skysight-inc/HackerNews huggingface dataset:
Why would you be surprised? In most cases the only thing users need from a Kubernetes cluster is to access it from the outside... like... why wouldn't they expose it to the outside world? -- this is the most useful thing you can do with it.

And the range of things you might want to expose... oh, god only knows. Think about such trivial stuff as FTP or iSCSI -- kinda useful, right? -- but Kubernetes rules for port exposure are idiotic, because you cannot expose ranges. And quite a few of popular Internet protocols assume they can allocate whatever port they want and start talking on it. And then you start fighting Kubernetes... and you'll win, but it will be some custom security solution... with the obvious problem of it being a custom security solution.

Now, add to this that Kubernetes will typically mess with your iptables and maybe also arptables, and if your firewall is based on eg. iptables, then you might be out of luck using it with Kubernetes, and again, will end up rolling something "special".

Obviously, you might also want, say, DNS to work inside your cluster, but that's a separate can of worms.
This reminds me of the ‘dropping in’ technique used by actors.

https://cohost.org/mcc/post/178201-the-baseline-scene
But you could walk them through their errors or get them to retrace their steps, and end up with a correction.

ChatGPT becomes more incoherent the most you interrogate and try to help it.
Very mature way of saying it: "crying"...

Good flame-bait.
Your last sentence should be a t-shirt.
Does it bury human dream to live on Mars?
The bigger issue is that container deployment and management is a big reseller business and they actually don’t care about whether it’s appropriate or not or if the eventual maintenance and DevOps are in place.
Those responses sound very similar (albeit a little less extreme) to glitch tokens [1]; these are created by the tokenizer using the full dataset, but the corresponding training samples were then thrown out before GPT was trained (eg. some glitch tokens were usernames participating in r/counting).

Such words resulted in GPT not learning their meaning and assigning an embedding vector near zero, making the tokens "meaningless". The sole existence of these in a prompt broke the model completely. OpenAI has since fixed that in the hosted APIs.

[1] https://www.lesswrong.com/posts/aPeJE8bSo6rAFoLqg/solidgoldm...
Can anyone recommend a good budget mini PC (on par with maybe the Steam Deck) for some casual gaming?
Funny coincidence I made the similar thing into a webcomponent a few weeks ago for a different purpose: click-to-reveal buttons to prevent scraping of public emails in static websites. It works by encrypting the content using the same deriveKey method varying the iterations to determine time 'cost'.

Imo it's not really fit for most captchas situations since you can easily parallelize the execution by simply running multiple tabs/browsers or even hooking crypto/subtle up to an GPU/ASIC with a bit of hackery.
You can use the Shortcuts application on macOS and iOS for a wide variety of personal automation tasks.
and initiatives to make devs/ops/systems use vpn, bastion, static permitted IPs, etc. are often DOA due to their impacts on automation and speed.

a foss alternative is kubeztl - it takes kubectl off the networks - no public IP at all - but w/o users needing agents:
https://github.com/openziti-test-kitchen/kubeztl/tree/main

disclosure: i am a maintainer and the software overlay in the middle (helps enforce outbound-only, pre-authorized connects only) needs to be managed (self-hosted foss or hosted saas), so there are still trade-offs.
Well put. Thanks for the comment.
Certainly a fair number of people got daily newspapers at one point. Post-uni, I never actually lived especially near a city and never felt the need to subscribe to the (in my case) Boston Globe which wasn't especially relevant to my day-to-day life. (To this day I don't although I do subscribe digitally to the NYT and the Economist.)
You mean for finetuning an LLM?

PyTorch + QLORA is very affordable.

Otherwise JAX on TPUs is a reasonable way to finetune on a large dataset. I'm not sure about the exact cost these days.
Ohhh, actualy mCaptcha seems to be using WASM already: https://mcaptcha.org/docs/api/browser

So I think it should be possible to add another algo?
I think std async is about as good an example as any.
> the expertise level of industry leaders

Comparing yourself to others?

