skysight-inc/HackerNews huggingface dataset:
The more common experience with autocorrelations are with time series, but what the author said is correct even in that context. A time series autocorrelation relates the same time series function at different times. At the simplest you plot the arrays X vs X where X[i] = f(t[i]). You then may complicate it further by some transformation g(X) vs X (e.g., moving average).
Not true. Author of colored cover with bw book...
Because liberals won’t allow the truth to come out?
If this was the case there wouldn't be so much hagiography for any given president or presidential candidate.

I also think a 7 or 8 rating is way too high for the US even on a party level. A 7 or 8, given the Kims are a 9 or 10, would probably be more along the lines of a Xi (observing that former heads of state of China have been unceremoniously retired, which shows that personality only goes so far even in an effectively single party structure).
It's great that there is an open-source Verilog implementation for FPGAs (running at 50MHz, highly respectable compared to ~30MHz hardware) and apparently a NetBSD version that will run on it.
A different one for each service no less
I wonder what the geoengineering implications are of this technology. (I suppose we couldn't make enough of it over enough space to matter wrt global warming)
The concern is obsolete. 183 out of 195 countries have below replacement fertility, and the others are expected to get there within a generation.[1]

Over-rapid depopulation is a real concern. Especially in East Asia and Europe.

If you want to know more search YouTube for the documentary "Birthgap" by Stephen J Shaw.[2]

Feminist/leftist thought leaders don't want to hear this message because they immediately jump to the conclusion "so you want to put women back in the home, barefoot and pregnant" and try to cancel you.

Instead, Shaw offers this: Make university free for mothers of 2 or more children, and change employment law and retirement ages so they can have full careers after having their kids at the safest age.

1. https://www.bbc.com/news/health-53409521

"Falling fertility rates mean nearly every country could have shrinking populations by the end of the century. / And 23 nations - including Spain and Japan - are expected to see their populations halve by 2100."

2. https://www.youtube.com/watch?v=A6s8QlIGanA

3. https://www.birthgap.org/
This is wild. Try to change the search engine of Edge.
Might not be, but I like to start with a big number instead of 0 or 1 to fill all the bits. For example, if your prime is 100019, then your first number in binary is 00011000011010110011 but if your max number is something like 2^53 (00100000000000000000000000000000000000000000000000000000) then you have a lot of unfilled bits. The way I have mine set up, the output ID is always exactly 9 chars. 99% of the time it's naturally 9 chars because just by probability most of the numbers will be large, but some of them come out 8 chars and then I just pad up to 9 so it's nice and consistent.
I’m a little late to the party but yeah I can verify it.
You typically don’t. The service simply allows it at all times. If you don’t trust your email auth story, that is a challenging threat model for sure. Big fan of passkeys all around for this very reason (at the moment, they are unphishable), but the story around recovery in the event of a lost passkey needs improvement to close that gap (can’t just lose your account due to edge cases, need gov ID or something similar to elevate identity assurance back up for account recovery and rebind to digital identity).

Google is upgrading everyone to passkeys [1], for example, which should help the Gmail email identity situation (which is material, as Gmail is one of the largest email providers [2]). Otherwise we end up with breaches like 23andme, where trivial credential spraying leads to data leakage [3]. This is entirely preventable, and the engineering time is not onerous to implement. Passwords must be left behind as quickly as possible.

You have piqued my interest though; which service doesn't allow you to reset your password via your email on file (besides an account auth system like Mullvad)?

[1] https://blog.google/technology/safety-security/passkeys-defa... ("Google: Passwordless by default: Make the switch to passkeys")

[2] https://www.demandsage.com/gmail-statistics/ ("Gmail has over 1.8 billion active users as of 2023, which means 22.22% of the world’s population uses Google’s mail service.")

