skysight-inc/HackerNews huggingface dataset:
it’s fine, gsk should be more than happy to sell me back some organs some day, or some clinical immortality, or something.

probably.

what’s the point if there’s not more money to be made? in perpetuity?

from me?

there will be a loyalty program.

it’s fine.
This one:

https://en.wikipedia.org/wiki/Oxy-fuel_combustion_process
This is like lifelong pedestrians having opinions on car drivers; they're valid to some extent, but if you've never driven a vehicle your understanding of driving issues is necessarily superficial.
k-D trees and BSPs don't work well in high dimensions (say >20 to 30 dims), since your true nearest neighbor is highly likely to lie on either side of any dividing hyperplane.

If each dividing hyperplane separates a set of vectors into two roughly equal parts, then for N vectors you have something on the order of log2(N) separating planes in order to get down to a single vector per terminal node. But for, say, a billion vectors in a 100-dimensional space (and assuming something like a k-D tree where you partition each dimension at each level), you have only partitioned log2(10^9) ~= 30 dimensions this way, yet there are 70 other dimensions remaining through which you can travel to find your true nearest neighbor (the curse of dimensionality; in high dimensions everything is "near" everything else) that you have not checked if you are discarding subspaces along the way.

This is a problem for other approximate methods as well though. IVF methods still do a form of partitioning (via Voronoi cells) but this is obtained by clustering the data so it is more attuned to the global structure of the data rather than greedy divide and conquer. But in IVF methods it is still possible that you need to check every IVF cell in order to find your true nearest neighbor, just that it is less likely to happen in practice because the partitioning is more attuned to the overall structure of data rather than via greedy subdivision.
No different from the sample of cancer they got from cell lines. After all, Steve jobs father only contributed DNA data, he isn't going to receive royalties or any benefits from his genetic data's activity.
There would still have to be terms of service to accept or decline, and if those terms included prohibitions like "you are not allowed to hack our servers or spam them to a crawl" then it still makes sense for a decline to result in an inability to use the service
Most people do this as a sabbatical. I don't expect it to match my current salary, or be even half of it, frankly.
It sounds ego-dystonic from her perspective. Sorry it can be so challenging.
> Privilege does not erase accomplishment.

It doesn't, that's true, but it does make it less impressive.
I've never used a managed service, only KeePass. I just have a copy on my Google Drive and I use the Keepass2Android app to load the db directly from Drive. Outside of a few inconveniences it works really well.

For work I have a separate db where I keep work related passwords (ones for me personally, we have a on prem hosted service for team shared passwords) and I just check it into a git repo along with my notes and that works extremely well.
Thank you! You mirrored my thought process exactly.

Is there an open genome movement where you can just donate your genome into the public domain? I don't really care who has access to it, but it's a hassle to have to manually apply for each project that wants it.
Well, by law, i do and you do owe me royalties. Hopefully these people hire better lawyers next time. Also people tend to get upset when their ownership of things is violated, pixels or otherwise.
Not just personal information. Blogs, commercial content, news articles and more. Check out the Allen Institute for Artificial Intelligence's C4 dataset to see if anything you wrote was ingested:

https://c4-search.apps.allenai.org

Love the disclaimer: "The dataset is released under the terms of ODC-BY. By using this, you are also bound by the Common Crawl Terms of Use in respect of the content contained in the dataset."
It's possible to investigate whether diets produce beneficial results in subgroups even without having a proper general model of diet and nutrition.

It's analogous to investigating whether drugs produce beneficial results in people with X disease even without having a proper model of how exactly X disease works.
>“this person is mocking Bezos for turning a quite small fortune into one of the largest on the planet”

No, he didn’t do that all. He’s just providing context about the early beginnings of Amazon that allowed Bezos to built this. Bezos deserves credit for what he built but let’s not act as if he came from the gutter.
Most people see it like you see it. Long experience suggests it's probably not worth making a good faith effort to explain further.
In most public companies, CISOs are not "real" C-level positions. They're not considered "directors and officers" of the company in the sense of the securities law, they don't have special contracts, they don't rake in exorbitant salaries, they don't have golden parachutes. They don't routinely participate in board meetings or shareholder reporting.

If I recall correctly, at Apple, the CISO role was some guy reporting to the corp IT org, entirely separate from core products and services. And we're talking about one of the most valuable and sophisticated tech companies in the world.

Amazon had an even wackier model, with separate "CISOs" for different orgs, the term meaning not much more than "a senior manager that we can put in touch with clients if needs be." Google now has a "cloud CISO" who is a nice techie guy and talks to customers, but is not actually the person in charge of the overall Google security org.

I get it that the SEC wants to change this culture and have a designated person meaningfully responsible for infosec risk, but it feels that it's a case of stick before the carrot. They have the power to reinterpret their own rules to elevate CISOs before they start cracking down on them with personal liability lawsuits.

