skysight-inc/HackerNews huggingface dataset:
For anyone else following along, all of the above is factually wrong.

Emtricitabine/tenofovir is used to treat and prevent HIV infections, and is on WHO's list of essential medicines. Literally millions of people are using it to control their HIV infections and prevent it from developing into AIDS. It can be bought on online pharmacies for $15 per month, so it's not exactly a trillion dollar drug.

It's 100% certain that HIV causes AIDS. This is uncontroversial. It's true that scientists continue to learn more about how it infects humans and causes disease. This is why treatments are so much more effective than they use to be.

There are 2 other known human disease causing retroviruses, HTLV-I and HTLV-II: https://www.health.state.mn.us/diseases/retrovirus/index.htm....

The person is quoting conspiracy theory talking points that are known, provably, untrue.
When there are so many awesome FOSS vector databases available, I wonder what motivated the airbyte team to use Pinecone, the one database that is anti-FOSS?
The cell service isn't especially great everywhere in the Bay Area either (or even 'Silicon Valley' for that matter)
this is art !
Firefox entered into a contract per-install with Google that did no evil while Google iirc was building their own browser secretly.

Browser engines are now open source a lot more than they were.

I don’t think it’s about illusion of choice as much as some browsers actively working to degooglify themselves from Chromium and maintain it.

Some browsers are maintaining their own forks, others aren’t.
had to stop reading when the first suggestion was "steps and slides" and the picture showed a slide apparently made out of rough concrete.
Cuil! Wow, now that's a blast from the past. lol
If debugging is what we call it when fixing things, does that mean we're "bugging" when we make it?
I use NordVPN (and their client software), and I don't see any such option. I'd be pretty furious if that were happening. I have not seen evidence of it... apart from some small requests to a few of their own weirdly-named domains (which I assume are to sync their proxy list), it doesn't look like there's any traffic going from my box to anything other than whichever of their servers I'm tunneling to.
Even LLMs have bugs.
Whilst I agree with some of your post I think the following is incorrect.

> and some of that is cutting-edge gear (such as the Storm Shadow missile).

Storm shadow is 20 years old from first deployment and 29 years since development started. Its replacement is being actively developed since 2017, it’s hardly “cutting edge”.

It’s just new enough that the Russians have trouble countering it.
Same reason pizza delivery (a fairly dangerous job, more likely to die on the job than a cop) makes less - It’s not as hard to train and retain armored car drivers. Armored cars make routine deliveries of exactly one product to a fixed number of regular commercial clients. General package delivery is pretty much the opposite of all of that.
How have you tried to experience AI so far?

I mean, for one, you can start by using a Github Copilot or another code completion/code chat tool like Replit's Ghostwriter, Sourcegraph Cody, Amazon's CodeWhisper, using ChatGPT directly, etc.

You can use a LLM to ingest documentation and help you understand it more.

You can use an LLM to ingest a codebase and help you scaffold documentation.

You could use something like Perplexity.ai's LLM powered search or Phind's developer focused search to help.

You could use an LLM like ChatGPT to help you reason through a logic issue.
From their conclusion:

> By examining 300 billion candidate passwords, we found 884 brain wallets that were active at some point in time. Unfortunately, we also found that nearly all were drained – usually quickly. While our findings are necessarily incomplete, they certainly suggest that brain wallets are not a secure method for using bitcoin. Perhaps the most surprising result of our analysis is the relative scarcity of brain wallets in use today. This is actually quite encouraging, because it means that fewer users are at risk to these attacks than has previously been supposed.

I don’t think that logic holds up.

It’s pretty much an entire paper of FUD.

And no, anyone with 400,000 ETH who claims they used a brain wallet, and oppsie .. someone stole it. Is having a boating accident, if you know what I mean.
Eric Yuan is just a douchey person.
Show HN: Try challenging GPT-4 simulations like an FBI Hostage Negotiation
When my co-founder and I were taking negotiation classes, we realized that the fun in negotiation cases had not been brought online.

After building negotiation simulations that attracted 4000+ users, we realized that there was an opportunity to branch out from negotiations and create AI simulations for anyone to work on their soft skills.

