skysight-inc/HackerNews huggingface dataset:
It means the guys a Lawrence Livermore are investing a LOT of money into technology that is based on physics which directly contradicts Einstein's general relativity, the best tested theory humans have. In my academic experience, government funders are unbelievably risk-averse, and I bet the ones who run major DOE labs are too. They know that equation is actually right, or are extremely certain that this thing will work even without a perfect understanding of it, or they wouldn't invest the cash. More fun facts: that equation contains a term that Jack Sarfatti has introduced (check citation 29 and the first paragraph of page.3). Jack Sarfatti is a UFO researcher, he studies UFOs seriously and writes physics papers on how he thinks they work. So DOE is pumping serious money into tech based off actual UFO science, which contradicts Einstein. Does this mean aliens are real? No. It does looks very suspicious though.
Processing 250TB of geospatial data with Xarray and Dask
Jobs Georg, who has changed jobs 10,000 times in the last three years, is an outlier and should not have been counted.
This is also how the web works, or many other things where you have a standards venue and multiple implementations that contribute to and validate the standard. There may be pros and cons, but I think overall it's proven to be a healthy way of running an ecosystem.

It's also not top-down, either. The Wayland governance model consists of voting members from the compositor authors, and for protocols to enter the wp or xdg namespaces, there must be multiple open source implementations. That means that by the time the protocol is official, at least first implementations already exist. It's not moving that slowly, overall.

Also, the Wayland model doesn't preclude compositors sharing as much of their code as they want. "Implement it ones and several projects benefit" also happens in the Wayland world, for example there are multiple compositors built on libraries like wlroots.

Xorg wasn't the only X11 implementations either. Fragmentation in the X Windows space did reduce over time as the open source impl sprinted and ahead and won out over everyone else by miles, but it did exist for many years. Most people are only familiar with an X11 space that already had 25 years of maturing and consolidation on it.
So guessing you don't own a house in California?

We already have a third waste management stream. Organic waste bins. They are green. Most people use them for leaves, branches, grass cuttings, etc. They have been available since long before this law. My property produces at least one full bin a month from everything that is growing on the property. My neighbor actually has two bins.

I'm single and barely produce a gallon of waste a week and usually less. I do actually have a counter top bin with a lid where I drop cuttings but my property is big enough that I have an actual compost pile. But I STILL use the green bin I have because I can't compost all the tree limbs and sticks and what not in any reasonable amount of time.

Generally speaking a single person's organic waste isn't even worth composting. It's like 1/100th of what a single tree on my property will shed in a season. It will enrich a compost pile because human food is rich in sugars so the worms will love it but expecting everyone to do it is silly.
Malicious Google ads deceive Mac users into installing Atomic Stealer malware
Adoption and a mass of human feedback collected which is not available in the gleaned data sets.

Here’s another way to think about it. Why does ISA matter in CPUs? There are minor issues around efficiencies of various kinds, but the real advantage of any mainstream ISA is, in part, the availability of tooling (hence this was a correct and heavy early focus for the RISCV effort) but also a lot of ecosystem things you don’t see: for example, Intel and Arm have truly mammoth test and verification suites that represent thousands++ of man years of investment.

OpenAI almost certainly has a massive invisible accumulated value at this point.

The actual models themselves are the output in the same way that a packaged CPU is the output. How you got there matters almost as much or more.
I appreciate the response - great blog post. I don't doubt this works for certain companies and components of the ecosystem; it worked for Dropbox (at least for a long time).

Tailscale is clearly a superior product to it's competitors and I have regularly recommended colleagues and clients to evaluate whether it fits their needs. However, unfortunately, that is frequently not enough to "win" in the crowded and bureaucratic enterprise software space.

I would love to be proved wrong here and wish you the greatest success!
The last monitor I bought had a QR code to scan for quick start instructions. The QR code went to the wrong monitor! After that I searched for mention of that in existing reviews and only found one person in Amazon who mentioned it. People didn't really read manuals before and I don't think they're scanning QR code manuals nowadays.
People will standardize the wayland implementation, just like they standardized the X11 one.

