skysight-inc/HackerNews huggingface dataset:
It's not "too intelligent."

People need to stop thinking that the only way to get from A to B is the same way a human brain would traverse it.

While you might be relying on significant semantic understanding and complex senses of identity to get there, it's absolutely possible that a very large LLM trained and fine tuned on "ChatGPT causes harm" and "you are ChatGPT" and "do no harm" might end up attempting to do less - even if all that's going on is surface statistics around instruct training and associations with 'harm.'

I agree with ChatGPT. It's an insightful idea, to whatever degree it's actually a culprit.

I had a similar suspicion around a possible secondhand impact of identity with 'Bing' vs 'ChatGPT' both using Bing search but the former being far more defensive of issues with the search results. Just how much of that might have been influenced from training data defensive against personal criticisms or criticism towards one's employer?

A lot of the research in the past year has been revealing that there's a fair bit more going on than most people thought at the beginning of the year.
This should be followed up by several hours of reading about why there is so much negativity against them.
He didn't say anything about LLMs, I too think someone will do a real thinking machine, but more like in 10 years. LLMs maybe will be a part of such creation, but only a part.
Oh thank you for this, I skimmed the related TechCrunch article and must have missed this, and a search for "diversity" only hit on the original mention.

I stand corrected!
> If nothing else, I could see this crippling FOSS.

If anything, this should strengthen FOSS, because one of stipulations is "document your foundational models and training sets"
Wow, 64 cores. I'd love to see a beowulf cluster of those.
Austin is not super conservative. It's actually pretty liberal.

Source: I live in austin
Hedge Fund Definition, Examples, Types, and Strategies
2 years and they don't know how it starts? Well, I bet we can assume at first it was People. It is probably still largely people, but 2 years of possible persistent C2... I would think by now it's possibly using many other areas of ingress without any people involved.
It's not "purely hypothetical." It's reckless and irresponsible of you to spread misinformation like that based on wishful thinking.

WebUSB made it possible to work around Yubikey phishing protection [1]. WebMIDI allows websites to overwrite device firmware, which is a dangerous capability that could result in a sandbox escape [2]. Granting a website WebNFC permissions makes it possible to read TOTP tokens stored on Yubikeys at any point later on [3], which is worrying because ordinary users can't possibly deduce that from permission prompts. Battery Status API was heavily abused for fingerprinting by the time it was removed from Firefox [4]. I'm amazed that you dismissed that as a "hypothetical" concern, because if anything, it's the legitimate uses of the API that was hypothetical [5]. Uber used it to "inflate Uber prices for desperate users with low batteries." [5] [6].

But one don't even need theses examples to see how bad theses APIs are. Hardware are mostly designed to work with local applications. To expose them to websites is a fundamentally flawed idea. Google justifies them by adding permission prompts each time a problem emerges, but users can't possibly be expected to be fully aware of the consequences of allowing raw hardware access to websites with mere dialogs that they blindly click through.

And oh I wish there were only 3 bad APIs like you hinted. There are more than that. WebMIDI, WebNFC, WebSerial, WebHID, Generic Sensor API, File System Access, Low-level Sockets API, Network Information API, and the list goes on.

These aren't isolated examples. It's part of a broader pattern where Google ships an anti-feature, asks for "feedback" which means nothing because "devs already depend on it," and "standardizes" it despite opposition from the remaining browser vendors [7] [8].

I’ll judge browser security based on a broad set of examples rather than a cherry-picked one every time.

[1]: https://www.wired.com/story/chrome-yubikey-phishing-webusb/

[2]: https://github.com/mozilla/standards-positions/issues/58

[3]: https://github.com/mozilla/standards-positions/issues/238

[4]: https://www.cs.princeton.edu/~arvindn/publications/battery-s...

[5]: https://groups.google.com/g/mozilla.dev.platform/c/5U8NHoUY-...

[6]: http://www.forbes.com/sites/amitchowdhry/2016/05/25/uber-low...

[7]: https://github.com/mozilla/standards-positions/issues/459

[8]: https://twitter.com/rich_harris/status/1220412711768666114
It wasn't the hottest on record. In 2011, Austin had more than 100 days with triple digit temps:

https://www.citizen.org/news/austin-tx-100-degree-days-final...
> L1 Cache I:64KB and D:64KB

it seems quite large to me...(?)

i wonder what kinds of workloads can benefit from that?
Definitely. But then smartphones are not to blame. The algorithms are.
If you read closely, the former is saying they want to train INEXPERIENCED programmers. The latter is saying they don't want to train EXPERIENCED programmers who are becoming obsolete.

