skysight-inc/HackerNews huggingface dataset:
I assume they are referring to: "a. Military, warfare, nuclear industries or applications, espionage, use for materials or activities that are subject to the International Traffic Arms Regulations (ITAR) maintained by the United States Department of State..."

Since that's the only reference to "military" I can find. Regardless, if we assume that the US Dept of State does not list the US military on its prohibited list, this would not be an issue.

Even if they do "prohibit" this elsewhere, it would not in fact prevent the US military from using it if they were able to say (to the satisfaction of a US judge) that they had a compelling national security reason to do so.

And if all of that failed, and for some reason the US military wanted to use Llama2, they would just do it anyway, and neither FB nor the judiciary would stop them.

Now, whether or not it would be a good idea for the US DoD to use Llama2, is a different question.
Time, frequency, phase and delay (1996)
Google Busts, Confirms Common Myths about Rust Programming
The closest you get to an international standard (that not many use) is the International Bureau of Weights and Measures recommending (ideally thin) spaces (so "10 000")
Reddit wants to boost their engagement numbers, so they've been pushing this (and a few similar) subreddits into people's feeds as "you might be interested in..." content even if you've never subscribed to reddits of this type. Basically borrowing a page from the early-internet "Hot or Not".
> The benefits over an exception is as the caller i can pattern match on the result of this. so i could have this is in a function in a case

Your example looks just like exceptions to me, just with different keywords

try:
return with_example(fname)
except RecoverableError:
recover(fname)
except Exception as e:
raise e
NWT wildfire evacuees say Facebook's news ban 'dangerous'
bHyve in jails is a god send.

I can create a jail, pass bHyve to it, allocate resources limits, assign a virtual nic enabling the jail to utilise firewalls. And then hand the jail IP to a client. Enabling them to create as many virtual machines their resources allows.

Using Jails this itself enables another level of security.

As if a VM hack breaks free, itself is then only isolated to the jail. And, if I was to be truely paranoid I could create a fortress jail with sub jails with a jail in the sub jail allowing bHyve to operate within.

Backups are only a matter of backing up the jail. ZFS does this without sweat.
Whenever I see a developer under 40 struggling to figure out what all the carets on the bottom of the screen mean...
Guess it depends on your suburb.

In my area there are people who sit in they are retirees that sit in their front yards and greet not just pedestrians but every vehicle that goes by.
Best Books for Engineers in 2023
don't think so—I'm reading it the same way you are
Thank you for looking at my latest project. I’ve been in a lot of interviews and I’ve conducted hundreds of them as the interviewer. I started doing some coaching for some friends and I realized that GPT was capable of spotting most of the things I was noticing. However the chat interface wasn’t great when you have to keep pasting in your code changes.

The biggest aha moment for me was watching a couple people get completely unstuck with a small hint provided by GPT so I made an entire project around it.
bollocks. 10km from the border its going to look and sound pretty gringo -- since thats who its catering too -- but leave the tourist areas and its not the same at all.

plus only ~30% of LA is hispanic, which is roughly akin to all of the US, regardless of what Latin country or area they're from. peruvians ain't mexican, amigo.
> "Be really, really good at what you do and someone will notice."

Isn't that just life though?

Like do what you're passionate about because there's no point failing to succeed at something you're not that into.
Well, that's on the author for claiming it is a pun, personally I'm happy about the explanation that:

- R^nRS is short for Revised^n Report on the Algorithmic Language Scheme

- Algol60 was defined in a document called Revised Report on the Algorithmic Language ALGOL 60

- Revised^n is mathematical notation for Revised Revised ... Revised n-times.

The prose is a bit iffy, but I'm just happy it managed to find the link between RnRS and Algol 60. It's something I didn't manage to find with just google.
The idea of “adaptive security” is compelling.

E.g. my bank makes me type my password and sends 2fa codes when initiating/approving wire transfers… even when I just logged in a minute ago. If I’m doing 2 wire transfers in a row, it doesn’t care, it still has me fully reauthenticate for every wire transfer.

But I’m fine with that because moving money is something that I’m willing to accept however many roadblocks are thrown at me.

But do I want that happening when I go to post a tweet? Absolutely not.

In other words, let’s adopt the concept of refreshing authentication upon particularly sensitive user actions and have lax requirements in other cases.

We don’t need to think of sessions as “logged in” or “logged out”. It’s possible to design a system where you’re always logged in forever, but you need to reauthenticate based on certain rules or actions given the context of the app and risk/threat.
HP sued over scanner that requires ink [video]
These LLMs are going to put our best useless listicle writers and filler content generators out of business, then where will journalism be? Those legendarily high standards our content production farms hold themselves to? Gone. Out the window. You want that?
Very exciting. Sam Gross took a very bold move with his "I don't need a yes/no right now, but I do need to know what acceptance looks like, and this issue has been languishing." [0] That interaction could have gone a lot of different ways (especially as a neurospicy engineer myself and knowing the overall spice level in the computer world) but it sounds like that was the exact kick the council needed.

