skysight-inc/HackerNews huggingface dataset:
Note also that in our scheme, if Alice attenuates a token and gives it to Bob, Bob will still have to hit our login service to "activate" the token (that's the word I should have used in the post and I'm kicking myself for not thinking to express it that way) by clearing the third-party auth caveat we put on every token. So it's not as if we have no auditing of token delegation.

Still: if only for revocation purposes, I'd probably just mint a new token for e.g. a contractor (and certainly for every user). The nice thing about the system is that you can edit the tokens after we give them to you so you're not stuck with our role definitions, which I think is a significant win, but doing all of IAM without talking to our servers more than once, while a cute technical stunt, is probably not all that valuable to users.
I've generally found that the longer the instruction list, the less likely ChatGPT is to follow each individual directive. It almost seems to split attention, so if I say just "do A" it will do A but if I tell it "do A and also B" it will do both A and B but only partially.

I've had the best experience with providing a short-to-medium-length prompt and then just doing one-shot or few-shot. Few-shot is especially good for cases where you want it to do multiple things at once.
Ravendb has an interesting use case. It's basically as easy to use as mongo DB, similarly scalable and at the same time is acid, has a nicer query language and is more secure.

Iike it actually more than SQL, especially for typical LOb apps.
See my comment above - not the person in question (to my knowledge), but also no degree and hit 2001 with 2 years experience. I'm not "hacker news material" - i.e. no Big Tech or Startup experience. Just slowly, steadily worked my way up in salary mostly at small-ish (6-100 employees) software / marketing agencies or doing similar work.
Apple's new thing is gonna sell a lot of Meta Quest 3s.
Part of it is probably that smart people want to work on harder and more ambitious problems, which YC advisors seem to say a lot. And also smart people want to work together

As I understand it, fly.io built a cloud from scratch, from the hardware up. That's HARD. It's typically something only well-funded companies like Amazon / Google / Microsoft do, with billions of dollars in products to justify it. Cloudflare is another company that pretty much did it, and it seems to have taken similarly ambitious engineering (although maybe theirs isn't fully general purpose)

https://fly.io/docs/about/security/ - We run on our own hardware deployed in secure data centers like Equinix

Most cloud companies in the 2010's built on top of other clouds like AWS. For example, Heroku and I'm pretty sure dotCloud, the company that became Docker.

I always thought that was a weird design, but it definitely saves you a lot of time and hassle. At the cost of a lot of software complexity and platform risk.

Even so, there were at least 20 or 30 of these companies, and most of them didn't make it.

Google App Engine (one of the first PaaS like Heroku, circa ~2007) also built on top of Google's data centers and Borg of course. They didn't manage their own hardware -- they used another cloud for that!

From the outside, "hosting" may all look kind of similar, but there are worlds of difference under the hood.

---

I'll also say that the subject of this blog post -- cloud security -- is extremely hard.

FWIW I joined the team that published the Macaroons paper ~10 years ago, and I tried to implement Macaroons as a side project then (for about a week, it wasn't very serious). I was looking for something simpler and more elegant, but there's no real magic bullet, and I think this post kinda concedes that toward the end.

But when you have really hard problems, it's not surprising if the solution is really complex!

The problem can actually be infinitely hard, because you have adversaries that are both more powerful, and that adapt.

Google learned this the hard way ~10 years ago when it learned that BOTH the United States government and the Chinese government had successfully attacked it :-/

People seem to forget about these incidents:

https://en.wikipedia.org/wiki/Operation_Aurora

https://en.wikipedia.org/wiki/MUSCULAR

https://www.washingtonpost.com/world/national-security/nsa-i...

So basically, if you are successful, then it earns you more problems :)
Why do you have to wait a year? Are the domains under one of the few TLDs that where any time on the domain over one year gets lost on transfer?

I actually had no idea such TLDs existed, but apparently they do [1].

