skysight-inc/HackerNews huggingface dataset:
> I use their original 7B model, as well as some derived models, all the time.

How does it compare to other models? and with chatgpt in particular?
> Most notably, tab process isolation: one tab crashing (and they do crash) generally doesn't bring the whole process down.

Firefox has been doing this for several years now...
Nope, these notifications don’t always turn into a user-visible notification.
Note: In most cases you don't want to split pages prior to insertion as is being done here. Instead, you want to insert data first, and then restore the page size invariants at the end (prior to committing the operation / writing to disk / etc). If you're doing multiple operations at once (e.g. adding new keys and deleting others) it may turn out that you can avoid the expensive page-splitting operation by postponing it.
https://forge-allura.apache.org/p/allura/wiki/Feature%20Comp...
It's very ironic that that pattern is what we had before the communist takeover.

The current times are a tough spot for the country. The communist-era manufacturing infrastructure was not sustainable in current times of consolidation and specialization, so as much as we hated to see Torpedo go and with 3rd May struggling, tourism so far was the best plan B. But what if tech could become plan C that doesn't have the seasonality problems, and helps the local citizens? I really hope so.
Not if it's a smoke machine
> The most important flaw was that after you hit C-x r SPC (save-to-register), whatever key you hit next, you'd save the text into the register associated with that key. In particular, the universal Emacs cancel key, C-g, would not work here: instead, the text or position would be saved to a register called ^g

I'm not very familiar with Emacs, so possibly stupid questions incoming.

If you start to type C-x r SPC t to save to register t, does C-g work right after the C-X and the r?

If so is that because the C-x, r, and SPC are part of the command sequence whereas the t is just an argument used by the command, and the C-g handling is done in the command sequence processing?

Emacs is pretty famous for its flexibility in letting users bind and unbind key sequences to commands. Could people who like the old behavior fairly easily effectively restore it by unbinding the handler for C-x r SPC, and then bind handlers for C-x r SPC a, C-x r SPC b, C-X r SPC c, and so on for all registers they want to use, with each of those handlers just copying to the appropriate register?

That should let them use the same keystrokes they now use, and if my guess above about C-g handling is right also make C-g work to cancel after C-x r SPC.
> the question is how do we get to a place where they can trust Palestinians to not murder them in their sleep?

You'll know that I mean no snark when I say 'LOL'.

After all of the emotionalism on this topic, it's so nice to finally meet someone who has a clear-eyed understanding of what's going on over there.
Agreed. And while the articles focuses on bees, it's important to know that the insect population as a whole have been severely hit over the past two decades (especially flying insects).

https://en.wikipedia.org/wiki/Decline_in_insect_populations

It's shocking and really disturbing how big the decline is, and there is some evidence that this decline at least partially effects other parts of the ecosystem, as freshwater fish populations have great declined too.
Do it. The more the merrier.
> I'd like to see more ways for people to test food products themselves too.

This is the best way to circumvent the politics and corruption.
CVE-2023-50428 Bitcoin inscriptions are a bug
That's not how Bills of Attainder work. They are primarily about punishments without findings of guilt. Particularly, denial of civil rights without trial. Whatever the merits of this case, removing a tax break is not a criminal finding, and having an organization paying the same taxes as most others is not a denial of civil rights.

"The two main criteria that the courts use to determine whether legislation is a bill of attainder are (1) whether “specific” individuals, groups, or entities are affected by the statute, and (2) whether the legislation inflicts a “punishment” on those individuals. The U.S. Supreme Court has also identified three types of legislation that would fulfill the “punishment” prong of the test: (1) where the burden is such as has “traditionally” been found to be punitive (historical test); (2) where the type and severity of burdens imposed are the “functional equivalent” of punishment because they cannot reasonably be said to further “non-punitive legislative purposes” (functional test); and (3) where the legislative record evinces a “congressional intent to punish (motivational test).”
...

