skysight-inc/HackerNews huggingface dataset:
Malware encryptors can be left on the system for forensic investigation to discover. You’re correct that there’s no perfect guarantee the ransomware group didn’t also exfiltrate data using another method, but that would be kind of stupid; the idea of this would be to reduce a hard problem (trust a criminal to secure your data and eventually safely delete it) to a simpler problem (trust a criminal group not to do something economically irrational that also requires extra work and stealth at infection time.) You don’t need network access to verify a PoW blockchain transcript is correct, provided the cost of forging that blockchain segment is high enough (plus you can script payment redemption so it requires a signature from the enclave attesting that the information was destroyed.) I’m pretty sure a resourceful ransomware group can source a few motherboards and CPUs that can’t be traced back to them.
Show HN: Rethink note-taking and learning experience
Hey! Just launched my new project.

The cmaps platform was created after a long period of research and development in the field of education. It's known that human thinking is not linear, but rather associative. Without realizing it, we are constantly making connections between the things we learn. I believe that the best way to learn is to make these connections explicit. Instead of studying and taking notes in a linear fashion, we should be able to create a map of the concepts we are learning. This way, we can see the big picture and understand how everything is connected.

I can say that cmaps is helping me a lot, mostly on my masters notes. That's why I believe it can help others too.

Check it out at https://cmaps.io

Seriously, I would love to get some feedback!
Thanks in advance!
Probably a hot take: we should let democratically elected leaders be the guardians of superintelligence. You don't need to be technical at all to grapple with the implications of AI on humanity. It's a humanity question, not a tech question.
Damn, I remember reading his blog post a few years back when I was an undergraduate procrastinating on lab reports. I was instantly in awe of his writing and latex skills.

RIP Gilles
I'm not sure what a non-standard seat fee is (it does show prices for seat tiers, such as economy vs first class), but it does show baggage fees for me.
just sounds like billionaire tech bros wanting to appear smarter and more important than they really are and a weird cult like obsession with AI at the expense of the rest of humanity even though AGI won't be possible for like a hundred or so years
Well for one, in medicine you can run randomized trials across thousands or even millions of patients. The public don't want their economies turned into guinea pigs for economics experiments, so they have to stick with natural experiments, which greatly limits progress. A better comparison would be the public health response to covid-19. Even today we don't really know whether lockdowns were worth it or not.

>I guess they just like winning medals and appearing elite, without actually contributing anything?

Are they? some of the contributions listed here seem pretty important and non-trivial: https://en.wikipedia.org/wiki/List_of_Nobel_Memorial_Prize_l...
My go-tos are the mythical man month and Peopleware:productive projects and teams. There’s the Peter principle too. On more technical (slightly) topics, I like the Pragmatic Programmer. I also like people to be aware of re-engineering concepts, so Hammer and Champy’s Re-engineering the Corporation is also good.
>It really seems like the aversion to anthropomorphizing LLMs is leading people to ignore or overlook relevant patterns in the highly anthropomorphic training data fed into them.

This exactly. Not anthropomizing when anthropomization is producing better predictive models of what to expect in output is not smart, it's just silly.
The remaining 10% are probably on Thanksgiving break!
That’s like saying the problem with rulers is that the real world doesn’t have straight lines.

Or the problem with cleaning your room is that in the real world entropy only ever increases.
We would love to do the analysis you are describing in detail. I'm thinking getting people movement data from google maps or something, using that to figure out where people are traveling to. Then use that to determine what traffic needs to go through the major airports and who would be better off going to local airports and really map the traffic in detail. Then overlay our cost data to see what is the real optimum. If anyone can help with that we would love to chat!
> -----

> Jewish Communities have been pushing the exact kind of dialectical hatred against whites that they claim to want people to stop using against them.

> I'm deeply disinterested in giving the tiniest shit about how western jewish populations coming to the disturbing realization that those hordes of minorities that support flooding their country don't exactly like them too much

> ----

> Elon Musk: You have said the actual truth

If you agree with this, I have no further questions. It's straight-up replacement theory [1], in its ugliest, anti-semitic flavour.

[1] https://en.wikipedia.org/wiki/Great_Replacement
Thank You.