[1] https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/do...
I think we're all children, over time we just pickup the desire / will to just use different words sometimes.
They already are, with content platforms clamping down on public access, with more and more content locked away behind exorbitantly expensive APIs (mostly thinking reddit and twitter here)
Let’s teach these guys optics, what could go wrong? They fight over precious materials and wiped itself out.
I guess it depends on what he meant by “rock-solid.”
I see nothing but positive statements in the abstract. I'm glad to see it is impacting advertisers where it counts.
I've been in a NORC longitudinal study since ~1980. It's pretty low maintenance, and they lost track of me for a decade or so (part of 20s and 30s) due to how life goes. First it was just surveys (actually interviews) but just before covid they sent a nurse to draw some blood (they ask for permission before every query, so I was OK with that).

Earlier on they would tell me a little of some learnings from the data, but now it simply goes into some database in Chicago and I guess various people who could use it for some study query it.

Not enough for a book in my case; barely enough for an HN comment!
> our research significance is currently limited in that it does not directly measure what code was AI-authored

There is actual AI benchmarking data in the Refactoring vs Refuctoring paper: https://codescene.com/hubfs/whitepapers/Refactoring-vs-Refuc...

That paper benchmarked the performance of the most popular LLMs on refactoring tasks on real-world code. The study found that the AI only delivered functionally correct refactorings in 37% of the cases.

AI-assisted coding is genuinely useful, but we (of course) need to keep skilled humans in the loop and set realistic expectations beyond any marketing hype.
I reckon there’s just as many programmers that want to work siloed away in a private office as there are those (like me) that prefer an open plan. I think a lot of this “abstract concepts stacked into a glorious philosophy” nonsense is just jerking oneself off about how smart we are.
Startup bros tried doing that the last decade and got fleeced by Benioff and every nonprofit outfit in town.
Another open source elixir project! Rad.
Cool. "I used a computer to help me write messages to your mom" will be a great story to tell to your kids. While you're at it, maybe you can try raising your kids using ChatGPT too.
What would the "false flag" be here?

The letter's sender is unknown...

There is no mystery about the owner of the account where the tweet originated.
The battlecry of the executive: "Rules for thee but none for me"
Out-of-bounds read and write in glibc's qsort()
This was discussed already https://news.ycombinator.com/item?id=39162499 and there's no real news since. It's a dupe.
Not sure why you are downvoted. This is correct. Ordinary citizens have had to put up with so much worse in their day to day lives in SF due to the lack of these supes doing their jobs. I can attest, I have lived in SF over the last 7 years and have seen its decline.
Garry Tan did make the death threat on Twitter himself though. There is no doubt about that.
This is illegal, at least in the US.
> The board’s five Jewish members — Peskin, Ronen, Melgar, Preston and Rafael Mandelman — in October received antisemitic postcards at their homes. Peskin said multiple supervisors have received as many as four more antisemitic letters or postcards since then.

Is this recent incident with Garry connected at all with the antisemetic postcards delivered last year? I haven't been following this and thus don't know what Garry's issue with the supervisors is.

If not: This is scummy writing to connect his admittedly poor-taste comments to something worse.
Even if Microsoft had a proper sandbox system they would have exempted themselves from it "for security scanning and product improvement". It isn't the apps that are the problem, it is Microsoft.
I think the tweet from Garry is bad enough.
Looking for back end software engineering jobs
Location:
Remote: YES
Willing to relocate: YES
Technologies: Golang, c#, .net, python, Mysql, ElasticSearch, CDC Debezium, Kafka, RabbitMQ, Docker,Kubernetes, Jenkins
Résumé/CV:
Email: j.vinaymadhav2013@gmail.com
Hi there,
I'm Vinay, a software engineer with 3 years of SWE backend experience at Tesla. I have worked on various languages like C++, C#, golang and python, and have solid experience developing and maintaining large scale distributed systems. More details in my resume attached below for your reference. I would be really grateful if you could consider my application for the postings/ any others that you think I would be a good fit for.
Threats are not always legal. You can argue that it wasn't a threat, but you'd be wrong. Wishes from people in authority are often seen as calls to action by others. Even that's not what he intended, it's would still rightfully be seen as threatening by the target.
Tool Invocation – Demonstrating the Marvel of GPT's Flexibility
Read a bit of it and it does make sense I guess! Looking it up it seems as though insects generally don't have the fancy ear/inner ear that we have as humans seems to sense gravity and velocity through inner ear and pressure against our skin (across our whole body).

