skysight-inc/HackerNews huggingface dataset:
https://fly.io/blog/soc2-the-screenshots-will-continue-until... is probably what I'd recommend as the best reference for your situation.

That said, I'd suggest that ~20k isn't nuts for an auditor to walk you through the process bits, and is likely the cheap part. You're almost certainly going to lose more money in IC hours that your staff spend dealing with your first round of evidence collection than the 20k.
Showing yet again that there is no free lunch, and we continue to eat the earth's future with abandon.
Sigh, I guess this will just continue the trend of companies not being able to provide customers what they want due to the litigious nature of the US court system.
Gone are the days where kids can push themselves to the limit on the playground and learn that falling is not good.
Still being used mostly for crime, same as it ever was.
I hope apple uses that money to fix the windows client. It is the only program that managed to hard-crash my computer(multiple times) in as long as I can remember. Must be some very...talented programmers there.
>The Theora video codec was first released in 2004 and had its last official release in 2011.

>it was one of the first open codecs on the web[0]

IOW if anyone having open-source expertise is not too badly limited in resources, it should be no problem to correct any security deficiencies that might have become apparent since 2011, and push those necessary changes.

>usage has now fallen below detectable levels

Umm, no. Google's millions of Chrome users have enjoyed having this option for years even though most of them do not use it yet. But with millions of Chrome installations over the years it seems like Google itself has been such a big user I don't know if anyone could have taken more advantage of the existence of any open-source codec more than that. This is a case where it would be good to set an example of a financially prosperous huge company giving back to an open-source project they have been using at no cost for years. Anything less is just being a cheapskate type of bum.

With enough creativity in areas like engineering and finance, it might even be possible to merely support established maintaners financially well enough so they could tend to outstanding security needs and get that done earlier than Google has scheduled for completion of the deprecation phase-out.

A really prosperous company having in-house engineering ability would make progress in both ways by co-ordinating internal and external efforts, that would require some serious committment to open-source, which unfortunately looks like that is trying to be avoided.

[0] So obviously it's fairly new compared to encumbered codecs, and needs to be given as much chance as possible to survive and remain available as just one more tool in the toolbox for those committed to open-source media. In the hope that it will eventually replace proprietary options on the desktop, which just isn't coming as fast as serious open-source enthusiasts would like.
Not really when people talk about GDP abstractly they generally mean PPP or some equivalent of it. It’s just we are often talking in our own currency so it only applies for inflation adjustments.

Look at the GDP growth rate at the bottom of this page: https://www.macrotrends.net/countries/USA/united-states/gdp-...

If you take year X * growth rate you don’t get next years number. IE: 20,460.47 in 2020 * 1.0595 = 21,677.87 but 2021 actually shows 23,315.08 showing a growth rate is calculated in constant dollars not nominal ones.

Nowhere do they say they aren’t directly using the GDP figures on the page to calculate growth rates, it’s just assumed because that’s the way they are generally calculated.
OpenAI doesn't say directly what text-embedding-ada-002 is, but in the release blog post they show that performance is comparable to davinci/curie, which places it firmly in the universe of GPT3. I understand it's not a straight line comparison, but to me it's still a useful mental heuristic about what to expect.

[1] https://openai.com/blog/new-and-improved-embedding-model (see "Model improvements")
Well one used to be Dropbox, until it became completely disfunctional under Sonoma.
In the early stages of product dev I tend to do direct customer interaction (user research, customer troubleshooting, frontline support), instead of farming it out to junior team members the way I do with more mature products. This gives me a deeper sense of what users think about our product.
Right. So if the effect of the ketamine on depression relates to the conscious experience of taking it, and not simply the unconscious chemical interactions, then isn't scheduling the dose at a time when the person is unconscious a significant factor in whether or not it's going to be more effective than placebo?

We could likely replicate this format to show that mushrooms are no better than placebo for depression or that MDMA is no better for PTSD than placebo.