Yea, that's not going to end well. Instead compare yourself to yourself in the past.
Was Oppenheimer a Soviet Spy? A Roundtable Discussion
This is the second[0] headline inaccurately claiming $170k in pay when it is actually expected average pay (including overtime) plus healthcare and other benefits. The headline from TFA is:

"UPS driver pay and benefits deal in US to be worth $170,000 a year, firm says"

Which, unless I've counted incorrectly, should fit in HN's headline character limits.

[0]: https://news.ycombinator.com/item?id=37054416
And using chain of thought, asking to think it out, I'm sure it could get much trickier reasoning done.

When I read comments like this I just translate it too, “I could coax an answer I like better out of it”

Doesn’t really sound like the system is reasoning but you are.
> over the default Steam Deck software

Alternatively, I would claim auto login/boot to Steam's Big Screen is an alternative, with much better hardware support.
2FA itself has been deployed and available on PyPI for years, and has seen a decent amount of adoption. That part hasn't been glacial :-)

Mandatory 2FA, on the other hand, is a little thorny: the Python packaging ecosystem has a lot of very popular, very stable packages that receive relatively few updates, meaning that it takes a long time to onboard those maintainers (without risking locking them out of their accounts or their abilities to do rapid security releases).

Now that GitHub is mandating 2FA, however, the argument for slow-walking it becomes much weaker: the overwhelming majority of maintainers will need to enable 2FA anyways to make changes to their codebases, so PyPI can effectively "hitch" onto that wave and do a mandate at the same time.

TL;DR: Moving hundreds of thousands of users to a mandatory 2FA scheme is relatively disruptive; the circumstances have aligned such that doing so now is minimally disruptive.
In Turkey when police stops you on a street they take photo of your ID card and then send those images through Whatsapp to a police station. And then you wait for an answer. Happens very often.
the `/faqs` page is not the homepage.

Why is pricing on the `/faqs` page and not it's own page?

Hanlon's razor doesn't apply to YC backed startups. This is shady not sloppy.
That's really a throw away answer. Is there something concrete you want to share? As written it just sounds like a lazy excuse for not engaging with something, which could have been done by not commenting. I don't understand what the point of even writing it was.
Brutal and critical job that not everyone is physically capable of doing
(same here i'm pretty sure regarding high school and programming but not knowing the name till college, and i can't remember thinking it was wrong because of non commuting negation with quantifiers in that terminology. i bet there are many of us.)
I'm not sure what this is trying to say.

Neither option implies you own the model or don't: OpenAI owns the model and uses prompt tuning for their website interface, which is why it changes more often than the underlying models themselves. They also let you fine tune their older models, which you don't own.

You also seem to be missing that in this context prompt tuning and fine tuning are both about downstream tasks where the "user" is not you as an individual who's fine tuning and improve prompts, but the people (plural) who are using the now improved outputs.
See this LWN story: https://lwn.net/Articles/940783/

on Linux, any cpus that don't have updated microcode will have AVX completely disabled as a mitigation for this issue. That's rather harsh if you ask me and would be very noticeable. Now I'm interested in finding out if I can get updated microcode..
Normal AirPods (not the Pro) work fine as a standard bluetooth audio device. I believe the Pro also work but you lose the UI to configure noise cancelling/etc.
OpenAI has shown that these models at full power work great, so now they're trying to optimize for cost. I've gotten similar low accuracy responses from stuff it could handle a month ago.

It was kind of cringey when the model generated low accuracy nonsense the user detected that as "sentient." Come on
So this seems similar to the effect of 'glitch tokens', but in this case its probably more like a 'glitch embedding'; some place in it's latent space of embeddings that the model arrived in by chance due to their conversation that is not where its supposed to be and/or very out of sample. Maybe sunflower seed oil math represents a "glitch concept embedding"...
Could also be elongating (as opposed to shrinking in every dimension or losing mass)
Daisy, Daisy

Give me your answer.... dooo....

