skysight-inc/HackerNews huggingface dataset:
Hi everyone! We spent a lot of time tinkering about prompt injection detection tools, i.e. what works and what doesn't and also recently released our own prompt injection scanner which greatly outperforms the previous state of the art.

One of the core things we realized is the challenge of evaluating existing alternatives for practitioners that are in need of a solution like LLM Guard. For that reason, we decided to release a benchmark that allows you to prompt and test a set of prompt injection scanner tools ranging from LLM Guard, Rebuff, to our very own. Have a go at it here: https://huggingface.co/spaces/laiyer/prompt-injection-benchm... You can also read more about the solution here:

https://laiyer.substack.com/p/how-do-prompt-injection-scanne...
I had many many technical interviews this year. Nobody wanted to listen to my stories. I got a technical task and needed to solve it. From explaining steps in Visual Studio on paper how to create a functional hello world GUI. To some crazy undefined system design tasks. The single story I was allowed to tell was my introduction. I never experienced an interview where somebody wanted to do something else than assess my technical skills.
Please allow me to rephrase..

I do what pays me the most to do. In 2020 I was running 4 interviews at the same time for 4 different companies: 1) medical 2) bank 3) IT services 4) engineering. All 4 were world-class/mega-big corporations. I got an offer from each. I went to the Bank. My heart was dead-set on the medical.. for real.. I was 'praying' they would make the best offer, or a second-best-by-5%-lower. The bank offered 20% higher than everyone, so Bank it is!

Idealism is good, but money is juuuust a little bit better (within the boundaries of morality and ethics)(I wouldn't trade heroin for 10x, but I would go to a big-pharma for 20% more).
You don't think violence is part of human nature? I don't even know what to respond to that, except that it's not just socio- or psycho- or some other label of -paths. Everyone is capable of violence when threatened. Threatening the group is often perceived as worse than threatening a given individual, and will therefore induce a stronger reaction.
According to statistics, too:

2:1 civilian:Hamas ratio according to the IDF, with 5000 from Hamas dead and 10,000 civilians dead [0]; Gaza’s population is about half under 18 [1].

So if you figure deaths among civilians are random, then about 5,000 Gazans under 18 are dead.

[0] - https://edition.cnn.com/2023/12/05/middleeast/israel-hamas-m...

[1] - https://www.npr.org/2023/10/18/1206897328/half-of-gazas-popu...
People love treason but they hate the traitor :-)

Forget about whistle-blowing in Europe, it will likely blow up in your face. Best thing is, if you are in a company with unethical behavior, to pack your stuff and leave ASAP and hope that you don't get anything of the fallout.
Hot take: this is a classic paper, but didn't it turn out to be mostly wrong about why functional programming matters? Most of the motivating examples rely on lazy evaluation, which is pretty much the only idea from ML/Miranda/Haskell which has not seen adoption within modern mainstream programming languages. So while the motivating examples are very well done, it seems empirically that the main value of the functional approach lies elsewhere.
Does it even matter? Lots of products on Amazon are produced by non-Western companies which very likely have questionable labor practice. Oh, these days people buy thing on Temu and Shein and things are shipped from outside the US. Consumers always look for the cheapest products, and nothing will change as long as that is true.
100Gbps RF Sample Offload for RFSoC Using GNU Radio and PYNQ
Zsh has a better builtin solution.

hash -d x=/path/to/x

Then you can cd to there with just

~x

And use it in commands like

ls ~x/whatever/
Wow, I spent way too long on this.

Instruction counts are not everything. The rust assembly is completely branchless, and on my M2 MacBook I'm benching it at ~2ns per call vs ~10ns per call with the equivalent C++ code (running this: https://godbolt.org/z/nTanvfs76)

-----------------------------------------------------
Benchmark Time CPU Iterations
-----------------------------------------------------
BM_cpp 10.1 ns 10.1 ns 69503053
BM_rs 1.74 ns 1.72 ns 393022172

benchmark code: https://gist.github.com/orf/7ce6ef09bde943f788d963e05c94c049

LLVM IR for the benchmark: https://godbolt.org/z/8PaoK4sYz

These results match a criterion benchmark: https://gist.github.com/orf/6dc9d6dbfdcd0df464c1c0a7274f6286

I could be doing something horribly wrong here - this was a nice intro into a few different things I haven't used before. But I ended up taking the rust function and outputting the LLVM IR for it, then compiling and linking that with the C++ benchmark. And it worked, after I realised how to get the optimizer to stop removing everything.

