skysight-inc/HackerNews huggingface dataset:
++ on the Guild. They are leaders in the GraphQL tooling space and offer a wide array of solutions.

I'd also like to give a nod to Wundergraph and their Apollo Alternative.

We were given early access to Cosmo[0] and so far are very happy with it.

They have their own GoLang based router that is independent of Apollo, works with v1 and v2 of federation, and works with subscriptions.

Comes with Studio, a CLI tool, and a OTEL Collector. So far it's been great for us at our org.

[0]: https://wundergraph.com/cosmo
How did you obtain it? I've been wanting to try it ever since I missed the opportunity when on vacation in Australia as a kid. But it's been difficult to find in the American Midwest.
Does it make more sense to sue on your own in cases like this instead of going with the class action lawsuit in order to score a larger settlement?

Edit: clarity

Edit 2: From the article "$265 million: Total awarded to 13 plaintiffs who have sued over the earplugs to date" --> average of $20 million per settlement. At $5.5B for 300k lawsuits the result is an average of 18k per settlement??!! That appears to be a dramatic difference to the individual lawsuits.
Why is 64-bits a requirement?
Just curious, do you have any intent on adding local model support?
Per the Stanford Daily article linked in the OP [0], they have also removed the statement addressing this incident and supposed improvements from their website.

>Although Fizz released a statement entitled “Security Improvements Regarding Fizz” on Dec. 7, 2021, the page is no longer navigable from Fizz’s website or Google searches as of the time of this article’s publication.

And, it seems likely the app still stores personally identifiable information about its "anonymous" users' activity.

> Moreover, we still don’t know whether our data is internally anonymized. The founders told The Daily last year that users are identifiable to developers. Fizz’s privacy policy implies that this is still the case

I suppose the 'developers' may include the same founders who have refused to comment on this, removed their company's communications about it, and originally leveraged legal threats over being caught marketing a completely leaky bucket as a "100% secure social media app." Can't say I'm in a hurry to put my information on Fizz.
The problem is that it is still entirely illegal to do this kind of hacking without any permission.

The fact that a lot of companies have embraced bug bounties and encourage this kind of stuff against them unfortunately teaches "kids" that this kind of thing is perfectly legal/moral/ethical/etc.

As this story shows though you're really rolling the dice, even though it worked out in this case.

> Discussions in forums / BBS's would be around if it was safe to disclose at all. Suggestions of anonymous email accounts and that sort of thing.

This is probably still a better idea if you don't have the cooperation of the target of the hack via some stated bug bounty program. But that doesn't help the security researcher "make a name" for themselves.

And you're basically admitting to the fact that you trespassed, even if all you did was the equivalent of walking through an unlocked door and verifying that you could look inside their refrigerator.

The fact that it may play out in the court of public opinion that you were helping to expose the lies of a corporation doesn't change the fact than in the actual courts you are guilty of a crime.
SmartGPT: Major Benchmark Broken – 89.0% on MMLU and Exam Errors [video]
I was going to say "or at least do a little continuing education." I think that would work for some, but you're probably right... many (most? all? some?) engineers will learn better in an environment where the whole team has bought into various assumptions and you're hip deep in it every day.
1(!) Google result for Tesla MAGAmobile.
That would be more simple... if that was what these were designed to do.

One of the requirements for these custom-made ear plugs were was to allow the user to hear quiet conversations when used in a certain way.
Adding to the list:

- https://github.com/trypromptly/LLMStack (build and run apps locally with LocalAI support - I'm a maintainer)
Hosting Company Received $3M in Bitcoin After Hack
A very simplistic hypothetical scenario could be, people who get colon cancer die an average of 6-7 years earlier than they would have. And if 5% of the population get colon cancer, then the average gain would be 4 months with screening.
I've got flange-shaped earplugs for the motorcycle, they seem to be just fine. Pulling up the ear is good practice for any kind of earplug though, I presume it straightens out the ear canal or something like that, I've used it for audio earbuds as well for a long time.

