skysight-inc/HackerNews huggingface dataset:
It's a logical fallacy but a rhetorical argument. Slippery slope is entirely about how likely and probable that it is you fall down the slope. We have direct evidence that the same organizationa calling for Secure Boot intend to use it for DRM, because they are quoted in sales documents touting it for that.
Spin new servers up before you take the old ones down. Effectively zero loss of time for that service.
Read the linked article
Python 3 came out 15 years ago. Are we still really having this discussion?
No you can't. You only get to vote for the candidates on the ballot. And they'll get corrupted within a term, usually.
I'm surprised hyper-private services like Signal haven't foreseen this as a potential vector and given you options to eg. exclude different details from push notifications (or warned you to disable them altogether if you're worried about it)
Don't Be Addicted: The Oft-Overlooked Dangers of Simplification
I can’t tell any difference whatsoever between Bard running on Gemini Pro and the previous version of Bard.
I completely agree with Satya Nadella, I haven't seen a turnaround since Steve Jobs came back to Apple. He took a company that couldn't seem to get out of its way and turned it into an innovative, exciting, and insanely profitable company.
Shit. What should I do?
Perpetual motion machine. Make a ring of monopoles all facing one direction along the circumference of the ring. Put a 2nd ring of opposing monopoles inside facing the opposite direction along the ring.
AFAIK the fixed cost of keeping a gas line active is ~$4/mo in most places and many homes still need gas for stoves and dryers so I expect ~0% of Americans to cancel gas in the next decade

Of course the maintenance costs and the amortized cost of infra is a much larger proportion of the gas bill, but the utility can't pass that on to customers as a fixed monthly fee. Gov't tariffs usually make that illegal
I don't understand why it's desirable for a model not connected to the Internet to try to make claims about what's on the internet (maybe there's a better example than a GitHub issue? All joking aside, those don't usually have a long stable shelf life)
Na he is still great
This is such a cool piece of gear, I had no idea it was quite so limited in quantity though. Like the IMAX camera of lenses.
Hard to tell sarcasm in the written word, but I think you were replying to some.
I'd assume you are able to sue them through court.
That genetic fitness is exactly why those stupid conspiracy theories refuse to die out: they've adapted to their hosts.
I think AWS does pretty well with that philosophy at hyper scale.

AWS has millions of servers in a single AZ.
>When Google finally made the whole of the web searchable, what would have happened, what would we have said, if they had decided some pages were inappropriate and therefore it should be their duty to prevent users to ever find them?

Google does this every day.
Blatantly ignoring harms of secondhand weed is more lame:

Second hand weed is harmful.
https://www.uclahealth.org/news/secondhand-marijuana-smoke-w...
Bungie Devs Atmosphere 'Soul-Crushing' Amid Layoffs, Cuts, Fear of Sony Takeover
Half a million is cheap compared to other satellite internet services i was referring to. A 5G tower alone is a trivial cost compared to the cost of laying fiber to the middle of nowhere to connect said tower. There is nothing for ISPs to “tap into”. Just like rural postal service, rural internet is never going to be profitable and should be provided as a service by the state to all the Americans who grow our food and harvest our lumber and all the other things people do outside urban areas. Do you think we should bother to connect these people or not?
still useful in contexts like the one it was used in upthread, which was not "when you send someone a jpeg".
Unless my memory is seriously off, Signal push notifications just tell your device to call and fetch. It’s not like they’re unaware and just sending you stuff in plain text.
There is a big reason why the USA outside of Silicon Valley and Seattle has so few successful big tech companies: because success begets success and capital breeds more capital. If it was just European regulation you'd expect SV equivalents everywhere except for Europe. That didn't happen.

