skysight-inc/HackerNews huggingface dataset:
> weird assumptions about what kind of code you want to run

Those "weird assumptions" are what makes the experience wonderful for the happy path. If you use the C#/v4 model, I can't imagine you'd have a hard time. Azure even sets up the CI/CD for you automatically if your functions are hosted in Github.

If your functions need to talk to SQL, you should be using Managed Identity authentication between these resources. We don't have any shared secrets in our connection strings today. We use Microsoft Auth to authenticate access to our HttpTrigger functions. We take a dep on IClaimsPrincipal right in the request and everything we need to know about the user's claims is trivially available.

I have zero experience using Azure Functions outside of the walled garden. If you are trying to deploy python or rust to Az Functions, I can imagine things wouldn't be as smooth. Especially, as you get into things like tracing, Application Insights, etc.

I feel like you should only use Microsoft tech if you intend to drink a large amount of their koolaid. The moment you start using their tooling with non C#/.NET stacks, things go a bit sideways. You might be better off in a different cloud if you want to use their FaaS runners in a more "open" way. If you can figure out how to dose yourself appropriately with M$ tech, I'd argue the dev experience is unbeatable.

Much of the Microsoft hate looks to me like a stick-in-bike-wheels meme. You can't dunk on the experience until you've tried the one the chef actually intended. Dissecting your burger and only eating a bit of the lettuce is not a thorough review of the cuisine on offer.
Watching these videos made me remember this cool demo Google did years ago where their earpods would auto translate in realtime a conversation between two people talking different languages. Turned out to be demo vaporware. Will this be the same thing?
Incremental Rust Builds in CI
Or a lower cost. Aren't Polish tuckers generally paid less than Swedish ones?
https://news.ycombinator.com/item?id=38546904
The price of gold priced in ₿, keeps falling.

See also https://www.longtermtrends.net/bitcoin-vs-gold/
I could understand so many employees for seemingly simple-ish tech services like this if 9000 of them are working in the customer support / tech support department. Wishful thinking though I guess.
Is it these sort of buyers that have a major influence on the price though? (I don't know the answer.)

If you buy a large amount of gold on an exchange the physical gold often stays in the exact same vault, and someone just updates an ownership record.
IA Writer 7
If you're not using the haugene/transmission docker image, you're doing the VPN wrong. There was a period of like 3-5 years on reddit where every other post in some of these subs was "my vpn shut down but the torrents kept torrenting and now I'm getting nasty letters from my ISP, why didn't the killswitch work!?!?!"

That's because a killswitch is a dumb idea. It's bad software written badly for a consumer operating system, but the job you were asking it to do was as critical as any control process some esoteric barebones RTOS wouldn't have been perfectly trusted to do.

I don't say this because I'm some genius... I'm saying that I'm the dumbass who learned these things slowly, over years, by fucking it up over and over.

> Pirate streaming sites are still out there.

This may be in the same universe as "piracy", but even so the light from real "piracy" will never reach it, it is that far away.
Is this something we really expect AI to get right with high accuracy with an image like that?

For one, there's a huge dark line that isn't even clear to me what it is and what that means for street crossings.

I am definitely not confident I could answer that question correctly.
In my experience the vastly oversimplified-beyond-actual-usability calculation is that you take the parameter number (34) and count that as the amount in GB you'd need for an 8 bit model. with a 4-bit quantization that's halved, so your ball park is 17 GB plus a few GB for context. You can run these in RAM, but it's not very fast with (if I had to guess) slightly less than 1 Token/sec. on most non-apple consumer devices.
Not comment on project itself, but Really like the look and feel of landing page.
Yeah, I have EDS hypermobility also. Surprisingly, my joint stability and muscle strength already seem better just being out of the mold.
Solutions to Advent of Code 2023 with Scryer-Prolog
Is it at least as good as using Copilot in the Jetbrains IDE?
For Windows 7 you have to manually force-install an update (from Microsoft) which unlocks further ESU updates. One can view this either as modifying software for ensuring interoperability (which is allowed in most of EU) or as bypassing DRM (which gets you a jail time under DMCA).