If they fall out, get different ones.

My dad had custom molded ones for his job (in metalwork), but that was well after the damage was done. He had tinnitus and he's now finally budged and got himself some subtle hearing aids.
Stem Cell Program
> Strike while the iron is hot: balance training.

When I moved my allergies racked up two notches and I was flirting with vestibular disruption on a weekly basis. Then I started a new medication that had 'nausea' as a side effect, and that turned out to be a lie. It's not nausea it's vertigo.

If it weren't for years of tai chi I would have fallen badly a couple of times. Particularly in the dark. It turns out I use the soles of my feet for balance now more than my inner ear.

The good thing about tai chi is that with the right instructor, it can be literally hands-on. My first instructor would have us feel how the movement went. Saved weeks of show and tell every time. And corrections are done tactily, not visually.
Pilots are not allowed to use those autopilots (or newer ones) until they have received careful training in the nature of those systems.
Fortunately, a lot of the earlier struggles came down to binary libraries. At this point, a lot of externalized libraries are now using webassembly targets or built-ins. SQLite being one of the more popular exceptions.

For the most part, I haven't had too much trouble the past couple years taking an existing project and running on a newer runtime. I have seen a lot of incompatible library breaks trying to update dependencies though.
California DMV Tells Cruise to Halve Its Fleet in SF
tbh I think admitting in public that you use mastodon or lemmy outs you as a fringe nut, just like using 4chan /pol/ does
That's a very US centric view IMO. Here the companies stick around longer. We don't do that survival of the fittest mindset here.

And with the ridiculous house prices and crap wages even in tech it's not really possible to save anymore. I'd take social security over anything.

My accrued benefits are something I am entitled to and I worked hard for and I wouldn't drop them without a fight.
>"Under WHO and National Institute of Health standards, more than 85% of plaintiffs have normal hearing."

If a device degrades your hearing from supernormal to just normal, or from high-normal to low-normal, is that not still damage?
Ask HN: What interesting things have you asked an LLM recently?
Another reason why bikes are as locked down as they are is because to be certified bikes have to confirm to a whole pile of regulations and two of these centers on power limits and speed limits. If a bike is hackable it could easily lose certification and that means you can't sell it any more, in an extreme case it would be applied retro-actively (though there currently is no instance of this the certification requirements as written are open to that interpretation).
CenturyLink left 86-year-old woman with no Internet service for a month
Generally it applies to both. But some crimes (eg murder) might not have a statute of limitations.

https://www.law.cornell.edu/wex/statute_of_limitations

Also there are subtle questions around what discovery means here. Usually it is some sort of "could be discovered with reasonable effort". If I had proof of your wrongdoing in a letter sent to me, I am unlikely to get away with saying, "Oh, I didn't read the letter when I got it." If that proof was buried in a computer file with a million pages, I probably can reasonably say, "That was a needle in a haystack, and I didn't even know what to look for." For situations between those extremes, there will be case law that likely varies by state.

This is where a lawyer gets to earn their pay.
Do check this doc from Otel https://opentelemetry.io/docs/instrumentation/js/getting-sta...

It is not completely solving the issue, but a starting point
I don't think you have the pattern of facts correct (unless you have access to more information than what is in linked the Stanford Daily article).

> At the time, Fizz used Google’s Firestore database product to store data including user information and posts. Firestore can be configured to use a set of security rules in order to prevent users from accessing data they should not have access to. However, Fizz did not have the necessary security rules set up, making it possible for anyone to query the database directly and access a significant amount of sensitive user data.

> We found that phone numbers and/or email addresses for all users were fully accessible, and that posts and upvotes were directly linkable to this identifiable information. It was possible to identify the author of any post on the platform.