[3] https://news.ycombinator.com/item?id=37794379 ("HN: 23andMe says user data stolen in credential stuffing attack")

Obligatory passkeys directories: https://passkeys.directory/ | https://passkeys.2fa.directory/

(responsible for customer and internal IAM at a fintech)
If it’s good enough for ssh, it’s good enough for everything. Widespread Passkey support can’t come soon enough.
If your prediction is "A.I. is similar to magic and can do anything and will become a god" you would of course think it can solve the protein folding problem... I'm not exactly sure that leads to the conclusion his track record is great. (There are many more things A.I. can't do than can do, I would think?)
this is relative to the size of population. The numbers are right, you should also be able to reason how much better weve become at living places that used to be impossible.
"I ♥ to /bin/bash and last week I came around the one bash book to rule them all."

The thing about programming is you have to at least nod to grammar and syntax and your IDE will sort you out (if you bother with one).

The thing about submitting an article on HN or to the world in general is ... why not proof read the very first line.

I doubt that any en_xx would "come around" and would prefer to "come across". Now that I read that critique back, I worry myself!

Anyway: "I ♥ to /bin/bash and last week I came across the one bash book to rule them all."
> With the help of machine learning, the pair could see the consistency of length requirements and restrictions for numbers, upper- and lower-case letters, special symbols, combinations, and starting letters. They could also see if sites permitted dictionary words or known breached passwords

Baffling they'd use machine learning to answer basic statistical questions.
> Freedows

Core memory unlocked: https://web.archive.org/web/20001109160100/http://www.freedo...
Jesus. This is beautiful.
You can be lazy and get lots of promotions and bonuses. That's why. People risk major felonies to steal $5k from a bank. Getting fired on the (let's be real) low risk you get caught is nothing
A roman era GPT would be fantastic
It will surely help packages which often get stuck migrating from unstable to testing due to failing mips64el builds.
This looks great. The video example seems to fail, though? It seems to ignore the instruction about removing the bar at the bottom.
These days you need to brand basic statistics as machine learning (which is itself a form of statistics) in order to be taken seriously.
those were my thoughts too

You can use Broadcast Channels as well as Service Workers, even WebRTC would use a loopback interface!
I literally have no idea what you just said.
its not misguided, but i am not surprised you are skeptical, its impossible for most people to actually get rational perspectives because of the hysteria.
Question, in this case, is it a violation of patents + trade secrets, or just the patents?
There are good reasons to split embeddings off from your regular DB load. Embeddings can be quite large (kilobytes per item), and querying is CPU and IO intensive, so they are good candidate for scaling separately.

The embeddings are not primary data, they're derived from other content and can be recreated if necessary. The vectors will probably be fed or read in bulk by your ML pipeline at times.

I'd say you probably want the primary storage of your embeddings to be file storage like S3 or similar, and then feed them directly into a search engine like Vespa or Elasticsearch.
I might be wrong, but I think the point is to simulate a server-client architecture (to show that it works even for an actual web app).
I can’t share the sentiment on constant learning. 20+ years in profession and the fastest delivered, the most practical and the most value-for-client things I made were on a platform that didn’t change since around 2000-ish. Not 1.5x difference, but like more than an order of magnitude.

Love for constant learning is a moonshine we drink to avoid looking soberly at our “industry”. It went through one breakthrough per hundred breaking rehashes type of “evolution”, and still goes. Can’t express how morally tired of it I am.

My road was also long, broad and bumpy, from assembly to ts with most of the intermediates you may find in popularity/year charts. And every time I was hoping it was the last thing I learned, that it is a bullet mostly silver, and where it is not, I know what to do. But this train never stopped and now I know 20-30 times more than what can be effectively used. Not that I’m the brightest bulb out there, but isn’t that a senseless waste of intellectual effort.
My LinkedIn feed is full of bullish posts about Bitcoin. Only charts going up.

My prediction is 3,000-4,000$ within 12 months.
My thought was similar: if you breathe in & out equally, you can use that as a quantifier. If not, count the seconds of your breath, modulo by 2 to get a zero or one.
Customers really, really hate segmentation of product [1], esp. if the product end up being exactly the same!