For Windows 10 you have to obtain Enterprise LTSC license. Those come only via volume-deals and are not officially available for us mere mortals. On the other hand, in EU reselling licenses is explicitly allowed (no matter what EULA tells you) and there are tons of dirt-cheap second-hand LTSC licenses. Again - one can see this as either outright stealing or exercising your consumer rights.

No idea how that applies to US laws.
I don't play competitively either, but it's pretty easy for me to detect a frame of lag in my mouse controls. (I had to return a non-gaming ergonomic mouse for this reason.) Maybe most people won't care, but it has a material impact on gameplay and immersion.

Anyway, my problem is with the assertion that streaming is "the future" of gaming. It might become a major segment of the market, but I don't expect that it will dominate.
Masks were always terrible idea for kids. It only stayed around so long because it became a shibboleth for tribal identity.
https://sqlite.org/draft/jsonb.html references postgres:

> The "JSONB" name is inspired by PostgreSQL, but the on-disk format for SQLite's JSONB is not the same as PostgreSQL's. The two formats have the same name, but they have wildly different internal representations and are not in any way binary compatible.
Google has the biggest proprietary moat of information of any company in the world I'm sure.
GitHub Monorepo with Meta's Seamless Models and Code
Edward Snowden and Jack Dorsey on Nostr [video]
I agree, in principle, but "ownership" is almost too nebulous. To get down to brass tacks, to look for unambiguous features that cannot be weasel-worded away, we're really looking at remote revokability or, the Bizarro cousin to that, the ability of any other party to suspend or cease playable activation via DRM.

Someone smarter than I would need to flesh these out, but if we are want to law up on this, we cannot rely on fuzzy terms.
Thanks, fixed! (and thanks)
The risk is "image parsers in UEFIs ... are riddled with roughly a dozen critical vulnerabilities" but what is the attack vector? Has a dropper been identified? Or is this an academic finding only?
Asking for a friend, what is the best way to sail in 2023? I’m fairly tech savvy but I only know of 1337x and TPB. I’m also wary of any private trackers because they block using VPNs.
Watch OpenAI release Gobi before this shit is even out
Copied from Google (who pull from Oxford), but a variation of "depicting nudity or sexual activity" is included in most if not all definitions. Do you have a source you prefer that contradicts this?

In common usage, an "explicit image" implies the third definition. It's not explicit as opposed to blurry or abstract, it's explicit as opposed to non-sexual. Since the context was discussion of the contents of an image, the word "image" was implied.
It really feels like the reason this is being released now and not months ago is that that's how long it took them to figure out the convoluted combination of different evaluation procedures to beat GPT-4 on the various benchmarks.
Filtering TXT doesn't help. Think about it. To exfiltrate data means to send data out, so you can just encode it in the query names and forget about RR types and RDATA.

Now if you were trying to infiltrate contraband, then RR types matter, but you could use A/AAAA and use as many as needed.

The way you deal with this sort of thing is by throttling query rates for domains you don't have on a list of domains known not to do this. An attacker could set up lots of domains to get around such throttling, but that's fairly expensive, and still should be noticeable. You really have to check DNS queries for odd behavior.
IIRC, (US) copyright would be assigned to the person who used the tool*. Just like how your keyboard doesn't own the copyright to what you write with it.

* Existing contracts with copyright assignment clauses notwithstanding
It is my opinion that people do not about privacy as much as they did in your mention Cold War-era times (or the tail end of it, anyway). They've been shown how easy it is to trade their privacy for considerable convenience and now they're in so deep that the idea of our governments tracking us seems remarkably mundane. Normalization is a helluva drug.
I'm getting little "PaLM2" badges on my Bard responses.
This is literally the first of these articles where the examples work without JS. Everything else I've ever seen posted here usually has the snippets hosted on some CDN and requires JS to work.
The Amiga was a hotrod to eveyone else's sedan, basically.
Does AI Assistant send data and code fragments from my IDE?

