skysight-inc/HackerNews huggingface dataset:
I'm in favor of the work done by the security researchers, and the defense offered by the EFF. However, your first comment was such a surface level understanding, and I wanted to bring it back to reality.

The general form of such a "legal threat" (threat relating to the law) is perfectly reasonable, normal, and legal (as in, conforming to the law). It's a standard part of practicing law.

However, in this specific case, they do appear to have broken one professional rule, regarding the threat of criminal prosecution conditional on a civil demand.

Aside from that one professional rule, the Fizz/Buzz letter was probably perfectly technically accurate. Whether the DA would take up the case, I doubt, but that's up to their discretion/advice from the DoJ, not based on the legal code.

I think Fizz/Buzz were incredibly foolish to send such a letter, as the researchers were essentially good samaritans being punished for their good deed (probably only because customers don't like it when supposedly professional organizations are found to be in need of such basic good deeds from good samaritans, and Fizz/Buzz would rather punish the good samaritans instead of "suffering" the "embarrassment" of public knowledge).
Sperm Whale, specifically Spermaceti: https://en.wikipedia.org/wiki/Spermaceti
I guess life is easy if you have no job but up until your food runs out.
Also, if Disney attempts to union bust, they are now forced to immediately recognize the union and begin to bargain with them.

https://prospect.org/labor/2023-08-28-bidens-nlrb-brings-wor...

https://www.nlrb.gov/news-outreach/news-story/board-issues-d...
I tend to agree, based on what I personally see. I wonder if part of the reason why is that they are entering a world in full crisis, and service toward others becomes an essential survival skill when dealing with crisis.

(I'm also a Gen-Xer)
I was facing the same issue. Did you figure sth out?
> I get into your home by bypassing (poor) security. I take pictures and make copies of anything inside. Then I publicly announce the breach and demand that you fix your security based on a deadline I made up. Then I say "trust me, bro" when I promise to never reveal the data I stole.

Otoh, it sounds really different if you break into your own home.

I think part of the issue is with everything in the cloud your data is no longer local (like it would have been back in the day), but you (or the custumer public) still has an interest in knowing if the data is secure, an interest that is at odds with the service provider who often has perverse incentives to not care about security.
That is an important point. People do reflect and learn. Our very discussion is part of this process. The question is at what scale, how quickly, how effective the immunity etc. and what random distress events must be handled in the current setup.
Are you saying that the index is made on columns which only have few unique values so you need to scan everything all the time?

Given that you’ve included the log(b) claim I thought you were referring to a normally functioning btree.

A situation where 65k rows end up slowing down things severely should have more to do with other database features (foreign keys and similar).
Sounds like we will be needing lots of reliable carbon-free energy, excellent electricity infrastructure, and lots and lots of air conditioning.
Pro tip: You can set a custom passphrase that end-to-end encrypts everything that is synced via Chrome. Without setting one, the data is still encrypted but with a key derived from your Google account password. AFAIK the collections feature that is being talked about here is separate from Chrome Sync.
Could you talk a bit more about your university, your club, the goals of this club, and the type of people showing up to the club? A university is a different place than a community college. A university with a quality CS program is a different place than a university without one. People from technical programs (using tools) can be very different than those in a science/engineering program (writing tools).

Security before this class (or a similar class): https://www.cs.cmu.edu/~213/ is a very very different beast than security after it.

Red teaming is different than blue teaming. Defense is a nearly entirely different way of looking at security than offense.

Reverse engineering/binary exploitation is a fairly different skill set than web exploitation.

Is your goal to participate in competitions or just to be in a better position to get higher paying jobs?
In the long run, that is bound to generate a separate managerial class, with all that it entails. It's how most cooperatives eventually die: they turn into regular businesses.
VCs aren't always the best capital allocators - a lot has succumbed to the money management + fees disease. They push you to raise more, force you to hire and burn when you really shouldn't / haven't figured out product market fit yet.

> Whatever magical market forces that might change how funding works, they don’t seem to be at play.

I think money is scarcer these days, and founders who are constantly being burned by VCs will think twice about riding the big VC train in the coming years. As a founder myself who work crazy hours getting the business going, it's painful / bad optics to see full time VCs doing weekend Vegas trips, browse art galleries on weekday afternoons and fine dining every couple of days, knowing I've sold a chunk of my / my team's hard earned equity on that bs. Of course there are great VCs, and some businesses needing to be VC backed, but oh boy, are there really bad apples out there.
Fastmail’s on my list, but it'll be a while before I get to it since it has fewer users than Gmail and others.
I don't disagree with your general impression, but the flip-side of it (combined with the fact that the stack is open-source) is that they're not in a position to execute some exquisitely bullshit market segmentation strategy, and there are at least some wins to be had if you put in a bit of legwork (like making Stable Diffusion run on the GPU I've owned for years instead of spending an indefensible amount of money on the rough Nvidia equivalent).
The restaurant has been in business 10 years. I think that evidence makes me dismiss your comment as pessimistic hyperbole. If the wages really didn't work, the restaurant would have been long gone.