It is still a long and winding path (double-digit engineer-years) to get a no-gil python, but at least there exists a proper path from the looks of it.

The hardest part by far will be ensuring the correctness of all existing codebases. It's one thing to say you don't want a 2->3 repeat. It's another altogether if you were to claim no breaking changes, but fear of bugs resulted in folks avoiding the upgrade in practice.

Making gil/no-gil even a compile-time switch will absolutely increase the maintenance cost. But I think in the long run, all this effort will be worth it, as I would claim the GIL is a lightning rod for python criticism. Just peruse any HN thread about python and parallelism to see what I mean. Maybe it's because it's the one thing folks can point directly to and say "this is why python isn't as fast as it could be" without understanding the decades of context. It's kind of the Final Boss of Chesterton's Fences in that regard.

[0] https://github.com/python/steering-council/issues/188#issuec...
Just use Racket! (Racket uses the Chez compiler)
The threat model is extremely different for different types of websites. Banks often look at a variety of shit, ip country and often buy off the shelf systems hardened around faking tools.

I don't care what Most websites for security (to some degree) except my bank and my Gmail.
> I am not the one deciding on terminology.

No, you're just the one pedantically enforcing a definition that's irrelevant to the conversation at large.

You aren't holding up your end of the conversation. Being a good listener means putting some effort into understanding what people are trying to say even if they get terminology a bit wrong. Jumping in to correct people on minor misuses of terminology doesn't show you're smart, it shows that you care more about correcting them than about their ideas.

I mean, cool, good to know copper and aluminum are crystalline metals, but the point here is that they're ductile and LK-99 isn't--you can't make wires out of LK-99. Arguing that copper and aluminum are crystals isn't adding to the conversation, it's just missing the point.
Things like this are to be expected with shared IP addresses for mail services.

This sounds like something Amazon should figure out more than anything. There's probably something going on with a customer or theirs (misconfiguration, spammer, vulnerability exploited) that's triggering spam detection rules.

At least Google reports the issue back to you instead of silently dropping all of your email like many other mail servers do.
This title is editorialized and wrong—there is nothing in this policy that mentions the DoD. I assume the poster misunderstood this line in the prohibited uses:

> Military, warfare, nuclear industries or applications, espionage, use for materials or activities that are subject to the International Traffic Arms Regulations (ITAR) maintained by the United States Department of State

This is the only mention of any US department, and it doesn't ban them, it references a list of banned activities that is maintained by the US State Department. This means two things:

1. The DoD could use LLaMA 2 for any non-prohibited purpose.

2. No other military is allowed to use LLaMA 2 for military purposes.

A better title would be "Meta prohibits use of LLaMA 2 for militaries", but that would be less exciting because it's a pretty common provision in many terms of use.
There’s no guarantee one is set right?
Ditching State for SearchParams: The Future of Next 13
How to migrate client-side pagination to server-side pagination using React Server Components (RSC) and Next.js 13 or later.

We explore the benefits of server-side pagination such as improved page load times and SEO, and the ability to store state in URL parameters.

The tutorial walks through the steps of replacing client-side state management with URL parameters, creating a Pagination component, and implementing the necessary logic for navigation.

Finally, we use Cosmic CMS to manage the data, but the approach is applicable to other data stores as well.
In real world, security is done by a bunch of nearly clueless people hoping to put enough hard enough roadblocks to make it practically not worthwhile for you to hack in.

If you don't have mathematically secure solutions, session expiration and similar are the imperfect tools you use to solve your problem.

One beef I have with short session expiration, though, is that in many cases it causes people to degrade security. This happens when people get annoyed by having to frequently provide their credentials and rather than enter credentials securely, use even more insecure workarounds.
You said "In most jurisdictions buying drugs is a criminal act, or why would you buying them online?" which implies that you only buy things online if it's a crime. You didn't mention where you bought your toaster or your bread, not online I hope!
Truth in Tech – These Women Tried to Warn Us About AI
Today the risks of artificial intelligence are clear — but the warning signs have been there all along BY LORENA O'NEIL
I use one website semi regularly that has what feels like a 5 minute session expiration, but is actually probably 10 minutes. The session expires even if you are actively using it. Drives me nuts. But not nuts enough to write in and complain. Maybe I should send them this article ;-)
It's a situation so old it's literally quoted in the Bible: https://www.bible.com/bible/compare/LUK.14.28-30#
The file handle is the PID of the process that opened the file, it monitors the process that asked for the file to be opened. and if that process goes down the file will be closed.