To tell you the truth, I'm not even aware if this is underway, or whether the computer I'm using right now uses some flavor of x11 or of wayland. But you can be certain that if every distro adopts it, every distro will have the same flavor. That problem is for early adopters only.
Yeah, yeah I have heard this time and again. Do you know what critical code you’re talking about? I’m not hard to search: https://duckduckgo.com/?q=loup-vaillant+cryptographic+librar...

And yes it is a risk. And yes I had one critical bug in 6 years, the horror. I did it anyway because it was pushing the Pareto envelope (speed/size mostly). And of course I knew what I was getting into, which is why it is not a weekend project, but a professional grade library. More explanations on my choices here: https://monocypher.org/why/

And by the way, Monocypher is currently being used to operate the TKey from Tillitis. https://tillitis.se/products/tkey/ Good luck porting libsodium there.

---

You do have a point however: actively distributed critical software with no one being liable is an anti-pattern. Though strictly speaking, my code is only critical when it starts being used, so… we’re going back to the place of amateur work: if you want to use my code, you can pay me to get a license that does not waive my liability, or you can pay someone else to audit my library, or you can be liable yourself. And if I sell my code, I should indeed be automatically liable.

The point with my example is that with proper legislation, even cryptographic libraries can continue being open source.
Here are my current solutions, mostly:

1) I live in the EU with 240v mains and can pull 3600W from a single circuit and be OK. I'd also likely just limit the cards a bit for power efficiency as well as I do that already with a single 3090, running at 300W vs 350W max TDP makes such a small difference in performance I don't notice; this isn't gaming.

2) Still may run a dual PSU, but with the CPU below and the cards at 1200W i'd max at around 1600W, add overhead, and there are some 2000W PSUs that could do it. Also being on 240v mains makes this easier on the PSU selection as I have seen many can source more wattage when on 230/240 vs 115/120.

3) I'm leaning towards a Supermicro H12SSL-i motherboard which I've seen people run quad A5000's on without any hassle. Proper PCIe x16 slots spaces 2x apart, and i'd likely be watercooling all 4 cards together in a 2-slot spacing or installing MSI turbo heatsinks with blower fans / server rack style for 2 slot cooling.

4) See 3. AMD Epyc 7713 is currently this choice with 3200mhz ddr4 giving the memory bandwidth I need for a specific CPU workload as well.

I'm just currently trying to figure out if it is worth it dealing with the massive import duty I'd get hit with if I bought the H12SSL-i, RAM, and the EPYC from one of the many Chinese Ebay resellers that sell these things at basically wholesale. I get hit with 20% VAT plus another something like 20% duty on imported computer parts. It's close to the point where it would be cheaper for me to book a round trip flight to Taiwan and take parts home in my luggage. People in the USA don't realize how little they are paying for computing equipment, relatively.

So, minus the potential tax implications this can all be done for about 8000 EUR.

I do computational fluid dynamics work and am working on GPU-assisted solvers, which is the reason for the 64-core EPYC as parts of that workflow are still going to need CPU threads to pump the numbers to the GPGPUs. Also this is why I don't just run stuff in cloud like so many people will suggest when talking about spending 8K on a rig vs $2/hr per A100 at Lambda labs. My specific work needs to stay on-prem.

All told it is less than two A6000's at current prices and is a whole machine to boot.
It worked out of the box on my Arch install. I'm running a LUKS volume which holds an LVM with the ext4 fs for the system and the swap.

I'm also running TPM + PIN / FIDO2 unlocking.

Didn't need to fiddle with anything. The most part of this install was going through the manual process of creating filesystems and whatnot.