I acknowledge that you have seen something similar not work out, first hand, but in this case it is apparently different.
Great writeup and thanks for providing the code as well!

I think if I were to do this I'd probably do it the other way around. I'd introduce the new code first on a new node, add it to the load balancer, check it's healthy, and then remove the old node.

It allows a bit more growth for new functionality should it be needed. For example you can run a canary for an hour and check the error rates before promoting the deployment. Or you can rollback if the new code fails to start for some reason without needing to reload the previous application version first.

On the other hand, this works great if you want to keep the VPS more long lived by recycling it.
Hmmm, Not much of an "Attack". It sounds like a child could do this with their allowance money.

Here is the link to the description of the Stop command:
https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CEL...
I think this is actually of great value.
New Belgium Brewery (Also CO... what's going on in CO?) was employee owned but a few years ago they sold and now Kirin owns them now.

Not sure how you can be employee owned and have a parent company. I think the Wikipedia page needs some edits.
Nah, there are plenty of others in this thread on the same page as me here.
Sorry about that. (Not sure which question was yours, but I can believe I was short.) I've always tried to maintain a policy of "no stupid questions," and I don't always respond in a way consistent with that policy. I'm always trying to work to improve.
Tell HN: GitHub is starting to show ads
I do not know when this started, but it seems that ads started to show up on Github.

https://imgur.com/a/wJY0698
Sure, i'm not commenting on the tastiness. Just that I remember balking at the $40 I spent for a pizza there, and am surprised that anyone thinks the prices are "reasonable" when it's likely one of the most expensive pizza places in the entire country.
Thanks! Yahoo’s next after Gmail.
> So why didn’t they start with communication first before trying to hack the system? Good security researchers do that. (Not all of the time, obviously.)

I don't think that is true. I think it would be very unusual for an independent (not a pentester) security researcher to communicate anything before they have any findings.

> It seems like the researchers just wanted to have some fun on a Friday night (like he said). (And there’s nothing wrong with that. But to characterize it as only doing “good faith security research” seems like a stretch.)

I don't get it. Good faith research is fun. Most people don't get into the industry because they hate the work. I don't even understand what you are trying to imply was in their mind that would disqualify their actions from being in good faith.
In Australia, even the road signs will try and kill ya.

https://www.9news.com.au/national/news-melbourne-tullamarine...
Is WebUI for classical interaction(clicking buttons to navigate, displaying text and images) still an unsolved problem?

Are there good reasons to have many more libraries and frameworks? Wouldn't be possible to have a fresh or some specific look by simply modifying an established one?
I don’t think these NFTs give ownership rights either. Reading the SEC order, it sounds like the reasonable expectation of a profit was the issue.
So, how do you plan to commercialize your product? I have noticed tons of chatbot cloud-based app providers built on top of ChatGPT API, Azure API (ask users to provide their API key). Enterprises will still be very wary of putting their data on these multi-tenant platforms. I feel that even if there is encryption that's not going to be enough. This screams for virtual private LLM stacks for enterprises (the only way to fully isolate).
Cancer Runs in Families. Too Few Are Getting Tested.
I really appreciate the way the Howey Test matches the regulatory purpose, its operationalist approach to the question. That it's stood up to nearly a century of scammer "innovation" is admirable.

It does have the drawback of requiring some interpretation, some thought. But I think that's necessary. Rather than requiring regulators to keep creating ever-broader definitions of "security", patching every scammer hole, it throws the burden back on those wanting to innovate. They're supposed to stop and say, "Well what are we really up to here?" And I think that's where the burden should be.

My only real grumble is that the SEC gave the cryptowhatever world too much rope. I wish they had been faster off the mark, so there was less nonsense. But even there I can't complain too much. Generally I want regulators to be cautious squashing new things.
Bitcoin loans? You just need it long enough to make a wash trade.
I never tried to put on the trade (thank goodness) but there was a period of years where Tesla looked like the equity was going to $0. I think as a matter of traditional corporate finance, that was indisputably true, but obviously it did not work out that way in practice.

God bless the short sellers, they’re made of sterner stuff than I am.
setInterval( generateUtopias, 10)
Hexapro by Hexafresh: portable, and energy-efficient compact air conditioner
Not really, digging through the sources show it is really just a single random person interested in local Scottish history posting their opinion on a forum 14 years ago
https://archive.ph/Al43v
Clickbait title :-(
They’re going to be weighting passengers along with their carry on items as part of a survey. Passengers can opt out, the data will be anonymous and no consequences for overweight people.
Any startup that is using ChatGPT under the hood is just doing market research for OpenAI for free. The same happened when people started experimented with GPT3 for code completion, right before being replaced by Copilot.

