skysight-inc/HackerNews huggingface dataset:
Fair enough; perhaps it’s fair to say that given a specific application or lens type, a more expensive one will generally be better than a cheaper one. For example, you can get any prime or zoom you want from Canon as a normal or L variety. The latter will cost about 10x as much, and will be better. 10x better is subjective.

On the flip side, my favorite macro was a Sigma 105mm prime. Tack-sharp, and cost well under $1000. Of course, I’ve never shot with the equivalent Canon L (which isn’t quite the same at 100mm, but close).
It isn't more secure if you use a secure password with the standard way of auth today. Especially not theoretically what relates to cryptography.

Some common attack vectors like phishing would be more secure since you more or less automatically generate different credentials for different services, just as you get different access tokens from your oauth service. Token theft is an issue too, but only ever partially compromises you for a limited time.
I see the edit but I think you might not be too far off. I get the impression that businesses whose customers are engineers can be some of the most difficult to satisfy. Perhaps its easier to focus on the larger customers going forward.
Very ironic that he's on the HN front list when the UK govt has decided to cancel HS2.
I think if you revisited the Dijkstra quote you might find that you dismissed it a bit too easily.

In a way it's saying the same thing that you and I have said, just a bit more generally and eloquently.

In another way it's wisely asking us, "so what?".
tc is the way to go if the options are sufficient. You can bridge two interfaces (also virtual ones) in a VM and set qdiscs. Also works asynchronously, e.g., different rules for up/downlink. Instead of a VM setup one could use a cheap linux/openWrt router or an SBC-type board.
Counterpoint: Journalism is dead and has been replaced with algorithms that supply articles on a supply and demand basis.

"25% of the potential target audience dislikes AI and do not have their opinion positively represented in the media they consume. The potential is unsaturated. Maximum saturation estimated at 15 articles per week."

A bit more serious: AI hasn't even scratched the surface. Once we apply LLMs to speech synth and improve the visual generators by just a tiny bit, to fix faces, we can basically tell the AI to "create the best romantic comedy ever made".

"Oh, and repeat 1000 times, please".
I don’t agree with his argument against consciousness.

You could imagine a thought experiment where a human is woken up in a sensory deprivation tank, asked a single question, and then having their short term memory wiped.
It would still be a conscious experience.

I’m not sure if LLM’s are conscious or not but it just doesn’t seem like a compelling argument.
Isn't this the same failing that prevents us from funding basic research or infrastructure? It obviously has positive ROI, but because you can't estimate it more narrowly than between "big" and "huge", you assume it's negative and reject the idea?
Twitter no longer serves as a trustful source of information
Better DSAFER Than Sorry – An Attacker's Overview of Ghostscript
I would guess they were made in 1 piece, like an image. (Or at least, the parts that are the different alphabets).
Look at using pf on OpenBSD. Specifically, look at the probability and set delay options: https://man.openbsd.org/pf.conf

Couple this with inserting pf as a transparent firewall and you can make a good hop become all sorts of crappy. And you can do this on very low end hardware with just a pair of NICs.
There's one elephant in the room I'm not hearing enough about, namely the legal precedent (at least in the U.S.) that you can legally be compelled to provide a biometric identifier (fingerprint, face scan, etc.), but cannot be compelled to provide a password, as that would be "compelled speech" and violate the first amendment.

I disable all kinds of biometrics from my devices when traveling for this reason specifically. Passwords in my password manager aren't the whole password. There's another component in my head that I won't (and, more importantly, cannot be compelled to) disclose.
> not the awful hamburger junction solution that the local area is now saddled with...

