skysight-inc/HackerNews huggingface dataset:
Let me rephrase.

I know this attack doesn't apply to commonplace embedded TPMs.

I think the label of "security theater" doesn't apply to commonplace embedded TPMs.
Never been in ML/AI but from what I gathered you need a PhD to do such research.
> Who said overflow was wrong?

The word "overflow".

> It’s also basically impossible to establish invariants about a system for code that is run in signal handlers

Signals are a pain but it doesn't specifically have to be a signal.
I was expecting https://youtu.be/urcL86UpqZc
Use one tool that's known to be "good enough" for most things. If you run into actual perf issues, then look at something else.
Just had Death Wish coffee for the first time. This is gonna be interesting.
> commenters on HN who seem to think jQuery is just a DOM selection library

proceeds to name selection and native functions
The TPM collects some measurements to verify that you actually booted to the correct operating system before releasing the key. From there, the system is protected by the operating system's login screen.
__A garden-path sentence is a grammatically correct sentence that starts in such a way that a reader's most likely interpretation will be incorrect; the reader is lured into a parse that turns out to be a dead end or yields a clearly unintended meaning. "Garden path" refers to the saying "to be led down [or up] the garden path", meaning to be deceived, tricked, or seduced.__
I write software for spacecraft. I’d much rather take my chances that the overflowed value is meant for humans or for some tertiary system than to end the mission regardless.
What is a realistic compromise?
> PiHole works 90% of the time, but when it did stop working, I'd have to spend a bit of time fixing it.

I don't know what problems you had with your Pi that resulted in 10% downtime, but that sort of hyperbole sounds a lot like shilling. Cases of SD card corruption are 99.9% due to the use of underpowered power supplies - just buy the official Raspberry Pi power supply if you can be bothered to search for a proper 2.5-3A USB power supply.

> At $20/year [...]

At $20 a year, I could buy a RPi Zero 2W and an SD card to keep as a spare every single year and have enough left over for a celebratory Sheetz sandwich. PiHole + WireGuard + $15 RPi Zero (once off) are unbeatable.
I came here to say this as well.
Every time someone replies with "I've asked ChatGPT.." or "Why not ask ChatGPT?" I get seriously mad.
It's like religious people. Totally convinced of a fake story and therefore tells it as truth.

> People are enthralled with this tech when they should still be very very skeptical.

Yes, that's the real issue.
Everyone should be very skeptical about ChatGPT responses. But instead it's often trusted blindly, because "it's often enough correct".

But I get the idea behind this particular move and at least it can be a chance to teach the students to distrust it.
jQuery is just way cooler than the comparatively build in (and sometimes obtuse) web standard replacements for it.
Yea I mostly learned web dev so far but wanted to get into IoT stuff so I might find something cool to do in there.
> biodiversity is collapsing

This is not the conclusion of the book Not the End of the World by Hannah Richie. As with many things, things are not so simple/binary.
It may make sense to run an hourly or daily job to collect data from the API and then implement the filters exclusively within your back-end. This pattern can work well with rate-limited APIs and a dataset that changes fairly slowly. There's some risk that an item shown will already be sold (user would click back and try another).

Also, I don't think I see any affiliate links in use. I believe eBay runs a program, so you could make some money here: https://partnernetwork.ebay.com/solutions/creating-affiliate...
Given how things look in, say, the Node.js ecosystem, a large complex monolith has its attractions - chiefly that it doesn't fall apart at you, because it wasn't cobbled together with duck tape.

It also has the benefit that it's a stable solution that has been around for decades, and will likely be around for just as long. Meaning that you won't have to constantly rewrite and update things to keep up with whatever the developers of your favorite framework decided is the Right Way to do things this year.
Now we have React, React DOM and jQuery in WordPress.
After coming back CES, I gave a talk at a local Rotary Club on AI. It is geared towards business people (not engineers or tech ppl).
Overflow is perfectly well defined in most languages. What could it be other than a signal?
Interesting. What mechanism does Zig use to hook up function argument dynamically depending on what is declared in the function (or am I reading that wrong)? Not sure I've ever seen something quite like it.
That's pretty much Europe. Drastically different mindsets from London to Istanbul and Oslo to Barcelona. Sometimes I'm surprised how EU(though a smaller subset of Europe) even manages to agree on anything.
I wanna watch this movie
I am curious why you said blog/youtube channel. Do you think that will help me build same kind of network?
Since we're on the subject, also be careful of Philips CPAP machines, they will slowly spray disintegrating cancer-causing foam into your lungs as you sleep.