Your assumption that "if ketamine helps with depression we should improvements vs placebo" ignores the considerable likelihood that previous effects in research are the result of conscious interactions with the drug which aren't present in this study. "It sounds like ketamine has a pronounced effect/high" - yeah, and maybe that's the meaningful effect on depression, no?
That is one way to put it. Another way to look at it is that Apple had unreasonable demands for those companies considering their goals and strategies. They tried to strongarm them and failed. Now they market their stuff as the second coming even though it is actually inferior in many way.

Nvidia and Intel are not necessarily nice irreproachable companies, but if there is one company that is known to be a major d*ck with their suppliers it must be Apple. You only need to look at how they treat their developers to understand, and the only reason suppliers are not treated worse is because they actually need them. I am sure Intel and Nvidia are perfectly OK with Apple doing their own stuff even if they lost a bit of business.
Not unlike a tech support guy who finally got rid of a decently well-paying but majorly annoying customer, I guess. Sometimes the money isn't worth it...
Go to ChatGPT and type "write a simple function that generated a random array and then summed along the columns".

Run it. If there is an error, either debug it or ask ChatGPT to take a different approach.

There's something wrong if you can't get it to do this.
You'd just have to have IDs repeat, and software that could tell the difference based on signal strength. If you have two on the same ID that have different RSSI, show them as two tags.

You'd have to do some guesswork though to figure out what's going on but it would be better than nothing, and you might be able to get the size down below what CR2032 allows.
I'm the great-great-great-grandparent, and I didn't specify the *type* of taxes.

The state took it from me, either directly before I saw it, at a point of sale, as some convenience fee (restaurants, bars, etc), liquor fees to punish my drinking, or countless other state-sanctioned money transfer.

I like a return on my investment, and the same goes for the government I live in. And although this sounds like some libertarian style drivel, I'm not complaining about the taxes themselves, but what I get in return for what I pay for. And in this country (USA), it aint much. The most I've seen the govt do, after kilodollars paid in, was a whole $1200 singular check during covid. Everything else I "get", is fee'd, fine'd, and taxed to death.

I would prefer a strong safety net for everyone. Universal healthcare. Free K-12 school lunches. Free university classes/degrees.

Yeah, I look at the WHOLE package of taxes, what I pay in, and what I get. Well, there's a reason why I'm talking with my partner about leaving the country, and even possibly renouncing. But hell, even US citizenship is a -$3500 hole in my pocket.
People with more microtubules should be "more conscious" according to the theory. Do people with more microtubules behave differently than those with fewer? If so, do these differences align with our conception of consciousness?

Personally, Penrose has it all wrong. It's the actin filliments, not the microtubules that give rise to consciousness.
I think it's the lack of notification of replies -- this causes the 'conversation' to die out naturally over the course of a day or two.
How is it that you are able to scrape all of the content of Reddit, while 3rd party apps have almost stopped working.
Also, you don't need to issue a CVE to publish a vulnerability. You just make it public regardless and say CVE was denied for it.
I am having trouble following what is being counted here. Is it just cells that seem to be devoted to fighting off foreign threats? Or all cells in a system that has an immunity function?

For example: it counts 'blood cells'. But does that count all blood cells, or just those that fight disease like white blood cells?
Being a worker is being underpaid, to varying degrees. Another way to put it is "the most valuable employee makes the most impact for their salary", so the tendency is to maximize the former and minimize the latter.

"Loyalty" is a manipulation game. The only true loyalty is to #1, but most honest people don't even do that.

One primary way to get ahead is be in-demand, court many offers, and play offers off each other in an ego-respecting manner within whatever the market will bear.
Raises rarely happen, so it's usually better to switch jobs every 1.5-3 years.

At some point in a high-income career path, switching jobs doesn't have to be as necessary or desirable, and a lawyer and a TC negotiator can help them get more $$$.

