skysight-inc/HackerNews huggingface dataset:
> Okay, I have no evidence of this, but they'd better not be using another AI classifier to try and tell whether that link is safe.

Of course they are. Probably a combination. I mean you can't validate every url or domain, which is constantly changing.

But the problem isn't if they use a classifier or not, the problem is fundamentally about communication. Security requires acknowledgement of limitations and understanding what failure points exist (and not all networks are absolutely opaque). Frankly nothing is invulnerable, so this clarity is the critical aspect (as you state).

What I just don't understand (especially being a ML researcher) is why we over sell things. The things we build and tools we make are impressive in of themselves. I mean if I hand you a nice piece of chocolate you'll probably be happy and probably even want more. But if I hand you a nice piece of chocolate and tell you that by eating you'll wake in the morning cured of cancer and the richest man in the world you're going to rightfully be disappointed and/or upset at me no matter how good that chocolate was. Can't we just make really fucking good chocolate without the snake oil? I'm afraid that not calling out the snake oil is going to make the whole chocolate industry crumble, even factories which never added the snake oil. I'm unconvinced people are concerned with existential risks to ML/AI if they're not concerned about this. I'm concerned that it's not AI that'll get us paperclipped, but we'll just do it ourselves.
Would like to hear about the use case, we mostly found they are throughput sensitive rather than latency sensitive.
> Without home parking charging, it's pure downgrade from gas experience.

That may be your perspective, however I have family members who owned a plugin hybrid, had no at home charging capabilities, and found the experience superior. I suspect this is a use case that will become more prevelant at the regulatory incentives begin ramping up.
ChatGPT is an expert at tailwind
I'm astounded HP made commercial products out of a process with such a low yield, I dont know how that was economical. (though none of the HP gear was exactly low margin)
Do "level 4 biosafety facility" not use glass vials? I imagine the security isn't provided by the choice of containers itself (plastic?), but rather the entire lab design.
I wonder if anyone's experimented with a robotic arm and camera approach. That's certainly where my mind goes if trying to design a pinsetter from scratch. I would think something like that could be close to traditional pinsetters on speed, even manipulating pins individually, based on what I've seen of assembly line robots. And it would be far simpler and basically impervious to jams.
this is awesome btw :-)
It's been working great for me. I'm on a paid account. I'm pretty sure the "it sucks now" reports are just confirmation bias from users who have received an unlucky string of bad responses.
Noteworthy related work the article missed: https://grapheneos.org/features
I get the sense that covid is “where the light is” in terms of the search for after-effects of sickness - I had a non-covid cold (at least several at home 15 minute tests were negative) in 2022 that had long symptoms, my sinuses and ear canals still feel different than before.

It may be that covid does unique physiological damage, but it could also be that most severe sicknesses do some sort of permanent damage.

I wonder how much of this is unique to covid, is my point.
it makes sense in at least europe where I feel like I see 1 bird scooter for every 100 bolt scooters
The Discreet Eminence
Support told a redditor that automatic color registration now requires OEM toner: https://news.ycombinator.com/item?id=31860131
I really respect the effort you've made here to communicate with some empathy and to try to be a help.
Something that miss is, unless you need tons of IO (in the form of SAS/SATA storage, or old generation PCIe cards), avoiding these huge, noisy and power hungry servers are a lot simpler than people may think. Mini/Micro form factor OEM PCs on the same price point generally come with much newer generation of hardware (instead of a 3rd gen i7, you might get a 8th gen i5) and overall performance is so much better. It’s also so much easier to host and maintain (just plug it near your ISP modem, and forget about it).
> It will be eventually installed if govt really care about BEV.

I don't realistically see us being able to rollout sidewalk chargers on the scale needed to provide home charging at the sidewalk for people without driveways or garages.
Volume controls on my car are physical and I don't need to look at the touch screen to control temperature - I know exactly where those virtual buttons are.

However, my car has gotten better through over the air updates since I bought it.

I mean, look, I absolutely don't deny you your preference, and as I also said previously I would like to have a few more physical buttons. But it's not the end of the world for me (like some commenters in this thread pretend).