We used GPT-4 to create simulations ranging from intense FBI Hostage situations to challenging job negotiations to the hardest task in the world: arguing against a Karen!

Let us know what you think!
>Lumping everything into one pile is dramatic.

In the end there's a net result. Doesn't matter if it "put out a good backup app", if they also got to own the web or build Skynet.
I'm gonna get put on a list for typing this out but I'll clarify:

1. Bad guy creates cloud account and spawns 10 of the cheapest VMs across different data centers, let's say this costs a total of, what... $50 a month?

2. Bad guy reads this paper, and makes a program that frequently samples SIMD registers. Contents get dumped to stdout and then streamed over an encrypted line to a RAID array hosted in $COUNTRY_WITHOUT_US_EXTRADITION.

3. Bad guy writes program to sift through data dumps on RAID array for passwords, encryption keys, etc.

If you create a cloud instance right now that has an SSH login on port 22, you stream the SSH login logs and see a steady stream of attempted logins to your device. While the marginal cost of brute forcing SSH logins is free (no cloud VM needed) and my proposed scenario isn't, I think this is a very real scenario that needs monitoring.
If your captcha takes 20 minutes to complete, your users will leave.
Agree, as long as you can afford to eat and live, anything else is just pure human greed.
PayPal is a closed ecosystem that doesn’t support smart contracts or any other form of arbitrary code execution. If your point is that traditional finance uses code, sure, but that disguises the real differences between those systems and web3.
Whoever told you you need special powers to sometimes correctly evaluate things before most of the internet catches up has a unique definition of "special powers."
USB-C Confirmed for the iPhone 15
You see this type of stuff enough it’s all the same.

People are what drive the hype and what motivates people to lie, cheat, etc is the same no matter where you go or what year it is.

Or maybe it’s because I’ve been burned enough times by hype cycles and magical thinking in my youth I have developed some skill for this. You gotta get burned a few times to understand.

of course you need to be careful. Check yourself. I’m not some perma-skeptic or contrarian. But if it quacks like a duck…
>The issue is that no, it doesnt exhibit emergent basic signs of gi

That's up to heated debate by experts (and common folk). Just stating that "it doesn't" doesn't settle this.
oh my goodness. That is beautiful - an amazing design for a first hardware project and I would love to see it come to fruition. No experience from my end that would assist, but all the best.
This article is written by an ideologue and doesn't even make an attempt to speak to those outside their reality bubble.

> Never in U.S. history have the Department of Justice and sympathetic state and local prosecutors indicted a leading opposition candidate and likely nominee of one of the two major parties, and at the beginning of a presidential campaign.

Eugh, completely unconvincing. Never in US history has a former POTUS attempted to thwart succession of the presidency, not to mention the keeping of classified documents after leaving office and bragging about it. Trying to frame this as purely a political game isn't going to work on anyone actually paying attention (read the indictment[0] and tell me that it's all just posturing/political blustering)

> The media routinely accuses conservative justices of improper or illegal behavior, without worry about the emptiness of the charges.

Cool, let's just completely memory-hole Clarence Thomas's totally not suspicious gifts[1] from rich people. This author loses absolutely all credibility here. The mask of an ideologue slips off real quick.

[0]: https://www.justice.gov/storage/US_v_Trump_23_cr_257.pdf

[1]: https://www.propublica.org/article/clarence-thomas-scotus-un...
> These tools are all annoying AF. Developers don't need half-baked hints to write basic statements and regular people don't have the skills to hobble together whatever permutations these things spit out. Which rather begs the question: who the hell is the audience for this?

On the contrary: developers are exactly the people capable of handling those complex requirements you speak of. As a developer, getting a computer to handle basic statements is great and frees you to handle the big stuff.

Being able to write “// Retrieves second value from path” and have the computer spit out some string parsing method is great. All those little helper methods that showily fill up projects are great candidates for an AI. Especially if it helps you break up code into smaller, more composable (and disposable) chunks. If an AI writes the code, and can easily do it again, maybe people would be more willing to delete stuff that isn’t needed.
It most certainly does, and I didn't mean to detract from it.
And yet they seem to still not have released the fix...