Furthermore, anyone good will have lots of options and should always be open to other homes if only to window shop. (Never be stuck somewhere miserable or without options.)
I basically wrote the same thing a few months ago. TL;DR for most systems public cloud is not cost effective not secure. Another interesting Apple exploit using Spector on Safari on the front page today. Most systems better off self hosted with cloud tools to manage: https://open.substack.com/pub/rakkhi/p/why-you-should-move-b...
> expecting anything more than that from most drivers is a lost cause

I can't speak to the area you live, but where I'm from we get along just fine. Yes sometimes you still get the odd unfamiliar driver that doesn't understand them, but for locals there's a critical mass where roundabouts stop being avoidable and you adjust.

See also: https://www.iihs.org/news/detail/safety-at-two-lane-roundabo...
What do you expect for an editor that promises all batteries are included.
They added some circular medians in the middle of 4-way stops where I live, are those traffic circles? Are you suggesting that when I get to a 4 way stop, whether I yield to traffic on the left or right should depend on whether the intersection has one of those medians in the middle?

Personally I find it confusing that yielding works the opposite way on roundabouts and 4-way stops, and nobody else in my neighborhood seems to know what to do either. Whether people yield to me seems to depend mostly on the size of the vehicle I am driving.
Do you need to use the Stream Deck's own software at all, then? I'm allergic to janky manufacturer-provided config apps (I'm looking at you, Logitech), and the Stream Deck app's screenshots aren't awe inspiring. I'm also uneasy about running a driver app in the background at all times to monitor which apps I'm using. That seems ripe for abuse, either by attackers who find a vulnerability in it or by the manufacturer ("hey, you seem to spend a lot of time in Drafts.app. Would you like to buy a JavaScript manual?").
I'm a clarinetist and got focal dystonia in my senior year of high school. My right pinky would contract whenever I tried to press a key with it; I had to stop playing. The doctor referred me to somewhere at the University of Washington and they ended up giving me a couple botox injections and also took some videos for the sake of research or something. The botox didn't seem to do much. I remember they were really cautious about the dosage since they didn't want me to lose the use of my hand for months.

After 2-3 years without touching the clarinet (I went on an LDS mission after high school), I picked it up again and the focal dystonia had subsided quite a bit. I still didn't have a ton of dexterity in my right pinky, but I never did, even before the involuntary contractions started. I suspect that my brute-force approach to practicing may have exacerbated the problem and helped to trigger the dystonia.

In any case I was able to play in one of the orchestras at college which is an experience I'm really grateful for. I haven't had much time to play since college, but I'm hoping to get back into it in a few years when the kids are older. And I'll definitely be taking more of a slow-and-steady approach to practicing.
If you care about nothing else than ease of use it goes

1. plex
2. emby
3. jellyfin

Plex is notable for being able to run the media server software and tv apps without having to pay anything. Emby needs a license payment, and while jellyfin is free it just isn’t as good as emby or plex right now.

Re: plex privacy, I don’t use a real email for plex id and I’m not sure if you even need it. Plex inc. can see what I’m looking up anyways because they provide the service of providing metadata for media (obviously someone gets the stats)

They do say they don’t actually monitor your usage of plex media server but it’s probably bullshit. I just don’t care with a throwaway plex id – they don’t have my name, address, payment info, nothing
If your company is that big and unwieldy that a tiny chance of needing to do a migration in 12 months is unacceptable, you can stick to the key services which offer 36 months of notice. For all I know at that point you can negotiate your own guarantee if you're so big.

If you work at a company that can't do a cloud infra migration in 36 months, I don't have any good advice for you, but I doubt most commenters on here fall into that bucket. Frankly, I would expect companies that large to be in all the clouds so that you could negotiate them against each other, but I doubt that impacts many people here, and the chance of any of these worst case scenarios happening is vanishingly small.
Pardon my ignorance in advance but could it be used to "chat" with PDFs and websites? I am looking for OpenAI alternatives as I am in learning phase
> I don't think this will go well for him.

