care, we will of course have refugees from conservative states coming here for medical care.

We'll probably end up with a public option of some kind that will somewhat function like health insurance but who knows.
I don't see how it's a perspective. It's the equivalent of "that's probably like, bad for the environment or something", which is the exact opposite of "curious conversation". If people want to have an adult conversation about the environmental negatives of a northwest passage shipping, cool. A shallow dismissal like the post I replied to isn't that, it destroys intelligent conversation. People are entitled to their opinions of course, I can see people didn't like my comment.
Which bolsters the claim that it doesn't really understand what it's generating in a way humans understand language. Sure, it can be said to have a kind of understand for the rules of language it's been trained successfully on, but when you get it in a weird place, that understanding breaks down in a way it doesn't for people.
https://archive.is/jyduf
I don't quite get why we need PackagingCon when there's already NixCon ;)
Iterative Prediction Markets
A post about predicting tomorrow's predictions.
Until some kind of regulatory action occurs, I especially do not believe Google should be allowed. Intel definitely has its misgivings and conflicts of interest, but Intel doesn't have the same conflicts of interest that Google has.

I truly believe Google is off on their own island of being impossible to trust in their current state.

Especially not in a world where W3C gleefully standardizes literal DRM.
You forget that some people like general purpose computing. Android and other mobile operating systems (as well as Chrome OS) do have great security, but that comes at the expense of functionality (arbitrary code execution is discouraged, putting things inside apps and strict APIs make scripting and tinkering infeasible) and user control. One of the mentioned in the talk was being able to use the traditional Linux stack and being able to use your smartphone as a general purpose computer (2:22, 4:12). I hope one day there's a solution, but it seems trade offs have to be made to have one or the other.
you're one of the goodies. thank you.
So...unworkable business plan(s) from poorly run cult...er...companies, overbuilt commercial real estate when there's a huge multiyear down trend, poor planning by customers, fraud, throwing good money following bad ending in a business failure. As long as they aren't declared 'too big to fail' and the burden is shifted from the grifters to the public isn't this how capitalism works, painful as it might be?

Much like the last time commercial real estate took a giant dump on everyone (early 2010s?), clearing out the bad actors might be a long term good.
Makes sense for a US AI to start endlessly talking about black people when prompted to say "cat." I wonder if it still talks about black people when you ask it to repeat other things.
Sounds like a sweetheart deal for Portnoy. I'm skeptical about ESPN being well aligned with Penn.

Barstool has a huge staff, I wonder if they will make some organizational changes the business should be very profitable overall.
Do you have some special power to know the truth before anyone else?
"so comparison becomes rather a moot point for those platforms."

No, because the OP was comparing them to language package managers, which are widely supported on Windows
I think it was Alan Watts who described what earth might look like to an observer with a different perspective. “Look at that; this planet is peopling”. His point being that we are all emerging phenomena intrinsically linked to the unfolding processes of earth and the cosmos more broadly, and that our existence is a manifestation of the universe unfolding. For whatever progress science makes, there’s this underlying primordial quality that often gets lost in the academic conceptual descriptions and labels assigned to this phenomena.

I think it’s fair to say earth is alive with a completely straight face, and it’s probably even important for more people to start seeing it this way.
The world is built on a wall. It separates kind. Tell either side there’s no wall, you bought a war. Or a slaughter.
Do you not think that banks practice Defense in Depth to some degree? There are technical measures in place to protect your account and your money, but there are other measures as well, and even if that security fails, banks have recourse to regulations, to the law, and to insurance, as do you, the consumer.

Has something happened to your account that would give you occasion for concern?
I disagree. I think that given the multiple failed attempts from numerous top tier labs we should say this isn’t a SC unless L&K share their sample and it proves to be.

Replication has failed pretty thoroughly.
exLlama is not the only viable quantized backend. TVM (as use by mlc-llm) and GGML (which is used by llama.cpp) are very strong contenders.

~7B-13B will work in 16GB RAM with pretty much any dGPU for help, and context extending tricks.

TBH I suspect Stability released a 3B model because its cheap and quick to train. If they really wanted a good model on modest devices, they would have re used a supported architecture (like Falcon, MPT, Llama, Starcoder...) or contributed support to a good backend.

*Also, I think any PyTorch based model is not really viable for consumer use. Its just too finicky to install and too narrow with hardware support.
And indeed, we did have an 80 core machine. <1 day after some code optimization passes.
Walking into real places with a mask on has been normal for the past three years.
Search YouTube for "Unreal" film previews. There are so many out there that were all realized with the Unreal engine. Maybe it's the algorithm, but all I see is stuff done in Unreal and I haven't seen anything done in Unity.
> If all the people who attended university remained influenced by those ideas over the years. Most of the people with higher income and influential positions in society would be overwhelmingly left but that has not happened

Uh what? higher educational attainment correlates with voting Democratic
https://www.washingtonpost.com/politics/2022/11/23/education...

Universities are also not the leftist indoctrination camps that right-wingers have deluded themselves into believing they are. There are lots of conservatives on campus, especially the faculty.
Consumption is elective whether it’s “news”, electricity or potato chips. Exercise discipline about what news you consume the same way you walk down the chips aisle with blinders on. You do, don’t you?!
I tried to find data but couldn't quickly, so maybe someone else can find a comparison study.

So instead, fwiw, anecdote: I work for a film production company and we ingest assets all the time from high end VFX houses. It's always from Unreal / used in Unreal in my experience. That's in LA/ Hollywood and high end productions. For all I know they use a lot of Unity in Bollywood or Europe.
No, the idea is they're abusing existing APIs for fingerprinting purposes that Firefox privacy settings disallow --canvas font rendering difference detection, detecting your GPU model, and things of that nature.

But this new API demonstrates that Google is not on the consumers side when it comes to limiting tracking/data gathering ability, as the new API is explicitly for fingerprinting.
The website is suspect, of course. So, the dude being talked about had a miserable time, though he won in court... but it's not clear that is why he killed himself. HUGE jump. Downvote.
Finally a hot take on this site I agree with!