Edit: they released the fix today, I was mislead by the current tense "is releasing" in the OP.
Not quite: both vendoring and the 'replace' directive in go.mod files (which I presume is the mechanism for renaming dependencies you are referring to) both require modifying the root package.

With GOPATH, I can package a single library and use that package to fulfil the dependency on the library of any other Go application offline. Conversely, with the vendoring mechanism, the Go tooling will need to download (or copy from cache) the library when you originally create the vendor directory or when you add a new dependency to the root project.
What is this comment down voted? I think that the post makes a valid point. Not speaking about France, but I am always stunned when people think that they can make obviously Islamophobic comments in front of me. I always try to push back, but they regularly push back harder. I'm tired of it. It is bizarre, anti-social behaviour in 2023. I guess that during the 1930s in some of parts of Europe were similar for Jews/Romani. "Normal" daily discrimination was a way of life.

To be fair, the social and economic divisions between white French natives and immigrants is large. There is a excellent article in Financial Times about it: <<French riots show how entrenched inequalities have become / The gulf between immigrants and those born in the country is larger than in almost any other developed nation>>: https://www.ft.com/content/25eda9f0-8bd3-41e1-948c-89cc7c0ec...

The solution is to keep talking about it, and continue studying the issue.
> Makes me wonder how we all lived before Smartwatches.

I remember they had books, back then. And you could look out the window (:

Actually, I don't have a smartwatch and don't want one. I guess I'm at a phase in my life where I'm looking for less attention-grabbers, not more.

I've always found a blank piece of paper and a pen were a good way to fill an hour, too.
It seems to me like most don't have a fundamental gut feel for what speculative execution actually is and the implications of "not getting it". At some level we need to fight for performance. My operating systems are only getting slower and shittier. I cannot fathom my CPUs going backwards too. Security must take a back seat at some point. You can't put bubble wrap and warning labels over everything or it becomes useless. The most dangerous tools are typically the most effective.

The CPUs are vulnerable because of the exact way in which they are being applied to a problem. Speculative execution is not inherently unsafe. Whatever future predicted memory prefetching shenanigans are going on in my CPU over here have absolutely ZERO impact on your CPU over there. Certainly someone could figure out a protocol/system/architecture that capitalizes on this notion that "2 different CPUs are indeed different CPUs".

One can see how any perspective here still causes trouble for Amazon, Microsoft, et. al., but that was a business risk they signed up for the moment they intended to squeeze every last drop of subscriber revenue out of the hardware. Why should everyone else on earth have to suffer crappier performance by default because of the business/software practices of a select few?
Meta is a near monopoly in the market they are in. There are no competitors that are a reasonable substitution for their product.
> https://blog.ledger.com/Funds-of-every-wallet-created-with-t...

This "Milk Sad" was apparently discovered by the guys at Ledger (they make a hardware wallet but which can also be used as a U2F device for, say, SSH logins).

These guys are good. Their CTO (or ex-CTO ?) was part of the original FIDO alliance that came up with the U2F spec.
That seems like an excessive amount of power. Does the running program/OS just have zero power saving consideration given?
Some spam is really low effort. Even a non obfuscated text image (e.g. something that can be read by teseract out of the box) still stops a surprising amount of spammers.
But it doesn't catch fraudsters!

Point fo captcha is to make sure that there is a human eg. writing this comment or creating account.

If I used this (admitedly cool and useful) rate limiter instead of real captcha I would have 1000s of ai generated posts and 100s of new accounts. Yes, it would be rate limited and spread over a day or week, and servers would easly handle it, but that's not the point. I don't want this fake activity at all - that's the point!