Do you mean the Canford Bottom Roundabout [1] by any chance? :)

[1] https://maps.app.goo.gl/rpTJ3aPhsejWcChV8
But it is not portable among compilers (for example, both GCC and Clang support SLP-based autovectorization but with different flags). -O# is one of a few flags that have roughly same meaning across many compilers.
As the other commenter mentioned, it predates those being malicious sounding. That said, it definitely scared me when I first saw it in my ps list.
Phone cameras are digital cameras too.
37% CAGR over a decade? Hope people aren't falling for that.
How common are traumatic brain injuries in the US?
Can we do the reverse process, find solar proton events from dendrochronology data?
ML is a technology very much like computers, the internet, smartphones and electricity. All highly transformative across all industries and society as a whole.
The point he's making is about the sensor and the glass, not the mechanics of the camera body?
Just remember that the >10x reduction in journalism revenue due to the loss of classifieds is responsible for this.

All the $ went to ad tech companies and this loss of revenue has meant a race to the bottom in terms of talent and resources.
I wonder how many rfcs are nonsense like this since there are thousands and thousands and no one reads them all.
> The real vulnerability of concern IMO is that the sandbox was so easily escaped.

Linux lacks effective sandboxing.

It *does* have complex, comprehensive, powerful, and therefore hard-to-use sandboxing, which is the actual root of the problem here: if security is difficult to implement, it will often end up being ineffective.

Compare <https://man7.org/linux/man-pages/man2/seccomp.2.html> vs <http://man.openbsd.org/pledge.2>. The two mechanisms have roughly the same goals. The former requires writing a BPF program; the latter is a single function call.
>> i really wish that our searches would prioritize quality of information

Use a free service, and the person providing it doesn't have an incentive to give you what you want.

Which is how we got current Google.
The transformation of surveillance in the digitalisation discourse of the OECD
Patents give patent pirates an advantage while hindering people who play by the rules.
> Except, since we're talking about scientific research, and not all humans perform scientific research, the only relevant group to consider would be humans who do scientific research.

Sure, but I expect that to change the distribution, not much else.

> I don't think it's common for researchers to randomly fabricate sources, citations and results. It happens, but it isn't mere coincidence when it doesn't happen.

Hopefully not, but even in science, misunderstanding the cited work is a thing, as is disbelieving it. For the former, "perceptrons can't do XOR" became "AI is impossible", while the Black-Scholes equation was misapplied to ultimately lead to the global financial crisis. For the latter, the salient examples are older (e.g. the importance of washing hands between autopsies and midwifery), or things where I can't find the historical scientific consensus because of the modern cultural noise (e.g. thinking men and women have different numbers of ribs because of the book of Genesis and not checking).

In this regard, I think the replication crisis is valid, even though it (presumably) involved real research and real results, because widespread citations didn't fully account for the limits of that research.

To put it another way, while I agree with this:

> To equate that process with the result of actual human beings doing science and publishing research seems like you're just reaching to justify the validity of replacing researchers with AI.

With scientists I'm referring more to the game of telephone that necessarily occurs between any given researcher and anyone using their work.

For the general population it's only that game, hence all the people who think scientists in the 70s were worried about an ice age, or the newspaper stories that collectively divide the world into things that cause or cure cancer.

If you are referring specially to people who want an LLM to actually perform novel research, rather than merely write up lab notes in LaTeχ, then you would be correct that this is a terrible idea. Even for pure mathematics, you need a different type of AI, better suited to that task — they do exist though, and have been used successfully, but IIRC are not anything like as general with regard to maths and experiments as LLMs are with language.
Why would overloading repeat the code? It's typical to do it like that (in Java):

public int doStuff(int a, int b) { //some code }

public int doStuff(int a) { return doStuff(a, 7);} // so b=7 by default.

No need to repeat actual business logic code.

Of course that gets complicated if there are many parameters with default values.
Bellingcat is a CIA cutout: https://mronline.org/2021/10/11/bellingcat-funded-by-u-s-and...
Their hallucination detection doesn't always result in an accurate answer, though.

On the other hand, many people indeed realize they hallucinate, but can't accept that due to plethora of reasons. Being able to accept that one is hallucinating about something is always shown as a weakness in the society, except in very few niche subcommunities (e.g.: engineering).