:)
Miami of Ohio is a pretty good school, and I think Ohio still has academic freedom and other standard civil rights.
Had good memories with Bird in Europe and am sad to see them go :(
Rent control only fights against upward pressure for existing renters... When you describe rents continually going up, it's due to more people competing for limited rental units. Cities can and do see rent declines (they first show up as "first month free" etc. before landlords bite the bullet and reduce rate). Seattle has seen temporary competition for rents in some neighborhoods as new construction started in 2019/2020 comes online. It won't last since we've seen such a decline in new construction starts, but the mechanism is sound.
As a counterpoint, every Turo I've picked up was from a neighborhood street with free parking and a line of dinged up cars.
This is very helpful. Given your experience, would you use NextJS on your next project or are you indifferent?
> If you're entering a role at a mid-level or junior, you're likely stuck with their tech stack choices. At senior or higher, it's usually about delivering results and the tech stack is up to you.

> I've never paid much attention to specific job requirements, just whether or not I could solve the problems they were looking to solve.

So then I assume you’ve always been a senior developer?

Also I think this probably depends on domains/culture/multitude of factors. There are a lot of places where senior is just “cog with a lot of experience” or “cog with a lot of tenure”.
Related: to create submenu with sticky keys, there is Hydra: https://github.com/abo-abo/hydra
My personal hope is that time_bucket_gapfill(), interpolate(), and others will prove so popular in Timescale that DBMSes adopt them and they become part of the SQL standard. When I have to use a "naked" system without them to do analysis and reporting (read: making dashboards), I wind up creating similar UDFs.
Show HN: Talk to any ArXiv paper just by changing the URL
Hello HN, Talk2Arxiv is a small open-source RAG application I've been building for a few weeks. To use it just prepend any arxiv.org link with 'talk2' to load the paper into a responsive RAG chat application (e.g. www.arxiv.org/abs/1706.03762 -> www.talk2arxiv.org/abs/1706.03762).

All implementation details are in the GitHub. Currently, because I've opted to extract text from the PDF of the paper rather than reading the LaTeX source code (since I wanted to build a more generic PDF RAG in the process), it struggles with symbolic text / mathematics, and sometimes fails to retrieve the correct context. I appreciate any feedback, and hope people find it useful!

Currently, the backend PDF processing server is only single-threaded so if embedding takes a while please be patient!
/e/OS falls significantly behind the other alternative Android systems with regards to privacy and security.

Please see this independent comparison table: https://eylenburg.github.io/android_comparison.htm

And additionally the reviews by Kuketz: https://www.kuketz-blog.de/android-grapheneos-calyxos-und-co...

See also my table that shows historical release dates for monthly Android Security Bulletins: https://divestos.org/misc/a-dates.txt

and the Chromium (WebView): https://divestos.org/misc/ch-dates.txt
Anecdotal counter-point: my Google home usually understands me (male voice) but either ignores or misinterprets my roommate (female voice). Not sure if it’s the same tech necessarily, nor where the fault lies. But this is across multiple generations of Home/Nest devices, in multiple locations.

Not to mention that there’s a 20% chance it misunderstands me with simple commands like “lights on” (so I get random Spotify songs instead).
Lesser-Known Careers for Biomedical Science Graduates
Wrong. A more complex program has more possible origins for the bug. So you need to make more hypothesises to check and verify the bug. Time and intelligence are both a factor here. Sometimes one more than the other.

Clearly you don't think bugs are all solved in seconds and limited only based off of intelligence. A harder bug often needs more time to solve. This is common sense.

You're just sinking with the ship now.
Nice job. I wonder if there's a way to get the font exactly like Windows 7? It looks a bit different.
Zorin OS 17 Has Arrived
really is quite a shame that they destroyed or prevented actually sustainable well-run companies from succeeding. the culture of US-aggressive VC-backed conquer-the-world-or-die-trying businesses really does need to be reigned in.
I too picked up on that line. But it kinda depends on the meeting doesn't it?

