skysight-inc/HackerNews huggingface dataset:
A company today has the burden of proof to demonstrate authorship of a claimed work when they sue for copyright infringement. This isn't a crazy expansion of that concept -- companies do not generally break the law just because there's a low chance of getting caught. Furthermore it's not hard to imagine, for example, a whistleblower calling out their employer for copyrighting AI works.
This is literally a case of someone making AI art and trying to attribute it to the algorithm.
terrible replies by Carta CEO especially in light of their layoffs
The acquisition was for the name, not for the (by then) shutdown service. Napster, the prior entity, was in bankruptcy when Roxio got the name.
Holy run on sentence, Batman!

"Is it not a curious fact that in a world steeped in irrational hatreds which
threaten civilization itself, men and women-old and young-detach themselves wholly or partly from the angry current of daily life to devote themselves to the cultivation of beauty, to the extension of knowledge, to the cure of disease, to the amelioration of suffering, just as though fanatics were not simultaneously engaged in spreading pain, ugliness, and suffering?"
This is really interesting, thank you.

What would be the downside to padding all inputs to have consistent input token size?
I meant, make it open-source and allow to self host it. Have encrypted database for hosted solution.
Related ongoing thread:

How We Handle Cap Table Information - https://news.ycombinator.com/item?id=38906749 - Jan 2024 (48 comments)

Also:

Linear CEO alleges Carta mishandled sensitive cap table data - https://news.ycombinator.com/item?id=38899001 - Jan 2024 (36 comments)

Carta CEO's response to the unsolicited outreach to their customers' investors - https://news.ycombinator.com/item?id=38897363 - Jan 2024 (95 comments)

Carta doing unsolicited tender offer outreach to their customers' investors - https://news.ycombinator.com/item?id=38886915 - Jan 2024 (75 comments)
Lately I've been using this: https://martinvonz.github.io/jj/v0.10.0/

It's fully compatible with git.

What I used to need a GUI for now I can easily do with jj.
What problem would an open-source version of Carta solve? We use Carta and overall it's pretty good aside from the [very] disturbing problem reported here.

Carta ensures we have a clear record of equity positions in the company and correctly process standard types of transactions like distinguishing between ISO and NSO shares or correctly handle employees leaving that are important for regulatory compliance. We have to delegate certain types of transactions like changes to the employee share pool to our attorney. So it's not just a calculator. If you mess up these things it can expose you to shareholder lawsuits or problems with tax authorities.

That said I'm very interested in the specific details and how Carta resolves this issue. "Rogue employee" has been used as a convenient excuse in the past.
Good thing ships aren't losing doors. As far as I know, Apple doesn't offer SeaTags.
after reading some more details i'm confused why this is a big deal - creating deal flow for the secondary market involves connecting buyers and sellers and then requesting approval from the board. the board can exercise ROFR if they don't approve the sale. the customer feels betrayed because they didn't get their permission to connect buyers and sellers?
If you hire a photographer to photograph you, don't you own the copyright as their employer?

Unless they took the photographs for free, the copyright notices they put on them are fraudulent.
Could you give an example? Compared to many other languages (e.g. C++, Java) which don't even have JSON parsing in the standard library (Go does), Go's standard library is very complete.
Well put. Unfortunately true!
Never open old Japanese Word files in LibreOffice. It will destroy the file.

This is because old Japanese Word files are saved in Shift JIS, but LibreOffice opens them in UTF-8.
Go is a little different here- originally it was totally decentralized, there was no central registry, just URLs. So you could depend on everything, no effect on other packages. No rules on publishing or unpublishing either, because you just get to run your repo the way you want.

At some point, Russ Cox got the Fear about this, and now https://proxy.golang.org/ is an on by default, caching proxy in the middle. You can still delete your packages whenever you want to though.
Author here. Thanks for the link! I added the "x86 Is an Octal Machine" link, quoting your comment, in the end of my "encoding resources" post here: https://blog.kenanb.com/code/low-level/2024/01/07/x86-insn-e...

