skysight-inc/HackerNews huggingface dataset:
Look into vllm and text-generation-inference

Why not use an API though?

Some to check out are:

Replicate, Together AI, Fireworks AI, Deepinfra, Anyscale Endpoints
Was just wondering why my Mac wanted to update (since it felt I updated it very recently).
It’s a decade+ long problem asking for a solution.
Not just this one site, Amazon, Google etc are littered with fake reviews and none of those companies are concerned.

If these companies don’t get their act together soon, I’m sure the Govt of various countries will compel them to do so.
I don't think there are many options here:

- They can't get to X freer country as that's just difficult for all North Koreans

- They likely can't just stop hacking for carrot and/or stick reasons. They are likely closely monitored.

- Maybe some people drink the kool-aid. I'm sure these people are very well compensated.
> Apple is aware of a report that this issue may have been actively exploited.

> CVE-2023-41061: Apple

So if Apple discovered this bug, and Apple saw it exploited in the wild, the question needs to be asked... How did Apple find it in the wild? Was one of their own employees phished? Do they have monitoring on every phone to upload suspicious binaries running as root to the mothership?
That sounds good, but then remember that someone will point a finger at some political figure and refer to them as a Nazi. Are they? Is the finger enough? Are you looking at the finger and not seeing the person?

My basic point is that when you combine two very popular flavors of the day ("punch/kill Nazis" and "that person is a Nazi"), you get a recipe for more or less random bloodshed based on little more than conjecture. It's like the Satanic Panic of the 1990s all over again, driven more by self-righteous bloodthirst than reaction to anything anyone has actually done.
Is it possible to use this technique for compression? For example, if we created a dictionary of the most commonly used words / phrases, then we could drastically reduce space. You would still need to store the dictionary but that's a one-time cost.
You don't need an economics course when this book exists for free

https://mises.org/library/economics-one-lesson
What gives bears the right to kill all that salmon? What gives viruses the right to harm little babies!

Life isn't fair.
… actually a really nice example of what modern biomedical research looks like.
The wealthy and their money and the corporate branding behind both infiltrate any edgy cultural thing that becomes in any way popular and they always have, regardless of that cultural thing's political leanings and postures..

To a certain extent or at least beyond a certain point, it's just an inevitable dual parasitic symbiosis of convenience that both end up embracing..

I can't think of a world changing artistic and creative movement in the last 130 years that hasn't slid right down this daisy chain. The very phrase "selling out" was born within it..

Most of the great expressionist and abstract painters of the 20th century painted themselves as anticapitalist almost to a fault, it didn't stop their art from being promoted by rich, connected players in the business and philanthropy worlds until it became financial playdough for the status-seeking billionaires of today... How many other artistic movements went down similar paths?

Simply being rich is emotionally no substitute for being involved in the rich texture of interesting cultural edges, but if you lack the creativity to start within them, you simply buy your way in, even if everything about your life and activities goes against the very grain of what those creative cultures tacitly aspire to stand for.
I don't have an opinion. I am legitimately surprised that very easy problems in AI research have not already been solved with some foundation model. Translating and optimization of code from one formal language to another seems like a very obvious application of AI and yet most of the work is still done manually.
I'd love a template for:
1. Select internal document sources you want to ingest (Notion/Slab, specific Slack channels, named Google Docs in a folder)
2. Enable Q&A + augmented retrieval in response
3. Serve to end users in a Slack channel at our company
Actually, an argument in favour of using pigs (apart from the fact that they biologically well suited) is that we already breed and slaughter hundreds of millions a year for food so that the public would probably have little objections if we bred and slaughtered a few more to save lives...
Id say i trust the competence of government in this arena more than that of parents on average. If someone is working on policy day in and day out for tech related things, they will have a better lay of the land than the average parent. However, you bring up a good point about ethics. A parent will definitely be far more acting in the best interest of their child compared to the government. An interesting quandry, good point
Cannot recommend it enough, fair warning though, I have realized I watched a few videos too many on more than one occasion, Asianometry becomes a dangerous time sink way too easily.
Heh, the creator of Lisp probably was "God enough" to redef constants as he saw fit.
Without a magbetosphere it's pretty useless. It would just lose its atmosphere again within a few hundred years.
I thought it wasn't possible to bypass the BGW due to certs?
I get shipping and delivery notifications from Zara because someone (accidentally I believe) entered my number when ordering. It’s sort of creepy because it shows me their address and I see a photo of the package on their doorstep.
What’s New in Artificial Intelligence from the 2023 Gartner Hype Cycle
There are alternative devices with open source platforms, and with RISCV it will be about time.
i find myself thinking that numerous times a day (not on HN only), and it occurs to me that this acronym might itself not be known, since you'd have to RTFM to figure it itself out.
check the zerodium pricelist for a general guide: https://zerodium.com/program.html
I've got one who keeps forgetting he's got numbers on the end of his email address. He's a sheriff in a southern state. Also an idiot.