So AFAICT there is no indication they created any admin accounts to access the data. This is yet another example of an essentially publicly accessible database that holds what was supposed to be private information. This seems like a far less clear application of the CFAA than the pattern of facts you describe.
Regular rifle bullets are not nearly hot enough to ignite gaseous hydrogen. Only something like tracer or incendiary ammunition would be a concern for fire.
Sure, but if I shoot someone in self defense, there will be an investigation and I have to show why I thought it was legitimate. If a lawyer writes a baseless threatening letter, at the very least I should be able to have the bar association investigate.
I just want to throw out that "paid by the year" has not been a common thing in my American experience. I've never heard of anyone with that.

Unless they are talking about a yearly salary.
> Such dark patterns, plus their involvement in crypto, their shoddy treatment of paying users, their security incidents... make it harder for me to feel good about OpenAI spearheading the introduction of (real) AI into the world today.

Interesting. My opinion is it is a great product that works well for me, I don't find my treatment as a paying user shoddy, and their security incident gives me pause.
These companies have hired focus groups, marketing experts, psychologists, and countless design teams to get people hooked on their platform. Are we really surprised?

Multimillion dollar team vs primitive brain of human. Many people bound to lose and fall through.

I think the problem is rooted in a large swath of society growing up in isolation. The past few decades has seen a sharp rise in suburban or exurb living (living in isolation), car centric transportation (traveling in isolation), and social media (socializing in isolation). High levels of partisanship in the states as well is not a coincidence. We have generations of children growing up playing video games in the suburbs because that’s all you can do from the moment you are born to the day you become an adult (or get a car).
> This seems like a uniquely american problem. Mitigation: They could focus on the rest of the world, instead.

Please don't post nationalistic flamebait (regardless of nation). We've had to ask you this more than once before.

https://news.ycombinator.com/newsguidelines.html
Perhaps if urban living were even more popular, condos could fetch $10k/sqft instead of $1k. But to the extent that today's cities are harmed by their level of desirability, it is still in the direction of being too desired relative to their capacity. $1k/sqft is still ludicrous.
Kulning
But what about after they leak? Wouldn't the hydrogen then mix with air and get below 74%?
Reminds me of the days when people used Skype Resolvers, good ol' days.
Anyone can make a threat. There's a bit of smarts needed to classify a "threat" as credible or not. Only really a law enforcement officer can credibly bring charges against you. Unfortunately, we live in a society where someone with more money than you can use the courts to harass you, so you even if you don't fear illegitimate felony charges, you can get pretty much get sued for any reason at any time, which brings with it consequences if you don't have a lawyer to deal with it. So I understand why someone might be scared in this situation, and luckily they were able to find someone to work with them, pro bono. I really wish the law had some pro-active mechanism for dealing with this type of legal bullying.
Please stop posting regional flamebait and whatever else this is. Please see https://news.ycombinator.com/item?id=37298978 also.

https://news.ycombinator.com/newsguidelines.html
Was I the only one hoping that Lfortran was something for music synthesis (LFOs...) using Fortran? I can't not see LFO - like that keming joke.
Show HN: AI-Spy – Determine if voice data is AI-Generated or not
Hi Everyone,

I've been building a classification model that aims to detect whether an mp3 containing voice data is ai-generated or not.

My hope is that this can one day help combat bad actors that are using the increasingly convincing voice cloning tools that are coming out.

Would appreciate any feedback or thoughts on how to make it better. Obviously the UI can be much better, but I'm trying to focus on the model for now.

I should mention that this doesn't work on AI-generated music (yet). Still working on getting better accuracy there.

thanks!
Sure, and I can build bipedal military robots with space lasers in my garage. I just don’t have the funds at the moment.

You can either bring a weapon to a fight or not.
Yes, I meant yearly salary.
Everytime Hetzner comes up I tried to make the comment hoping it reaches the right ppl !

Hetzner has THE BEST UX for their cloud-vps stuff.
Please don't change a thing, just for the sake of changing something. Looking at "YOU Spotify !" Compared to most of the other cloud vendors, its refreshingly simple and elegant ! Good job whoever did it, now the job is to KEEP it like that.