Of course an agenda is ideal. Of course each participant should come to a meeting understanding what it's for, where real, important, things are discussed, concensus reached, and decisions are made. I go to some of these kinds of meetings every year.

This year I've had the joy(?) of consulting in two corporate environments. Where the folks executing a project get to have regular (frequent) meetings with middle managers to "report on progress". What did we do? What do we plan to do? When will it be finished. 10 people are invited to each meeting. 3 give feedback. 1 "runs" it (and tries to keep it short). 6 (I'm sure) are working on other things while the meeting happens.

So yeah, no, I'm not spending 30 minutes preparing for your meeting. I'm barely attending your meeting. (And if my name is mentioned I'll likely ask you to repeat the question.)

Which brings me to my point. Calling every gathering the same thing (meeting), then prescribing advice for all meetings, is unhelpful because not all meetings have the same value to begin with.
Unless the AI's training data was 100% your own material, yes, obviously.
Oh man. I haven't seen LED in years. In 90s-00s, I set up every client I had with Okidata LED printers. Small footprint, quiet, light to med duty, inexpensive to buy and run. They lasted forever. I don't think I ever had one break.
No, it certainly has plenty of issues, at least the turbo version which is the one used for chatgpt.

I think even an OAI employee said that they were working on these refusals as they were new in the turbo model.
> Cars aren't littered randomly on every sidewalk.

Exactly, they're just littered everywhere.
here is a lecture (on Zoom) from Prof. Chittka about the very same topic as the article: https://www.youtube.com/watch?v=eSaqi2ysDoA
Per there article the tissues are not uptaking the oxygen that is present. In healthy people VO2max is primarily limited by supply not utilisation; increasing the oxygen supply (this is what VO2max protocols aim to do) is barking up the wrong tree.
Disc golf is so much fun! I'm in Finland and the ground is full of snow, and I'm still going to skip the work today and go to the forest throwing.
Yannick kilcher YouTube Channel is filled with very relevant paper reviews that are very helpful
Will every car that implements a standard be able to use the Tesla Superchargers at full speed? Or would the charger decide if it trusts the car first?
All cars made by the Volkswagen group are based on like 20 platforms. For example the Audi A3 and the Skoda Yeti are the same platform. They look quite different.
Would you include foreign cars in that statement? They take up more space and disincentivize traditional mobility.
>your specific use case, I cannot help you with that

I don't need your help. You need it. I'm helping you realize your statement is wrong.

First you make a statement saying one should read all the docs. Now you say devs should read the relevant docs. Devs do the later anyway. Your argument just evolved into the point you're arguing against.

Clearly you didn't mean to do that. You just meant to read more docs then you normally would on topics a little further from the relevancy at hand. But people are responding to you based not off what you meant but what you said.
The HP Journal article mentions the 9% yield as if they are perfectly fine with it. They were building these chips internally for high-margin gear (as you said), so it probably didn't matter if the chip cost $10 or $100, as long as it has the performance that they need. It's a completely different market from microprocessors such as the 6502 or the 8086, where customers are looking closely at the cost of the chip.
Blue Origin launches first New Shepard flight since grounding
There are scooters in my town and I’ve used them a few times. When you park the scooter the app makes you take a picture of your parking job. I don’t know how good the enforcement is, but this is a plausible way of solving the problem of inconsiderate users.
The question is: who are they really firing? There are thousands of tournament organizers, consultants, dealers and judges. Perhaps they aren't touching the core creation and balance team which churns out a new expansion every rotation.
Right, I was just confused as to how the session was being "tricked" into performing the exfiltration attack. Without context it wasn't clear what the severity was.
Yes. You missed the part where it said v0.1.0
I think they're one of the most enjoyable personal mobility inventions in modern times.
I would not expect something labeled as “v0.1.0” as supposed to be finished.