I meant to say "OpenAI is not prefect..."
TSA presumably can narrow down the search space to the people with tickets at that airport for that day
Present state. They are moving towards facial recognition with no need for ID presentation or boarding pass. No need for the ID when they have your photo on file (this is how Global Entry re-entry kiosk works), and your identity is tied to airline PNR.

https://www.cbp.gov/travel/clearing-cbp/passenger-name-recor...

https://www.youtube.com/watch?v=EnxfsZrnPv0

(enrolled in the CBP program 1:many program mentioned)
Loyalty? I could believe closest colleagues, that were in constant contact. But 500… is a bit too much to hold any warmy feelly bonds. Greed is simpler explanation.
Essentially everything in my home and office is an Apple product, but it is rather surreal that this isn't already a baked-in option on Apple laptops in the year of our lord 2023. I think an employer first handed me a mobile plug-in card for my laptop in about 2007, which worked surprisingly really well given the technology of that long-ago era. Given that this is a company that is one of the dominant players in phones and that they long ago put the same technology in iPads, it just seems like a huge oversight.
Twitter doesn't really work at all when logged out. Try logged in or using something like nitter.net
You can complain that free is costly. It’s costly because people think it’s actually free because they don’t understand what they’re actually giving up in exchange. More like don’t complain about monoculture if you’re going to be lazy. Many are not lazy, just the people defaulting to things like VS Code.
Ten years? You guys should catch up in ten months.
> “While I understand how complex this was, when it comes to performance reviews, this code looks trivial. It looks too easy, too simple.

> I would recommend writing an implementation doc of this module just so we can demonstrate that this was actually quite complex.”

This sounds strangely bureaucratic. But I guess it's good that your manager would give you tips on making yourself look better; it's better than just not knowing that you're expected to write these docs whenever your code looks like it was too easy to write, and then others aren't as impressed with your work.

Also, I now wish I could see the diffs between the before and after versions of the data enrichment module, from the two-file spaghetti monster that seemed to work to the neat, unit tested version, just because it seems like something one could learn from. Obviously, it's proprietary code owned by the author's employer, by whom they were paid to write this code and not share it, so I understand why they wouldn't share it.
Mainly because, every bridge is more like every other bridge than not.
Every skyscraper is more like others than not.

While there are some parts of new software that are more similar than not, and these are more 'engineering like'. The majority is not.

Evidenced by; if you did a 'diff' between plans of a bridge you would get a limited number of differences. When you do a diff between an os, browser, slack, the code that runs this site you get a lot more differences. You need to consider each and every detail. This is not 'big-picture'. Big pictures do not construct things.

Sure, there are lots of similar projects and maybe you can apply a more traditional engineering approach to those.

It is interesting to note, LLMS are bringing the similarities out. You can ask for something and it can code up something from something it has seen that is similar. But, as anyone who has used them, will know, it's only partially correct in its interpretation of that simimilarity.
New groups can't demand as much as the next. Also most of the big groups are RaaS (Ransomware as a Service), meaning their affiliates get approval to operate using LockBit's name, infrastructure, and software.

If LockBit does something to taint their image in the media and among security organizations, then rebrands to avoid their negative history, forensics will still eventually tie their new name back to their old org, and victim's will have to decide whether they should trust that their data will be handled correctly after payment.

As for re-victimizing old organizations, there's almost zero chance of that working. Most data is only sensitive for a certain time frame, long enough that they can make the proper notifications, change credentials, etc.

Lastly, there still needs to be someone to download and abuse the data they leak. I've monitored ransomware torrents a few times and not observed any downloads completed over the course of a couple weeks following a data leak.
That probably wouldn't have a good outcome. If a company gets hit very hard, their options are either to pay or die. If you make it illegal to pay, their options are either to commit a crime (which will not kill the company even if they get caught) or die. All this will do is push companies into hiding when they get hit and not reaching out to the government and security companies for help, which makes catching these groups way harder. So, at best you kill some domestic businesses and at worst you kill domestic businesses AND help the attackers hit more companies.
And yet again I didn't get it from I Robot, I got it from Asimov's NON-fiction writing which I referenced in my previous post. Even if it had gotten it based on his fictional works, which again I didn't, the majority of his robot centric novels (caves of steal, naked sun, robots of dawn, robots and empire, prelude to foundation, forward the foundation, second foundation trilogy etc all feature benevolent AIs aligned with humanity.
What's the difference? Your phone has all this stuff and most people have plenty of sensitive information on that and may even use it as their primary computing device.
Also ChatGTP was kind of on a roll doing cool stuff and people tend to pin that on the CEO even if it's not really down to them.
You're right. I can't believe I missed that. The error was the phone's, but I didn't catch it.

I double checked all the apostrophes this time.
Yeah, collaborating in real time on the same document is pretty neat (from using google docs for this.) Having someone else typing on the same page got an unexpectedly visceral "argh! it's moving! get it off of me" reaction the first couple of times I tried it, had to switch tabs and come back later.

It's definitely only a problem for some people, and might even be specific to some aspect of the google docs implementation, I don't know yet. But yeah, that feature is not the slam dunk it sounds like, and you might not realize it until you're in the middle of it.
Nothing says Anti-Trust like secret deals that violate their published TOS.
It's Tim Cook, Apple's supply-chain guy at work. Slowly moving up the food-chain to in-source the most expensive items on the BOM and bring down costs, now that they achieved the scale for it. First the SoC, then the modem, then the sensor.
No, I'm not trolling.