I have also been referencing that document since I started writing on the topic: https://blog.kenanb.com/code/low-level/2024/01/04/x86-insn-e...

It really helps reasoning about the encoding, but as you pointed out, x64 extension makes it challenging. I basically end up switching between octal and hex, depending on the byte, during the process.
A) identify pain that your product solves.

B) identify people experiencing that pain.

C) reach out to those people, showing them how to make the pain go away.

Each step can be hard, or easy.

Firstly, it sounds like you built a product without understanding (yet) your customer. Which can mean you have a "solution looking for a problem". It can be hard to find enough pain in this case because it's harder to find a problem to a solution than a solution to a problem.

Or its easy, your solution generates cash - or some such universal pain.

Secondly finding people with specific pain takes work. Your solution might only appeal to say small town vetenarians. Which means you need to start touring small towns. (Which would be expensive, but you can start I small towns near you.)

Getting people to pay may be hard. They worry about the new pain your app will bring. The existing pain might be slight an thus ignorance.

Generally speaking, it's easier to find problems, and build a solution for them, than it is to build a solution, then look for problems. And ideally you have paying customers signed up before you start constructing the solution.

As creators we want to create first, and find customers later, and yes can work, but you have to be a bit lucky. It's not a sure thing.
Have been watching this unfold over twitter the past couple days and all I can think to say is that Carta really, really needs to hire a communications director. This situation is really not that terrible (Carta is trying to monetize via secondary markets, customers were not aware), and could easily be served via one of two options:

1 - divest from secondary markets, apologize, immediately highlight what’s next and how this will be remedied

2 - inform customers this is Carta’s way forward and accept losing some customers to make a lot more money on secondary markets

These are both equally acceptable in light of these events. What’s not acceptable is your CEO ranting on twitter and Medium pretending nothing’s happening, that it’s a one-off event when there’s evidence to the contrary, and attacking the customers who brought this to light.

This is 100x more applicable when the customer is someone like Linear which is a huge thought leader and one of SV’s golden children at the moment, and your market is other startups who will likely have shared investors, shared networks etc.
"Not having something ready to read" used to happen - many years ago. Yeah, that problem has been solved for sure. That's progress right there.
Been waiting over a decade for AMD to get serious about their software.
> The idea that reading a piece of text constitutes copyright infringement is ridiculous.

No man, it's not ridiculous. If I write a program that copies someone's book and try to sell it I'm infringing on that copyright. I cannot sell a zipped version of the Harry Potter books. I feel like there's so many people weighing in on this discussion who haven't actually done any real world copyright related stuff.
I always thought neural networks were an example of the analogy working the other direction. Instead of modeling our brain on the technology of the time, we chose to model the next technology on how we think our brains work?
Related:

Programming as Theory Building (1985) [pdf] - https://news.ycombinator.com/item?id=37263121 - Aug 2023 (36 comments)

Naur on Programming as Theory Building (1985) [pdf] - https://news.ycombinator.com/item?id=31500174 - May 2022 (4 comments)

Naur on Programming as Theory Building (1985) [pdf] - https://news.ycombinator.com/item?id=30861573 - March 2022 (3 comments)

Programming as Theory Building (1985) - https://news.ycombinator.com/item?id=23375193 - June 2020 (35 comments)

Programming as Theory Building (1985) [pdf] - https://news.ycombinator.com/item?id=20736145 - Aug 2019 (11 comments)

Peter Naur – Programming as Theory Building (1985) [pdf] - https://news.ycombinator.com/item?id=10833278 - Jan 2016 (15 comments)

Naur’s “Programming as Theory Building” (2011) - https://news.ycombinator.com/item?id=7491661 - March 2014 (14 comments)

Programming as Theory Building (by Naur of BNF) - https://news.ycombinator.com/item?id=121291 - Feb 2008 (2 comments)
Related. Others?