And the last thing we need is more competition in ad tech.
do note you can and should send a response that says “no.”

then you get to keep the existing terms, which are likely slightly better. hence the hoop through which you must jump.
The dude shipped Windows 8! He insisted on this insane mishmash of tablet and windows that made sense to nobody. Somehow they shipped this, which tells me the emperor wears no clothes.
Revenue-per-user might be much lower in EU if they can't use targeted advertising

Facebook was claiming recently they'd charge a fee to users in EU for this reason: https://www.theguardian.com/technology/2023/oct/30/meta-face...
I have a GPT-4 subscription, but not for Claude because GPT-4 is a better overall model. Still used both extensively. Claude just works better for insight extraction from long context.
To say that it's "barely" doing what it's supposed to be doing smells like no experience with the actual model to me. So I call it out.
Yes, it's just a firehose, it doesn't curate or boost anything. I want interesting things to be surfaced. Twitter/X is still pretty good at this and it's why millions continue to use it.
Well said. The musical instrument analogy is apt. Your violin playing has to remain exceptional if you want to have a position of authority at the top of the violin playing pyramid. You maintain that by playing the violin a lot.

When I ask you to implement and discuss an advent of code style solution in 50 minutes it is because there is an expectation you are an exceptional violin player and I simply want to enjoy listening to you play. We choose the members of our ensemble based on many criteria and one of those is a rather binary proficient / not proficient violin playing test.

(As a senior member of the ensemble you will be expected to also show expression in your playing, be self aware of that expression, have an understanding of music theory at a large scale, an ability to communicate clearly and with confidence so that you can coach others in their playing, etc.)

I’ve been a violin professional for 25 years. I find myself doing just as much violin review as I do violin playing. If a junior dev, sorry, violinist is having trouble with a piece then the best way to show them is to play a few bars myself to show them an abstract example of how their playing could be different and better. Who will listen to my advice if I’m ham fistedly scratching out a fiddle dirge, when doing so?
Why didn't Apple pull the plug on these services as soon as the government started spying with them? Why didn't they rearchitect them to use E2E encrypt? Do they actually have principles about privacy or is it just a thing they want us to believe?
as a consumer i totally agree

but having been on the other side, requests like yours are the exception. support chatbots relieve a huge load, allowing the real people to work on real requests like yours rather than the numerous junk ones.
Is it a coincidence this happens around the time they had a breach?
https://news.ycombinator.com/item?id=38527965
If you want to go old-school there was also a famous satirical USENET poster.
https://en.wikipedia.org/wiki/BIFF_(Usenet)
This makes sense and it’s something we’re working hard on building. You can use any temp email to test it out in the meantime.
Some stick them on unrouted lans. But that may not preclude mesh like activity between restricted and unrestricted ESP-32's that are close enough to see each other.
You can do quite a few things - it’s not a widely written about area of development (relatively speaking) but you have a surprising amount of stuff at your fingertips.

I built a finance app a few years ago that would take market data via a push notification, and then the transform extension would render it to a chart image and attach the image to the notification to avoid generating them server side.
I was actually expecting this to be some sort of complaint about the ersatz truffle oils on the market nowadays (https://www.tastingtable.com/693090/truffle-oil-fake-no-truf...).
I've got a Herman Miller soft pad management chair that I like very much:

https://store.hermanmiller.com/office-chairs-ergonomic-chair...
Yeah this is why masking was such a confounding issue.

It truly is not a big deal to wear a mask, as long as you are choosing it for yourself. If somebody is forcing you, it feels extremely invasive.

The mandate folks should have spent their time cultivating and presenting an actually convincing argument.

For example I always masked indoors but thought the idea that my 3 year old needs to mask at an outdoor playground to be preposterous.
That's like saying we should block port 443 since it's not "innocent" because tracking happens over it.
Hmm... Earlier today I asked "Are you Gemini pro?" And it answered word-for-word the same way. Is this a hard-coded or heavily prompt-coached answer?

It's suspicious when an AI answers 100% the same.
CoCs, in their most fundamental form, are vectors for language & behavioural control. People who desire to control the language & behaviours of others will be drawn to occupy such positions of control, whilst those that don't want said control due to personal beliefs will not seek out such positions. Overall, their existence creates structures for authoritarian influences, as well as mechanisms for ostracization & self-censorship.