"It would appear that the identification of papers and recordings under the control of a named person (the former President) would meet the per se requirement. The Court in Nixon, however, found that the statute was constitutional despite this specificity. In Nixon, the Court found that the bill failed the second prong (punishment) of the test for a bill of attainder, since the act fulfilled
the valid regulatory purpose of preserving information which was needed to prosecute Watergaterelated crimes and was of historical interest.31 As part of this analysis, however, the Court even questioned whether the statute in question met the specificity prong of the two-part test, finding that naming an individual could be “fairly and rationally understood” as designating a “legitimate class of one.”32 Thus, it has been suggested that Nixon stands for the proposition that any level of specificity is acceptable, even the naming of individuals, as long as a rational, non-punitive basis for the legislation can be established."

https://sgp.fas.org/crs/misc/R40826.pdf

Property taxes are not traditionally punishments. The type and severity of the property taxes in this case are entirely in line with taxes that most everyone else pays, and the purpose here entire furthers non-punitive legislative purposes.

Even the single class-member herewould like meet the "rational, non-punitive" test.

There are also a mountain of very carefully crafted tax breaks and subsidies designed to benefit the one particular corporation that qualifies.

I have no idea if the above proposal is a good idea or a bad one, but I would be very surprised if it qualified as a Bill of Attainder.
I would guess not enough people know. As tragic as this is, hopefully this starts some change. It would be powerful to have a third party rating for QC around spices.
> There’s so much text emphasized in this post that it’s impossible to read.

s/impossible/annoying/
Engineering Managers do Triage work. Do we know this?
Thanks :) I hope too. The project deserves it.
The First Costume Book: 1562
I didn't flag it as a dupe, just helpful to have links between discussion threads (and try to avoid beating dead horses, although that's always a lost cause).
This is not specific to IT. It is a general trend. Also, it's not new; cf the saying "Jack of all trades, master of none". Also, the reason why we don't see Da Vinci types anymore.

Enthropy is increasing.

Things that used to be in one domain will in time split up into multiple, each having a higher level of detail / sophistication than before. Or, that one domain will die off, possibly being replaced by "something else". This can not be reversed - "you cannot unbreak the broken glass" (It seems that we need to be able to reverse our direction in spacetime to do that, and I believe that is considered a hard problem.)

If you want deep knowledge you can't have broad knowledge. It follows from this that, eg AGI is deadborn; but then specialized AIs have huge potential. This should be the scary part, not the utopian know-it-all Mechanical Turk / HAL / Marvin.

Speaking of the latter, we will have little use for an AGI anyway as such a thing will be way out of our league and we will not be able to use it, as D Adams famously postulated: "Here I am with a brain the size of a planet and they ask me to pick up a piece of paper. Call that job satisfaction? I don't."
LLMs are going to spit out a lot of broken shit that needs fixing. They're great at small context work but full applications require more than they're capable of imo.
When I implemented this, long ago, I had a expanded page structure containing the old page plus the new key. So it had more memory than 1 page. Then the expanded page, when writing it back, becomes 2 pages if a split is needed.

I did it this way for a few reasons. One was I could release old key pages after new pages were written, avoiding data loss in IO errors. Second was key (prefix) compression became a lot more easy. I never realised it, but it avoids the trouble in both blog post too.

It comes with some copy overhead, unfortunately.
“omg.lol is unabashedly built with PHP”

PHP is on my mental list of forever-security-challenged tech, but it got on that list a long time ago. It’s 2023, is that still a reasonable concern?
And then there is me who tries to fight with all my clients to have their GUI friendly applications to, at least, have command parameters, so that it can be automated through services/task scheduler/cron
Posted too much here already but food supply issues concern me greatly.

If anyone else is concerned, one of the quickest things you can do is throw out any of your spices from India and don’t buy anymore in the future. Unclear the origin of this cinnamon but India has been a pretty consistent problem in recent history.
It’s not just Saudis even western countries like Norway won’t let go of oil easily. http://www.thelocal.no/20231128/why-norway-is-accused-of-thr...
These stats can be misleading for other reasons as well.