Linear CEO alleges Carta mishandled sensitive cap table data - https://news.ycombinator.com/item?id=38899001 - Jan 2024 (36 comments)

Carta CEO's response to the unsolicited outreach to their customers' investors - https://news.ycombinator.com/item?id=38897363 - Jan 2024 (95 comments)

Carta doing unsolicited tender offer outreach to their customers' investors - https://news.ycombinator.com/item?id=38886915 - Jan 2024 (75 comments)
The problem here is that the law has already been written to some extent. Google Books is the most relevant case you can point to that set precedent over what constitutes fair use of copyrighted material and the extent the transformation of those works can be commercially exploited. In that case works were copied without permission with small chunks of those works redistributed verbatim, and that was when it was working as designed. There's an argument to be made that this AI generator stuff is actually less egregious.
I’m very sorry about your experience. That’s definitely not what I was aiming for, and I can imagine that was a nasty surprise. Any hang like that is unacceptable, full stop.

My understanding is Metal is currently causing hangs on devices when there is barely enough RAM to fit the model and prompt, but not quite enough to run. Will work on falling back to CPU to avoid this kind of experience much more aggressively than today.

Thank you for taking the time to both try it out and to share your experience; I will use it to ensure it’s better in the future.
Just because the pace of progress isn't exponential (like what some people would want to believe) doesn't mean it isn't happening. I remember getting an early invite to DALL-E 1 all the way back, and while I don't use it anymore, the modern improvements made seem very substantial. From plain comparisons of different versions where the same inputs produce substantially better outputs, to the mere fact that the latest version can actually generate decent, often discernible text at all (something that people joked would be impossible from AI to achieve) shows that some progress is being made.

The reason why it's not as visible with Stable Diffusion is because a lot of the technologies around it circle the same few foundational SD models - people build on top of them, add new ways of interacting with them, but ultimately, the same thing underlies them all. Community support is seen as more important than cutting-edge tech, which is why something like Stable Diffusion XL hasn't even seen universal adoption yet.
Wonder if there is there anybody who is making an offline app with request-reponse with html(with HTMX) and a virtual server defined in a service worker?
> I remember reading some persuasive arguments that Russia probably only has a small amount of Soviet era nukes left for the same reason.

They probably have none:

https://www.armscontrol.org/act/2002-10/features/breakdown-b...:

> The substantial capabilities of the Russian warhead production complex have been of concern to some U.S. policymakers and nuclear weapons experts. The Russian complex is very large relative both to the U.S. complex and to the projected size of Russia’s nuclear weapons stockpile. Because of manufacturing and technology problems that limit the lifetime of Russian warheads to 10-15 years and because of stockpile management practices that emphasize routine rebuilding of nuclear warheads, the Russian complex also maintains high levels of production. The fear, then, is that Russia could use its large and active production infrastructure to offset arms reductions by quickly building new nuclear warheads in large numbers—that it has a “breakout capability.” Russia’s secretive nuclear weapons policies and uncertainties about the technical capabilities and operational practices of its nuclear weapons complex further exacerbate these fears.

> ...

> Russian warheads are reported to have a shelf life of approximately 10 years (with newer warheads having a life of 15 years), presumably because the warheads’ conventional high explosives degrade and their fissile components deteriorate.7

> The deployment cycle for Russian warheads is reported to be three years long.8 After three years of deployment, warheads are removed from their delivery systems and shipped to a serial production facility for modernization and refurbishment. Refurbished warheads are placed in storage prior to a new cycle of operational deployment.
The Linux kernel and distributions is what I’m talking about so yes compared with NT kernel and windows as a distribution.

The design choices you’d make to build a secure OS (kernel and user space) looks very different. The microkernel design is a more secure design but techniques to make it work fast took a very long time to develop (+ computer HW also got fast enough that the overhead is no longer as big of a deal + we have multithreading everywhere that microkernel can sometimes exploit more naturally).
And if it's not a random blogger, but a team of professionals?
Check out competitive Excel
Technically it had been in airplane mode, but now it was in sideoftheroad mode.
Why use strace in 2023? [video]
Hmmm, when living in California I got a speeding ticket late night in Kingman, AZ, sent in a personal check, they only took money orders, I never followed up. It's been thirty years.