And I'm betting that just like in the case of Uber, the CISO will end up in trouble, while all the execs will get to claim ignorance and walk free.
What exactly are the news here? I see three points but fail to comprehend them, because I thought all those things were a norm for a long while:

1. Is it the news that Google still accepted bulk volumes of unauthenticated mails in 2023? If that's true - finally, good riddance. Although I believe most spam those days comes from legit hacked domains.

2. Am I reading this right that List-Unsubscribe and/or unsubscription link is going to be required for high-volume senders, marketing and transactional? That's good to hear, although - again - it's hard to believe this is a requirement only now. I thought everyone with at least a sliver of honesty already had those for a long while.

3. Enforce low spam report ratio? It's news to me that the "report spam" buttons didn't behave that way already, I assumed that if users actively report then domain gets blocked (unless it's whitelisted, e.g. to defend from a false reporting DoS attack).
If they feel threatened by dogs off leashes, that's them, let them live. It seems perfectly reasonable for such a person to go someplace where dogs must be on leashes.
Host your own dependencies folks!

There are three major types of risk in software supply chain:

- Correctness. Does the source have flaws (or backdoors) that allow it to be exploited.
- Integrity. Was it tampered with from source to binary (typically to inject intentional flaws or backdoors)
- Availability. Is it available for use in a build.

This last one is often ignored. It's less sensational and "nothing ever goes away from the Internet, right? Right???"

There are all kinds of nasty examples of dependencies going away. The two big patterns are:

- Infrastructure availability. That's this case and yes, CDNs are a nasty point of failure. Wanna guess how many package managers depend on a single CDN?
- Intentional delisting. This has happened often enough over the past few years. When the package maintainer throws their toys out of the pram and either removes the package from public access or effectively zeros it out. This can happen to the source too (hello colors.js)

The ideal is to have your build process be hermetic, not just from when you kick off the build but over a longer period of time. At the very least have an artifact management solution that you control as a caching proxy.

I'd like to see the major cloud providers caching all the major package repos inside their networks.

I'd also like to see multiple CDNs for every major package ecosystem.

I highly recommend reading https://slsa.dev
> Law is a reflection of what people consider fair and just

Law is a reflection of what people with political power consider fair and just, and that set of people is only a subset of all people affected by it.
When there have been dozens of experiments at the country level and at the province level with communism, and you mention only one experiment that supports your position, that is called cherry picking.
Nobody is erasing anything. It's just merely noted that in order to make a billion dollars, it helps to start with a million dollars. Just common sense if you understand capitalism, but with some examples in this case.
And Firefox hasn't implemented WebCodecs yet. At this moment, the WebTransport+WebCodecs solution is a no-go unless you only intend to serve Chromium.

Fortunately, Mozilla is working on WebCodecs and Apple is working on WebTransport, so these problems will probably disappear in the future.
I suspect it’s not that unusual. In six years of running my personal mail server, I’ve received exactly zero spam messages with grey-listing as my sole anti-spam measure. The only time I got spam was when I had to move my domain to a new server and forgot to enable the postgrey service.
Perhaps ironically limiting competition in the AI space might just as well be more risky. If the barrier to creating AI is low then a great variety of AI can be built for the purpose of fighting AI misuse.

If there's only a few organisations that can create competitive AI no-one can compete with them if they turn out less than ideal.
> There's real skill in creating simple solutions to complex problems.

Not entirely facetiously, I think that, for engineers, there's real skill in creating simple solutions to simple problems—not, for example, finding the general instance of the problem and solving that, when the problem is unlikely to recur and crafting the perfect general solution delays delivery on what's actually in front of you.

(I know Perl's not fashionable any more, but I've always liked its design philosophy of "make easy things easy, and hard things possible." It seems like a slogan that can be adaptable to how to solve problems, though I'm not sure of the absolutely perfect analogue. Hmm, maybe I'm trying to solve the general instance of a problem ….)
A roleplaying LLM will, but the point of the analogy is that (absent specific instructions on how to personify such a role) a general purpose LLM won't.
If I'm certain I don't know the company, or I know the company but there is no unsubscribe button, it goes straight to Spam, no questions asked.

A decade ago I went to my country's embassy to renew my passport, and they now use my email to subscribe me to the newsletters of any new political party. All unsubscribe links just 404s. Shameful behaviour.

Anything I receive from any of their political candidates goes straight to spam now. The hope is that I am training the spam filter so it marks those as spam for all other users as well.

It's simple really: have clearly visible, working unsubscribe link in the body of the email that doesn't require jumping through hoops, and be from a company I know and use. Otherwise the spam filter learns about it.
This will be interesting to see how this plays out internationally, since some countries don't have the same anti-spam laws we do. Will I stop getting notifications from some of the non-EU, non-US services that I am a member of just because they don't have in-email unsubscribe links (I can still unsub on their website)? These are not companies under sanction, so I have every right to communicate with them freely, even if they don't obey the same laws as where I live. Should I end up suffering damages because Google blocks legitimate communications, will they be taking liability for their interference?