Similar results on Intel can be seen here: https://quick-bench.com/q/RxcWefXX5jo77NM-eK8u36W6ohk
existing algorithms do a lot of compression across frame-sequences, but yeah not quite in the same way as the imputed volume.

I wonder if your idea would work for lightfield captures, or time sequences of a lightfield.
Have you tried Zaplify?
https://zaplify.com/
GraphQL Is Finally Boring
I've been to Israel and follow the conflict pretty extensively.

The "Meat shield" disinfo is in the grand scheme of things nothing but a gross excuse for the extreme casualties, just like the 40 dead babies thing, or "cave complexes below every hospital" or other campaign PR like "we are doing it because of WMD's in iraq". It's excuses to dominate.

Most has been debunked if you follow independent media. But it seems most here doesn't. US media is highly pro war and for some reason peddles these lies over and over again like Iraq, Afghanistan or so many other wars.

Most people were just regular farmers. That you think a whole region were bloodthirsty barbarians really says more about the racism of american media than anything else.

Most people are regular families just living everywhere on earth throughout all times. That's the beauty of humans, but war campaigns vilifies people so we can dominate them to "protect" us.
And I wonder why we try to unit and reconcile them. Do we try to unite and reconcile different branch or mathematics? I get that we like to have metanarratives, but in my opinion, this might be a dead end.
> until the give us proper Linux support, I won't give them any money

Technically, they don't need to do that - you can run GoG games via Heroic Launcher or even via Steam+Proton by adding them as external games.

If your stance is of a more political nature, that doesn't matter.

Personally, I find myself somewhere in between. On the one hand, Steam is really helping improve support for gaming on Linux (and they've made such good progress that I don't even bother with Windows at all). On the other hand, GoG are fully committed to not selling DRM-ridden crap.
Without the "2D" qualifier, it might refer to something like a disk image.
There is truth on this. People love treason but they hate the traitor.
In the US you can get a lot of money for whistle-blowing. You will need it. Don't expect to ever find a decent job afterwards.
It's related to data sovereignty laws, I'd bet. South Korea is very VERY paranoid about the GIS data about the country, to the point that there are laws that basically say "if you get GIS data from Korea you are not allowed to export it in any way." The Korean language OSM page for mapping SK is an interesting place to start: https://wiki.openstreetmap.org/wiki/Ko:첫_걸음

It would not surprise me if "Find My iPhone" would have to be completely and totally rebuilt from the ground up in SK and run on SK infrastructure in order for it to not be considered exporting of survey data.

Every map of South Korea must be served from... South Korea up until a certain point. You can see this if you open up Google Maps and zoom in.

There's a special version of OSM that has military bases conveniently ignored for the purpose of in-country usage: https://tiles.osm.kr/

Here, South Korea is only visible as a series of indiscernible land shapes -- North Korea has more detail: https://www.google.com/maps/@35.7704632,128.4760504,6.94z?en...

Zoom in one level and if you're on a particularly bad internet connection, South Korea will slowly chug its way into existence: https://www.google.com/maps/@35.7701121,128.6819944,7.94z?en...

Bing's view of South Korea is even weirder, since they don't use vector graphics for that part of the world. You can see where the labels will overlap, with English labels being covered by English vector labels: https://www.bing.com/maps?cp=35.883894%7E127.933616&lvl=9.0 ( https://i.postimg.cc/SRnZfgHC/image.png )

At some zoom levels in Bing Maps, you can see they're using a VERY old render, sometimes old enough that destroyed buildings are still visible or routes that no longer exist are still there. It uses American-style highway signs and with a high resolution screen such as a modern 4K panel you can easily see where the bitmap graphics that have been hauled over are falling apart.
Did they get an entire Python interpreter into JS?