Happy customer for about 1.5 years now.
Indeed, it is ridiculous that there are so many different battery makes and models out there when the cells themselves are highly standardized already. This is something the EU is addressing as we speak though.
I've been a bit immersed in pre-Fortran-77 (so FORTRAN-IV and FORTRAN-66). It was an interesting time: FORTRAN was the most standard language, so people used it for things like compilers. An example I have is Motorola's 6800 assembler, which was delivered as a tape for various common machines of the day:

http://www.bitsavers.org/components/motorola/6800/cross-asse...

But this was before FORTRAN had strings.. or even bit-wise operators.. But you could read an input line into an array of integers. Then to read each character from this array, you used integer multiplication and division to perform shifting and masking. Although in this version, I can see calls to assembly language helper functions.

Note the Hollerith constants.. (no strings).
Really what happened is we checked whether we could set `isAdmin` to `true` on our existing accounts, and... we were able to. Adi's more technical writeup has details: https://saligrama.io/blog/post/firebase-insecure-by-default/
These guys (at least according to the angry letter) went beyond reasonable safe harbor for security researchers. They created admin accounts and accessed data. Definitely not clearly false that there's no liability here. Probably actually true.
Raking leaves, very basic yard upkeep and mowing, is worth around $10 / day to most people (if it's close to basic human performance at those tasks). One can debate the year it will arrive (less than 30 years, more than 10 years), the utility value of a robot that can do that well is extremely high though.

And bring on the snow shoveling bots. Nearly every 50+ year old in cold climates will want one. Will we have to outfit them in specialized winter gear?
I use it almost exclusively to create regex. I briefly explain what I'm trying to do, throw it some examples of inputs/outputs, and it hands me a working string, all within about 30 seconds.

Apart from that, nothing really.
These articles are dangerous for the public. They may not go to have their regular checkups that will make them die younger and thus ironically yeah their life would not be extended any more.
Now we just need an orchestrator for all of our helm charts
Please don't post regional putdowns to HN, regardless of what region you have a problem with. It leads to generic tangents and they usually turn nasty.

I know it's possible to read this as a sort of good-natured ribbing or neighborly rivalry but those subtleties don't survive on a large public internet forum.

https://news.ycombinator.com/newsguidelines.html
Yes, I remember there were a couple of prominent astro cases around the time I finished up my PhD. Glad to see that there was a good end result.
Fair, but I was speaking more generally.
Pretty disingenuous to use data for one side of the argument and a subjective "everything in CA is nearly double the price" for the other. From the same table you linked, the percentage of people living in poverty in Texas (14.2%) is higher than California (12.3%). If everything really is so much more unaffordable in CA than TX, why is that?
It's pretty interesting that a lot of the people claiming there's an urban doom loop in places like SF, David Sacks for example, are also owners of commercial real estate in those same cities.
The first link is "High exposure to perfluorinated compounds in drinking water and thyroid disease" but the conclusion in the abstract is

> In total, 16,150 individuals had ever been exposed. The hazard ratios did not indicate any excess risk of hyperthyroidism among those with contaminated water. For hypothyroidism, the risk of being prescribed medication was significantly increased among women with exposure during the mid part of the study period (but not men). However, the association with period of exposure was non-monotonic, so the significance is considered to be a chance finding. Our research was limited by the relatively simple exposure assessment.

The second one as well

> No association between serum PFAS and fecal zonulin was found. In conclusion, the present study found no consistent evidence to support PFAS exposure as a risk factor for IBD.
thank you for the insight that's so interesting
You're in good company: https://news.ycombinator.com/item?id=36665004

The ol' adage "to err is human, to wipe out production requires 
automation
 terraform"
There is some intrinsic value in a stock, but since it is based on future unknown values it's impossible to know or predict.