I visit family in Arizona frequently. I wonder whether statute of limitations has run out. I've been fortunate to not get pulled over so far. Maybe I do see gitmo in my near future after all.
Please do not work on docx.

Import docx if necessary, but work on the OASIS OpenDocument format.

>Switch to Libreoffice file format then convert to doc/docx then send back that doc/docx file.

If you need to send work to a msoffice user, just send OpenDocument. Office can open them. Should there issues, it's more likely to be their bug, not libreoffice's.

MS Office users need to get used to working with the standard document format, which is what OpenDocument is.
Apple's going to add plane crash to their crash detection marketing real soon.
htmx is html but: all elements can make http requests, not just <a> and <form>
20 MPH? If it's... attached to a parachute?
Do it like me and you can make “no willpower needed” work with an iPhone: https://news.ycombinator.com/item?id=38850248

Even though I agree this solution is extremely hacky, it does work.
Understood but at some point it becomes the responsibility of the user of the hammer if they use it in an attack or hurt someone else or themselves with it. LLMs are LLMs anyone who is using it who doesn’t understand it is language model and is a machine and how at the high level it works, probably shouldn’t use it, and it shouldn’t be Apple’s responsibility to keep hammers out of the hands of everyone due to the few who can’t hit a nail and stub their thumb.
I don't think this issue is specific to the IRS; it has much more to do with how the government is funded - via a series of Continuing Resolutions which make it really difficult to achieve any sort of long-term planning or projects. In the case of BSM funding, your source cites fluctuations are truly wild and were likely enacted on very short timeframes (i.e. months or weeks), which makes it incredibly difficult to hire and retain the expertise or make capital investments you need for success. The debacle around the IRS funding in the Inflation Reduction Act (the subject of the now-deleted parent comment I replied to) highlights these issues - a bunch of funding was allocated, some of it was later clawed back through a budget deal between the White House and Congressional Republicans, and a likely deal this January may continue to reallocate funding. I don't want to lay all the blame for all the IRS' ills at the feet of the state of government funding, but I certainly think it makes it really, really hard to get significant multiyear projects completed.
Also, since the charging cable was technically still attached, I wonder if that turns it off as well.
Or they'll just make a branch entity in Japan where the government explicitly says that copyright does not apply to training AI.
You can eke out large chunks of works from Google Books with the right queries too.
Discussed at the time:

The two cultures of mathematics and biology - https://news.ycombinator.com/item?id=8819811 - Dec 2014 (69 comments)
I hope Cuong Tran got his $70 for two bags refunded by Alaska Airlines.
Given the circumstances Alaska should refund the baggage fee
A little off-topic, but I am rather disappointed by software taking cool stuff names. As soon as I looked at the title, my first thought went to an actual flywheel (A mechanical power storage system). A flywheel in space powering some unnatural energy beam is a Vader-esque evil-cool-evil system I frequently imagine.
unsubscribe links are supposed to always be accompanied by a header with the same URL. X-Unsubscribe or smth like that. I guess a sneaky malware could make unsubscribe link a bad link, using the header to prevent clicking by the receiving server.

You're right, this is interesting, something I have wondered about before.
Yup, exactly this. And there would usually be an official plugin you could optionally install to read files from ~2 versions ago, presumably because businesses demanded it, but still wouldn't go back farther.

I can't think of any other program that removed the ability to open older versions of its own files. Kinda crazy.
> for one, this requirement is a complete departure from how copyright systems work now.

A complete departure? Here is the current form used to register an artistic visual work for copyright. Its more elaborate than you might think.

https://www.copyright.gov/forms/formva.pdf

Registration is not a rubber-stamp, it is increasingly refused because of indicia of AI tooling.

Why would adding some questions on provenance and methodology be beyond the pale?
Er, are you sure? [1] If so, how recent is this?

> Facebook employees were granted user data access in order to "cut away the red tape that slowed down engineers," the book said. "There was nothing but the goodwill of the employees themselves to stop them from abusing their access to users' private information."

> In a presentation to Zuckerberg and the company's top executives, [CSO] Stamos said engineers had abused the access "nearly every month," the book said. At the time, more than 16,000 employees had access to users' private data, the book said.