It can’t go a whole lot worse than how the current trial is going, and that’s his gamble.
I believe this is in our radar and waiting on the new trait solver, but just in case if you have a repro I would appreciate a ticket to improve the diagnostic.
> Does the +30 seconds button start cooking immediately, or do you have to also press "start" afterwards?

i've seen one where buttons 1-6 immediately start cooking for that many minutes, alongside a +30 button, so that every 30s interval between 30s and 6:30 can be activated in one or two button pushes; fastest nuke in the west
> Is entertainment that addictive

Yes absolutely it is. I’m guessing you underestimate how much media content a lot of people consume.
It's been shown possible, so: 1. There's a number of well funded agencies which would be happy to abuse it. They have both the skills and time to do it. 2. Showing that Spectre is possible on Intel created a steady stream of similar attacks. Other groups are likely already looking into it and may come up with much more feasible options.
I think the point is: if you compress 25 pages of text into 1024 floats, you will lose a ton of information, regardless of what the use case is, so you're probably still better of with chunking.
Yes. It's only limited by your creativity.
is it the uncensored version?
Good one, Living in a place like that, I can understand how important it is. :)
The only feedback I had from your embedding post was

wish we could create the array of floating points without openai

Great timely turnaround time, good sir. Ht
Got a source? I'm curious to read more; this is the first time I've seen that claim.
lol...It's taking the sequence of moves up to that point... In theory I could see with enough data it could not change the answer for a different sequence (same state), but wow on the surface it seems like "enough" would be a lot.
I've been getting great results for related documents by embedding entire blog posts, e.g. here: https://til.simonwillison.net/gis/pmtiles#related

I'm not sure how I would do that after chunking.
I would have assumed the range of things you could do in video would be limited by codec. Can you provide links that explain how video can achieve similar feats?
"warmer colder"
> Except if I am on Salmon or Clinton and want to go to Fred Meyer, I need to ride on 39th or Hawthorne at _some point_, which to a lot of people is a non-starter due to danger.

That's what protected bike lanes are for. Basic ones aren't that expensive, really, the issue is more the road space. Cars dominate the existing space, and many, perhaps most drivers will scream bloody murder at losing any. They don't want equality and choice, they want dominance and everyone forced to drive.

> Besides, suburbs exist, and someone living in Sherwood who works in Portland, at this time, requires a car.

"Besides" nothing, you're talking about an almost entirely separate issue now. Obviously bikes aren't great for really long distance commutes for most people, they're more for short to medium distance trips. And yes, that's where public transit comes into play -- with people able to walk or bike to the stations.

> And public transit would need to be either faster, cheaper, or more convenient (wifi, coffee etc) than driving for (most) people to adopt it over a car.

Yup, that's where you throw in bus lanes everywhere. Places like London have heavy adoption of bus lanes that lets taking the bus often be faster than driving by yourself.

> And Hawthorne is _super confusing_ now. Turning right from Hawthorne to 10th is a nightmare, you have a bus lane, a bike lane and a sidewalk to the right of you, all of which could contain someone.

I admit that I'm not that familiar with Portland, but protected intersections are a solved problem. Takes more money than the other things I've mentioned so far for sure, but it's still quite doable.
The lack of default/named function arguments is what still gets me. It's such an absolute basic programmer ergonomics feature shared by most popular languages; even C++ has had defaults since forever.
We’ve done experiments with generative UI code, but we keep coming back to the LLM making crappy looking UI, and if the engineer still needs to tweak the code afterward this is just a glorified copilot. Without more specialized models, I believe the next step is an intermediate design language…something an LLM can’t make look bad. Lots of room to innovate here though. Really glad to see people working on this problem.
This will have achieved nothing but a smaller workforce, unsustainable cost structures, diminished quality, inability to compete, and vast further enrichment of Shawn and his corrupt gang of execs at UAW.
In the coming months and years Ford will employ far fewer people than it ever has.
I don't buy it, for several reasons. In no particular order:

1) 100-150 tons is the estimated payload to LEO, not back down to the ground. For Starship to land (on Earth) it will need to be mostly if not entirely empty.