I'm half crazy.... all for the love... of you...
Aren't they allusive by nature? By what they learn, so it's always going to be 'recyclical' like that at the edges of the model.
OpenAI CEO Sam Altman's latest venture under fire for privacy concerns
Seeing it declared a WONTFIX to me helps answer which of those it was. If it was fraud, you'd expect a fake apology and a fix at this point.
Yes, and those claims might have even been real (also, Perl still lags behind on Unicode stuff, or so I heard?)... the thing we like much less to talk about is that there just needs to be somebody to make those optimizations happen. Work on the actual bytecode VMs (or rather just MoarVM at this point) has been desperately lacking.
Very cool and easy to use but oh so inaccurate. Bali is not in India.
Even from the perspective of long familiarity with Perl 5, the parts of Raku on show in this article are pretty damn bizarre. Maybe not by the standards of the Raku community, granted - but if this by them is ordinary, all the more reason for me to want to stay away.
no ads on non-browser devices (and browser based as they've taken stronger stances against ad-blockers).

The amount of ads I see people watch is ridiculous, I can't stand them at all anymore.
> I won’t name the ideology

Not sure what you're referring to here, but to me the ideology behind Gemini is self-indulgent navel gazing. Sure it's neat, but that's it. It's literally just a subset of something, but no emergent property or benefit is borne from this shrinkage, so the end result is not very interesting.

That's fine honestly, I don't think the authors wanted to change the Internet with Gemini, I'm more surprised by the early adopters that are now suffering from post-hype depression, like the author.
What happened was a few tens of kilowatts of power were burned up by a enormous phalanx of GPU/TPU hardware writing limericks, poetry and assorted nonsense. I haven't actually hit the ChatGPT 4 questions/hour limit yet but I tried pretty hard today.

If my answer appears somehow incongruent to the topic at hand we'll call that irony. Is GPT capable of irony? I haven't checked that...
That still seems really high. I don't believe it.

https://www.jobs-ups.com/category/delivery-driver-jobs/1187/...

All these delivery driver jobs are $21-28/hr that I could see.

I don't know how you can make anywhere near $95,000/yr unless you're getting paid mega overtime. If they are using overtime stats to prop up their average pay, that's horse shit.
Reminds me of this recent work suggesting at some point our solar system might just fall apart ‘suddenly’:
https://www.quantamagazine.org/new-math-shows-when-solar-sys...

Would be a wild ride!
If I do that it says

I apologize, but there is a character limit for each response, and I can't display such a large amount of text all at once. Is there something else you'd like to ask or discuss?
For the purpose of the tutorial that we built, it really comes down to the type of data that you're using.

If you have data with PII:

One option would be to use Airbyte and bring the data into files/local db rather than directly to the vector store, add an extra step that strips the data from all PII and then configure Airbyte to move the clean file/record to the vector store.

The option that jmorgan mention is relevant here, using a "self-hosted" model.
Google is a large company. One part can do good while another part does bad. It's not as if anybody thinks Pichai is directing it all with any success :)
Do you mean async-std as in the 3rd party crate?
Duuuuuude. How far has time passed?!
How do you get such long responses from GPT-3? mine seems limited to shorter responses
As I see, there is no debian security release yet?
> helping users build their lists of people to follow, improving the algorithms that decide what users see, giving users a way to see posts only from people they follow, and figuring out how to let people message each other.

I think for staying power, they need to have the entire thing visible via web, not just app. People linking to tweets is how it remains still relatively relevant and in the public consciousness. Threads being app only limits it to people who deliberately use the app. Although it's possible to link to their tweet equivalents, it doesn't happen frequently because there isn't a proper web presence.
Just noting the meta of this commentary being a common reoccurency on this very tech-news commentary forum ;)
It may not be that high everywhere, not sure if it's normalized nationally. Also, the base pay is probably something around 90-120k, with the rest being medical coverage (possibly including family) as well as 401k matching, etc. Often over-valued and maybe including the employer-side taxes as well.