The US and EU have a lot of existing infrastructure, construction of which required enormous amounts of CO2 emissions. Countries that are still building out their infrastructure should be expected to expend more CO2 per capita to catch up. (Modern equipment is more effecient, but still).
Unfortunately this company would be hated by component manufacturers and they would actively sabotage it
The SAT Museum [pdf]
Oh awesome, thank you for asking for clarification!

What really slows me down, and honestly just kinda annoys me is that when I’ve cloned some upstream repository onto my machine and made a bug fix, why do I need to then fork the repository once more and push the commit to my fork first and then go through the theatrics of making a PR?

GitHub the server could, for example, fake my branch on the origin/upstream. It doesn’t need to actually make the branch on the upstream, and can smartly make a volatile fork, and prepare the changes to become a PR.

Basically, since the server knows my identity, and knows if I can or can’t make a branch on the upstream repo, it can handle the boilerplate of making a fork for me.

What I want to see from GitHub is embracing the power of there being an authoritative server between the developer and the repository.
I've looked for papers on the geopolitical impact of moving away from oil, and especially how it impacts countries like Saudi Arabia/Russia, but haven't found much.

Has anyone come across content that explores this?
No, modern PHP frameworks have come a long way.
There’s a lot more footguns for attackers on modern windows than other operating systems. Most can be bypassed (EDR, AV, AMSI, ETW, UAC, controlled folders, App Control, block at first site etc), but it definitely raises the bar if your end goal is very low likelihoods of detection.

Put differently: the gauntlet you have to run on Windows (and to a lesser extent macOS I imagine) is much longer
Oh. That's not an HSM.
I strongly disagree. Relative to other books, maybe it is on the expensive side. But relative to the value you get from it, I think it is incredibly low.

One way to think about it is in terms of how much you value your time. If you value your time at $25/hr and this book saves you more than 4 hours of time learning UI design, it is worth it.

Another way to think about it is in terms of ROI. As someone in the tech industry I think that having these skills is likely to pay off way more than $99. Not in a legible way -- it's not like anyone will ever say to you "I see you have these UI design skills, here's a $5,000 raise." But I believe that the skills will ultimately shine through and improve your ability to get jobs and make more money.

Also, in practice, if you're in the tech industry, there's probably a good chance that you can get your employer to pay for it.
Plausibly deniable encryption is better.

Password protect the partition: if you give one password you get boring content, if you give another you get the good stuff.
I see. And that's fine for Apple? It's still not an official API right?
This, combined with the fact that it's an asynchronous video course but somehow "closed for enrollment" also left a bad taste in my mouth. I'm sure they're great courses but I'm not really interested in supporting the artificial scarcity so someone can charge a few hundred dollars more per person.
It’s neat but I would love to see some more examples of why you think it is good. I tend to be skeptical of adding anything to the context window that isn’t closely aligned with my goals. My biggest issue is usually getting chatGPT to get out of the “blurry center” (where it just blathers pablum) to a “productive spike” where it can genuinely do specific work.
Isn't this just rainforest conservation done right? I fail to see the problem here.
how? you're going to modify the binary so that it can accept command line parameters? or clone the GUI's functionality in a CLI? that's akin to just creating the application from scratch.
I just self host stuff on my domain and link them to a Flame dashboard for family and friends.

https://github.com/pawelmalak/flame

Dashboard is only accessible by my wireguard network, Which they can turn the LAN mode on on, so it doesn't route all their traffic, just to the local domain.
Noob questions (I don't know anything about LLM, I'm just a casual user of ChatGPT)

- is what Mistral does better than Meta or OpenAI?