I think companies should stop trying to segment customers. It's a long term loss, despite a short term gain.

[1] https://www.joelonsoftware.com/2004/12/15/camels-and-rubber-...
Tertiary point but one that been on my mind…

What’s the difference between one person doing it individually and a company doing it to train an AI? I mean isn’t this exactly what a lot of LLm training data is built on as well?

I get there might be different legalities, but morally isn’t it all basically merely degrees of theft? Like this is trade secret theft, but training an AI on the code isn’t?

You can download a car…
It was awful.

It was a straight file-based system; run entirely from the client. No server component.

You mounted a server drive onto your desktop, pointed VSS at it, and then fixed a four-course meal, while it synced.

No server. For a shared VSS.

I’m not surprised MS didn’t use it.
I'm not well versed in security so excuse my ignorance.

Before I started using Bitwarden I re-used one single strong password across hundreds and hundreds of sites (only my banking used individual different passwords) and I have entirely lost track of which sites now have my re-used password.

I have now used haveibeenpwned and similar sites, and I at least now have a huge long list of sites where I re-used that password. But there are far too many for me to go through and change every password, it would take days.

Maybe I'm just being lazy, but I honestly can't see myself getting around to it. Is there no way to automate the process of password resetting with individually generated Bitwarden passwords?

If this process could be automated then it would be a game changer for security.
Some Apple devices (iPads and Studio Display, IIRC) do this as well.
It's not easy to prove independent invention as a defense, because you have to have set it up to do so in the first place, not after the fact.
Honestly, so what? Most websites aren't that important, so this "impressively large" study is mostly useless stats. I use the same weak password / spam email address for any website that idgaf about. Is that a problem? Oh no my reddit account is compromised what ever will I do??
Adding txtai to the list https://github.com/neuml/txtai

txtai is an all-in-one embeddings database for semantic search, LLM orchestration and language model workflows. txtai can satisfy most vector database use cases such as being a knowledge source for retrieval augmented generation (RAG).

txtai is independently developed (not VC-backed) and released under an Apache 2.0 license.
As hinkley said, it is basically impossible to get the seed from the output of the generator without breaking the algorithm itself.

CSPRNG can also be used as the basis for a stream cipher. The output must be the same for the receiver of the message to be able to decrypt it. Being able to extract the seed would be problematic because an attacker could know some part of the message being sent, calculate the CSPRNG output from it and get the seed, thus being able to read all the messages.

CSPRNG are specifically designed to be a one-way function. Calculating the output from the seed should be easy, but calculating the seed from any output must be impossible.
> Country pubs struggle to survive now that driving after a couple of pints is socially frowned up on.

While drunk driving was and is a huge problem, and does cost lives, I do think the USA (and maybe UK, I don't live there) have massively over-corrected on the problem. The pendulum has swung so far, and cops enforce so aggressively, that you really can't chance even having a single beer while out with your car--even if you know it won't put you over the limit. And a DUI on your past record will stay with you basically forever.

Depending on the US State, you can even get a DUI for many things that don't involve drinking or driving:

- You're merely seated in a vehicle while intoxicated

- You're sleeping in the car with your car keys nearby, and intoxicated

- You're standing outside a vehicle while intoxicated, without any intention of driving

- You're in possession of car keys near your car, while intoxicated

- You're tired or lost (but haven't been drinking) and the officer thinks you are intoxicated

No, I don't want to go back to the days when it was socially acceptable for people to get shitfaced and drive home because it's just around the corner. I had a classmate killed 2 years out of high school as a passenger of such an asshat. But I do think we've over-corrected to the point where I won't even dare to drive to dinner or a pub if I'm going to have a single beer there. I just drink at home now.
I don’t remember the name of the company, but it was a single word that began with “P,” (I think).
Already in the work. Just had a meeting today with two latinists about it.
> Exactly, that was my thought. How would it be possible to get anything other than the D-K effect, even if it wasn't just averaging to the mean?