For clarity, I am not against anti-spam measures, but I do worry about centralized services being overly strict and doing damage to their customers, especially if it is so draconian that it prevents delivery of important communications as retaliation.
Diesel's flash point is above ambient temperature (unless you live in the Sahara). It has a lower autoignition point than gasoline, which is one of the reasons it's preferred in compression ignition engines.
Welcome to the fold... though I bring my own nuances.

Backstory: I'm a late-diagnosed Aspie, 56 in a couple of weeks, only diagnosed in my mid 40's. Had a small number of long-term relationships, and had trouble understanding why the earlier ones ended, until I was diagnosed. Nerdy as a kid, with few friends. Avid D&D player until my early 20's (same set of low maintenance friends, with a well understood social contract). Computer geek; SciFi nerd; etc.

I am the architypical introvert - uncomfortable in large social gatherings. I went for nearly 10 years without anyone other than my partner that I could call a friend, but was "mostly happy with my own company". Most "friends" were partners of my partner's frienship circle.

About 5 years ago, I started up a makerspace, and kind of "instantly" gained a friendship circle in a town where I basically knew nobody, and that was "fine" but occasionally tiring, until this summer when I basically burnt out and quit. I still have some of the friends, but I'm seeing far less of them now we have no common interest in the makerspace. I'm still trying to work out what my "next big thing" will be. At least I now know how to go about starting whatever it will be up...

But I think the main issue is that I find the social aspect really tiring (I think it's masking fatigue). I just can't handle large amounts of the social stuff. Fortunately, my current partner of about 15 years is very supportive and understanding, and decidedly not introverted.
Being on a stage is moving into a situation you are not familiar with, and making a performance, which is different to the general opinion of strangers.

If you rescue someone, that's all about that person's safety - which has got just about zero to do with getting on a stage and making something all about yourself.
Bulk sending breaks the utility of email. I wish there was a way to say, “Don’t allow my email to receive bulk sent emails.”

I can’t imagine how much that would improve my life. I just don’t want to see it. It breaks my attention far too frequently for far too little utility, and I would love it if entire emails I own could be bulk spam free.

I don’t really want a better version of our shitty current system.
The solution that's better is to die from it naturally. It's much preferred to side effects because??
Thanks, I often forget this distinction.
Who benefits when, from FAIR data? Part 3
Sure then, by law I could have had slaves too. Glad you’re honest about the side of history you sit on.
Yep, I'm the opposite of you. I get almost zero true "spam" to my Gmail account. Maybe 1-2 messages a month.

Whereas quite a few of these quasi-spam marketing emails from a company that I once had some interaction with. The worst is hotels - you stay at 10 hotels during the course of a trip, then you get added to 10 email lists for the rest of your life.
This is just more lazy argumentation to avoid having to engage with the substance of the debate.

I keep finding the 'doomer' argument made logically and the counter arguments to be hand-waving ("there is obviously no risk!") or ad-hominim ("its a cult").
Are you sure? I don't have more than anecdotal data, but I remember unsubscribing from EU newsletters to be much more cumbersome than from US ones.
Obviously everyone wants 100%, but there's still a big difference between sending a friend $20 (if you're someone who, if something goes wrong, can afford to send a second $20 without really noticing your bank balance change) vs sending somebody 50k.
At least in EU there are some drafts to essentially kill off open source models. I have a collague who's involved in preparation of the Artificial Intelligence act, and it's insane. I had to ask for several times if I understood it correctly because it makes no sense.

The proposal is to make the developer of the technology responsible of how somebody else uses it even if they don't know how it's gonna be used. Akin to putting the blame for Truman blasting hundreds of thousands of people on Einstein because he discovered the mass energy equivalence.

https://www.brookings.edu/articles/the-eus-attempt-to-regula...
> Why would we do this?

i think it's a reasonable ask to enforce attribution of AI generated content. We enforce food labels, why not content?

I would go further and argue that AI generated content do not get granted the same copyright as human generated content, but with that, AI generated content using existing copyrighted training data does not violate copyright.
Then I made a mistake in phrasing, I'll own that. I wasn't phrasing that to indicate "oh that's how it should be" but "that's how they will stay once formed". "Boys will be boys" mainly because of bad influences and toleration of their BS as well.

In tech companies, the top level in many cases is the bro. Nothing in that article is clear about whether the tech co is FAANG, IBM, Tata/Wipro/etc, or the many many smaller and startup companies, gaming companies, etc. By count of company, most of them will be smaller. And the conpanies founded and run by bros won't change their culture easily. (Data point question: how much has Uber culture changed?) The VCs that fund them may talk the talk but look at their funding decisions, they believe in female founders quite a bit less than males.