What will be the natural reaction of these LLMs if this phenomenon is highly penalized, now that's an interesting question. They'll converge to humans, I may say, if the models we produce are mirroring human brains that accurately. The nature is deterministic. You can't expect two copies of the same organism behave differently at a macro scale.
Prompt structure matters: examples first, instructions later
Curl has had their share of issues with CVEs, I assume they want to show that they are taking actual security issues very seriously. See e.g. https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-eve...
That should be

f(xt-1) + f'(xt-1) Δ
Spider Cannibalism
I have never thought of Twitter as a trustworthy place to get information from.

I find it interesting that people use Twitter as an information crutch (as I gather from this website)
One, the one to my password manager, where the rest of my passwords are stored--but without the additional part I add after I paste the password that is stored in my head.
It's precisely the same spirit.
Yes but seeing as a lot of government agencies put official accounts there, even the POTUS, I assume you can understand that a lot of other people saw it as an official source of information.
Interesting about the inflation here.

In 1931 mean wages in the UK are reckoned to have been 1s (£0.05) per hour [1].

Currently mean wages in the UK are £617 per week (40hrs) or £15.42 per hour [2].

So a half sov in 1931 was worth 10hrs of work, while today it's worth 12.60hrs of work. Quite interesting that it's value has risen (in real terms) even while it's stopped being a currency (more or less). Perhaps because it's actually useful in electronics now (not so much in 1931).

So gold has had real

[1] https://www.pocketpence.co.uk/wages-1930s-12269131.html
[2] https://www.forbes.com/uk/advisor/business/average-uk-salary...
"Most" is a very heavy claim. Any concrete evidence of this?

Also in embedded Linux I guess we are technically "building from source", when using a build system like Buildroot or Yocto. But Rust is already supported there and in fact already in use in our project (due to python3-cryptography).
I got as far as their 'we surveyed 2,000 full-time workers about costs of going to the office' results - where those folks are spending an average of $145/week on breakfast, lunch, and coffee. (And that is treated as a straight-up cost of having to report to the office.)

Dunno how the survey questions were worded - but I'd bet those 2,000 workers were (on average) still spending serious money on breakfast, lunch, and coffee when working from home.

Of course, inflated numbers always make for a "better" news story - so take this one with some large grains of salt.
I think one problem of current social media is that it conflates those functions. That is, what’s messed up about Facebook is that it mixes up your most intimate things (sister-in-law had a baby) with the commercial ($10 off coupon for dinner for 2 at a Thai restaurant) and the crass (lid just blew off in the Gaza Strip, film right here.)

I like the idea that one person pays to set something up for their friends and family. No way am I going to get my mother-in-law to pay for something, but something like the Discord model could be great.

On Mastodon (or X) I still have the problem of putting together a persona for a feed: I am interested in photography (posting photos I take but also stuff about gear, technique and other people’s photos), anime, decarbonization, political science, sports, nature, science, software development, and some other things. (What I don’t do is as important as what I do do but is not a visible, you haven’t seen me call any crypto enthusiasts “blockheads” on this site for months because I find other people’s name-calling on Mastodon offensive and I want to be consistent.)

I definitely worry that people who might follow me because they like what I say about decarbonization might not want to get spammed with anime and sports in their feed, I felt my identity was really fragmented when I set out, it feels cohesive to me but what do other people think?

I do not see the way people think chronological feeds are so wholesome, when boosting or retweets get involved they measure vitality instead of predicting it and if you build a “discover” feed of “most boosted” you will get posts with an image with some provocative text (e.g. you’d think pride month was about pissing people off, not having pride…)

One reason I quit using the iOS Mastodon client was I could not turn off a very angry “explore” feed that didn’t respect my user blocks and keyword filters.