This seems like a good alternative/addition to cloudflare and their anti ddos features though (?)
You mean time is the only source of entropy there? I don't think number of bits would even matter for it to be bad in such case.
Yep, Ben 'Cash Cab' Bailey, with character actor Tom Noonan: https://www.imdb.com/title/tt0479764/
`[ 0.000000] microcode: updated early: 0x27 -> 0x28, date = 2019-11-12`

I'm on haswell. Is there a list of what CPUs get updated microcode? Sad.
Ship something reasonably priced with 32gb+ and I'd be interested!
I don't see it. We know people in the past were much more willing to suffer quietly, if not required to do so. And we know the damage that causes down the line. What I see is another in the endless examples of society finally letting people out of the hype-narrow boxes of acceptable behaviour and experiences and listening to what they have to say as who they are, not what cruel and ancient conventions demand they should be.
Fender 1957 Deluxe tube amp clone. Built the box, soldered the components (from a kit and a diagram), then upholstered it with tweed. Super fun and satisfying project, looks like a new (old) amp you’d buy at a store.
Huh, neat. I think the last time I checked the coverage extent didn't go terribly far north of the US/Canada border.
What's interesting is that the FDIV bug from 1994 could also be worked around, but Intel recalled and wrote off those processors[1]. For their latest several problems, their response was more of a "sucks to be you". While they provided microcode updates and worked with OS vendors, there were performance impacts that materially affected the value of the chips.

1. https://www.intel.com/content/www/us/en/history/history-1994...
This isn’t true - note how similar vulnerabilities have occurred on ARM, POWER, etc. – and even if you weren’t wrong, it would be off-topic for this thread since you’re not giving anyone useful information.
Can we look at our own past?
Hi!
I don’t have specific skills in Astrology but I wanted to put an idea out there anyway.
I start with something we often hear when we hear about the James Webb Telescope: we look into the past.

My question would be: can we look at a mirror-like entity far deep in space in order to be able to get a picture of Earth but as it was millions years ago?
Even if it’s only about its composition or its position in the universe that would be surely interesting.
I believe that is more related to how the default Huggingface inference UI is prompting. Running locally with the correct prompt template it gives default completes, eg

```
def square(x):
return x*x
```
No QA is able to find out a Spectre vulnerability. QA is irrelevant in this conversation.
Best hacker news comment of 2023 right here.
I'm curious: did you have ChatGPT lightly edit this comment before posting? A few things about the style (like the final sentence) sound similar to GPT-4 output.
You can perform the tricks yourself.

https://chat.openai.com/share/1d3fa32a-ab41-4747-b09e-543668...

Skepticism is one thing, jumping straight to "they're all screenshots, they're all fake" is another.
"No, the real problem is that managers don't know how to manage remote employees."

Nailed it. Remote work works. The issue is the managers not being interested in altering their practices.

I don't care about middle managers not being willing to change and I most certainly do not have any worry about if someone lost everything on their commercial real estate.
Or more likely they could have sent me a message and still received their update within the hour, all without interrupting me.

If you don't have anything else you could be doing for that whole hour you probably aren't that busy anyway, in which case waiting won't hurt you too much.
Not at all, I could not imagine being in their position. Literally sacrificing a decade of your life and nearly $100k to do things the right way - only to be told by "morally superior" lefties that you need to let someone in from latin america or africa because "they deserve it" when migrants also add zero value to the economy other than a small percentage that choose to work.
The browser might be OK. The rest of the OS is absolute hell. Missed opportunity.
The Arc cards are pretty good for DX12/Vulkan games, but pretty bad at DX9/11 games.

Luckily, the most popular Linux translation layers translate DX9/11 games into Vulkan. In fact, Intel is using such a translation layer on Windows and has significantly improved its performance that way.

Going by these graphs: https://www.phoronix.com/review/intel-arc-10p-faster/2 Cyberpunk plays quite well. Double digit percentage gains are reported every few months or so as the driver keeps developing.

The biggest issue still standing seems to be the lack of sparse resources support, but the Intel driver seems to be faking support to prevent games that don't actually use it from crashing in an upcoming update, fixing games like Elden Ring.