I will repeat, tell me if you disagree: bros won't change their attitude just because they get scolded.
HMS PGP. https://my.pgp-hms.org/profile/hu80855C is my genome. It's effectively in the public domain.
What do you expect -- for me to catalog and rate every country by economic development and political influence? This comment applies just as well to the post I was replying to, which happened to refer to a country immediately adjacent to the one I referenced.
And $245,573 in the S&P 500 in 1995 would be worth over $2.2 million today.

This is because asset price inflation has grown at much higher rates that consumer prices (CPI).
And the M1 MacBook was quieter, lighter and I could actually sit it on my lap without worrying whether it would prevent me from having little Scarface74’s.

Apple didn’t come out with high end ARM Mac laptops until later. Yes from a laptop - a portable computer - I loved being able to plug it in overnight and to use it all day at a customer’s site without worrying about battery life.
Yeah, I just made a new google account today. It takes about 2 minutes. You need a birth date (easily lied about), a phone number (it's google, they have your phone number already, no reason to lie) where they will send you an 8 digit code for you to confirm, then type in your desired email address and your password. Hardly draconian. Viola, you have a gmail account. You can do more to ensure you're the only one that ever logs into it if you like, but chances are if you're setting this account up for the purpose we're talking about, you're just writing down the email address you set up and then forgetting everything else.

I'm not sure, are you implying that it is not worth doing this, and you would rather instead just pollute the inboxes of people that happen to know you? If so, would you like to be friends? I'd be happy to receive your junk emails if in exchange I can come by your place and just leave my trash in your front yard/driveway.
I'd disagree. For financial services, one cent unaccounted for is failure.
Apple Event – October 30 [video]
The cross product is a peculiar animal, as it only exists in 3-dimensional space. There is no unique "cross product" in 4 dimensions or higher. (In two dimensions we cheat and define the result of the cross product as the scalar magnitude of what would be the component in the third dimension, if it existed.) Furthermore, it turns out that the result of taking the cross product of two vectors is itself not a vector.
In physics we interpret a vector not simply as "an ordered list of numbers," but as a geometric quantity that responds to coordinate system changes in the expected way. Suppose that we have two vectors, a and b, and we take their cross product. Now suppose we choose to work in the "mirror image" coordinate system. Our choice of coordinate system should not affect physical outcomes. But while "a" and "b" are inverted in our mirror image coordinate system, the cross product "a x b" does NOT invert.

Introductory physics textbooks proceed to tell us that "well actually," the result of a cross product (such as an angular velocity vector or the Poynting vector of electromagnetism) is actually a "psuedovector."

Other formalisms treat the cross product in a more hygienic and general manner.

This is all to say that familiar mechanisms like the "dot product" and "cross product" are not necessarily as "natural" as you may have been lead to believe.
Toby's current startup: https://cuttle.xyz/ (I'm an investor)
Knowing about the diagnosis is itself the harm while there is no cure.
How do know the difference between a problem that cannot be solved with math, and a problem you haven't solved with math yet?

Let's say you throw a baseball into orbit. That's very strange, a profound mystery. You tell me that we must live in a simulation. I contend something strange happened which we don't understand, because we only have one datapoint, but that a satisfactory explanation does exist. How do you know I'm wrong?
Upvoted. Subject deserves being brought to attention again & again. Until it's not needed anymore, or heat death of the universe - whichever comes first.
Telegram blocks channel blamed for inspiring anti-Israel riot at Russian airport
Here it's worth remembering that CISO is a "specific" role; it does not necessarily connote "most senior security person in the company"; some companies have more than one; some companies have a "CSO" and/or a chief of "risk"; at Apple (for all I know) it might just mean "most senior security person in IS&T". Apple has a sprawling and multifunctional security team.

If your claim is that all of security at Apple somehow reports up through IS&T, I have some reason to believe that is not the case.
> I very aggressively unsubscribe from everything

Never unsubscribe from anything you haven't subscribed for (or at least where you haven't gave your email address to the sending party), because I believe any interaction with unsolicited emails provide spammers with a clear signal that their spam is not just delivered but also read and interacted with, so they get more agressive.
No.

The solution that's better is "Actually get me healthy."

And once they have an expensive drug alleviating some of your symptoms while making them stinking rich, you are supposed to quit your bitching and be glad you aren't dead.
Regulating AI is not like regulating hydrogen bombs, it’s like regulating nuclear physics.
These are often times problems that sadly take a long time to fix. Were they at least trying? Or just straight up didn’t care?
That's why I included "/libs", for people like you :)

To be clear, for me they are libraries, but realistically people use them as frameworks, as in "standard" ways to think, "frame" and implement something.

But because I'm not dying on any hill specially front-end ones, I'll take a right then a left and go on my way.