What's doubly annoying is the US gov is pretty lax at things like unsubscribe links, so I keep getting notifications about his Medicare account that I can't unsubscribe from.
Yeah, it's kinda funny Facebook is the one that released lots of stuff to the wild, not just llama
Since 2014, nations with a strong vested interest in Ukraine not falling threw a lot of resources at strengthening the country's infosec.

Also, during a kinetic conflict where you're invading, it's often more strategically valuable to lie dormant in their networks than it is to scorch them, a la America sitting inside of Iraq's phone networks and just listening.

There's a lot of work being done now to change it [1], but I've heard from multiple cybersecurity grunts in critical infrastructure that they just assume foreign APTs are in their networks. Strategically, why in the world wouldn't they be? There's basically no downside other than burning TTPs. We should damn well expect the NSA to have their fingers in every foreign pot they can reach.

[1] To be fair, there was a lot of work before too. But now people are more scared.
True, but in my case, reliability and even price (per month) of going to 10 Gbps vs. 25 Gbps is the same.

And what I see as a use case - is when multiple people in my household would do heavy downloads simultaneously. Also, I hope I will get better-downloading speed (Steam, GoG, etc.) as with modern games, it becomes more critical, and I'll be keener to play and remove a game if I want to put in on pause, compared to keeping 3-4 100+ GB games installed at the same time.
Into a popular repository yes, but into a small tool like that it would most likely be very possible.
HN keeps throttling after 2 comments. Maybe they need more AI to detect bots instead of whatever algorithm they are using at the moment.

Back to the question at hand. How exactly do AI companies plan to build AGI if they can not optimize the AI development loop with their tools and techniques?
Did anyone manage to snag a copy before it was pulled ? I'd like to generate some SIGMA rules against it. Any other detection engineering ideas?
Do not care about ML side much but having Rust like features with Python syntax will be fun. Plus tooling will obviously be top notch.
Congrats on the release! Two questions.

1) In the results table, Llama2 base is being compared to Persimmon base and finetuned, and only the latter performs better. Would a comparison to Llama2-chat be possible/fair?

2) The Llama-2 numbers for MMLU in that table seem different from those in the HF leaderboard and the Llama-2 webpage presentation. Is it the 1-shot variant that is different or are these measurements not 100% standard and reproducible?
> Last week, while checking the device of an individual employed by a Washington DC-based civil society organization with international offices, Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware.

https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...
One thing that's often not mentioned is - how to deal with experimental APIs and such? You don't want to mark them as experimental indefinitely, and you don't want to force an upgrade if the experimental API didn't change when stabilizing.

The best solution I've found is: each compiled library doesn't just have a single API, but rather has multiple.

libfoo-1.2.3 might implement the following APIs:

* libfoo-1.0

* libfoo-1.1

* libfoo-1.2

* libfoo-1.2.1 (because people don't actually use the "no API additions in patch releases" rule)

* libfoo-1.2.2

* libfoo-1.2.3

* libfoo-experimental-1_2_3 (no semver in the version here)

and if you enable experimental exports for the library, you gain a package-manager-level dependency on libfoo-experimental-1_2_3. Then later you can declare "libfoo-1.3 includes libfoo-experimental-1_2_3", so old programs can use newer libraries without change.