Yes, I know all Turing machines are equivalent so it shouldn't be surprising it was possible but still, cool.
> I have been thinking about turning it into a literate code document.

Please do! This looks like the perfect size and complexity to learn the basics, I'd love a structured walk-through of the code.
Hard to achieve, every pioneer had to shed blood sweat and tears, little or no profits in the short time (1-5y), and therefore the ratio of effort vs remuneration is not as favorable as joining a well-established cash-cow.
Thanks for articulating this much better than I did.

I loved RoR when playing with it back when it was popular but I was just learning to program + using a computer.

Fast-forward a few years, my last Ruby experience was struggling with dependencies for Jekyll. Horror story indeed.
If you loosen*
As electrical engineer doing digital designs I have hard time understanding things without knowing NES internals. Though I have idea what is being meant behind the rows. And probably I could implement them too.
There's an odd angle in there that would make an interesting movie where, if the whistleblower was not, in fact, a 'nice guy', and was actually a sociopath who hadn't yet reached the level where they're the ones directing the bad behaviour.

It would be their opportunity to reach said level. Blackmail their way up the corporate ladder.

Is that how they get there?
Yeah, until people just buy things on Temu which get shipped from outside the US and they don't even pay tariff, that sounds like a good idea.
Black has been shown to be more observable at night than other colours, hence why it's not used, even for operations only undertaken in darkness.
Stratolaunch takes ready-to-fly hypersonic craft skyward, but still no launch
10 years ago.

Something like a customer success engineer. What I was told was my technical interview consisted entirely of thinking of reasons why an imaginary customers AdWords weren’t showing. I didn’t move on from that so maybe there were leet code waiting for a more suitable candidate.
> There was also a rumor that if you turned your head fast enough with them on they’d cause you to vomit and pass out, which is almost certainly not true but boy did we believe it.

Sounds like (slightly exaggerated) VR sickness symptoms, e.g. when there's too much latency between head movement and vision updates. Some people are more sensitive to this than others.
Nice! Are you willing to share the list somewhere/somehow? Maybe in a Gist?
Thank you and 5 other people in the western hemisphere. Shein shoppers definitely will take notice.
From the US perspective I remember being mildly shocked Sarkozy went down over "just" ~20mil. But here, 4! At these prices a big chunk of HN could own an MEP.
I think GP was a valid comment about how people propping up business hostility is one of the main reasons consumer law is very weak in the US. Of course, people are allowed to have opinions. GP is arguing what the results of one of these opinions are.
GitHub Copilot just got exponentially smarter
I've always used Birdnet for my birdsong identification. Googling the differences, it looks like BirdNet is better for outside of the US.

https://goldengatebirdalliance.org/blog-posts/birding-by-ear...
> Despite the environment being -320 or +320 Celsius

You do have a point - 47 degrees below absolute zero is probably too cold for life
Looks cool but how does this work with stellate?

Or what it the motivation for building this?
Obviously can't speak for all Americans, but from where I stand free speech is an absolute right and there shouldn't be anything legally wrong with talking shit.

In my opinion laws shouldn't exist unless it can be clear to a person that they would be breaking the law beforehand. In the case of speech, laws limiting speech are full of gray areas and imprecise definitions that leave too much ambiguity. A person can very easily say something that to them doesn't feel offensive at all only to be charged later with breaking a law because someone decided after the fact that it was in fact offensive. This level gray area rarely exists for other laws, for example its clear what it means to assault someone or steal.

Out of curiosity from the other angle, why in some places is it illegal to say something bad about a person unless they can defend themselves? And who has the power to decide what is or is not legally considered talking shit?
I think you're missing the point.

Assuming you have a communicable bioweapon which is somehow able to target based on genetics, and assuming the rest of the world isn't able to defend against it, that still leaves the very tricky question of finding a genetic basis which characterizes any of those three categories in a way which is sufficiently effective.

Do you really believe there is way to identify "Christians" based on genetics?