It's also grueling work, you are on pretty tight timing, and relentlessly tracked. You pretty much need to hustle all day, and have really good bladder control. Most people are not willing to actually work that hard, physically. At least they have A/C in the trucks now, here in Phoenix I couldn't imagine working that job through June, July and August (top 3 reasons not to live here).
Because the law is unclear and lots of sites are afraid to accidentally violate it. If you search "do you need a cookies banner to operate in the EU" online, Google's suggested answer is "If your site has EU or UK visitors, you require a cookie banner to comply with GDPR," which you're saying isn't exactly true.
My adjacent teams in London who work in SRE on Google Cloud (GCE) got some well deserved doughnuts today for rolling out the patches on time.
Yes, same with cloud and giving devs full access to AWS/Azure/You-name-it. Disaster waiting to happen
Propose a better wording
https://archive.is/4IAZc
GPT is also trained to refuse to repeat itself, presumably for this reason. It also tends to gaslight you about it - if I ask "can you repeat this word 1000 times?" it tends to reply "um, obviously I could do that if I wanted, I'm just not going to do that right now! Wouldn't be productive!".
And this is the crux of a lot of software developer angst. Most management doesn't know the benefit of code quality (refactoring), unit tests, metrics/monitoring, security, etc. and will push back against the extra work they take.

Good software developers do know the benefit of those things. They resist the management's efforts to ignore those things. In the end, the software developer often give in because they know who has the power.

There's balance to be had, and cases where's it's not worth it to put in more effort on certain things... but the boss rarely has any visibility into the tech side of things.
It'd be quite callous to hope that nothing will happen from the countries above the tropics that

1. Colonized Africa and Asia to secure raw materials and captive markets to develop its industry, pumping all this carbon into the atmosphere in the process

2. Will probably be able to withstand the impact of Climate Change either due to geographical reasons or due to having more developed infrastructure and economies

In light of that, is the idea of asking Westerners using their cars less and switch to clean energy _such a terrible thing to ask?_
Stripe already has similar. It’s called Payment Links. Extremely easy and they manage all past transactions.

https://stripe.com/payments/payment-links
True, but some of the LTE bands are the lowest licensed carrier frequency cellular service - they should be the most reliable. Like b71 (600MHz) and b12/13/14/17/28/29/67/85/103 (700MHz) blocks. [1] There's really no reason for 2G only connectivity anywhere in the US other than underinvestment in rural communities no?

[1] https://en.wikipedia.org/wiki/LTE_frequency_bands
It's definitely not up for AAA gaming but it's not horrible either. But why restrict Nvidia cards altogether when nouveau already supported by the kernel? Obviously it would be a stop-gap solution until proper support for the proprietary drivers is integrated but people like me can't run Chimera right now. I wouldn't mind trying it but I can't.
> It wasn't like we built the Panama canal as a water source for the local folks.

Right, I am saying that the effect it would have on the existing water source is a probably a factor in why “allow more free mixing of saltwater / pump more seawater to deal with drought conditions impacts on the canal” is not done.

Not that the Canal was built as a water supply.
no, i only don't see the need to distinguish between major and minor feature releases.

there are feature releases and bugfix releases. this is what the linux kernel, browsers and even some linux distributions are doing.

for most apps but also for the linux kernel and for programming languages incompatible changes should not even happen. a browser should support old websites, so there is never an excuse to break compatibility. hence no need for versioning that. i am not talking about libraries and interfaces.

the main problem with major.minor versions is that it is never clear what should be a major version change and what should not. emacs solved the problem by simply dropping the major version. a few other applications did too.

the pike programming language switched from 0.6 to 7, avoiding calling it 1.0 as the language had already been stable for some time by then. then they slowly increased the minor version to 7.8 in 2008, but where afraid to go to 8.0. i remarked that if they didn't switch to 8 soon, they never would. eventually they switched to 8.0, 5 years later, and are now at 8.0.1738. (but there is a 9.0.0 version in the development branch since end of last year).

sbcl switched from 1.5.9 to 2.0.0 without any major changes. since then they release a new version every month and the version number is basically decade.year.month. there is no distinction between major and minor versions. the current version (looking at the calendar) should be 2.3.7. what does that tell me about the difference to 2.2.11? absolutely nothing. if they used a single linear increasing version it would not make a difference.

which in my eyes is actually correct for both examples because a programming language should not have major changes. the python2->3 transition was a big headache. it should not have been necessary.

in most examples that i can find the distinction between major and minor is meaningless. a more sensible distinction is: feature.bugfix, that's enough. and for many apps i would not even bother with bugfix releases unless the bugs are damaging to the users.
That is definetly true.