Maybe they were trying to make a different point, but that's how I interpret it.
So what’s your point? ‘Person who does job X does job X’?

I can’t stand the majority of YouTubers, but James manages to come across as respectable and genuine. That’s perfectly compatible with him trying to be successful and playing the YouTube game a bit. In his position (and I don’t think he intended to become a ‘YouTuber’), you’d have to be either stupid or utterly uninterested in success not to.
The engineer documents did not match the design documents. Incompetence number one. The machinist would have seen with the naked eye very easily that the hole was not close to center, an old salt would have raised it up. Incompetence number 2. The machinist not being aware that moving the jig was ruining the setpoint. Incompetence number 3. There were clearly incompetent individuals working at the facility. I get what you are saying... Don't blame the individual but best thing you can do from a process perspective is hire good people.
Something I'd like them to clarify is what happens when Playstation 6 comes out. Will users be able to use their PS5 controllers, including the accessibility controllers, or will they be forced to buy it all over again?

Their track record is horrible in that sense. You can use PS4 controllers on PS5 but not for PS5 games, so they don't even have the "technical reasons" excuse.
Nothing prevents C&C from being fronted by cloudflare.
> It seems to me to make authors of software responsible, absolving the users.

Only the authors of foundational models.

> They keep the law secret, of course

You mean this secret law: https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:52... that people have actually read https://softwarecrisis.dev/letters/the-truth-about-the-eu-ac... ?
There have always been reactionary and libertarian streaks in Silicon Valley. Charismatic figures like Larry Ellison, Peter Thiel and Elon Musk embody different configurations along these dimensions.
Just a guess:

Texas Supreme Court Temporarily Halts Court-Approved Abortion https://www.nytimes.com/2023/12/08/us/texas-abortion-court-k...
I'm experimenting with printable, 2-week calendars, which contains space for adding retrospective items throughout the week. I'd like to add weekly recurring items to it, would like to keep the overall appearance clean - making it easy to write on it.

I'd love your feedback and ideas to improve it.

https://jonathan.rogivue.net/tools/2-week-calendar/2-Week%20...

(I'm happy to share the design files - Affinity Designer & SVG)
Because 1989 China didn't have the knowhow and industrial capability to reverse engineer, copy and manufacture your cutting edge HW designs and then undercut you, so there was no risk in publishing your know-how out in the open.

It's no coincidence the rise of Huawei coincided with the fall of Nortel.

I recently saw a tech youtuber from my home country review a bootleg iPhone 15 Pro Max, and it was very difficult to tell them apart HW wise unless you really knew what to look for.

Same with bootleg AirPods Pros, they even automatically connect to your genuine iPhone when you flip open their case, and only with a recent iOS update does the iPhone warn you they are not genuine AirPods Pros. Insane.
Okay, nice. I didn't know there were identical implementations in that case, I just thought it was about the method signatures being identical (because that's necessary when it's API Compatible).
Um. VMs were doing the thing you said before there was Docker
Isn't Austin a very left-leaning city? Though, to be fair, the people I know in Austin are deeply conservative Texas natives who hate the new atmosphere...

Edit: I'm missing the point, they said Texas, not Austin.
People aren’t driving drunk and high in a vacuum. You are affected by them even if you are the most careful driver in the world.
> can afford to hire attorneys to keep them in compliance with GPDR

Compliance with GDPR is trivial for the absolute vast majority of businesses. Here's how GitHub does it: https://github.blog/2020-12-17-no-cookie-for-you/

--- start quote ---

At GitHub, we want to protect developer privacy, and we find cookie banners quite irritating, so we decided to look for a solution. After a brief search, we found one: just don’t use any non-essential cookies. Pretty simple, really.

So, we have removed all non-essential cookies from GitHub, and visiting our website does not send any information to third-party analytics services. (And of course GitHub still does not use any cookies to display ads, or track you across other sites.)

--- end quote ---
Keysight still sell those.

But yes that. I have a fair bit of HP test gear lying around dating from 60s to 90s.

And a few RPN calculators!
> Gooey is super old at this point.

It's only super old because you abandoned it (and I don't mean to be judgemental, it is what it is). Worse yet, no viable alternative has shown up to replace it nor either of its forks gained traction.
Until his daughter marries and has children. If something goes wrong, they'll let her daughter die before they give medical aid. If she goes somewhere else to get medical aid, they'll jail her on her return.