- will LLM become eventually open-source commodities with little room for innovation or shall we expect to see a company with a competitive advantage that will make it the new Google? in other words, how much better can we expect these LLM to be in the future? should we expect significant progress or have we reached to diminished returns (after all, this is only statistical prediction of next word, maybe there's an intrinsic limitation of this method)

- are there some sorts of benchmarks to compare all these new models?
>That said, I have yet to see a modern AI that actually passes the Turing test either:

This is not saying much when modern state of the art LLMs are being delibrately trained not to pass the Turing Test.
It was quite spectacular. I hear they spared no expense.
Yes, I know, the absurdly low valuation is the entire point, I'm illustrating a potential way to abuse the new rule.

> If they miss a payment

A non-issue since they will immediately repay the loan, and the lender is obviously complicit in the scheme.

> Why would someone

It's not about skipping taxes on the $50k loan, it's about skipping taxes on the $150,000k-ish investment by using and artificial valuation.
I recommend giving tree based tabs a try if you haven’t. Another massive workflow enhancer.
What's next, people pointing to Google and Apple when talking of Big Tech?
In what world is insulting self-sufficient and independent people acceptable?

"Ah, these people who live life a different way, less reliant on incompetent government and malicious businesses are crazy fringe conspiracy nuts".

Millions of people grow their own food for a plethora of reasons, yeah maybe everybody should just be eating poison-laced big box food because they don't want to be labeled "nuts", only to be proven correct time and time again.
99%? Really?

I’ve noticed that nano has replaced vi/Vim in a lot of cases. I’m not a nano fan, but I also don’t feel the need to rant about it. It’s a default, it’s easy to change. Big Vim isn’t plotting to keep a monopoly.
So you have spent all your money training a model and now you don't know what to do with it?
> Most of the currently used AV software contains heuristic/ML components that are able to gather and analyze various indicators of compromise

Ransomware runs just fine on corporate computers with the latest and greatest "antivirus" software.

I really lost hope some 10 years ago, when i saw that i have to manually remove malware from memory sticks, because macaffe was clueless.
After more than a year they released an update that will detect and remove the malware (it was a virus speading through autorun.inf with exe names which did not have any sense like jhghjjj.exe)
Speaking as someone who has pentested a few PHP codebases over the years, rather than as a developer, It's a bit like C. That is, it's an absolute footgun in the wrong hands, and a lesser footgun in experienced hands.

For experienced devs following best practices and using modern frameworks it's "mostly fine", and that's the side of things that's been improved over the years, but most of the old rakes are still there to be stood on.
Every time I read that the methane is melting faster than expected I start wondering if the clathrate gun will blow after all and we really will be doomed. https://en.m.wikipedia.org/wiki/Clathrate_gun_hypothesis
Alternatively if the monorepo has a way to denote when you're in a new package (package.json, etc) you could key off that too?
I skimmed OPs post, and then read yours, and I'm still a bit confused as to how it's different than just hosting a mishmash of different but related services yourself. If you could not, yes that's fine. But if you could, what really are the advantages?
https://www.ipcc.ch/ has a different target group (policy makers/politicians) but otherwise has that very goal and seems to be highly regarded.
Just because OpenSSH (which includes ssh-keygen) has been around for a long time, doesn't mean it is static and outdated. It is under active development, with the latest release two months ago, and nearly 20 commits in the last month.

OpenSSH regularly updates its defaults and removes backwards compatibility. Three months ago, they switched from RSA to ed25519 as the default private key type for `ssh-keygen -t`, and in August they disabled RSA/SHA-1.

From the ssh-keygen manual: "It is possible to specify a passphrase when generating the key; that passphrase will be used to encrypt the private part of this file using 128-bit AES."

Rather than spreading FUD, you can just decide for yourself whether AES-128 is secure enough for you. Since we don't know your threat model, only you can decide whether you're okay with publishing AES-128 encrypted private data in a public location.
Packaging Language Models into Desktop Apps
You’ve got me thinking the same thing. Omg.lol seems as interesting as it is enticing me to build a similar thing for fun.
I had a real "I wish magit was a TUI program and embeddable in Neovim, Emacs, your tmux sidepane" moment the other day.
But to answer your question about how to bring Palestinians where they could accept a 2 state. Hmm. It's going to be tough. Really tough. PSAs? Denazification campaigns? A real puppet government? How to mitigate outside influences like Hezbollah and Iran? Intractable.