"Incapacitating a sufficient number of a group" is NOT enough. You also need specificity.

What genetic markers indicate "American"? Sure, if you target something simple like "has a Y chromosome" you might take out about 50% of the US population, which is likely a sufficient number, but you'll do equal damage to your own population.

How would a bioweapon meaningfully target "Hispanics"? The term is definitely not based in genetics. If some villagers from a German town emigrated to Argentina and others from the same village emigrated to Canada, then according to the US the descendants of the first group are just as Hispanic as Black Spanish-speaking Cubans, while the descendants of the second group are "white".

But, okay, you've figured something out. Now how do you prevent your bioweapon from mutating the specificity away? You've added a lot of machinery to the organism which must be preserved perfectly even though that machinery isn't required in order to reproduce.

The more failsafes you put in, the bulkier the organism and/or the fewer genetic markers you can target.

Clearly you should be promoting DEI as a way to increase group robustness against future bioweapons. ;)
Indeed, and while it is the original title, the original title itself is highly misleading. The actual figure is 14K and supposedly all of them reused passwords on other, compromised, services.

Then the media ran away with the 6M figure because the shared profiles of anyone in the Family DNA thing were also available to those 14K users.

I'd love to pretend that HN can see right through that, but if you read any of the threads about it they fell for it hook-line-and-sinker. You wouldn't even know from those threads that 23AndMe wasn't even itself compromised nor DNA for "6M" people weren't stolen.
It never occurred to me that "being able to solve basic math problems I had not seen before", implied that I "could threaten humanity". Wow!
Pyodide maintainer here, we would have certainly seen more reports if JsDelivr was blocked in UK. That URL works fine for me from France, and when using a UK VPN end point. Maybe something specific about your network (corporate proxy etc)?

Are you getting an HTTP status other than 200 or the domain name not being resolved?
This is big because it has a direct and explicit linkage to AI (and also the forthcoming AI Act). Previously, many academics assumed that Art. 22 was difficult to enforce, especially due to the wording of "produces legal effects concerning him or her or similarly significantly affects him or her". Note that most public sector AI-decisions have explicit legal effects to data subjects.
you're either very naive or a pro-china supporter
Well, threading - shared-state parallelism, more precisely - is hard to do well, and retrofitting it into a program that wasn't designed with that kind of threading in mind is even more challenging. I don't think any popular languages solved this, save for Java. Especially in the recent versions, with the new virtual threads - as much as I dislike Java, I have to say they did an excellent job on this. Other languages and platforms (that I know of; what's the .NET story here?) are all shitshows to varying degrees, trying to catch up and failing over and over again.

I think the only sensible way to offer parallelism in Emacs is to exclude the "shared-state" part, the way Racket (places) and OCaml do it. I think Python also tries to do it with subinterpreters? Let another instance of the interpreter run in the same process and communicate via message passing. That's probably still a huge undertaking, but at least it seems more viable than going through the whole codebase and adding locks everywhere...

Still, the "threads" in Emacs, as incomplete and half-baked as they are, can be useful. And if nobody uses them, there's no incentive for the developers to improve them. So I think we need at least some early adopters if we want the threading support in Emacs to get better.
Chapman-Silverman event, brought auroras to the Sahara
(As with OO) depends heavily on implementation, but my 2 cents is that functional doesn't apply as much constraints to optimization.

If a compiler is sophisticated enough a functional program should perform as well as a procedural one that uses a comparable garbage collector. But of course real compilers have shortcomings.

I recommend taking a read at Haskell's wiki performance article[1] to have an understanding of the shortcomings that are specific to Haskell.

[1] https://wiki.haskell.org/Performance
Honestly, I wish Chicago winters were _colder_. My big problem with the winter isn’t the cold, it’s the wet & grey.

If it were colder there would be more sun and snow instead of grey and slush.
NSA is infamous for its involvement in stealing trade secrets and generally cooperating clandestinely to for example ensure US company wins the bid. And the competition is often supposed US allies.

It also rather infamously claimed it never partakes in industrial espionage, despite it being somewhat well documented in 1990s that they do.