Quite easily with the method they demonstrate in the study in figure 11. In that study test participants are not rating themselves in terms of population percentages, but in terms of the percentage correct they got on the test. In such a case the test could be designed to have a huge ceiling that even the most knowledgeable participants would have trouble reaching. And could have such a low floor that even the least knowledgeable participants would still get some answers correct (unless they weren't even trying, which would allow throwing out their data points).

With 20 questions you could have four gimmes and four impossible questions, bounding the worst participants to about 20% and the best to about 80%.
I think it's just cheaper to use public domain illustrations than to hire an artist.
The only production case I've seen of someone switching to a vector database totally in-lieu of a RDBMS is when their raw data lives in parquet / arrow files and they need fast read-only searches in production. Then a periodic indexing daemon with some additional metadata bolted onto the vector definitions worked well and saved them from having to dip their toes into classic database optimization.

Every place where I'm deploying vector databases, though, I'm using them as an alternative index just for searches (indexing embedding/id only) and doing the full object value lookup in the RDBMS. It's easier to optimize their vector clustering / sort performance outside the constraints of postgres - which is perhaps why pgvector suffers more under higher load.
I suspect there are a few issues:

1) NVidia drivers had a lot of secret sauce to give high performance.

2) NVidia for machine learning still has a lot of platform lock-in (although fading gradually), and cross-compatibility doesn't help them

3) Quite often, if you've licensed something from a third-party, you can't legally open-source. Proprietary codebases sometimes get... messy.

I'm jumping ship as soon as Intel drivers are good enough. I don't trust AMD to have anything working -- too many bad experiences -- but Intel has a good track record. Arc A770 gives 16gb for <$300. That's as much as I have on my >$1000 NVidia card. I don't need maximum FLOPS. So long as deep learning models run, and 3d apps are accelerated, I'm happy.
I disagree. Dunning Kruger is not a statement about predicted score correlating with actual score in some way. It states that predicted score does not correlate well with actual score. This can be rephrased as the prediction error having a negative correlation with the actual score. The article then claims that this negative correlation is autocorrelation. That is true but the correlation still exist. The thing is that ideally we EXPECT there to be no correlation of the prediction error with the actual score, but we find autocorrelation. Going back to variables where this autocorrelation is not there, we EXPECTED to find a 1:1 positive correlation between predicted score and actual score but find no correlation, or a weak correlation.

So finding autocorrelation when you expected to find no correlation is pretty much the Dunning-Kruger effect here.

In fact their example with the random data totally makes sense: Suppose people uniformly randomly estimate their performance. Then the people who are low skilled will consistently over-estimate and the people who are high-skilled will consistently underestimate. Of course there is no causation here, as the people choose randomly, but there is an undeniable correlation. I guess the question is if you view the Dunning-Kruger effect as a claim to low skill CAUSING positive prediction error, or just correlating with it.
Is there a (legal) way to get this book in pdf?
Shopping carts (and other purely-functional, essential purposes) do not require a consent popup.
Fair enough. I researched it earlier in the year and it wasn't available.

I stand by my point: we often hear that adding a new tool to your stack is introducing unnecessary complexity, when more often not using the right tool is the path of most complexity.
They do indeed have a common cause. It is the exploitation of non-organic energy, that is, fossil fuels. Without them the English industrial revolution would have come to a stop around 1850, or earlier.

Why do kids mean more economic growth? Current thinking is that of Oded Galor.[3] More people, more ideas, so more one-in-a-billion great ideas that improve everyboy's lives.

1. Energy and the English Industrial Revolution https://www.cambridge.org/core/books/energy-and-the-english-...

2. Ayres and Warr 2005, "Accounting for Growth: The Role of Physical Work" (pdf) http://113.212.161.150/elibrary/Library/Structural_Change/Ay...