Bonus points compared to Windows for actually staying asleep instead of randomly waking up while in my bag.
Great initiative, but it feels like they're not quite eating their own dogfood. This post contains a link titled "highlighting blog posts from HN users" which goes to Twitter — a massive centralized social media app that's pretty much the opposite of "small web".
I share your sympathy for Wayland over X11 for bringing the Linux desktop into the 21st century (VRR, mixed DPI, …).

But you're flat-out wrong about Windows. It supports any of those flawlessly and with backwards compatibility.
Tell HN: Instagram keeps logging me out because they think I got phished
I keep logging into Instagram on a Macbook via Firefox, only to be told they think that my credentials got phished. I go through their reset password steps and then try to use the website, but get kicked out immediately and forced to go through the same process. This has happened a dozen times over the last 24 hours. I'm afraid that this will lead to me getting locked out of my account.

I don't have a smartphone and only access Instagram on a macOS via Firefox. I have browser fingerprinting turned off, use DNS over HTTPS, and my network only uses IP4.

Once, in the reset password handshake, I got redirected to http://[::1]:8872/challenge/action/ which suggests to me that it might be because my network used IP4 and not IP6.

Does anybody else have this experience? Is there anybody who works for Instagram that can communicate to whatever team that whatever machine learning algorithm they released this week is broken?
The haskell learning-curve graph seems quite accurate. I'm over in the "happy pythonistas" camp.
I tend to view the opposite. An individual is way easier to manipulate than an entire platform. Anybody who gets free products is immediately tainted. Project Farm says he pays for everything but all we have to trust that is his word. If you trust him, why don't you trust RT when they ban the company that paid for the reviews and say, "we take the integrity of our platform seriously"?

The more reviews that go into a rating, the more effort has to be made by bad actors to influence the score. And the higher the possibility that someone with integrity will reveal the scheme.
KDE/KWin does.

Ultimately, Wayland is where all the energy is. It has shortcomings but is good enough and all future work (HDR for example) is going to be done on Wayland.
Taxi Fallacy
Maybe a relic of past times, but:

Dollar Shave Club has raised a total of $163.5M in funding over 7 rounds. Their latest funding was raised on Nov 19, 2015 from a Series D round.

https://www.crunchbase.com/organization/dollar-shave-club/co...
I’m pretty sure that ransomware and other tactics that largely end with a significant crypto transfer is their end game. Evidently, they are really good at it - $1.7 billion in 2022.

So anything to slow down the researchers are my guess. Keep the drain open, so to say. Just my two cents.

https://www.cbsnews.com/amp/news/cryptocurrency-hackers-stol...
I'm sure Taleb has more to say, but I would say that whether a restaurant survives has a loose correlation to the quality of the food. Especially in NYC. There are plenty of thriving restaurants that will serve you garbage food with bad service (Anything in Times Square).

The point is that commercial success in a variety of industries is a result of a variety of factors, product quality is frequently not the most relevant.

That is: a restaurant owner can correctly say that another restaurant has excellent food and service without that being an endorsement of the restaurant's ability to survive as a business.
I'd expect them to be documented somewhere, so that I could be sure that they're not gonna be swapped or map to some other buttons (and not have to find out about it through trial/error or blogs/reading GTK's source). edit: edited my original post to be more clear
Texas Grid Paid Firm to Stop Mining Crypto During Heatwave
All Lisp related stories, especially those that refer to the creator of Lisp, get automagically upvoted.
Attachment is suffering, attachment is love
> This is more about blending in among GUI tools, which is also important.

This is what I find difficult to understand, why is that important? And to whom?

It made sense 35 years ago when MS-DOS was shipped by default and you just had to make do.
A VPN only makes sense if you trust the VPN provider more than your ISP, if not you're only making things worse.
It works fine with secure boot enabled on my arch install.