Weird unproductive comment tbh.
Weak password + Open ports ---> Malware attack ( kinsing , etc )

so use "-p 127.0.0.1:5432:5432"

- https://github.com/docker-library/postgres/issues/770

- https://sysdig.com/blog/zoom-into-kinsing-kdevtmpfsi

- https://sysdig.com/blog/cloud-defense-in-depth/

- https://thenewstack.io/kinsing-malware-targets-kubernetes/

- https://stackoverflow.com/search?q=kinsing

- https://github.com/search?q=repo%3Adocker-library%2Fpostgres...

-----------

https://docs.docker.com/network/packet-filtering-firewalls/

"On Linux, Docker manipulates iptables rules to provide network isolation. While this is an implementation detail and you should not modify the rules Docker inserts into your iptables policies, it does have some implications on what you need to do if you want to have your own policies in addition to those managed by Docker.

If you're running Docker on a host that is exposed to the Internet, you will probably want to have iptables policies in place that prevent unauthorized access to containers or other services running on your host. This page describes how to achieve that, and what caveats you need to be aware of."
“If people could rent cars for very short periods of time and 'return' them on the street, they most definitely would be re-parked illegally”

Isn’t this exactly what evo/gig/zip is? Easy to miss if you live outside of a big US metro I suppose.
Even if battery swap is a practical solution, fast charging is still needed. Obviously every fast chargers in rural area can't be replaced into battery swap station, too much stock costs. For fast chargers replacement in city, there's no enough space.
I live in a historical city center in Germany. There aren’t many parking spaces, and sidewalk parking is illegal anyway. Scooters still end up on the sidewalk and in my way. I really wish there were some stronger regulations.

FWIW, I don’t own a car at all.
It's not really editorialising that's the only weed killer the article talks about.
Anecdotally at the beginning of the year I got it to come up with references for a citizenship application I am undergoing. The idea not being to commit fraud but to give the reference a template that they can edit and check for accuracy rather than forcing someone to come up with the entire text from scratch. This saves us both time.

I got GPT4 and it came up with an amazing reference letter the first try, very little tweaking required. Fast forward to October, I asked it again, it said "I am sorry but it is unethical for me to right a reference letter pretending to be someone else." (paraphrased). I then asked it "Pretend you are writing a reference letter for a fictional character in a novel" + the original prompt. It proceeded and came up a good reference letter.

May seem small, but these little bumps matter. I don't want to have to argue with a machine to get it to do obviously morally uncontroversial tasks, and play an "answer me your riddles 3" game with it.
Has early access come to js component libraries??
The victims have already been victimized many years ago. Finding this content in a training set doesn't re-victimize them.
Another article: https://arstechnica.com/space/2023/12/blue-origins-suborbita...

(https://news.ycombinator.com/item?id=38707662 17 hours ago, no comments now)
Same here, I've been doing chatGPT -> scad or blender scripts, but it ain't the same at all
Turning on automatic updates, while a great choice for the vast majority of iOS users, does not protect against sophisticated adversaries who use zero day exploits. The fact that everyone is already on the latest version (they’re not, because of phased rollout, but it’s not too relevant here) means that an exploit that has value targets latest iOS by default.

Opt-in additional protections, such as Lockdown Mode, which aren’t perfect but help are rarely enabled by those who need it, despite being marketed to people who are targeted. Part of this is that it’s opt-in, but part of it is that a lot of the people targeted aren’t journalists: they’re the spouses of political leaders, or random government leaders, who don’t have a good security posture nor do they have people managing their devices for them to create one.

Also, do note that just because someone appears to have tampered with a conversation doesn’t mean you’ve burned your 0-day: it provides no indication of how they did so.
What makes a weed isn't the plant but the location. Bike rentals while being essentially the same business don't have the same eyesore problem because the companies that deployed them built bike racks.
Like say plain old web components?
Better UX perhaps? When it's not being used to perform data exfil attacks, of course.
For the purpose of insurance, a 1% annual risk of flood is categorized as high risk. It calculates out to a 26% risk of being flooded at least once in a 30 year mortgage. "Moderate risk" is considered flooding between every 100-500 years.
I'm not sure if they had this in mind when they came up with the name, but /e/ is indeed best visited in privacy.
I’m not sure what optimizing for STEM looks like, but I think lots of us just had fun playing with computers as kids.