Two complaints people have about Mastodon arem (1) unreliable stats about visibility (keeps brands away like garlic keeps vampires away) and (2) insufficient discovery for new users (didn’t bother me, it was just like Twitter at the very beginning.)
check out Daniel Gross's https://github.com/danielgross/localpilot
Capitalism is why.
https://archive.is/cGI4T
This is very impressive! I'd love to hear if people are using this as their daily OS
Some Google Insiders Question Usefulness of Bard AI Chatbot
ELO's album "Time" had an opening ("Prologue") that had a pipe organ kick in around 00:26s that would occasionally cause the needle to hop on my turntable. Probably pushing the RIAA equalization limits for vinyl.
> LLMs can memorize a brute force explosion in finite state machines (interconnected with Word2Vec-like associations) and then traverse those machines and associations as some kind of mashup, akin to a coherent abstract concept.

That's actually the closest to a working definition of what a concept is. The discussion about language representation has little bearing on humans or intelligence, because it's not how we learn and use language. Similarly, the more people - be it armchair or diploma-carrying philosophers - try to find the essence of a meaning of some word, the more they fail, because it seems that meaning of any concept is defined entirely through associations with other concepts and some remembered experiences. Which again seems pretty similar to how LLMs encode information through associations in high-dimensional spaces.
https://archive.ph/Xr7F6
I use this to simulate delays between various local services:

https://github.com/Shopify/toxiproxy

If you have Docker all you need is a few terminal commands
The ring railway in Berlin used to be a rich person's playset, when the city was much smaller and fit well within the ring. Now it's effective public transport that couldn't be built today.
The US used to use a rule of thumb like that, but counting seconds is a lot easier than estimating distances.
24 hours if for notifying ENISA. Not to fix the vulnerability.
And yet digital camera sales only halved since 2003 ? (But I guess that we should be looking at all cameras for this, not just the digital ones ?)
What Is a Submatrix?
> I find it interesting that people use Twitter as an information crutch

Mostly journalists who can't be bothered (or don't have the wherewithal) to corroborate anything they report.
> I remarked to my wife showing me a video recently that you could tell it was taken on an iPhone

It's also relatively understood that certain camera companies (Nikon, Canon, Sony, Fuji) have a certain 'look' to them in how they process the raw image sensor data to generate a JPEG (there's a differences in the final colours).
You need to have someone, or a group of people, willing to write the code to implement a replacement that is fully compatible, and maintain it. Until then, curl written in C is what we have.

With that, curl can be used on the exotic architectures and the rust/other language version can be used on other platforms.
What are those "most places" that "want to build from source"? It's a honest question and I intentionally left out the "don’t want to introduce a new compiler to the tool chain" statement to make the set larger. I understand "most" as larger than 50% on some metric.

I know about Gentoo and other Linux distributions that do build from source but it has been very uncommon for me to see a company building things from source instead of using apt, rpm, docker in this century. It's at least two orders of magnitude faster. I remember how in the 90s I had to download the source, scan the README for the dependencies, recursively so, then building the libraries, then eventually building the program I downloaded first.

Security wise, we were not reading the code, except for Nethack.
> I just want an IPv4/IPv6 proxy that does nothing other than delay, rate-limit, and/or drop packets.

Built-in into linux kernel, althought it's per interface unless you get dirty with traffic shaping tools.

Also you probably dont want proxy as support for proxy servers can be pretty iffy across software stack.

> Your loopback adapter has a latency of 30 microseconds, but that same web-to-database connection might traverse multiple switches, routers, firewalls, and load balancers and have a latency of over 1,000 microseconds (1ms) in production. That's thirty times worse, and I'm not even talking about zone-redundant deployments, regional-to-region failover, or any such thing!

Reminds me of a time when COVID hit and the suddenly-remote developers were suprised the time to start of their application went from 5 to 30 minutes (they connected their app to DB server on dev environment to not carry big-ass database with them)...

> Ditto with web apps, where every developer mistakenly believes that their Angular or React monstrosity is "performant"... because it is... on their own machine. With loopback networking. Try that over a 3G connection... in rural India. Not Indiana. India.