Where I live we put down cats that attack people. We onyl breed the mroe loving, least aressive cats. They will get softer, cuddlier, and less agressive over time.
I've worked with a lot of very good facial recognition technology. They all have demonstrated biases for white males. Even in the ideal scenario they are far too inaccurate (<97%) to be used for identification, unless your false reject rate is extremely high (>30%). And if it is a less ideal scenario (elderly Latina, Asian woman, etc) you'll be lucky to get 80% accuracy without high false reject rates.

When it comes down to it, accurate facial recognition is at best 99% accurate. But being wrong 1 in 100 times is a horrible number for an authentication system. Anything else you ever use for authentication (password, iOS face scanning, PIN, etc) would be considered a complete joke if it only got to 99% accuracy.
Looks nice for resumes also.
Mirai is malware that was written by a college student but their code was released to the public, and a lot of other malware uses it as a base.

It (and other malware) tend to behave in specific ways and follow specific patterns, and those patterns can be analyzed. Ditto for the servers they use, targets they hit, etc.

These approaches are known as TTPs, and documenting them is how you attribute an attack to a specific group or actor. Even if you change your org and start using servers in a different country eventually your MO will give you away.

These approaches are cataloged by IT security types, and many cybersecurity orgs release publications about Group X using approach Y.

So when you get hacked by Group Z, but they sound like X and Y, you guess it was them. And if Group X has a history of burning ransom payers then you don't pay -- they'd fuck you anyway, so save the money and start rebuilding.
>> block cloning, which allows shallow copies of blocks in file copies. This is optional, and disabled by default; [...]

> This sounds interesting, but I wonder what would be the advantages compared to enabling dedup on a specific dataset (disclaimer: I've never used dedup).

In a steady-state system the results should be (almost) identical. But deduplication is either an inline process (which has limited data and thus is less efficient) or post-process (which runs maybe once a day and thus takes a while), while a block clone of a file is instantaneous, it takes no space and you don't have to wait for the next deduplication run to get your free space back. Which is helpful for large files (think qemu disk images).

If you have ever used a (commercial) file system that implements this, you will never want to go back :)
Only if they completely rebuild their malware and infrastructure so that researchers can't correlate them together.
Argentina Braces Itself for Its New 'Anarcho-Capitalist' President
I heard of some European visitors to New York thinking they would drive to Chicago for the day. It's about 800 miles. Countries in Europe are similar to average or small states in the U.S.
Nah, that's not the case, we can see your comment above and it's mean-spirited
Similar treatment already approved by the UK [1]

[1] https://www.nature.com/articles/d41586-023-03590-6
The fact that you can’t put a number is why it’ll never happen, you expect people to agree with an undefined amount of money given?
I think probably for a lot of the audience here they may keep sensitive stuff off their phones or not use them for "serious" computing but looking around that's not really where the market is.
That's actually a problem for the business model of mobile games. A consumer can - or very soon will be able to - pick up AI tools and cut out the middleman org churning out these illustrations, just like they cut out the professionals. It won't be too long before games are made that advertise "put your original characters in the game", and it won't be some complicated character creation tool - it'll be generative stuff.

There's a lot of "but wait, there's more" in what's happening around AI.
My concerns here are not about the search cost, but about holding everyone's data.
https://archive.md/qPLlf
That’s a good point. I would guess there are ways of doing static analysis to see if a given binary is making getenv() calls though, even if one doesn’t fully grok its source.

Maybe some combo of that with sentenv() in your source or something

Or do “live” analysis under integration and give a low priority warning

But yeah it’s hairy, you’re right
I'm not sure how you appease you other than to have simply not bothered with my comment; perhaps that would have been better. Still, seeing the mistake -- as I see it -- and ignoring it to move on to something else doesn't seem necessarily better.

> And sticking to calling out fallacies while failing to discuss the object level question is?

In this case, an honest attempt at raising general discussion quality, even if it happens to lower it in the immediacy.

> 1. if you look carefully I'm not the person that you originally accused of using "thought-terminating cliché"

Yes, but you did use such a cliché in your response which seemed to have demanded that I argue against said cliché ("... but rather than trying to argue for why we should, you drop a link to some fallacy on wikipedia and call it a day.")

> 2. You really haven't really presented any arguments for the original argument was a "thought-terminating cliché".

Indeed, and I am still not even sure specifically what point they intended to argue. I don't know what a coherent response would look like other than to point out why I can't seem to form a more coherent response.

--------------

Anyway, back to the initial statement.