If you want to build an AI start-up and need a LLM, you must use Llama or another model than you can control and host yourself, anything else is basically suicide.
Indeed, we even still colloquially quote/measure the cooling capacity of air conditioning in "tons".

A ton of cooling being defined as 12000 BTU/hr, or the rate implied by the latent heat of fusion of 1 ton of ice at 0°C being consumed via melting over 24 hours.
require replaceable filters, though. I could see that as a tradeoff.
That would go against the spirit of their statement that OpenAI won't train with your data, so that should mean that they would never do it. At least I hope so.
But not by Bloomberg. He was saying a version of "Everyone should know how to code!"
I'm calling it a conspiracy not because I think you're saying there's a cabal of billionaires doing this. I get that you're trying to pull the popular claim these days about things being "systemic".

My fundamental disagreement is that I don't care about what an obviously biased guy has to say about the media, I think a superhero movie is just a superhero movie and that of course Chomsky sees propaganda in everything, it'd be like expecting a politician anywhere in the world to not try to imply that all things wrong in the world are their opponent's fault.

To bring in a lighthearted example of the impression I have, regarding the sexualized outfit worn by characters in Nier Automata, there's been tons of analysis and whining, and mocking all that and to the satisfaction of most fans of the game, the author, when asked about the decision, pretended to be giving some complex reasoning before just straight up saying that he just likes girls.

It's the same with superhero stuff, the biggest takeaway from Iron Man isn't that irl billionaires are good guys, it's that an exoskeleton that can fly and shoot lasers is really fucking cool.
Perhaps, in no way does that justify a SWAT team invading your home, wrongfully arresting you and threatening you by up to 15 years in prison. Especially when the police officers know full well that the charges will be dismissed...

And anyway, as stupid as his joke was, I don't see (just like the judge) how any reasonable person could've interpreted it as anything but that. Arbitrary abuse of police power is much bigger threat to society than some (potential) idiots posting stupid jooks on Facebook.
I have witnessed man's desire to shoot anything that flies. It was at a shooting range in the military, my group (ie eight soldiers) each had a full clip and were supposed to do target practice. Suddenly two unsuspicious ducks passed, flying at 2 meters from the ground, at a very low speed. Everybody without exception emptied their clip on these birds (all 100-ish bullets missed fortunately, so good for the Dutch army).

Imagine the bonus is a ball of fire in the sky for the winning shot!
I think being a great frontend developer is the hardest thing on the web.

You're dealing with crazy environments, far faster changing best practices, libraries, frameworks, and tooling, increasingly demanding audiences, and any imperfections on whatever you deliver are extremely noticeable.

If a backend developer does a database query that's a little inefficient, odds are nobody is going to even notice that.

If a frontend developer does some animation that's a little choppy and with bad timing, they might have the entire company management crawling up their ass the next day.
It's also fried. So it's a lot like a donut, but instead of the cake-y/ risen pastry that donuts normally contain, it's croissant.
You're returning a string which size might be known at compile time through inter procedural analysis. Too easy.

The secondary stack would better be used for 'functions returning objects, of which you don't know the size, at call time'.

function Any_Number (A : Natural) return String is
begin
if A = 42 return "A = Quarante Deux";
end if;
return "A =" & A'Image;
end Any_Number;

Or for those allergic to begin/end

function Any_Number (A : Natural) return String is (if A = 42 then "A = Quarante Deux" else "A =" & A'Image);
> NFT was just all fake volume... Sell an NFT to yourself for $1m, boom, you now own a $1m asset.

aka "wash trading" (which predates NFT and crypto):

https://en.wikipedia.org/wiki/Wash_trade
I'm all for making us all more efficient, but not at the cost of creating new data monopolies, if possible. The price is very high, even though it's not immediately obvious.

We already have enormous concentration of data in a few places and it's only getting worse. Centralization is efficiency, but the benefits of that get skimmed disproportionally, to the detriment of what allowed these systems to emerge in the first place: our society.
> Somehow finances have to work, which is usually a harsh reality for some. Ex: Hey we can't pay workers $250/hr without raises prices to above what customers are willing to pay

Somehow finances have to work, which is usually a harsh reality for some owners. Ex: Hey we can't have collective payout to investors totaling $10M this year without raises prices to above what customers are wiling to pay.
Well said.

Good co-ops that last have the decisions made by those working there.

And it's a lot of work.
This company is supposedly sophisticated enough to develop AI technology capable of driving their cars.