That said, mutable metadata is still an important part of the ecosystem. Blacklisting is essential (since the symbol-list isn't actually the whole API and it is impossible to automatically detect violations), but easily abused for "that's insecure" and "I don't support that" purposes so there should be some friction.

Note also that ABI (and sometimes API) is fundamentally platform-specific. And there's enough complexity in the world that the tooling shouldn't think in terms of semver, but rather arbitrary compatibility DAGs (but with sparseness when possible). Consider the GCC 4.7.0/4.7.1 std::list breakage that was reverted in 4.7.2, breaking software that was compiled in the mean time (the only reason this wasn't catastrophic is because nobody actually uses std::list) - that intermediate software needs to know it can't use new binaries.
The state tightly controls who gets internet access. The agents would be thoroughly vetted, and/or given a life they could not otherwise have and an implicit threat to their family's well being if they were to misbehave. They probably do have some idea of what life is like outside their country, but are either conditioned to look down on it or terrified of trying to escape.
> another comment suggests PlatformIO + VS Code allows you to avoid the Arduino IDE.

s/allows you to avoid/is highly preferable to/ :-)
Drat, archive.org didn't snag it. Do you happen to have a copy? https://web.archive.org/web/20230000000000*/https://github.c...
This is the XGS-PON bypass, GPON bypass is different and 802.1x (cert) based. XGS-PON just requires cloning the serial number and MAC of the RG.
no code or dataset either for phi-1.
Isn't Messages E2E by default?
The market doesnt reward to, effectively.

The real thing is to treat a product as a sustaining engineer product, so minor new features, catering to the users you already have rather than trying to chase growth, etc.
I'm not in general (though I've tried to scourge it from my vocabulary) but I think it's reasonable to set the bar higher for government agencies. :)
This tailscale press release claims you can forward nonstandard ports with this configuration. Who knows what that means or even if the copy was just approved six months ago or what.
Many people with ADHD suffer from rejection sensitive dysphoria - often an unexpected "no" will wreck their day. Limiting dependence on others and over-preparing for a big ask is a way to protect their own mental well being.
Amazon Renewed. But Ebay has them as well. Often a bit cheaper on ebay. If you spend a bit more time searching.
> why the media downplays them

Perhaps you meant the media for some specific country, but news media in Japan do seem to take North Korea quite seriously, and missile launches frequently ends up being the first headline on NHK world news.
Because... it's private code. Can the company be 100% certain there are no passwords, DB keys, other company secrets in it? Can they be certain there's no personal employee data? Internal product names? A hundred other similar concerns with proprietary IP? Regardless of how the LLM transforms it the individual bits of data are still there.

On the other hand if the repo is already public on Github then exposing it via an LLM is not introducing any new security risk.
it's precisely the copyrighted aspect i'm interested in using to justify the redirection of the profits toward universal basic income - there's no way to solve the fractional royalties of how much revenue to distribute to individual contributors to the datasets; practically everyone online contributed to the datasets to some degree

Japan has issued guidance that they won't use copyright law to dampen the pace of innovation, they are giving free reign to the innovators to capture any wealth produced as a byproduct of publically available (but copyrighted) data

USA has the strongest intellectual property protections in the world, I hope we can do some good with it (as is I see copyright preventing more art from being made than it incentivizing, and I'd rather abolish it, but not before a basic income is in place so that artists don't have to feel like their creative work is their only asset they have to hold onto and protecy)
iOS can send diagnostic logs and crash reports. If the exploit crashed the app instead of running successfully, then that would likely appear in the report. Unusual stack traces can indicate RCE or other exploits.
>TLJ: cultural elites liked the whole burning the sacred texts thing, normies hated it.