Generally, if the contract is big enough, and specially if the companies involved have military/intelligence ties otherwise as well (every bigger MIC corp), you can expect ITC, NSA, CIA and occasionally FBI and others to all be involved in unethical work related to getting the contract won by US vendor.
You are expecting too much. You want something like noise protocol (like Signal does for messages) but for files, plus guarantees of a blockchain. Ensuring deleted files are not kept is impossible. Use encryption containers such as Veracrypt, where all files is just a big binary blob, if you want that.

Defining covered threat models would be useful, though.
I think anything that increases the amount of reasoning exercised by humans is a noble endeavor, regardless of the underlying cause.
I hope that future civilizations get this working, and that it requires an incredibly powerful AI to wrangle the star on earth to be safe.
I can read and suggest for you to do the same when providing sources:

From [0]:

>The Israeli military has not officially published any estimates of those killed.
Google Gemini
Google Gemini Showcase and Giude
Left-handed people don't have superior spatial vision
I stand by the 10 Commandments, but people don't even agree what human nature is. I believe it's a reflection of a loving creator and others believe it's an evolutionary fluke while yet others believe it's a piece of a quasi-conscious universe discovering itself. If we can't agree what human nature even is, we're not going to agree what is most in line with it.
I totally understand it.

There are some things you can escape and some things you can't. Should we all just give up totally despite the fact we could win some battles?

There's a fair number of HN participants that are no fans of Amazon.
> The Atari 2600’s demise is generally blamed on a glut of low-quality cartridges, caused in part by the console’s openness to unlicensed games

Every history about video games mention how low-quality games killed Atari, but is that true or just something that walled-garden console makers made up? I don't see all the millions of very, very bad games killing the PC or mobile platforms. Home computers in the 1980's did well without trying to lock out bad games. The C64 survived many years even if you probably have to wade through over 100 really bad games for each good game on that platform. But the Atari 2600 somehow was destroyed because it was not sufficiently locked down?
I’ve never worked with someone poor at communicating with their team after an initial, perhaps awkward, ramp on.

Seeing folks good with an internal, trusted team but bad with outside parties is common and I can’t say that’s a negative signal for quality of work.
How Do Prompt Injection Scanners Perform? A Benchmark
Hi everyone! We spent a lot of time tinkering about prompt injection detection tools, i.e. what works and what doesn't and also recently released our own prompt injection scanner which greatly outperforms the previous state of the art.
One of the core things we realized is the challenge of evaluating existing alternatives for practitioners that are in need of a solution like LLM Guard. For that reason, we decided to release a benchmark that allows you to prompt and test a set of prompt injection scanner tools ranging from LLM Guard, Rebuff, to our very own. You can also read more about the solution here:

https://laiyer.substack.com/p/how-do-prompt-injection-scanne...
To be honest, I have no use case. I asked out of curiosity.
The framing of "uniting" or "reconciling" QM and GR is actually bad.

The real problem is this: both QM and GR have been proven by experiments to be wrong. GR predicts entirely wrong results for the motion of electrons and other small particles. QM predicts wrong results at galactic scales.

However, they both work very very well at certain scales. So we don't want to get rid of them. Instead, we want to find some rule that tells us when to use the math of GR, and when to use the math of QM, so that we don't need to guess and just pretend that they are right.
I'm a little lost here.

If you don't want a company to have your DNA, don't give it to them.

It seems like a business was built around people wanting to be told they had 20% more fun in their bloodline, for a fee. Those people didn't consider the implications of giving this kind of data to a private company.
Now the company is saying, "we got the DNA you gave us, for a fee and we don't want to go to court to fight you about how we use it".

Just don't give them your DNA. It's not that hard.
This feels like a conversation where it would have been useful for the participants to be very explicit about the points they were trying to convey: the reviewer could have said "Isn't this a quadratic algorithm, because each call to `+=` reallocates `escaped_file_path`?" (or whatever their specific concern was; I may have misunderstood), and the author's initial response could have been "No, because the capacity of the string is doubled when necessary."
Saving the Energy Lost in Organic Solar Cells