When you use AI-powered features, the IDE needs to send your requests and code
to the LLM provider. In addition to the prompts you type, the IDE may send additional
details, such as pieces of your code, file types, frameworks used, and other
information that may be necessary for providing the LLM with sufficient context.

That'll eliminate its use from a lot of environments.
Can anything really be learned online for $20 (or whatever cheap figure you want to put here)? What about artisan crafts? The arts?

I wonder what we’re losing as a society by placing all the focus on careers that one can qualify into as cheaply as possible, and which earn the most money.
Isn't that going to be extremely slow? I can only realistically run 7B 5-bit models on my RTX 3060, anything more and it offloads to the CPU. My responses go from almost-instantaneous to 3mins+.
Ask HN: Does anyone use AWS Smithy outside of AWS?
I'm impressed with Smithy (https://smithy.io) which is used to generate SDK's for most/all of the AWS services in several languages. They're also starting down the path of generating server-side code from the IDL. See: https://smithy.io/2.0/ts-ssdk/index.html

I've seen the code generation code and it looks daunting. I'm more inclined to use the Smithy > OpenAPI spec > swagger route.

Is anyone using Smithy outside of AWS?
Ah, yes, the company with by far the most users in the world - and no one uses their shit.
Cueing up a calculator: an introduction to exploit development on Linux
Imagine with Meta AI
> If the providers wanted to extract more money they would not create custom hardware which reduces overall costs and prices to users.

Extracting money is about margins, not revenues. If they reduce your costs (and their revenue) by 20% with a TPU, but they can produce TPUs for 50% less than buying gear from Nvidia, it's still a profitable move.
Tail Modulo Cons [pdf]
I guess I wouldn't be surprised at all if some BIOSes always parse the logo and the switch just turns off the display.
Cool, that sounds positive. :)
Speed Limit 55
> , as many US brainwashed business people

Isn't Musk actually born South African? Then he became Canadian and lastly American? Not that it makes much of a difference, I just find it odd as labelling him as US brainwashed when canonically, his origin isn't the US.
I like reading articles like this. Compression is always a hard part for me to understand, just feels very unintuitive
If you have to zoom out to see it though, it's by definition less volatile, surely?
You can apply to get beta access to Chat. It took about a week to get approval for me (I did it last month).
While this must be an incredible technical achievement for the team, as a simple user I will only see value when Google ships a product that's better than OpenAI's, and that's yet to be seen.
>I'm [impersonating] a prosecutor in the US

yea, that could definitely be considered a crime, given the totality of the circumstance
Give it another year. In theory it's not going to be difficult, but sampling speed/power consumption is prohibitive for normal hardware at the moment.
David from Sentry here. If yall have feedback around Spotlight we’d love to hear it. This is a passion project for a few of us and seemed like a natural fit for our technology, and becomes especially interesting with the service oriented world we all find ourselves in.
The DRM TEE on Android needs to be baked in at the factory. If an app brings its own DRM then it's not able to use the TEE. If this enabled apps to use TEE like functionality it'd be good for that use case.
Because the title makes it sounds like Microsoft will charge for any security update in the future.

These are for end of life products and it is very common for companies to require additional support contracts to keep supporting them.

You do not have to continue using said version of Windows, upgrades are now essentially free, and as long as you are on a supported version of Windows, you will continue to get free security updates.
Meta launches a standalone AI-powered image generator
You didn't answer my hypothetical. Do they have the right to ensure that I am looking at their ads?

I don't see how they could, I can always look away. In that case, what is the effective difference between that and ad blockers that control what code/images run/display on my computer?
Does the push notification indicate where (location) home is?
What If the Fix for the Geospatial Workforce "Crisis" Is Better Pay?
Sorry, that didn't render. They're U+258C and U+2590. So you put them on either side and each square is rendered across 3 cells, and the 2 outer cells are half-blocks shared with the adjacent squares.

https://en.wikipedia.org/wiki/Block_Elements
I was a bit skeptical of Cursor, but I have fully migrated over and have had no issues.
The comparison is figure 1 of the paper. I think the bubble size represents number of parameters, which likely roughly corresponds to memory consumption.
Then for content it will never be possible to "buy" it, according to your view.