No person should ever be in charge of it.
Ok for Bulgaria my bad, I got confused because of their status with regards to Schengen.
I was wrong.

Site-note, literally quoting Bard:

Here's a statement that definitively proves that Bulgaria is not a member of the European Union:

"Bulgaria is not a member of the European Union."

For other countries, I thought the original message was making reference to the stricter regulations of the European Union but I wanted to emphasis that the issue was beyond EU ("Europe"), as it affects Canada, Switzerland, etc.
Will be cool if these functions were available via API endpoints :)
No, the general assumption should be that any nation state will take advantage of this kind of opportunity, regardless of whether they are Western or Eastern.
Waymo is cool, but it's not a product, it's PR. If it ever really ships then we can talk.
It's covered the same way that medical treatments are covered. Some patients have trouble affording those as well.
The ability to join a class action. You may get very little or nothing, but litigators will extract for 23andme’s data security failures. Private actions fill a gap when regulators and statute are inadequate.

If there is no cost, business as usual continues.

(I have opted out and intend to join a class action; I also own customer IAM in my day job, and am aware of the effort that would’ve prevented the root cause)
The new Fairphone is pretty modern, no?
That plot is downright criminal

https://imgur.com/a/GmbkDaz

86.4->89.8% = 1/3 of 89.8->90% ???

Great science + awful communication
> When Google finally made the whole of the web searchable, what would have happened, what would we have said, if they had decided some pages were inappropriate and therefore it should be their duty to prevent users to ever find them?

Its called "deindexing" and Google (and every other search engine, probably, but Google owns enough of the usage that no really cares about the other ones) has done it forever, for a variety of reasons.

And apparently, you wouldn't have said anything, because it happened, and you never even noticed it.
Why does this matter as long as you're serving your team as needed?

That should mean you're fully capable of doing anything from writing good quality code to going to bat for them in a meeting, writing documentation, SSHing into a VM to put out a fire, etc.

A senior dev should have done plenty of that before getting promoted to senior just not all at once. What's special about writing code and why are some people so afraid of "forgetting how to code"? No offense to anyone but sounds like a load of bs to me from someone who isn't ready and works at a place where that promotion is forced due to lack of choice.
Here's a hard problem that I would like the world's highest paid people to solve:

Give us an app where everything, including metadata, is end-to-end encrypted and works at "web scale". No one other than the people in the conversation can know who is talking to who and when. Then figure out a way to pay the bills to run the infrastructure and pay the people working on the app and also make a profit. (A novel idea: Maybe charge people to use the app?)
23andMe claims that no DNA information was revealed, and I'm having trouble finding a primary source that claims that the SNP info was taken. From a more detailed article:

> ... which exposed sensitive personal information that included things relevant to ancestry trees, birthdays and general geographic locations. In some cases, the company said that the hack could have exposed the pictures and display names of affiliated family members also using the company’s services through the accounts that were primarily breached. 23andMe insists that no actual genetic material or DNA records were exposed

> ... A 23andMe spokesperson told Engadget that hackers accessed the DNAR profiles of roughly 5.5 million customers this way, plus Family Tree profile information from 1.4 million DNA Relative participants.

>DNAR Profiles contain sensitive details including self-reported information like display names and locations, as well as shared DNA percentages for DNA Relatives matches, family names, predicted relationships and ancestry reports. Family Tree profiles contain display names and relationship labels, plus other information that a user may choose to add, including birth year and location. When the breach was first revealed in October, the company said its investigation “found that no genetic testing results have been leaked.”

https://www.engadget.com/23andme-hack-now-estimated-to-affec...

Presumably the journalist at Stackdiary translated "DNAR profile" into "genetic profile," which is a term with no standard definition, but if it had one, I would have guessed it would mean at least some DNA info.