I think it's not a bad choice for an affordable Linux gaming rig depending on the games you play. Perhaps it's better to wait for Battlemage first, though. There's still a lot of tooling centered around AMD and Nvidia cards and the Intel drivers still aren't where they need to be if you need to play certain games.
Don’t ship oil through it then, ship food and consumer goods. Demand for oil is going to drop a lot in 20 years anyway.
FYI, unless they fix their tax system, they are currently headed towards a (last I checked) 30+ billion dollar deficit this year.
They also recently raised taxes on income over (I think) $1 million again last year, and I believe plan to continue to do so.

Also for a more up to date perspective on migration and money:
https://calmatters.org/commentary/2022/08/california-is-leak...

https://www.sfchronicle.com/sf/article/San-Francisco-migrati...

Regardless, this still supports my point that state level healthcare while far more durable than local gov, still can’t compare to national level stability.
if it's for some kind of internal systems or shippable hardware/appliances, best approach is to rethink approach to packaging
Remember, you're breaking debugging tools like Fiddler when you do this...

...And, whoever inherits your code probably won't like working with it. Doing weirdo things like that can hurt your reputation in a team.
Competitive industries with relatively low levels of government intervention deliver the most value to consumers and are best able to adapt in times of crisis.

And just a few paragraphs previously they quickly whisked by the US$700 million government bailout they got just last year that Yellow apparently pissed away. I mean, I'm as much of a capitalist as the next entrepreneur, but even I can't keep a straight face reading tripe like this.
> How often do people need to do that;

Surprisingly, this happens. I recently started to use a lot of emojis, including ones like these, to name calendar events - because I use a watch face on my smartwatch that renders the next 12 hours worth of events on the clock face, and given the small space, many of the events can fit three or four letters of description. Emojis work as great workaround, because I can encode things like "takeoff, gate A11" in 4 visual characters, or "doctor's visit" in one.

(I prefix the event titles with emojis rather than replace the longer form completely, because some of those events are shared, and sometimes I forget what an emoji stands for anyway...)

Now, this is perhaps an unique use case, but I found myself doing this in other scenarios too, like task planners - the common thread is, "not enough space to fit full label".
OP said nothing of the sort. They clearly described a dysfunction in the surrounding support structure, not the mother herself.
IDK. Nothing is forever, but I fear that we will be in a "post-facts" era for the forseeable future.
The website owner can disable cloudflare their checks and that will leave their site unprotected. The choice of that is up to the website owner, no?

Yeah but what sort of transparency does Cloudflare offer website owners about what kind of traffic was blocked and *why*?
is this a carrier limitation? IIRC there used to be something about verizon requiring a 3G authentication step to connect to their 4G network
Ziva has runtimes in Unity and Unreal Engine.
The spiciest bit:

> During our accelerated coordinated disclosure to the Libbitcoin team, the Libbitcoin team quickly disputed the relevancy of our findings and the CVE assignment. By our understanding, they consider bx seed a command that should never be used productively by any bx user since it is sufficiently documented as unsuited for safe wallet generation.

> We do not agree with this assessment.

https://milksad.info/disclosure.html#libbitcoin-vendor-respo...
Curious how much overlap there is with the book "Say Goodnight to Insomnia"? [0]

At a glance it seems quite similar, so I'd love to understand how the app is better than e.g. downloading a cheaper "wellness" app (with meditations, calming music, relaxation techniques, etc) + going through the exercises in the book [0]?

[0] https://www.amazon.com/Say-Good-Night-Insomnia-Drug-Free/dp/...
7f3bfdf6bee5b9ea

here is one. I'm not on my PC so i used a privacy enchanted fork of Mobile Chrome. Enabled WebGL, WebRTC and WASM. Disabled all the fingerprint resistant features i could easily (the only thing messing with your systems could be the HTTP Referrer or Timezone)

Perhaps its a DNS-level issue? Does cloudflare use any google related APIs to provide the integrity check?
I also forgot to mention that it's quite ugly and looks very cheap. I personally wouldn't wear it even if it did have good battery life.

Got a galaxy 5 watch a few months ago, which was a much better purchase.
I use them both at the same time for most GUI apps. I have noticed that --zap tends to leave a lot of remnants still that AppCleaner sometimes picks up.
This is the most CCP comment I’ve read in years. Okay, Xi