Wouldn't the "cultural elites" in this context be the hardcore Star Wars fans who hated everything about the new trilogy, and Luke's disillusionment arc in particular, and the "normies" be the mainstream fans who really didn't care?
> I'm sure that the argument could be made that all AI should be illegal as all ideas worth having have already been had

From https://en.wikipedia.org/wiki/Copyright:

> Copyright is intended to protect the original expression of an idea in the form of a creative work, but not the idea itself.
> side step copyright protections

So, are you saying people should only obey the laws they agree with when those people feel they're morally justified higher than those who voted for the laws in the first place, because it's your opinion to do so or did I not grok what you are saying you support?
yeah you'd be obligated if you wanted to use the seats. and there's no reason to defend the idea, it's not like they were doing anything other than try to make more money. Because it's not software that needs to be updated or anything. It's a straight up physical device that was sold as a subscription to make more money period.
You can consider your best token predictor as a lossy compression of the corpus it was trained on.
Fibonacci Word
Disney is definitely active in shaping narratives on Rotten Tomatoes. The best example is probably The Last Jedi, which has had several people document the removal of negative reviews multiple times.
Interestingly, no kernel vulnerability or anything is mentioned.

As far as I know, any parsing code for iMessages should run within the BlastDoor sandbox – is there another vulnerability in the chain that is not reported here?
iMessage or android messages? iMessage is E2E by default, unless one or more parties own multiple apple devices, in which case apple stores an encryption key on iCloud and maintains E2EE connections with every connected Apple device. This changes if you turn on Advanced data protection-- then iCloud no longer has the ability to decrypt messages. Somewhat unrelated but ADP is off by default as most customers do not want or need this.
How is that related? Encryption doesn’t really protect against malicious payloads being sent. Quiet the opposite actually as they can’t be scanned / stripped on the server.
Senate confirms Anna Gomez to FCC, breaking deadlock
I wonder if the lockdown mode would have prevented this attack?

Has an iPhone in the lockdown mode been hacked so far, using a zero day vulnerability (not tricking the user to install a malicious program)?
They're slowly rewriting the whole thing in Swift which should eventually eliminate most of the non architectural attack vectors. Most of them were mitigated in iOS 14 where they did some rather large architectural changes.

Edit: Further info: https://googleprojectzero.blogspot.com/2021/01/a-look-at-ime...
I think some of the vitriol hurled was over the top, especially given that folks can just fork the project and move on -- isn't that the whole point of OSS? If it were a closed source product it wouldn't have even necessitated much of an announcement. Disregarding the specifics of who worked on this, I think this sort of reaction can only be discouraging to OSS maintainers as a whole (much as I agree that the change wasn't handled great).
RCS is E2EE: https://support.google.com/messages/answer/10262381?hl=en

Though it can fall back to SMS in case you don't have data, which isn't E2EE. I'm not sure what the UX flow is like in that case, whether it warns you and asks for permission to send over less secure channel.
That’s the first in a series of articles. The next article in the series states:

> the regression … can explain the Electoral College drop-off Clinton experienced relative to Obama based on some simple demographic variables and the 2012 vote alone.
Sosumi from steve jobs fame is a meme I hope to recycle some day if I ever have fuck you money lmao
I guess there is something now called "Rich Communication Services (RCS)"[0] in Messenges which supposedly is e2e encrypted.

[0]: https://support.google.com/messages/answer/13508703?sjid=102...
The problem is a bit deeper in that these workers were paid less while employed on the basis that they'd have a sweet pension. So the government employer double dipped on faking their finances.
1075 does not appear to require that access VPNs use FIPS cryptography. Arguably, it would if you were relying exclusively on WireGuard for data protection, but it's uncommon for people to do that (we're WireGuard true believers and we do in places depend on WireGuard authentication and encryption for our security model, but it's a weird enough thing to do that we notice it when we do it).
macOS users: what have you installed with brew?
You can get a list of all installed formulae that are not dependencies of another installed formula via `brew leaves`