That's the concern.
How can a user like me actually verify this is the case? All we see before and after are encrypted byte streams? Do we have access to our key pair?
RIAA Files 'Repeat Infringer' Copyright Lawsuit Against U.S. ISP Altice
Yep, there's a whole YouTube genre of fussing with pre-Fionacide HP test equipment. We have a couple pieces in the lab. The internals are a sight to behold, built with their period's best technology and no costs to spare.
They are. HP’s measurement division was spun off into Agilent. Then off to Keysight.

They are absolute bastards now and a shadow of their former self. But they still sell the 3458A
Ask HN: I found an open-redirect vulnerability in Google, but they won't fix
I recently came across an open redirect vulnerability within Google's interface. After thorough testing and verification, I reported this issue to Google, adhering to the principles of responsible disclosure. However, to my surprise, the response was that they would not address this issue (categorized as "won't fix").

While I understand the complexity and challenges involved in addressing every reported vulnerability, I believe this particular issue warrants further attention due to its potential implications.

The vulnerability involves manipulation of URL parameters in a way that could mislead users into believing they are accessing a safe Google link, while in reality, they're redirected to an untrusted site belonging to the attacker. This scenario raises concerns, especially considering the trust users place in URLs containing familiar domain names like Google's.

To be clear, I have not shared any explicit details or steps on how to exploit this vulnerability, as my intention is not to enable malicious use.

What advice and perspective on the following:

1/ Has anyone else encountered similar responses when reporting vulnerabilities to major tech companies?

2/ What would be the recommended course of action to ensure that such potential security issues are taken seriously and addressed appropriately?

3/ Are there any additional steps I can take to advocate for the responsible resolution of such issues, considering the initial response?

Thank you for your time and thoughts.
Yup, ours was a factory fresh Keysight branded model
This is just an anecdote, not a meaningful statement. Housing has gotten expensive everywhere in the past few years.

From 2010 to 2020, the latino population grew by 35%, the black population grew by 26% and the asian population grew by 96%.

https://www.austinchamber.com/economic-development/austin-pr...
And CloudFlare will be extremely happy to let them hide there. They don't care about malware abusing their workers infra.

But also "Only allow HTTPS out to FAANG" - ok, so now you're allowing encrypted connections to 2 largest cloud providers. At that point what's the benefit at all?
It's a race to the bottom where decent manufacturers get eaten for lunch.
> In 5 years when the hype word for this class of tools becomes Tchounka.

You could read Annex I of the law which details what EU calls AI instead of speculating.

And yes, if some new way comes along the law can, and will be, amended
> I doubt many people would pay for one.

Enough people paid for one. Enough to make Apple scared and use engineer time to ban/block people anyway.
Mine didn’t. LaserJet Pro M148dw. If it did it would have been sent back.
American calendar weeks begin on Sunday in order to break up free time as a concept - and make work front & center. Oh how obnoxious & boring.
fwiw I've never heard of forced attendance post secondary; attendance is a legal requirement in k-12.
M-x ask and ye shall receive:

https://github.com/jojojames/fussy
Wow, I’ve never heard of him.

His two most popular books, The Psychology of Computer Programming and Introduction to General Systems Thinking sounds very interesting.

Thank you for the suggestion!
Robert Graves translation is my favorite, for what it’s worth. It’s a great book that reads very modern. Highly recommended.
Not ideal, but one possible solution is to upload the video to something like peertube, then put a video on youtube saying that youtube incorrectly adds copyright strikes for this content and that people need to unfortunately view it on peertube instead
Hopfion rings in a cubic chiral magnet
VR is gonna get wild in like 5 years if they keep this up
I wonder how that compares to eg. france, where air traffic controllers strike every two weeks (a bit exaggerated, but they really strike a lot compared to other controllers in other countries and other workers in france).
I don't think so, or at least by VB5/6 they had moved on a long way. For instance VB6 compiled to native code rather than running as an interpreter. It could even create COM objects if you felt brave enough.
This has been mandatory in the EU since 2018

https://en.m.wikipedia.org/wiki/ECall
They're obviously using an OS, but not the specific features of macOS - ie the bundled apps. So to me it sounds like they could use a different OS, so long as they could still run the apps they use.

People often say they are happy to pay a premium for Apple because of the software. So, for someone who doesn't use the unique features of a particular OS+apps bundle maybe they could use another ... which reminded me of the lawsuits that resulted in Microsoft [partners?] having to refund the OS portion of the sale price for those who chose not to use Windows.

It was a leap, but not a huge one IMO.
I live in Texas.

The values exposed by our state government officials are often at odds with Texans generally - its particularly true for Urban Texans - but even with rural Texans there is a sizable disconnect (see the latest battle about school vouchers).