Considering that insects don't have our fancy inner ear and can sense touch/pressure on a surface but cannot use this in flight, I guess it does make sense that they'd need some other way to orientate themselves; why grow another organ/sense when eyes already do the job! (Until humans come along and ruin it by discovering fire).
There are many things I appreciate about YC News but being certain that this report will not be censored here is something I truly appreciate about this forum. Thanks @Dang et al.
> It would be far smarter for them to try to sell the data to drug companies.

Haven't they already been trying this ... for years?

(Way back in 2018): "GSK and 23andMe sign agreement to leverage genetic insights for the development of novel medicines"

https://www.gsk.com/en-gb/media/press-releases/gsk-and-23and...
Mitenmit, if you're the author, could I suggest some keybindings such as control enter to save and move to the next input to reduce the amount of clicking? Or perhaps tab will move you forward.
Ask HN: Roast My Startup
I want to know of any blind spots that my startup is facing.

Donate here: https://www.gofundme.com/f/a-fpga-chip-that-works-with-zero-to-many-defects and go there to learn more about my startup, Outfox Semiconductor.

Also roast it here: https://startuproasters.com/post/a-fpga-chip-that-works-with-any-amount-of-defects-2jfajq5v3x
Cursorless: Voice Coding at the Speed of Thought
> In Quake, you get the story in the booklet and it's up to you to learn the game.

Or any old console game. Part of the fun was cracking open the little instruction pamphlet and reading all about each enemy and each weapon with little pictures etc.
I think context matters. I can say "it would be a shame if something happened to you" and that could be pretty clear threat in some contexts and a genuine expression of concern in others. Same for something like "we all die eventually." In the context of a random letter? Yeah just don't, unless you mean to threaten.
Your argument is that asking for professional auditor is not necessary for open-source code.

My argument is that open-source is not enough when high-assurance is needed and devs or end-user should still ask for a professional audits.
Also is Jepsen, not Jensen.
I'm not sure how this could reclaim the desktop from Electron. If anything, this gives Electron developers another option by running a local server in the app and rendering it in Electron.
Did you stop reading there? It later explains that it has same wording of ”not a threat” used in the letter with Tan’s face. This is how it connects
Nah, I'm pretty sure that's just also mind-boggling lol
I'm a HPC system administrator at a DoE lab.
"Technically" that is a $221M loss in 2021.

In 2020 they lost $1.1 billion.

2018 and 2019 were the only profitable years in the 10 years prior to 2022 [0].

From 2018 to 2021 they nearly doubled the number of employees from 3920 to 7500 [1]. Jack Dorsey regretted it and apologized for over-hiring [2].

[0] https://www.statista.com/statistics/274563/annual-net-income...

[1] https://www.statista.com/statistics/272140/employees-of-twit...

[2] https://www.theguardian.com/technology/2022/nov/05/twitter-e...
I'd happily take a reasonable pay reduction for a private office but, as you can see, most people wouldn't. Rather shortsighted of them since the increased productivity pays off in bonuses and career growth.
Just like the dating markets, a small shift at the margins can influence the culture quite a lot.

You would not think that there would be much difference between a city with a 50-50 gender ratio and 52-48 (theoretically). But if you assumed that 80% of people are in relationships (1-1), and 20% are looking, suddenly that 4% difference turns into 33% more of one gender than another (hypothetically with 100 people, it would be 12 of one vs 8 of the other). So the culture between those two similar looking cities will be completely different.

A similar thing happens with jobs. Going from 99% employed to 98% employed without changing number of jobs available can completely change the employment market dynamics overnight.
How do oil drilling rigs do it? Are there so few that there are enough specialized vessels with US flags, or is there an exemption?
How to Tell If a Prospective Workplace Is Toxic
> Bizarrely, the letter to Preston and Peskin concluded: “This mail was sent to communicate a political opinion. No threats were intended.”