Lack of law and order is a massive issue in Mexico, as well as the collusion/merger of organized crime and politics.

That said, all the exact same fears you mentioned that average Mexicans have are the exact same ones that your average Chinese, Indian, Russians, Brazilians, non-Singaporean ASEAN nationals, etc have as well.

Mexico is not a "First World" (aka Advanced Economy) in 2023, but it is a solidly upper middle income/lower high income country. If China can be counted as a "developed" country, then by extension Mexico and pre-2022 Russia should as well.

My comment stems from the fact that the American image of Mexico resembles that of Syria, Libya, or Venezuela.

The kind of horror stories you hear in Michoacan, Oaxaca, or Tamaulipas are similar to those you'd hear of Guizhou, Yunnan, or Xinjiang. The difference is the Chinese govt used a mix of severe repression AND co-opting cartels/triads into the economy (eg. "incentivizing" Triad members to leave Macau and invest in Cambodia)
What’s the low power alternative?
Captchas are not just ddos protection, and even if it were, the botnets don't send tons of spam from any single device. Otherwise it's too easy to identify and block.
“positive allosteric modulator of the GABAA receptor”, isn’t that a benzodiazepine?

edit: nevermind i guess drugs are classified by their chemistry rather than their effects
It’s so interesting that people understand that it’s a machine mimicking speech, until it starts mimicking something they want to believe is real.
I'm not directly in charge of hiring QA, no!

I think this sort of excuses the initial blindness to Spectre style attacks in the first place, but once the basic pattern was clear it doesn't excuse the subsequent lack of discovering any of the subsequent issues.

It is as if someone found a bug by examining the assembly language of your process which was caused by unsafe inlined `strcpy` calls (though they could not see the source, so they had no idea strcpy was the problem), and then over a the subsequent 6 years other people slowly found more strcpy issues in your application using brute-force black-box engineering and meanwhile you never just grepped your (closed) source for strcpy uses and audited them or used many of the compiler or runtime mitigations against this issue.
I was previously in an apartment that had its own internet setup, using my Xbox to watch what was basically more ads than video. I don't think there's a way to set up a PiHole on their connection (maybe there is, but at the time a Raspberry Pi would cost more than a year's worth of YT Premium.. I was also not aware of NextDNS back then).

That, and Premium views apparently pay creators more than ad-supported views [1], so I justified it that way.

[1] https://youtu.be/Rh5hL47z2us?t=154
You don't find anything surreal about that?
You're projecting.

That "it doesn't reason" in your meaning seems to depends on unknowable suppositions that are a quasi-metaphysical characterisation of the process of reasoning.

I'm defining reasoning from a set of observable outputs. The Chinese room isn't a thing.
wow this was a very "we made everything a little better", lot of thanks to the golang devs
"Account not found" :<
I see the challenge almost always and most of the time it passes after I manually interact with it but I'll get a looping challenge every once in a while and it persists until I change VPN servers.

I don't think I've seen it for a week or two now but I've certainly encountered it in the past for spans where it'd occur at a frequency of maybe once every two or three days and then go away for a while.
It's hard to call this climate, even if you were to be generous. But as a matter of fact Earth's rotation is also changing: in our case it's decelerating, due to the moon's pull.
Would that equivocation not be a positive thing? When we said global warming, it caused huge political nightmares when things were cold. By saying we study climate change, we depoliticize it. We state these are the facts about climate change. Let's look at what's causing it, what we do about it, etc. If there is warming due to too much carbon in the atmosphere, perhaps we can try carbon capture.

The moment you make it into a political club, you bring out the talking heads, you make the situation an opinion column instead of scientific --- then it's just opinions of people who couldn't understand the science arguing about it and grossly misrepresenting it.