Surely they can point some of those cameras at the gigapress output with their AI magic rejecting any parts letting light through where none is expected.
How does that work for larger collections? If there’s a market, won’t the market find a price?
As long as the board is compromised of experienced engineers who are writing tests based on what you need to know... Why oh why would they test on UML?
Would be cool for there to be a `llama2.f`, like https://github.com/karpathy/llama2.c, to demo its capabilities
Norfolk Southern Snarled by Positive Train Control Outage
There seem to be a lot of people out there with paper cryptocurrency gains who are happy to use them for absolutely anything that will make more money.
HN is not a good user interface, it definitely shows that it is not being maintained by an expert in front end.

Tables for layout isn’t just an example of a dated web site, it is also an accessibility nightmare which no professional web developer would allow to leave their localhost.
> The Securities Act of 1934 has a "duck test" definition of security - if it is marketed, bought, sold, and held as a money-making thing, it's a security

That doesn't seem right. You're missing a really fundamental part of what makes a security a security. Let's steal the cut phrase from investopedia

> an investment contract, for the purposes of the Securities Act means a contract, transaction or scheme whereby a person invests his money in a common enterprise and is led to expect profits solely from the efforts of the promoter or a third part

Investing in a common enterprise is a really key part.

A random beeple NFT wouldn't meet that definition, even if marketed as "this hot new thing that's only going up in value". The SEC isn't stopping people buying daft things.

> The order finds that Impact Theory encouraged potential investors to view the purchase of a Founder’s Key as an investment into the business, stating that investors would profit from their purchases if Impact Theory was successful in its efforts

This is where it differed from many other NFTs that aren't securities.
Apellis safety probe of eye disease drug needle possible cause of side effect
Full Title:"Apellis safety probe of eye disease drug identifies injection needle as possible cause of severe side effect"
Agreed.

I think they should negotiate a security test beforehand. For their own sake but also to get a buy-in. And if a company categorically refuses, you can then publish that, or share that you worry about a lack of track record in known security audits. That's a professional way to hold them accountable.

Breaking into a system unannounced and then stating "do what I say...OR ELSE", is neither legal nor professional. When you're surprised that this will be perceived as an attack instead of being helpful, I don't know what to say.
I use fastmail.
Yikes, that swipe is definitely not ok. Please don't cross into personal attack, no matter how wrong someone is or you feel they are.

Your comment would have been fine with just the first two sentences.

https://news.ycombinator.com/newsguidelines.html
What benefits does this offer over a Brita/ZeroWater filter?
It's definitely ran by backend engineers judging by piss poor mobile experience (tiny buttons) and contrast ratios.
I don't want tuning or enterprise audits I want GPT-5 with 10x data 10x compute and 10x parameters, or whatever is the most efficient mix.
Prajnaparamita
Non-use of enterprise data for training models is table-stakes for enterprise ML products. Google does the same thing, for example.

They'll want to climb the compliance ladder to be considered in more highly-regulated industries. I don't think they're quite HIPAA-compliant yet. The next thing after that is probably in-transit geofencing, so the hardware used by an institution reside in a particular jurisdiction. This stuff seems boring but it's an easy way to scale the addressable market.

Though at this point, they are probably simply supply-limited. Just serving the first wave will keep their capacity at a maximum.

(I do wonder if they'll start offering batch services that can run when the enterprise employees are sleeping...)
From the article:

“In the 2015 U.S. Transgender Survey, 10% of respondents said that an immediate family member had been violent toward them because they were transgender, and 15% ran away from home or were kicked out of their home because they were transgender. And fewer than one-in-three transgender and gender nonbinary youth found their home to be gender-affirming.”

Surely no consequences being outed to your family.
Oh times have changed. In days past acquisitions of startups by big tech were met with congratulation and adulation. Today they are met with dread and despair.
Maybe I didn't express myself well enough. Do you really find it plausible that the government would know the person's Skype username but not their name? If they can compell the isp, why not Microsoft? They will obviously comply too.
> unless a majority of the workers have a lot experience with business,

That may be the wrong way to think about it. Vanishingly few people have enough experience in all aspects of any business to make good decisions without others inputs. So in many cases we are reliant on someone's domain expertise, not to make the decisions, but to get the the right decision point. Once the pros and cons are laid out properly, anyone with a real stake can contribute to the decision.

The bigger the decision, the more people with a stake need to be involved. In the typical business world this shows up all the time: "that's a board-level decision", "we need all the execs to agree on this one", etc.

We don't know the actual implementation, but it's possibly it's just a reasonable reflection of that practice into collective ownership...
Fast inference of OpenAI's Whisper on Rockchip processors
The tiny.en Whisper model transcribes speech at 30x real-time speeds on an Orange Pi 5.
Oligarchy only works because only what the 10%, 1% (or whatever the cutoff) wants matters so what everyone else wants is per definition irrelevant.
Because I needed a 3-row vehicle, I refuse to buy anything that runs on gasoline, and the Supercharger network is the only viable high speed charging network in the US.
I totally read that with kubernetes in mind.