> Stamos suggested tightening access to fewer than 5,000 employees and fewer than 100 for particularly sensitive information such as passwords. He proposed requiring employees to submit formal requests for access to private data but received pushback from executives. Zuckerberg said changes on the matter were "a top priority" and tasked Stamos with finding a solution and giving an update in a year, the book said.

[1] https://www.businessinsider.com/facebook-fired-dozens-abusin...
"Don't be a sucker" [video]
Look up KaiOS phones.
We should! Just sent an email to the address on your profile
Edit: it has been found! I’m on mobile and not able to find a better link right now, but here’s an NTSB spokesperson discussing it: https://www.facebook.com/story.php/?id=100064737668850&story...

Sounds like the thing in the woods mentioned below was not the real deal and just some other bit of garbage or something that was dumped in the brush.

Previous comment:

I live in this neighborhood and saw a post on Nextdoor a little bit ago that indicates the door/panel may have been found. The text of the post is as follows: “My husband and I were walking the trail behind the Renaissance Town-homes near Barnes and Valeira View and we saw a large white oval object with a teal stripe on it in the brambles between the creek and Barnes Road. Two others saw it too and they called non-emergency. WCSO and the NTSB showed up but they could not affirm that that is what is was. As my husband said, nobody will know until they walk over to it. Unfortunately the undergrowth prevented us from doing so. We'll see, or not.”

The description of it having a teal stripe could match up with the missing panel, although we obviously can’t be sure yet if it is actually the missing part. I also saw a post from one of the folks who found a phone, and they had included a photo of where they found it, which I recognized to be fairly close to the place where the door was potentially found.

Sometimes we hear stuff on our roof, but it’s always just pinecones falling or a squirrel running around… makes me grateful we haven’t had a Donnie Darko scene in our yard or on our roof!
p.s. Reading some of the other posts referenced here it looks as if there may be a real issue. Thanks to OP for posting.
This reminds me of some playing around I did with x86 instruction decoding. I've sort of come to a conclusion that both the assembly and the manual are lying to you a little bit about the actual instruction formats.

The basic form of an x86 instruction is as follows:

* The presence or absence of each of 5 "legacy" prefixes (0x66, 0x67, 0xf0, 0xf2, 0xf3). Supposedly, 0xf0, 0xf2, and 0xf3 can't coexist (they're all group 1), but if you look carefully at a few instructions, it turns out that there are some instructions which require you to specify two of them at the same time.

* The group 2 prefixes end up being a segment register specifier, although they got overloaded as branch hits for the branch instructions.

* If you use a REX prefix, it adds an extra bit to the opcode (REX.w). If you use a VEX prefix, it adds two extra bits (REX.w and VEX.l). EVEX adds five extra bits (REX.w, VEX.l + EVEX.l, EVEX.b, EVEX.z). Otherwise, everything they add is extra register bits, although some instructions may have differences if they use a "modern" prefix versus not.

* Opcode map. For VEX and EVEX, you specify this via a few bits in the prefix, but otherwise, you use 0x0f, 0x0f 0x38, or 0x0f 0x3a to specify.

* 1-byte opcode.

Combine all of these together, and you almost have every unique instruction. That's roughly ~21 bits of opcode encoding (fewer due to holes and impossible encodings), and this will tell you what the instruction expects as its opcode form: whether it has a ModR/M byte and how many subsequent immediate bytes it expects. The ModR/M byte specifies a register and either a register or a memory location. It actually doesn't take that long to iterate through every single x86 instruction!

However, there's one last trick x86 plays: sometimes, the register of the ModR/M byte is used to select between different instructions, particularly when you have an instruction that only takes memory instructions. So the instruction 0x0f 0x01 with r0 is a SGDT instruction, whereas the instruction 0x0f 0x01 with r3 is a LIDT instruction instead.
it was found... unlocked and displaying Mail application.

Sure this level of shock would have registered on its accelerometers, right?

How come it did not do the obvious right thing from a security perspective, which is to lock itself?