2) Even if Starship could get that much payload down to the ground, how do you unload vehicles from an upright Starship? A built in crane maybe, but it sounds like a recipe for disaster.

3) Once you land a Starship somewhere remote, how do you get it back? It can't fly back (from Earth). It's too big to realistically airlift unless maybe you have a very large runway nearby for something like a supped up Super Guppy / Airbus Beluga. Do you plan on just leaving this cutting edge hardware in Siberia?

4) Missile defense systems could easily shoot down a Starship landing near enemy territory.

5) Why is this needed? Wars tend to have weeks of warning, at least for those who need to plan them. This is plenty of time for military planners to get their assets prepared to be deployed from nearby military bases or navy ships, both of which America has in spades around the world. American military logistics are already so excellent, there doesn't seem to be much margin for improvement.
future LLM will just be trained on all our dead texts and messages - becoming some kind of supra-human which will be the amalgam of all of us.
Conservation in many places is about bribe-extraction and using it as a political weapon. The environment is just a useful cover
Ask HN: Dissertation Possible Ideas
Dear Hackernews,

(respost because my other post didn't get a single response)

I want to do something with ML (DL in particular) and I'm in need of a dissertation idea (for my undergraduate course), ideally it'd be Computer Vision related / something to do with programming languages (with DL of course), does anyone have any ideas? It should include implementing a one (or more) papers and then extending them as well. I have a reasonable amount of compute available and the dissertation should take up a few months of my time.
Isn’t the claim that it’s preventative not that it reverses or cures existing melanoma?

(I don’t see any discussion on that claim, the claim of prevention, and wish someone gave more info there.)
I worked at a sales and marketing startup where we connected to many CRM instances. We never bothered getting a SOC2. The CEO was always able to talk around it.
Unison language has a very elegant solution to the naming problem.
To add to the other responses, macOS has had excellent support for a wide variety of Accessibility features/APIs. These same APIs are a boon to GUI automation tools.

Even back in the Classic macOS days of System 7, it was relatively easy to fully automate your GUI applications via AppleScript and Apple Events to allow almost complete unit test coverage.

Note:I have been a server side CLI Linux web dev since the late 90s. While macOS is my preferred desktop, KDE Neon has been my primary GUI for the last few years. There is much I miss from macOS, but I get along with KDE pretty well
Parsing disinformation in the Israel-Hamas conflict
I recommend https://www.amazon.com/gp/product/B01L6SI74U/ref=kinw_myk_ro...
80% of crates have no unsafe code in them.
> To add insult to injury, the only signage is usually a yield sign painted on the road

Doesn't the red asphalt denoting a cycleway also typically continue across the exits when cyclists have priority?
It must be time consuming to read other process' memory through such a side channel. Then limiting JS execution time for web pages should mitigate this vulnerability?

By default only small amount of js execution is allowed for web pages (small event handlers and such). If a page tries to execute more js, browser should ask user's permission to extend the limit. (Maybe several levels of the limit should be supported?). Some web pages could be added to a permanent list of trusted domains with permanently increased limit.

Upd: 4-5 minutes, in the first video (https://youtu.be/Z2RtpN77H8o?si=XB4oI9ner8pFTIqN) - see the time on the top right of their screen. When the attack starts it's 5:22, ends at 5:27.
How well do LLMS like this work with a non-English language? Or are these open source models limited to English?
Nah, you’re the asshole here, bud.
All auto-password filling on iOS requires 2FA so Apple doesn’t have to fear or how it’s to explain that Apple hasn’t mitigated this attack vector yet?

For websites, leaving the site auto signed-in seems the more practical way to exploit the vulnerability, so don’t leave sensitive site auto signed-in and use a native app for them instead is the natural way of mitigation?
You’re being overly charitable suggesting he doesn’t believe the things he posts. He has a clear ideological bent and the garbage he posts, antisemitism included, is right in line with it.