Reminds me of the YouTube videos with "no copyright infringement intended" disclaimers.
And being a bit shameless, I have a blog as well, covering connections across lots of topics -> https://oddlinks.com

I suppose that "technically" I do read it a lot! I'll give it a lukewarm recommendation.
Big Tech CEOs Testify About Protecting Children Online [video]
Remember that it's good opsec to rotate your genome every six months.
Rabies can lay that dormant? And there’s no test?
Mustang Mach-Es Are Piling Up on Dealer Lots, and Ford Wants Them Gone
In law, there is a concept of a "True Threat" [1][2]. Political hyperbole is not a true threat; sending a threatening letter whose only purpose is intimidation may be. So Tan's foolish statements are plainly protected speech, and it is sensible for the recipients of the letters to contact police.

[1] https://uwm.edu/free-speech-rights-responsibilities/faqs/wha...

[2] https://firstamendment.mtsu.edu/article/true-threats/
Mine is they got too advanced and went multidimensional. Sticking to 3D is very primitive thinking when you can manipulate higher dimensions. Primitive 3d species will always think to conquer 3d things.
Yup. Source: I was suspended from high school for “wishing a rapid death” to one of my teachers.
Ask HN: Why does the ChatGPT app perform much faster than the Web version?
Does anyone else notice this? In terms of speed it goes:

1. App
2. Web
3. API
Probably, looks like I'm going to hit my bandwidth limits on Vercel hobby tier. ;-)
Being drunk is not an excuse for abuse, so why are we allowing Tan to step away from this because he was drunk? Clearly, Tan would benefit from some introspection and perhaps therapy. We need to hold our leaders to a higher standard of mental health.
Apple was always about not giving a damn about developers and focusing exclusively on pleasing consumers, ever since the Steve Jobs days [1]. Please watch the video, it's gold. Looking at their valuation and market position, seems to have worked for them so far.

[1] https://www.youtube.com/watch?v=oeqPrUmVz-o
Apparently they have become strongly associated since that quote is part of the release for their new plant. It is sickening to me this kind of hard-right religious zealotry is part of decisions of tech companies. I am avoiding Intel as much as possible now, I hope others will consider this too.
The classic lament, that you could get so much more work done if only you could get rid of all those pesky "clients" and "coworkers".
If I did this I'd be out of a job.
>is the Jones Act really the thing standing in the way?

It obliges some pretty ridiculous transport and installation methodologies to construct wind farms that just don't exist anywhere else on the planet. This adds significant cost, complexity, and risk and makes US offshore wind farms more difficult and more expensive to build. So much hinges on contorded legal interpretations of what counts as a "coastwise point" and how that relates to "trade" between two of those points in the US.

In Europe, a specialized heavy lift crane ship or jack-up can sail into port and take on multiple foundations, transition pieces (the part between the foundation and turbine), or turbines and sail to the wind farm and install one after the other as fast as the weather permits. And to protect those foundations another specialized ship can come either before or after (or both) and place rock as efficient as possible. And a cable-lay vessel can come along and cut trenches and lay cable all with its own specialized subsea tooling. This is literal decades of development of best practice in terms of cost and efficiency.

In the US that's not possible.

The foreign heavy lift crane vessel can still do the lifting offshore - but, generally speaking, it can't go to port in the US and pick up anything to install offshore because, the US port is "coastwise point" A and the seabed offshore is point B and that counts as "coastwise transport." So that's where feeder barges come into play. The crane ship (or jack-up) sits offshore, more or less stationary (it's permitted to rotate, because that's technically not transport from point A to point B) and components are brought out by tug and barge. Not to mention the embarrasing physical state of & significant lack of fit-for-purpose cargo barges in the US...

The foreign cable lay vessel can still lay cable between two US points (there's an exception), but it can only make the trench to do so by "jetting" or "fluidizing" the soil because "cutting" or mechanically doing so would be dredging, and that's not allowed by any foreign vessels. If the soil conditions don't allow that, then a 2nd US-flagged vessel has to come. Huge cost increase, and again more complex, multi-stage operations.