So yes, that makes it possible for the price to become disconnected from any reasonable prediction.
Err, that's just a regular detective novel, no SF elements at all, you must be mistaken (nudge nudge)
I believe it would have also kept its stars, issues and other data.
how is this interface insane?

It's a list of the behaviors you need to implement if you're rolling your own OTEL Tracer Span implementation, and not using one of the multiple available.

In contrast, OpenTracing's interfaces had hardly any required methods, so you had to do a runtime type-cast to the whichever implementation you were using in order to access anything useful on the Span like the OperationName.
What about GC-less autofree?

I'm still waiting for that CS breakthrough to happen - Rust guys will be so mad they spent their time writing lifetime annotations for the borrow checker :)
I wish they offered that much in the Air.
Meta’s Open Source Llama Upsets the AI Horse Race
"That's not the language they used. They simply admired your place of business and reflected on what a shame it would be if a negative event happened to it. How would you keep people from saying that? It's basically a statement of fact..."
I did not come up with the system
Because it's just a figleaf for their commercial interests. They could easily solve this but they like their $.
The threatened party did the digital equivalent of breaking in to the threateners house.
Musk's foolish actions while owner of Twitter are not rare yet always on the news
It's not patronizing at all, because you should own the digital product and as such, be able to sell your rights to it.

As far as the kids go, they're being groomed to accept that they don't own anything or have any basic rights of ownership. It's a travesty.
How does LLVM cope with the array semantics? I was under the impression that the noalias attribute in the IR was not activated in such a way as to enable the optimizations that make Fortran so fast.
As I said, I understand what's going on here. I just don't like it.
thank you for the insight, that's very interesting
In the US we have exempt and non-exempt employees. Non-exempt have more protections and have to be paid hourly and twice a month. They have to be paid overtime rates. There are other legal protections. Big one is the government will take direct action against employees that break labor laws against exempt employees. Where for non-exempt it mostly a civil matter.

Exempt employees are generally managers, engineers, that perform complex autonomous decision based work. Typically they are paid a monthly salary. But they don't have to be. I'm exempt and get paid hourly, every two weeks and I in theory get overtime.
> it can't be that difficult to port whatever code to whatever platform if 100s of millions are in question, or is it?

> in a couple of years at a fraction of the cost? And is CUDA really necessary if this much money is at stake?

I mean, that's the thing; is resisting CUDA really worth the cost when this much money is at stake?

It's not like you have to pay to license CUDA. The two big drawbacks are that it's proprietary and locks you into their ecosystem; neither of which really matter when shipping stuff at that scale. These companies could spend a few million dollars to accelerate their specific codepath, but it's frankly wasted money unless you have a specific reason to avoid Nvidia.

The eventual Nvidia-killer will probably be platform-agnostic tooling like ONNX, unless hardware manufacturers revive a sort of OpenCL-style acceleration library.
As OP2, my problem with OP3 is that none of that evidence really refutes OP1, which is why I said that the connection is hard to prove, or disprove. There could still be an environmental cause for some of the increase. But because gender is socially constructed, the effects of social change obviously can’t be discounted.

Honestly I think we should take OP1’s thesis seriously, but not as proven. And as usual cut down on pollutants for the wildlife it does affect.
If you’re looking for open source APM stack which is OpenTelemetry native and you can self host - you can check out SigNoz ( https://github.com/SigNoz/signoz)
Yes, but I hope nobody really relies on that ordering in their code, as, as you say, it is pretty inconsistent.

Eg. you can't rely on

dict_b_keys = iter(dict_b)
for key in dict_a:
value_a = dict_a[key]
value_b = dict_b[next(dict_b_keys)]
print(f"{value_a} == {value_b}: ", value_a == value_b)

The problem with the proposal is that it will be even stronger: you either require '*' to sort in-place (I assumed that would be even worse and thus unacceptable, so I ignored that case — it seems others believe that to be a more realistic implementation), or require dicts to maintain a half-sorted map of integer keys.