You can also add an else in the with so it looks like

with {:ok, fh} <- File.open(filename),
{:ok, contents} <- IO.read(fh)
do
contents
else
{:error, reason} -> File.close(fh)
{:error, reason} # this will return after the file has been closed
end

or maybe you would prefer to open the file, and pass that into the with and either way close the file. I just used IO as an example because they return nice {:ok, x} or {:error, reason} tuples, but this works with any pattern.

The benefits over an exception is as the caller i can pattern match on the result of this. so i could have this is in a function in a case

result = case with_example(filename) do
{:ok, result} -> result
{:error, :some_reason} -> # this is recoverable, do something else
#log the issue
recover!(filename) # bangs in functions indicate they can fail and raise an error
{:error, :another_reason} -> # this is unrecoverable
# log the issue

raise "unrecoverable error"
_ -> # any other case we don't know about
raise "unexpected issue"

or i might not care and want it to crash if it doesn't match

{:ok, parsed} = with_example(filename) # will raise a match error if {:error, reason is returned
Yes, however, in the limit it's also the case that you can have either secure or useful system, but not both.

And then, since the top comment was encouraging a wider view, there's even wider view: business needs. Truth is, short sessions make me viscerally hate the product, creates a desire to avoid using it, and becomes a factor in decision to switch to a competing offering when such possibility arises. Or to not switch - one big reason I'm still using my current bank account instead of another one I had to have to get better mortgage rate, is because the bank operating that other account has short session times and associated pseudo-security annoyances.
Elon's MO has always been to lose more money than competitors are willing to, then brag about how advanced they are compared to everyone else. New technologies are always unprofitable. There is no magic to what SpaceX has done, or is doing. Only a willingness to grift, sell, and spend.

Losing money makes everything easy. Competitors don’t play that game.
How will they enforce this...Prohibition without any threat of enforcement is just a piece of paper.
All finite sets of finite numbers have an average.

The value of the average is the result of the biases in data collection.

There is obviously a cap in the number of people you can practically greet in a day.
Don’t prioritize security if the root cause of the security breach is someone is getting access to the session tokens not that the server session tokens are arbitrarily too long. that attack might happen once ever and it doesn’t really matter if they have five or 10 minutes you’re still screwed because they can just go get another session token next time and be prepared.

Optimize the application to run the best for all the users first and then adjust the security implementation as necessary. Otherwise, you could DoS yourself by trying to be too secure.
Correct title: Llama2 Acceptable Use Policy.

The current title here is editorial and opinion
I mean isn't a suburb one of those HOA neighborhoods with houses every 1/4 acre? Seems ripe for neighbor communication.

This seems like a cop out.
"Incidental" might be the better term
California and Texas are big enough that you can drive for a whole day and never leave the state; Rhode Island is small enough that you can bike your way out of the state in a few hours.
Lots of airlines will gate check your bag for free if the overheads are full, but the overheads are still in high demand because they give you one less errand leaving the destination airport.
Alt-G brings that up apparently.

Control-G brings up help

There is also some sort of comment mode
Mr. Beast video taken down due to CSS toggle copyright claim
I yelled at one yesterday for looking at their phone while driving, does that count?!
It is because the elderly are dying, same as they always been dying through out the ages. The older you get the more likely you are to die.

The current demographic trend is based on this assumption. It goes out the window the moment we start meaningfully reducing the probability of death.
The ‘Jack Ma’s that are aligned with Xi have their corruption protected. It’s still politics.
“Hurdles of cattle” is such an odd typo. Was this dictated voice to text or written by an AI? Or just a typo and no editing?
Or maybe it's because if you're well-off, there's no reason to buy an expensive villa that looks just like the one next to it. Better to buy a smaller, more tasteful house that's uniquely yours?

IMO neighborhoods with a single house design copy-pasted are really unappealing, no matter the country.
Well, first of all Racket more closely resembles r6rs. The main large r6rs implementations (guile and chez) both have proper threads (guile even has a parallel CML, which is probably my favourite way to do parallelism of all time) and a startup time measured in single digits (ms) compared to hundreds for racket and something like 80 for racket/base on my slow computer.
If you walk outside you'll see people.
Thanks for that, you nailed everything that was bugging me about that timbre. Someone else mentioned the Chapman stick, and this instrument is equally disappointing.
Y’all might enjoy this book by the same author!
https://pragprog.com/titles/swdddf/domain-modeling-made-func...
I think this is a spammy neighbour problem on that sending IP. Might be you, might be someone else who's using SES. But whoever sends from this IP is penalised.
I like this. Just lock the overheads for the first few minutes after the boarding door opens..

I wish there was an airline simulator game.
Once the attacker knows they can steal the session ID, and how long it will be valid for. It’s just a matter of running a script to do that all that as fast as possible.
NX likely would do magic for you all but I imagine it is far too late to do anything about that.