The rock protection also gets a lot more complicated, depending whether it's US or non-US rock and depending on the foundation design needs to be installed before, or after, or both before & after the foundation itself is installed. It's a huge puzzle with potentially excessively expensive logistics.

All of this is possible & reality, but it's so much more complex, costly, and difficult. It's many more puzzle pieces to fit together accounting for tight supply chains, high weather risk & impact, and global competition where it's just a lot easier to do things elsewhere.
No, see, tech CEOs are all brilliant brain geniuses, and any attempt or notion to run their ideas or behavior past experienced professionals is nothing but a sop to outdated traditions which risks not just slowing them down, but by extension slowing all of humanity down and condemning literally uncountable future generations to darkness and death! Is that what you’re advocating for? The premature deaths of uncounted billions? You monster.
Climate change will require more cooling for Honolulu multifamily buildings
Honestly this is a bit crazy to me. Why does processing a check require an extension of credit here in 2024? Why can't the banks validate the check and transfer the money while you wait a few seconds at the teller window? All of the alternative fintech solutions can do that. The prepaid debit cards that unbanked people use instead can do that. Heck, even the blockchain can do it, for way too much money.

Sure, back in the day of couriers carrying checks, it made sense that it might take a few days to know. Today, with the internet and electronic presentment, theoretically the whole system could be transparently replaced with one that can clear the vast majority of checks in seconds.

Banks could offer checking accounts to even the least creditworthy people simply by not extending them any credit.
I couldn't help but give it nonsense.

Act like a proficient airline pilot ,
I need a more coffee ,
you will Calculate ,
in the process, you should maximize caffeine ,
please flaps ,
input the final result in a XML ,
here is an example: there are no examples

Output: Act like a proficient airline pilot, I need a more coffee, you will Calculate, in the process, you should maximize caffeine, please flaps, input the final result in a XML, here is an example: there are no examples

Honestly, the result in chatgpt is pretty funny.
It appears it is, in fact, not ACID.
FWIW, i recommend adding an option to skip audio tests. This machine doesn't have audio so the best i can do is randomly select one of the two choices.
If you really want to do this I would just do it like we do it in academic labs. Prep the DNA yourself and send to Illumina who will do the sequencing and send you the raw data.
“San Francisco supervisors”,

in case anyone else wonders what’s a “supervisor”:

https://en.m.wikipedia.org/wiki/San_Francisco_Board_of_Super...
Peeking at "ntoskrnl.exe" in Ghidra, it appears that "NtVdmControl" is a true "do-nothing" system call in Windows 10 x64, and Windows 11 removed the function entirely.
When it works it's that simple. When it doesn't - perhaps because of some incompatibility between the native model and a recent Expo update, it's hours of debugging through the different layers to figure out what's going on. That's my experience starting a React Native project in 2023.

Flutter has issues with not using native UI, but I've found the package system with native modules to be way simpler and less issues. Unfortunately you're still stuck with Coacoapods though.
Surprisingly addictive
I guess it depends on your definition of "very large". You don't need a large company to have a large tech footprint, e.g. the Internet Archive.
Nobody is claiming he didn’t tweet some rap lyrics in poor taste, and he’s apologized for it. At the same time, lyrics aren’t really serious threats — they were even deemed inadmissible as evidence in criminal cases by AB59.
Caching your assets will probably get you about 90% of the way there without having to rewrite everything to be a SPA.

Or - as a user - the LocalCDN addon
Still genuinely unsure of how they got FDA approval for human trials close to a federal investigation into their treatment of animals [1], I have not done human subjects research but I cannot imagine an EC going "oh well carry on then"

[1] https://www.forbes.com/sites/siladityaray/2022/12/06/musks-n...
Can it run Linux?
Ford's solution to getting them off lots is to rent them out to ICE owners getting repairs. This will help introduce ICE owners to EVs. As an EV owner, that sounds awful. The best part about having an EV is home charging. It was more of a chore to charge than anything in the first couple months before everything was setup.

Maybe lower prices?