> I don't see why people with lower skillsets or utility curves that weigh leisure more highly than work activities should be allowed to leech off the productive capacities of others.

It seems to be commonly decried that "people with lower skillsets or utility curves that weigh leisure more highly than work activities should [not] be allowed to leech off the productive capacities of others" and rarely asserted that "people with less fortunate life circumstances should be allowed the opportunity to take risks with their productive time rather than being forced into employment as soon as they reach adulthood".

Your point is that I could start with this explanation or otherwise include it in my initial comment -- which is fair enough! I suppose I might subscribe a bit too much to a "Socratic" method of teasing out another person's thoughts rather than supplying my own.
Really? OAI spending 45 billion dollars a year with fewer than 1,000 employees? Seems unlikely.
I think the dispute hinges on what it means to be "doing well". In most companies, you can at least all point to the same thing, even if you disagree on how you get there: creating shareholder value.

But in this case, the company was doing things that could be seen as good from a shareholder value perspective, but the board has a different priority. It seems they may think that the company was not working on the right mission anymore. This is an unusual set up, so it's not that surprising that unusual things might happen!
and there aint nothing wrong with wanting to be fabulously wealthy.
I'm sure the return on that investment was very large in terms of donations.
The Perilous Journey Toward AGI – Ilya Sutskever – Ted [video]
This is laughable. People are focusing on the aspects of where Sam Altman and team are going, and less on the fact that it is even more clear that this was a move to remove the non-profit cap on the OpenAI business and re-align their strategy with market capitalization. They've been slowly chewing away at it the last few years (a notable example being them not opening up GPT-4, which was against their stated mission statement of opening AI). The board simply serves as a conduit for ensuring that there is ethical direction towards where the profit arm is moving, and ensuring that it stays within realms of the originally stated mission statement. By having the entire board resign, you can install people with different motivations and mission statements, and on-paper look like they're acting ethically. We should all be collectively sad for the ruse that was given to us as OpenAI, as they used our (the software engineering community collectively) will and direction and pulled the carpet underneath of us. I'm not surprised that this occurred, more surprised that people are focusing on the literal movement of figures on the chess board, and not focusing on what the chess board now looks like: closed-source monopoly on AI.
Using a browser devtools performance profiler could confirm this. I highly doubt there's a 5 second setTimeout in youtube. More likely switching of browser technologies based on user agent.
That's not what this means.
> Also if the author couldn't even get that simple HTML detail right then it potentially says something about the quality of his site's information. Perhaps.

Perhaps is doing some heavy lifting here. I take it from the fact that the lectures are on Functional Programming that OP might not be a front-end developer and might not have the level of care needed for front end to compress the images in a way that renders nicely. So,

Perhaps you ought not judge someone releasing their free teaching materials for a backend class on their front end development, when the site is a centered <div> with purely static elements.

Perhaps you ought to slow down and do some critical thinking before being critical of others.
-2 points and a truly shifting +/- situation

@dang — any plans to do anything here

I mean not like you have to but yeah I can think of some stuff that could make this better probably (or at minimum experiments that could
be run)

Also not on this post but in general I mean
Have humans been ready for anything? Like controlling nuclear arsenal?

The Manhattan project urged Truman in a letter not to use the atomic bomb. There were also ideas of inviting Japanese delegacy to see the nuclear tests for themselves. It all failed, but there is also historical evidence of NOT pressing the button (literally or figuratively), like the story of Stanislav Petrov. How is it that not learning from mistakes is considered a big flaw for an individual but also destiny for the whole collective ?
Nothing is ever free from emissions, but people taking buses is still more eco friendly than those same people riding alone in expensive EVs.

> But I'm not in charge of my city's planning, I can't make them buy more busses and hire more drivers.

Sure, but we do live in democracies no? Where we have the power to change those in charge to others who will if our goals if we desire our goals to be betters public services including transportation.

Simply starting with a defeatist mindset of "nothing will ever change from our leadership so it's every man for himself to better his own situation, I got mine you go get yours" will never work for the environment. It does work for selling a lot of cars though.

If we can't change anything collectively, what about those living in less democratic countries?
Working parents transfer (some) wealth to non-working children so they can survive. Is that unfair?
-2 points and a truly shifting +/- situation

@dang — any plans to do anything here

I mean not like you have to but yeah I can think of some stuff that could make this better probably

I mean not on this post in particular but as an HN issue if we agree it’s kind of degrading the experience and there are indeed likely fixes
Surely OpenAI could win a suit if they did that.

I presume their deal is something different to the typically Azure experience and more direct / close to the metal.
A Survey on Memory Management Approaches
Many of these groups have better bug bounty programs, SOPs, and organizationsla structure than your average company.