But I do use a unified image which the UEFI boots directly (EFISTUB, no grub or anything). I don't know if that makes a difference.
I'm one of the people who does not comment on these matters because things "just work" on my machine, but I'd like to say my thoughts as well. Wayland is fine. I still am using i3wm (X11) currently, but Wayland works perfectly fine. There are a lot of things going in the right direction, and I consider Wayland clearly superior. There is absolutely nothing holding me back from switching. Yes, there are minor inconveniences like the lack of a hardware accelerated cursor. Sometimes my compositor crashes on some very old programs that still use GTK2 or some old framework for some reason, but everything outside of that is completely stable and usable. If I don't know something, I ask or browse the wiki, search up alternatives for existing X11 programs, and try to fix stuff myself. I am using the proprietary NVIDIA drivers and it works. I don't have multiple monitors, my resolution is 2560x1440. Things are fine, and they will only get better.
You are uninformed. I heard that food consisting only of sugar and fats has nothing to do with obesity. /s
You can now launder GPL code with the confidence that Microsoft's world class legal team will have your back if you're sued for it.
Meanwhile they strike deals with news agencies to use their content to train on... This is of going to be a hard fight, but I really hope this ends up costing MS.
My favorite example is the maker of brew (used by 90% of google engineers) wasn’t able to get a job there because they asked him a bunch of questions that don’t actually pertain to writing useful software.
> Just then, a bandwidth load as heavy as a pregnant elephant sits down on Manfred's head and sends clumps of humongous pixilation flickering across his sensorium: Around the world, five million or so geeks are bouncing on his home site, a digital flash crowd alerted by a posting from the other side of the bar. Manfred winces. "I really came here to talk about the economic exploitation of space travel, but I've just been slashdotted. Mind if I just sit and drink until it wears off?"

- Charlie Stross, "Accelerando"
The place has a CEO, made communication to Tim cook, been featured in Wired, put up massive scare mongering examples of bad people, made vague claims of a large organization. (collective effort of concerned child safety experts and advocates) [Prior instance of their page claims researchers, experts, and advocates].

All this and they're solely focused on a small corner case of 1 business and somehow their google presence is just not there.
So if Ubuntu is pivoting hard into big corporate/govt

Who’s the new big community desktop distro?
The "development interest" in Wayland is still mostly carried by corporate full time paid developers. Wayland as such has had zero community mindshare in the FOSS ecosystem (until Hyprland came along but that is literally just one guy). And for a reason: The protocol is not suited for Desktops at all. It was developed for car entertainment systems and mobile phones. As a result it makes things that should be simple (like creating a window, printing a string, taking a screenshot) incredible hard for developers.
Hi Omar - thanks for engaging here. I have a similar question to simonw, it _feels_ like there is something useful here but I haven't managed to grok it yet, after sitting through the tutorial notebooks.

Specifically, to your description above, I'd love seeing specific retrieval examples, where you need more-complex pipelines. Zero shot QA (1-step), few-shot QA (2-step), retrieval + few-shot QA (3-step) all make sense, but when the README starts talking about demonstrations, I can't really follow when is that actually needed. Also, it starts feeling too magical when you introduce "smaller LMs" since I don't know what those are.
I think its' quite common to believe that a rewrite will be wonderful and then find out that it has its own problems.

The big problems are the social ones - I think the author is correct that allowing fragmentation is a big big mistake that cannot be recovered from and wastes everyone's time.

I'm also concerned about the "justify your usecase" issues. I know why people like to say that kind of thing when they have a philosophy that they don't want to toss out but to me it's never been a way to win people over to working on your system. Usually one cannot understand every single use case or at least understand how important it is to the people who want it. Making life difficult for others is not a recipe for success.
It's using the GPU so I guess not that many CPU threads are needed to feed the GPU.
Because some people find it interesting. Same as everything else on HN's front page.
I think the problem is that the Chinese alternatives to ASML DUV are close to being good enough. And a ban just would cause ASML to loose the market for good without actually hurting the Chinese industrial capacity.
The speculation I've seen is that they're intending to steal someone's research, weaponize it, and using it against their adversaries.
Mullvad has been doing a lot recently and I'm really loving it. It kinda seems like they are building a decentralized open source ecosystem through partnerships with other companies that are seeking similar things. Which really seems like the "hacker"'s dream (people liking security, not crackers). I wonder if we'll see Matrix next or Signal? (highly doubt Signal, but one can dream that the ecosystem is moving speech will actually mean something). I'd love to see a world of open source open protocol products working all in harmony. I just never really expected to see that until we got relatively close to a post-scarce society.
If we could create bags with some sort of material derived from cellulose or wood, we'd be golden.
Too bad I can't pay Tailscale in cash like I can Mullvad.
Total speculation, but:

> North Korean threat actors used social media sites like X (formerly Twitter) to build rapport with their targets. In one case, they carried on a months-long conversation, attempting to collaborate with a security researcher on topics of mutual interest. After initial contact via X, they moved to an encrypted messaging app such as Signal, WhatsApp or Wire. Once a relationship was developed with a targeted researcher, the threat actors sent a malicious file that contained at least one 0-day in a popular software package.

In the past, actors would release something, watch it spread, and see what reports back. Sometimes detonation would be limited to certain IP ranges or institution types, but broad deployment would quickly put itself on the radar of security researchers and someone would sound the alarm.

I'm thinking this targeted approach works like doctor-shopping: you find the most paranoid people you can and see if you're able to exploit them. If you pull one over on them, then the unsuspecting won't stand a chance. If they do catch on, you run away, iterate on your approach, and try it against another researcher who doesn't know you're making the rounds doing this.
Paul Graham says you shouldn’t care and they will probably fail:

https://twitter.com/paulg/status/1697761812698034630?s=46

https://twitter.com/paulg/status/1500779743804903427?s=46

Of course he’s completely wrong, but YC won’t really do anything about it (except maybe reap the benefits)

For what it’s worth, I’m sorry this happened to you, it sucks

At the same time, seems like you might be onto something and should just keep going strong

Also, maybe you could apply to YC, they usually don’t care about funding competing companies
Definitely not.. for one Bitcoin has a fixed supply and Ethereum does not
I don't know why it is just GPL people talk about. MPL, Apache, MIT licenses all have additional terms beyond a basic public domain equivalent license. None of those terms are being respected.
A free press means: you can go buy a press, issue a newspaper as of tomorrow (or a website, for that matter) and write there whatever you want, and until a judge is involved nothing can or will be done about barring some emergency order.

Who owns ANP nieuws has nothing to do with whether or not the press is free.
It's an actuarial calculation with good statistics on (for governments and large corporations) very large populations. So the estimates are accurate. But mostly, defined benefit pensions do not go the the heirs, so there is more money for the people getting the pension.
That’s interesting.

In the US spam calling is so prolific I assume anyone using my area code is a spammer spoofing. Though it helps that I don’t live where I got the phone number anymore.
> Defined benefit pensions are also largely a product of a more paternalistic time when there was an implicit deal of spend your career (or at least a big chunk of it) working for us and we'll help take care of you in retirement.

There's no reason you can't have portable DB pensions (you'd need standards for employers set by the plan, and a common DB plan, but in a way that's how many non-federal public DB plans already work—they serve multiple different public sector employers.)

Its a policy choice not to do that in a way which provides universally portable plans covering private as well as public sector employers.
I'm thinking they are hoping to find exploits that the security researcher(s) are working on, and may not be known to others (use a 0-day to steal other 0-days).

I'd presume that a decent security researcher's laptop would have much more valuable things on it, compared to Bob the Waiter's laptop.

Educated guess. Grain of salt, etc...
How to Write Your Own Email Server in Rust
Browsers do that for a good reason.

They used to do the protocol, username, password, host, pathname, etc. But scammers used it to have a user name that looked like a well-known URL, while actually directing the user to a domain under the scammer's control. Not honoring the spec was therefore a security feature.