23andMe could be lying or ignorant of what happened, but that would also mean that there would also be another news cycle when further disclosure was mandated.
Ask HN: Google Pay hacked, what could be the cause?
Today my debit card has been charged with a series of unauthorized transactions made in Brazil (and I am located in Europe). My bank quickly froze the card, but the first transaction (~USD200) they are refusing to cancel and refund because, as they say:

1) it was made via Google Pay
2) Google Pay is secure and cannot be hacked because it requires physical device authorization.

The issue I'm curious about - what could be the path the hacker used to make the payment?

This is not a issue of getting hold of the debit card number number/CVV, which is of course possible. The transaction was made via Google Pay. To be authorized, it would require either physical access to my mobile (obviously, I was not present in Sao Paolo today). Or this would require a physical login into my browser (Chrome). Which would require authorizing login from a new device, from new location etc. (and I did not get any warnings about that in my email).

Needless to say, I was not involved in fraudulent transaction at all: no SMS codes, no calls, no requests to authorize anything etc.

I am genuinely puzzled how could such an authorized Google Pay transaction happen and how can anyone protect themselves against attacks like this.
Bard currently is GPT-3.5 class model. Of course it's faster than GPT-4.
(YMMV on specific examples of course)
Did you miss the line where the article says:

"The other main part is llama.cpp, and we’ve covered why it is such a big deal when it comes to running self-hosted LLMs."

?
Reminds me of how you occasionally get a "GRAD STUDENTS BREAK SPEED OF LIGHT" article and it turns out they just shined a laser on the moon and turned it really fast or something.
I’m becoming convinced that using AI from a company that has any ulterior business incentives than providing AI services is a recipe for bias like this.
the new model is live
It's just for fun, and if they spend any amount of time here, they'll cease to miss the point soon enough.

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...

https://hn.algolia.com/?dateRange=all&page=0&prefix=true&que...
Ask HN: External hard drives for photo backups?
I've got photos in Google Photos, I've got some in iCloud, I'd like to get them all on an external drive for safe keeping. I'm not concerned with photo searching or UI or any of the feature that Google Photos offers. Just want to save them offline.

Which hard drive should I buy? Any particular brand you'd recommend?
Does this mean governments can intercept and possibly interact with the “This was me” 2FA notifications that a few apps are using now?
Interesting! But fortunately it doesn't apply to me, and it would seem to me that if the fire wasn't caused by that equipment that would be a fairly easy thing to challenge. Because to deny coverage after the fact on a 'gotcha' like that would seem to be illegal.
desperate times, desperate measure...ment practices
Are you familiar with any existing ECS implementations which expose a SQL interface?
No it is not: distributing small-scale JavaScript loads to third-party CDNs cannot be compared to blocking a port. The thing is, you could easily enough host those locally. There are also GDPR violations here, and there are plenty of security threats involved too. (Note also that it was the parent poster who used the term "innocent".)
There is absolute such as thing as a 1d image, in many disciplines.

(+ the meaning in math as what comes out of a function....)
That is an incredibly intense brand/name choice.

Fatefully, Pollux survived the Trojan (!) war and Castor did not, and it was Pollux who begged Zeus to be mortal as he couldn’t bear to be without his brother.

Is this some prescient branding? Lol. Of all the names.
I’ve tried this a couple times but can’t get it to work because the bird song Im interested in is never the only sound in the environment.
International Trade Statistics Yearbook (2022) [pdf]
"Much Faster" than what?
Yes, the local backend runs on your machine, and you would debug it like any other Elixir code on your project/machine.
AI techniques for a streamlined coding workflow
You missed out on a fantastic two sentences that immediately follow that
I'm sorry, but you are wrong about this. The cost to produce something in dollars, is virtually identical to the cost in resource consumption.

If it's cheap to make it's because there's little environmental impact.

It's not a perfect one-to-one, but it's really close.