3. https://en.wikipedia.org/wiki/Unified_growth_theory
I think Latin, like so many things, gets taught in school to people who are too young to appreciate it. Latin in school was mostly a nuisance to me. The only students who got really into it were those that took it as an additional elective later. I now wished I had made more of an effort in the Latin class. That said, even now I study languages in my spare time but choose once that are currently in use.
For CSPRNGs, we tend to use hardness proofs (i.e. prove that an attacker cannot predict the CSPRNG output in polynomial time). To understand these, you'll need to figure out what the algorithm in use is. This isn't particularly relevant to TOTPs since they are built on unforgeable message authentication codes (TOTP usually uses HMAC) so the proof would usually be less about predicting a bit (though, if you could, that would be a valid security break) and more about proving an attacker cannot forge a signature on a message without violating the hardness assumptions.

For regular ol PRNGs (i.e. non-cryptographically secure), there are various tools [1] which let you feed in enormous amounts of samples and then automatically apply a variety of known techniques to try to find correlations. But, generally, you wouldn't expect a PRNG to pass these tests. Instead, you should focus on getting a distribution and behavior that is helpful to your use case.

[1] https://pracrand.sourceforge.net/PractRand.txt
So if you obtained an idemic memory via installing a camera, flash drive and io ports into your brain?

How or why is the mere transport method of information the distinction between infringement of IP vs not?
I find myself identifying the time period of my wife's favorite British detective series by looking at the computers the cops are using.

My dad is like a walking encyclopedia of mid-century automobile knowledge, I'm sure he can do the same thing with cars in old movies.
If you have the code, an Interlisp system like the revived Medley, and the several papers Lenat authored about the design of Eurisko, it should be “just” a matter of putting the pieces together and figuring out how to get something running.
The Whale That's Known Only by the Sound of Its Voice
How is this morally theft anymore than hiring someone who has experience solving the problem to solve the problem again? As long as they aren’t reproducing the solution verbatim it’s already morally acceptable to hire experts for their experience. Why would “hiring” software for its “experience” be different?
John Legend and Charli XCX agreed to have their voices cloned by YouTube
The Curse of Docker
Racism and class warfare fueled the decline. Look at every single location that has declined, it can be attributed to one or the other. Hate is causing the country to implode and we can't even see it.
> Bringing your "experience" means only the experience and problem solving skills that are in your head

it's hard to differentiate experience with IP. For example, there might be a tricky problem (say, in manufacturing), and the solution is a trade secret. The "experience" from said employee is really just relaying that trade secret.
Even without the historical problems, it's a real weird movie.
Well there's another post on the front page right now about someone training it to act like a person from the 17th century very successfully using a corpus of old documents. Anyone can download that model right now from hugging face and run it on their pc with LLaMA.cpp Now imagine anyone anywhere can fine tune another model variant right now easily with any corpus of any type of communication they want. Now if you've tried any of these models you'd know they can be incredibly good and believable and any downsides can be smoothed over in training for a specific goal and people are constantly iterating and experimenting with this. Given that, the cat is already out of the bag with this entire topic.
your comment is a prime example of the complete ignorance towards the circumstances most people used to live under. Cruel brutish and short for most people dont even begin to explain it. We have access to more clean water than ever, sanitation and i could go on, but unfortunately the youth has been hijacked by antihuman people who under the guise of moral virtue signalling spread unscientific FUD. Imagine how many years they are wasting on worrying rather than learning to solve problems as they appear.
Ask HN: Alternatives to location search using Google Maps?
Have been trialing other tools to look-up places I'm interested in but have had mixed results here in Australia.

e.g. searching for a region in southern Victoria colloquially known as "wilsons prom" using OpenStreetMap Nominatim takes me to "Wilsons Prom Cafe & Pizza" rather than the region "Wilsons Promontory" nearby.

This and other bugbears have been stopping me from using non-Google tools for queries like this. Do any other FOSS map frontends give better results?