We had a very large Angular 10 project that we replaced with an NX Angular project late last year. We went from ~6 minute prod compile to around 20 seconds, recompile is lightning fast because it only builds your affected library. That is all without using the remote library cache feature where you can save compiled libraries to the cloud such that a user only builds the libraries they are changing ever.
For those interested in doing something like that with their own projects, check out the Hippocratic License: https://firstdonoharm.dev
IT consultancies are not the majorities of businesses. Additionally, your tax id does not necessarily take a week. And good luck if you do international (but within EU) buisness - the EU VAT id takes even longer.

Additionally, when did we (germans) start to accept and get so stuborn to defend this process? I mean, the process should be: You go to the "Gewerbeamt", fill out the forms, and get the same day a tax id, a EU VAT id, and a one-time token to create your ELSTER accounts and certificates. Thats what digitalization should be. How does anyone think the current, cumbersome process is the ultimate way and that this is considered business friendly, yet tends to defend or glorifies this process?
No lie, the M1 was a game changer for large Typescript projects.
I think this was a nice article and helped walk through some of the maybe unintuitive maths but I feel like they missed the meat a bit.

With random placement, as was said in the article, each flip is independent. With PoTRC it’s using knowledge of current queue depth.

The author didn’t explain the challenges around tracking queue depth, or why PoTRC is better than say keeping an ordered list of queues depth and picking the smallest one.

I’m assuming the trade off is about cost of managing the sorted list of queues depths vs just O(1) look ups of the random nodes’ depths.

It just would’ve been nice to cover that in the article.
Well in my experience I very rarely if ever need to actually code in a terminal. Sftp or rsync are usually on hand so there's little reason to not just go for sublime or vscode if I need to make a substantial change. What nano comes in handy for is changing config files and adjusting system settings, when I'm jumping around and making very small edits.
On some linux distros (debian based) there is a im-tiny package smaller than the full blown vim.

Also historically vim was not the default vi clone installed, which was an optionnally installed package. The default was very often a smaller clone: elvis. Busybox as its own vi clone and most BSD OS are still providing nvi by default
Ask HN: Learning how to code?
Hey everyone, I need your help!

I am beginning to learn how to code. I was wondering what peoples secret weapon resources here are and what you all can recommend.

E.g. I know about freecodecamp and other more mainstream sources, but was wondering if people have other recommendations as well.

As I am unable to rank the quality of the content I normally find online, it would really help to hear some suggestions.

E.g. someone recommended https://fullstackopen.com/en/, is that any good?

All the best and thanks in advance!
I imagine that the intention of micro is more like a modern, extensible editor, rather than a beginner friendly or ubiquitous editor. I think in the latter aspects, nano is still probably what you'd want to recommend your students (until they're ready for vim /s). micro is probably more for people who learned using nano but need more functionality/want a nicer ui.
And get ATM machines work every day on the principle of asking you to just re-enter your password on potentially harmful transactions.

Let’s also pretend like there’s a security camera looking at my desk that is usually not monitored, but you don’t know that
It doesn't matter, because it's not even on paper. OP is incorrect, the policy doesn't say anything of the sort.
Apple's web properties are so, so bad. They clearly don't invest in anything that isn't a native iOS / MacOS app.
Thanks, I didn’t hear that update!
Um, no.

China killed itself off with its own policy of ‘for every two of us there should be one of us’.

Now their work force is shrinking and costs are rising fast. They aren’t competitive and the future is with India and Africa.
Typos like that are exactly the typos AIs don't generate, so probably a human error somewhere...
>> 2. Engage in, promote, incite, facilitate, or assist in the planning or development of activities that present a risk of death or bodily harm to individuals, including use of Llama 2 related to the following:

>> a. Military, warfare, nuclear industries or applications, espionage, use for materials or activities that are subject to the International Traffic Arms Regulations (ITAR) maintained by the United States Department of State

The key piece here (IMO) is: "assist in the planning or development of activities that present a risk of death or bodily harm to individuals". There's plenty of DoD activities that are a few steps away from actual conflict engagement. Is helping an engineer move HESCO barriers too close to "activities that present a risk of death or bodily harm to individuals"? What about helping a team learn how to use a weapon or even any piece of equipment within the DoD? Who decides how many degrees from 'these activities' are ok?
Wow! Almost as much as the Department of Defense.
Is Lora used on language models?
The validator's HTML is invalid too. All I get is "Enable JavaScript and cookies to continue" but of course doing that doesn't actually work either. It's crazy that even the W3C has put itself behind cloudflare's walled garden. You'd think if anyone would respect the open web and standards it'd be them. At least HN's page is actually HTML even if it might not be fully standards compliant. That's far better than the W3C's showing here.
PHP doesn't suck (anymore) [video]
The “Don’t stand on the steps” poster sure looks like the other passenger threw him from the train. But resisting throwing out other passengers is also good advice.