(Because it would mean I would be able to lend my copy to the rest of the US population and the original seller would never make more money than from my 1 copy.)
Except that it doesn't.
Exactly, if I end up paying less and the cloud also makes more money, seems like a win for everyone

The "extracting" word typically comes with abusive connotations when used in the context of money, which doesn't feel like the right word for the win-win outcomes imho
Given that it's built as a whole language, I'm curious about the choice to make no obvious distinction between 'preflight' and 'inflight' functions.

It's not obvious at a glance that you can only call inflight functions in an inflight scope, because the syntax for calling them is identical to calling a preflight function on the same object.

Do you just compile it and see where it fails?
It's a new level of fame when you get your own internet initialism!
They both have many different businesses under the hood, and they both heavily rely on advertising.

Both collect, sell, and use their users' data.

They even have special deals where Apple sells it's users to Google.

Not sure what point you're trying to make.
wow. Yahoo have a better track record than google or apple on figthing against that https://money.cnn.com/2014/09/11/technology/security/yahoo-f...

I guess now the yahoo phone doesn't sound like that bad of a joke https://www.slashgear.com/wp-content/uploads/2010/05/nokia_y...
UEFI is just another M$ abomination 8-(

In this specific vulnerability, I wonder how possible it is to modify that boot logo remotely?

Wouldn't exploiting this vuln require local access?

As in all things, open firmware is the way to go:

https://www.linuxboot.org/

https://libreboot.org/

https://www.coreboot.org/users.html
Yipes no thanks. I would consider a one time payment but this is too pricey.
Amex CEO weighs in on Apple card reports
Don't worry, it'll get to OpenAI^H^H^H^H^H^HMicrosoft soon enough via the API.
Not free, but worth it for messaging to solve the real pain points that iMessage and Google Messages users deal with while trying to communicate across the aisle.
We Might Have Just Seen the First Anti-Ship Ballistic Missile Attack
> It's the ancestor of "Mac vs PC".

I don't know if I'd call it an ancestor. When I first saw the Amiga 1000 introduction articles in the computer magazines in 1985, the Mac vs PC wars were already well entrenched and I had both a Mac and a PC. It didn't stop me from getting an Amiga 2000 in 87 when I'd saved up enough money though.
No kidding, I'm spending $10-20 a day on API calls just between summarization and development using aider.
Sure the breadth is (maybe) smaller, but the question is volume. Babies get years of people talking around them, as well as data from their own muscles and vocalizations fed back to them. Is the volume they have consumed to the point the begin talking actually less than the volume consumed by an LLM?
New foundation model applied for Physical AI
Archetype AI's A01 foundation model applied to summarize and search across multiple video streams simultaneously. In this practical example, we record clips of damage around the house and then ask the model to summarize and display specific issues to review in more detail.
WinXP and 7 were the peak. I tolerated 10, but as of this year I no longer own a windows machine and do not plan on ever owning one again.
I use GitHub Copilot IntelliJ plugin every day and would not consider going back to the pre-LLM state of affairs.

I don't use it to generate entire classes or tests, because it doesn't work well for that, and definitely not for big refactors, but it works well as a "super autocomplete" for 1-3 lines of code at a time.
Peak blood lead levels.
How is it the wrong word? Renting means to pay to receive temporary use of something.
Bard now is pretty fast & gives pretty good code answers. I haven't been able to use Claude in EU, but I can actually use this for work, not GPT-4 level, but impressive. Looking forward to try Ultra.

One thing I like from GPT, even though it's overall slower, is that you see it typing, this allows you to already process things and see if it's going in the right direction.
Hot Take on Google's Gemini and GPT-4
I didn't go deep into looking for one. It's possible it exists, but the little bit of research I did into it didn't reveal it, and I didn't want to figure out how things fit together.