And that reminds me of this time frontend developers loading 700MB of data to load the site and not noticing that, but sending ticket to ops "server is a bit slow, could you give it more cores?". Said developers were working in office that had direct connection to data center 500m away with sub-ms latency and plenty of bandwidth.

I had many times pondered traffic shaping frontend devs connection to like 10Mbit after that... maybe 56kbit for repeat offenders.
I did! I guess you didn't read the rules on HN, though?

That paragraph is exactly what inspired me to comment. It misses the mark. It's not just about weeding out those who aren't serious. And it's not just about increasing engagement. It's about commitment.

You can build commitment by introducing moments of friction. Every hurdle they overcome makes them more committed to their purchase decision. It's NOT about engagement. You can have commitment from someone who isn't engaged. They're separate things.

In fact, when selling to enterprises, the person making the purchase decision is probably not the person who will actually use the product. So you need to get them committed to the product too. It's easy for the purchasing department to say: "That free thing you've been using? You can keep using it as long as its free." It's a whole other thing for them to say, "That thing you've been paying for? That you now want to pay 10% more for in order to get more functionality? No, throw it out."

So yes, I read the article and thought about it deeply. Thanks for asking.
I think he'll be fine.
Gamma curve is needed due to the fact human eyes are more sensitive to darker areas than the brighter areas (Stevens' power law), so with gamma you can get away with lower bit width without (perceptually) introducing noticeable banding.

The fact it somewhat matched with a response curve of CRT seems to be a historical coincidence, based on multiple sources I've read in these years.

I do agree we should have get rid of it at this point as it introduces many errors in color blending.

> Log formats do this, but because the order of magnitude of light is more important than the absolute value, it takes the log of the value. It's a more efficient use of bits in the storage / transmission.

It literally is what gamma curve does, ina slight different but mathematically equivalent way.

"Order of magnitude of light is more important than the absolute value" is exactly what Stevens' power law describes.
Other than the Steam Runtimes there is also Flatpak as a container-like environment to target if you want a stable environment that is shared accross distros if you aren't specifically making a game that is published on Steam
It depends on the bitrate.

AFAIR, LAME applies at 16 KHz cutoff at 128 kbps, and 17 Khz at 160 kbps. I don't have data about the others, but AFAIK a similar approach should apply.

I'm not able to hear above 16 Khz. I've tried only once an experiment with another person, and they were definitely able to discern the difference.
Indeed, I'm getting better performance than my 3 year old Windows machine with a 2070 gtx. I wasn't expecting gaming laptop performance from a mac, but I was pleasantly surprised.
Google C Style Guide
Certainly I would still generally trust official accounts of the POTUS or other government agencies. Trust but verify like most things of this nature.
Sorry I did my review / typo correcting on the text editor of languagetool... which for some reason does not support "Command+C" in the editor, only right click copy. So my copy failed and I pasted the same error filled text I started with

Should be corrected in a few seconds whilst CI does its job
Not OP, but in functional languages, state machines are often simply a function (State, Input) -> State
I wouldn't call it a token effort, they went to quite a bit of trouble to make GPT-4 safe. This is an active area of research too. At some point you need to prove GPT-4 would do something unsafe. If anyone did, they would improve their systems in response.
> And no, humans are not just as bad as AI at this. I don't know why that meme persists - if humans were just as bad, much less worse, at hallucination and confabulation as AI at scale we would never have gotten past the stone age as a species.

Knowing this would require a counterfactual machine of some sort, thus the fact must be hallucinated into existence, no?
I use a bookmark with this JS snippet to prepopulate the HN submission page:

javascript:window.location="https://news.ycombinator.com/submitlink?u="+encodeURICompone...

Unfortunately the document.title in the web page is different from the one currently on the page.

<title>MGM Didn&#x27;t Pay Hackers&#x27; Ransom Because It Knew of, Was Responding to Attack - Bloomberg</title>

I've replaced it with the one currently on the page
We don't know what capacity to reason is.
Well, I was thinking about the typical stop-and-go but on a mountain - that would presumably take a lot of energy.