> practices like "buy three and return two which we'll throw away" will no longer make financial sense

But you are not changing consumer behavior! People will still buy things and return them, and those returned items are worthless, i.e. not sellable. The manufacturer can try to donate them, but no one will want them, or they will just store them forever in cheap warehouses that will burn down every once in a while, or suffer water damage.

Or perhaps you want there to be artificial shortages in stores, so there's just barely enough to buy because the store will be fearful of overbuying something they will have to keep on their shelf permanently?

Please, try to think of the results of your suggestions. You keep thinking only of your goals and not what will actually happen.
The database gives 716 calories for 1 cup uncooked rice. So, 537 calories for 3/4 cup. It was a mistake to say 375 was half of 537, my intention was to point out that it's not close.

https://fdc.nal.usda.gov/fdc-app.html#/food-details/168881/n...

I don't have access to GPT-4 but your results are interesting. I don't understand why it's trying to approximate the yield of the uncooked rice after cooking before giving a calorie estimate. From my testing it doesn't do this for other ingredients like raw chicken.

It seems to be more accurate when giving calorie estimates for a list of ingredients instead of a single ingredient. For example, in a recipe that includes "boneless skinless chicken thighs (1 lb, raw)" ChatGPT gives "about 880 calories" as the answer. But in a new prompt if you ask it only about the chicken and nothing else, it gives "between 1100 and 1300 calories." The USDA database shows 144 calories per 100 grams, so 653 calories per pound. The first answer by ChatGPT is much more accurate.

I have no idea why this is the case, and I bet this would be easy for a researcher to demonstrate if true. Alas, I don't have API access.
70 in hex. So 01110000. The 111 bits are unused according to the article so it can be anything.
Meaning that she was over 70, and just wanted to learn some ambiguously defined information about her family history. There were some unknowns as far as where her great-grandparents came from. Maybe "naively" would be a better term.

We are all law abiding citizens, what do we have to hide, right?

Well, she did not read the T&C as far as how this information would be shared, and did not consider the implications of how she was making a choice for the people who she named on the family form, and did not consider the inevitable infosec implications which we are now all enjoying.
There is a lot of work being done on this.

I personally think initiatives like activiypod and vocata are interesting and would solve it well. They focus on being standard Activitypub implementations that others can subscribe to.
Seems the law critters at 23andMe have thought of that. From the Ars Technica coverage[1]:

> The updated terms also explain a new process for mass arbitration. This requires that "if 25 or more demands for arbitration are filed relating to the same or similar subject matter and sharing common issues of law or fact, and counsel for the parties submitting the demands are the same or coordinated," this "will constitute a 'Mass Arbitration.'" Any mass arbitration dispute will be settled by the National Arbitration and Mediation, "a nationally recognized arbitration provider."

[1] https://arstechnica.com/tech-policy/2023/12/23andme-changes-...
https://www.reddit.com/r/LocalLLaMA/comments/18bwd1y/comment...
Sounds very useful, thank you for sharing.
> You can do quite a few things - it’s not a widely written about area of development (relatively speaking) but you have a surprising amount of stuff at your fingertips.

I would pay to commission a blog post on the topic if you’re willing to write it.
The everything encrypted is a hard one, but should be doable so long as the incentives are right. For example, the money needs to be paid by the users for the product, and to keep it fully encrypted. It needs to be clear that not only is there no incentive to sell data or mine for ads, but doing so is a disincentive because it would actually lead to customer loss.

If I could raise enough money to replace my dayjob, I would totally do this. I'm guessing it's not doable, but I put together a quick Google Form to gauge interest. If anyone would be interested, please submit the form[1]

[1] https://docs.google.com/forms/d/e/1FAIpQLSe1sl5MI1Mxna6RBTXB...
He's also totally transformed the public image of Microsoft, from ruthless monopolist to one of the least evil, most open giant tech companies. With actions, not words.

It's not all perfect and wonderful, but they're miles away from the Gates/Ballmer era, it's remarkable.