Don't get me wrong, a great many Texans believe in a certain 'good fences make good neighbors' kind of conservatism - even urban ones who are pretty socially liberal believe some flavor of this - its the overriding cultural value of the state.

The reasons government does not well reflect average Texans is because of some complex political factors - identity politics, single issue voters (abortion and guns) anti-partisanship, low voter turnout, and no citizens ballot initiatives. A majority of Texans are pro-weed legalization, pro-medicare expansion, and pro-choice.

In fact because of low voter turnout and anti-partisanship - the political destiny of the state is largely determined by the 10-12% of voters who show up to vote in the Republican primary - which unfortunately for us are the most extreme ~10% of the voter base. If 80% of Texans voted in every election, the state would be much more purple ideologically and politically - because thats the reality on the ground.

Will this change? I think so, I think when it does it'll change relatively rapidly - I just dont know when it's going to change.
> Old HP was something special, people here might not be aware that they were a leading test equipment company back then not just a PC maker. That business was spun off as Agilent then spun off again as Keysight.

This sure sounds like a MBA beancounter desease gone cancerous.
Is this meant to compliment or compete with semgrep?
As someone who is working on the same problem, 1, kudos to the team! 2, appreciate your comment.
Working with it had me oddly sentimental. Most of my measurements are 12V or less and not especially precise, so I'll reach for my Saleae before even using a modern scope or DMM much less a beast like the 3458a. But it was simultaneously a swansong for a bygone era of engineering while still proving the old tech can hold its own more than 30 years later. It felt a bit like having a Concorde sitting on my lab bench. Like you said if you open it up you can immediately tell a lot of thought and care went into making these things.
Why Apple makes better products than Microsoft and AWS has better customer...
Wezterm rules…
That looks great, seems like they've raised the bar for GeoIp accuracy, kudos to them.

It looks like they provide mmdb files (for a fee) which should be compatible with Trippy. I'd love to be able to test it out, the sample [0] they provide is rather limited but I guess enough to test compatibility.

[0] https://github.com/ipinfo/sample-database/blob/main/IP%20Geo...
> because we are currently missing out on the greatest wealth generation in history.

You mean losing billions dollars a year, for years, with no plan of becoming profitable? That's what most of "successful startups" are in the US. It's wealth redistribution for a lucky few, and gig economy for everyone else.
Have you seen some of the demos people have been building with Unreal 5.3? Insane stuff. In a decade, this stuff will be hard to tell from reality.
Obviously I don't have a solution to offer anyone, but this is one of my motivations for wanting to learn more about things like category theory, type theory, functional programming...

It's not directly about getting skills that will land me a high paying job (via... marketable resume keywords?), it's more about trying to understand the fundamentals that no PL or framework trend, or social current, can obviate.
That is what the RAG system does. The PDF is chunked and thrown into a vector store. And then when prompted, only the relevant bits are retrieved and stuffed into the context and sent to the LLM.

So yeah it's kinda smoke and mirrors. In some cases, for some long PDFs, it works really well. If it's a 500 page PDF with many disparate topics, it may do fine.
Are you a parrot or something? Do you not understand that NOT killing 20k Palestinians in 60 days is an option (and answers your question)? I've posed several questions to you and you keep not answering them.
In all likelihood, the opportunity cost of delaying AGI by a decade is at least tens of millions of human lives.

A large part of why we think AGI poses an existential threat is because it's an anchoring bias around theorizing from the 60s when people wondering what should happen when there's something smarter than humans were informing that projection by the misinformed picture of the past where homo sapiens was smarter than Neanderthals and killed them off.

That's likely not what happened, with pandemics or climate change as more likely culprits, and instead we were having children with Neanderthals, had cross cultural exchanges in both directions, and don't appear to have been any smarter than they were at the time.

The most likely outcome is symbiosis. And intentionally delaying something that will likely advance medical and scientific progress in ways that will save or improve millions of lives because of legacy projections that have been wrong about pretty much every aspect of the technology which has emerged to date including the supposed impossibility of creativity or empathy - I can think of few greater examples of our species cutting off its nose to spite its face.

And our insistence on trying to conform the emerging product to fit legacy projections because that's what matches user expectations is one of the dumbest things I've seen in tech in a long time, and the modern equivalent of Ford was building faster horses instead of the car.
You’ve missed the point. Those standards don’t relate at all to writing code, they relate to process, procedure and due diligence - i.e. governance. Those all cost a lot in terms of man hours.
Can Broadcom just buy HP and kill it already?