Here are mine:
age
age-plugin-yubikey
bat
cmake
fd
ffmpeg
fnm
fzf
gh
git
gnu-getopt
go
jq
lazygit
lsd
neovim
pinentry-mac
qrencode
reattach-to-user-namespace
restic
ripgrep
rustup-init
starship
tmux
tree
ykman
yt-dlp
yubikey-agent
zoxide
zsh
zsh-autosuggestions
zsh-completions
Apple lost $200B in two days after reports of iPhone ban in China
Yeah it is irrelevant but tw04 brought it up.
Processed foods high in emulsifiers linked with heart disease
And the whole point of having a government of London is because it's a huge city. If it was just a large car park it wouldn't need a government. The city is for people, and people both like trees and benefit from many properties of these trees such as their ability to absorb rainfall and provide shade as well as positive contribution to air quality (well, unless you're allergic to tree pollen) so it makes sense for the city government to look after them.

This is therefore a reasonable expenditure of some government resources. Just as when they paid "Royal de Luxe" to perform The Sultan's Elephant over several days. The Sultan's Elephant is street theatre, an enormous mechanical elephant, a giant little girl, and some other apparatus turns up, the puppeteers from Royal de Luxe operate these puppets to tell a story for the entertainment of just... everybody who happens to be there, it's on public streets, it's not ticketed, it's not in some arena or screened off area, it's just in your city where you live and/or work. Perhaps you came specifically to this part of the city to see the giant little girl, asleep so peacefully, or perhaps you were surprised to find your journey interrupted by an enormous elephant walking down the street when you went to buy lunch, it doesn't matter, this sort of street art is a reasonable investment.
Good ol pegasus they keep being on the news about spyware
Almost any "rationalist" blog - many of which, including Scott Alexander's, are now on substack - serves as an example.
That's Google today. Especially considering the subject.
>Critics aren't a proxy or predictor of some objectively verifiable outcome

Critical Drinker ones usually align quite well with both my opinion and the audience score.

The guardian came with the following real headline in 2019:

>Forget Joker: here's the film you should see about an extremist loner
While Todd Phillips’ vacuous DC origins tale fails to go beneath its grimy surface, low-budget drama Cuck offers a braver alternative
It does. The page even recommends lockdown mode as a mitigation for affected parties (people who aren't updated)
If feels a lot like hitting a sniper shot at insane ranges. You can know all of the theory, but actually doing it is a different ballgame
> critics who have to see 20 movies based on the same formula a year will be sick of it.

Imagine applying that metric to any other job.

"Fuck, this is the 20th React component I've had to build...I'll just do it shitty instead."
As anyone who’s been near government data publishing or asset tracking works attest - That’s a sure fire way to either publish stale/wrong information or simply lose trees.

I’m not in London but surely there is more than 100k in public policy good to be had in promoting trees as assets that are worth stewarding well. Is population scale care for trees with a month of arborist days?

Urban forests make air conditioning work. Consider it an indirect investment in power grid resistance.

They also help surface drainage. Consider it an investment in roads and stormwater.
London GDP is about £500 billion. They’ll need this info to maintain the trees in any case. If it cost 100k, it would be 0.02% of GDP. For the difference trees make to urban areas, it would be utterly trivial. If you made £50k cash after tax a year (so closer to 80k before tax), it would be £10 a year, that’s the fraction.

Of course it costs far more than £100k to maintain this data.
No that's not true.
Google just fails miserably at anything social, but almost every chat attempt from them eas encrypted, and now they are pushing RCS, which is also E2EE.
Yes well I'm going to be paying approximately $1 per kWh consumed if my provider's pricing plan is approved.

Which is ridiculous.
The main application here is to force myself into solving those problems :) I have plans on what I'll do after. As with a 25 Gbps router comes a 25 Gbps home NAS, then I would want to have decent latency for packet processing and I hope all of that would force me to do something interesting :)
Does ITAR apply to starlink?
I've never used Tailscale or Mullvad, I do use a VPS and Wireguard that I configured and run. I'm wondering if people working at Tailscale or Mullvad could snoop on the traffic passing through their servers?