There must be a visible, palpable model for a better way that is easy for people to embrace. "Maybe I can't have all of Palestine for my people, but I can have a home and safety for those I love, and a good life."
Here is a video of a blind person browsing the web
https://youtu.be/OOvXuz6ejuw
That was Malthus, in the 1780's. His 1980's alter-ego was and is Paul Ehrlich who warmed up Malthus prognosis with numbers adjusted to fit our era. Ehrlich is, just like Malthus, known for failing in each and every one of his predictions. Both Malthus as well as Ehrlich failed - and in Ehrlich's case most likely ignored - to take into account that the population not only grows but also develops new technologies. These new technologies increased the carrying capacity of the world's economies faster than the population increased which has led to a staggering reduction of the fraction of the population which lives in poverty.
The original 60mhz Pentium is also 30 years old, released on March 22, 1993.
Chuck E. Cheese animatronics will be missed by parents most (2023)
Because that billion dollars gets you the R&D to know how to do it?

The original point was that an “AI” might become so advanced that it would be able to describe how to create a brain on a chip. This is flawed for two main reasons.

1. The models we have today aren’t able to do this. We are able to model existing patterns fairly well but making new discoveries is still out of reach.

2. Any company capable of creating a model which had singularity-like properties would discover them first, simply by virtue of the fact that they have first access. Then they would use their superior resources to write the algorithm and train the next-gen model before you even procured your first H100.
The end result still needs to be accountability or else we're just spending money on test kits as an increasing amount of the food we buy goes right into the trash. It also means that those who can't afford all those kits will end up eating harmful products.

This isn't something that can be solved at the consumer level. We need policy here, but in the meantime we should have options to keep our families safe.
Presumably the mastadon integration. Think twitter with your profile directly tied to your personal site - except not twitter.
Man this LLM stuff gets released faster than I can keep up.

Is there a centralized list somewhere that tests "use this for x purpose, use that for y?"
I was gifted with an extra number of hands, so that I can pat you and your family members on the back at the same time.
eBPF Networking Techniques – Packet Redirection
Here's the first in a series of posts which show off eBPF networking techniques.
Sadly it doesn't - Docker isn't specifically designed as a security tool and there are plenty of warnings against using it in this way.

Firecracker is the best I've seen in terms of container security - it was designed by AWS for Lambda and is trusted by people I trust. It's not really packaged for easily running on macOS etc though.
Not only that, but the old knowledge can still be useful. Newtonian physics won't explain semiconductors, but it's still useful for slinging space probes around the Solar System or winning bets at a billiard table.
This is the classic Dropbox criticism, no?

Moreover, the pleasure has nothing to do with self hosting or not, it’s just a pleasant and whimsical UX while being technically solid.
Yes, according to some standardized test. But in practice, I don't consider myself particularly quick or intelligent (in comparison to some of my peers, who admittedly would not represent the baseline population).
This is the third time in a week that I read about this and, to me, the most important question has remained unanswered: If a push notification's payload is E2E-encrypted (consider, e.g., push notifications for Signal running on GrapheneOS with sandboxed Google Play Services), is there still a data leak? Like, what metadata are people referring to? The fact that I use Signal at all?

Of course, depending on the app, it coupd be possible to correlate even E2E-encryped push notifications with other data on that app's backend server etc. But beyond specific apps is there a generic vulnerability here?
No need for the sarcastic scare quotes. The trees were dead or dying and a fire hazard.

https://www.reuters.com/article/us-centraleurope-environment...

The studies I saw didn't agree with the climate change angle, but bark beetles of various species are absolutely brutal to trees.

What's more, depending on the species, the wood is useless for anything but biomass. The larvae can and will burrow tunnels deep into the trunk which makes the wood unappealing for most uses... So it's not like it is a convenient excuse for loggers to go in and clear cut.