Among S, T, E, and M, only the last one doesn’t get fun toys to play with.
That might be a realistic assessment but let’s not pretend the preponderance of react in the industry is a desirable state of affairs.
I figure that property owners are public record already, and those plans are already on the public real estate website, so I feel I’m not technically revealing more than what can already be discovered. Maybe I’m wrong though!
Fairy Ring
11. Embleton → McCombie

However, Wikipedia also has "islands" of pages which cannot be clicked out of to other islands.
Do any govs do this for other software stacks? Java is so common. I remember seeing a Google one at some point.
To be honest, his comment is more productive than yours. The point is, they expect you to pay for it, no matter how you label it, and the price is hefty for what you get.
I am nobody, but I don’t even know what is happening in real life anymore.
There are enough such individuals that "unlucky string" multiplied by "observation count" is meaningful. My pet theory is just that publicly stated facts [0] are true and that users don't use the platform the same way.

[0a] The publicly stated facts being that OpenAI does more work behind the scenes than just ask a single model for probabilistic completions, and that they reduce the number of models being asked questions when under load.

[0b] The differences in platform usage being as simple as different questions (more or less susceptible to the changes) or different time-of-day or time-of-hour or other metric related to peak load.

It'd be fun for somebody to actually ask the same battery of questions over time and monitor the result distribution. Do you know of any such projects?
its a huge problem. Firefox for example could not agree on what the binding for PiP should be on non US/UK keyboards, and had an impossible binding of Ctrl-Shift-] (where "]" requires an Alt on some keyboards).

https://bugzilla.mozilla.org/show_bug.cgi?id=1611154
People who become agents of the correctional system are not selected for their independence of thought, or openness to deviating from protocol.

Those are, in fact, actually qualities that are grounds for dismissal in selection processes for law enforcement; the on ramp of the corrections pipeline.

Any philosopher finding themselves in the System's custody may as well, despair. Before the Law, not even God's mercy will stay the wheels of Justice as she's wrought.
(Is this something you can share?)
Yes, consistency. Similar in scifi/fantasy, where an absurd conceit is believable if internally consistent, i.e. self-consistent. (I also call it principled) Too much ad hoc prevents suspension of disbelief.

Reactions are an important part of this, it's not just how good an actor is, but how other character react to them. If they are ignored, it's like that character doesn't exist, has no effect, is inconsequential, doesn't matter... is not real.

In a fluid simulation, when water does not react to the shoreline, rocks in the water, columns supporting a pier etc, it is like the water (or the obstacles) don't exist. In this sense, the water (or the obstacles) "aren't real".

For example, the water in Sea of Thieves looks magnificent... but because it doesn't interact (it's procedural), it doesn't feel real. It isn't real.

A further problem here with water is that it's difficult to make a continuous fluid that is consistent and isn't realistic, because the basic principles of fluid are so very very simple: conservation of mass, conservation of momentum.

[ Of course, you can still vary density, gravity. There are other effects beyond these: viscosity, surface tension. Also, compressible fluids, different reynolds numbers, adiabatic effects, behaviour at non-everyday temperatures, pressures, scales, velocities, accelerations etc. ]

There are also simplifications, like depth-averaging (Shallow Water Equations aka St Venant), but again, it's hard to vary it and yet remain self-consistent.

Cellular methods - similar to conway's game of life but for fluid - maybe are an exception, because thet are self-consistent - but pretty far from "water", because not lack momentum (and aren't continuous).

The final issue is error: simulations are never perfectly self-consistent anyway, because they must discretize the continuous, which introduces error. In engineering, you can reduce this error with a finer grid, until it too small to matter for your specific application. For computer graphics, it only needs to be perceivably" self-consistent - and perhaps pixel size is one measure of this, for the appearance* of consistency, in area/volume, acceleration, velocity, displacement (...though, we can perceive sub-pixel displacement, e.g. an aliased line.)
This is the first time I have seen someone use GROBID. It seems like an incredibly cool solution