Now that you say that, it seems obvious that it must exist, and I just missed it.
I remember when it came out and I was like oh neat demo. Is this a 64k or something? Then it clicked. Madness. It's not just beautiful code, it's stylish too.
Ask HN: Crowdfunding for goals, offering services in return. Viable idea?
Hey guys,

I got some awesome feedback in the past so I would really appreciate if you could give also give me some feedback on the project I'm working on right now.

So, for some time now, I've been building an app which allows people to raise funds for their goals by offering services. So, you can raise funds for your education, travel, starting a business etc. In return you can offer in-person services like tutoring, babysitting, home repair or online services like graphic design, software development, writing etc.

It works similar to Kickstarter and other crowdfunding platform. You create a campaign, tell your story, share it, get orders and raise funds that way. There are platform that allows you to raise funds for similar purposes but they are donation based so I would like to hear your thoughts about this concept where you don't have to ask people for donations and free money, instead, you offer them services so they get something in return and they help you achieve your goal at the same time.
Thank you for your answer, and interesting repo by the way, hope your implementation of the lite version goes well :)
> There’s no indication that LogoFAIL vulnerabilities have been actively exploited in the wild, but there’s also little way one would know, since infections are so hard to spot using traditional tools and methods.
Most of these are handled by reitit and ring
https://news.ycombinator.com/item?id=38544063
Though this is about OCaml, LLVM also does this optimization. From this Reddit post[1], you can see how this gets optimized into an iterative function:

size_t my_strlen(const char *s) {
return (*s == '\0') ? 0 : 1 + my_strlen(s + 1);
}

[1]: https://www.reddit.com/r/Compilers/comments/187ng5s/how_does...
I tried to do some straightforward code conversions using Bard and it flat out refuses to write any code and instead only explains what to do.
Whereas GPT gives code as much as it can although it struggles to complete the full conversion. (Keeps forgetting the instructions)
Yes definitely feels like day 2 at Google.

The only people staying around are too comfortable with their Google paycheck to take the dive and build something themselves from the ground up.
If you’re making a local anonymous function that you call in one place, just so that a generic function gets a more domain specific name, then you might as well just assign the result to a named variable, right? It’s the same benefit with less indirection.
Of course you can. Even I can use it here in Russia.
Disabling features is reasonable if they require the service to operate.
Not to be confused with the Hessian Matrix.
This is just too much: https://www.youtube.com/watch?v=UIZAiXYceBI
The entire industry in general just uses pretty much template clauses, and in particular, some counsel that YC retains probably maintains a collection of said clauses that are offered to participating ventures to clear them to focus on their thing.

Think about it. It's EULA/legal clickwrapping. It's part of the great innovation the technology industry has enabled by normalizing the "just accept" action, to the point the legal system doesn't even know what a "meeting of the minds" looks like in contract law anymore. The 1 way, non-negotiabpe contract.

This has (imo), irrepairably harmed the legal system under the by exploiting the in built bias in the Courts to favor the "path of least harm (to precedent/the practice of law)" in terms of disruption, now tilting the calculus toward all the potential legal entities (all using variations of the same clauses) harmed by disrupting the practice, instead of tilting things in favor of everyone who could desire different terms. That pipeline won't ever exist, because the pipeline to negotiate with said people is pretty much written out of the definition of the addressable market segment the business wants to target. They want dumb people who don't read the fine print, not people actually paying attention to what is in it.

Tis the unfortunate tyranny of contract law.
AlphaCode2 powered by Gemini performs better than 85% of programmers
Had to shorten the title, the original statement is: "#AlphaCode 2 is powered by Gemini and performs better than 85% of competition participants in 12 contests on Codeforces!"

Technical report: https://storage.googleapis.com/deepmind-media/AlphaCode2/Alp...
First-class SQL support will be really nice when XTDB2 becomes stable--I'm planning to make that the default in Biff for the sake of familiarity, then anyone who wants to can switch over to Datalog easily.
Why are you reeling like that?
I just stated simple facts as they are in our society.
OP here... here's the link if you want to check it out https://www.taskwer.com