Great company though, it's not like they had the choice to not buy out one of the best CPAP manufacturers and then skimp out on materials until they hit the cancer recall margin of diminishing returns (and then hide it for as long as possible).
That would make taking/receiving mass data from them more unconstitutional than just buying it.
I rarely hear any of those phrases from a teacher, fwiw
...but but but they are ISO certified!!!

The only thing that TPM prevents from reading your hard drive is jealous coworkers. Everyone else just steals your laptop and gets access anyways.

Even the BIOS passwords are utterly useless because you can google the master passwords based on Laptop and model number these days. And if you can't, just flash a BIOS without a password on the memory chip via a 5$ ch341 adapter.

As long as all hardware has backdoors for everything and nothing relies on real cryptography, there is no point in assuming it is secure.

Embedded TPMs are the exception, for now, until one finds the next backdoor of broken undocumented CPU instructions. TPM was claimed to be secure so often in the past, at this point you must assume that every implementation is broken by default.
Presumably in the sense of setting ground rules - "don't use it for school assignments". No different from saying "you're supposed to do the homework yourself, not pay somebody else to do it for you".
Who decides who are the "laymen", and who are the privileged cognoscenti who get to shield the "laymen" from incorrect thought? And how do I opt out if I'd rather not be shielded?
It'll be interesting to see how kids will respond to AI hallucinations. Will they just accept it as fact?
Lots of people enjoy harmful addictions. Not saying this one is, but sometimes it can be helpful to be reminded to consider your goals.

I’ve had plenty of projects change scope once someone has told me “why don’t you just do X?”
For example when you are using partially populated record to update the database. If field is null intentionally it means it should be updated to it. If it's not set the update statement should not touch it.
when a child makes up things that it knows not to be real there is no intent to deceive either. the child lacks the capacity to understand the difference. yet we will tell the child that it is lying.

just like a child, chatgpt can not tell the difference between reality and fiction.

chatgpt lies because it presents fiction as fact. there is no intent to deceive necessary.
"Indie filmmaker" is not going to be on Disney+ or AppleTV. If they get there, they are not "indie" anymore, by definition, they are corporate employees of a trillion-dollar corporation, and their income depends 100% on how they negotiated with the corporation and 0% on whether or not I watch that movie via AppleTV or via torrent. I have AppleTV subscription anyway (through one of the free offers) and I still may prefer to watch it via torrent because it's more convenient. So don't push that BS about robbing poor indie filmmakers. That's not what happening. What's happening is trillion-dollar corps dividing the market and trying to extract every single possible dollar of value from the clients.

> The guy is literally pirating shit,

No, he is literally not pirating anything, unless he's in Somalia and attacking a cargo ship right now. And yes, he has the full right to call the parties who produced the situation where torrenting is the most convenient way to consume content an asshole - because they are assholes. I remember the time where doing that was not necessary - to the point that I almost forgot how to do it at all - but then the assholes came and now you have to pay for 15 different services, with crappy apps and unskippable ads, so yes, it's assholery. And it has nothing to do with indie anything.
yeah, and that's the way it would appear to a motionless observer. Buy not how it would appear to you. Remember, once you have achieved .99c velocity, no longer accelerating, you are standing still. From your perspective, any new acceleration at a 90deg angle should begin accumulating light from that direction.
At a minimum, we must abolish the right to work at a federal level.
Sounds so terrible, doesn't it?
Pooper is against the right to work.
Pooper wants to take away jobs.
No, we can't have that because of politics.
And thus, we are stuck.
What’s the “Java generation”, and why is premature optimization strictly preferred over sacrificing performance over correctness?

x86 offers hardware traps for integer division by zero while PowerPC returns zero – does that make x86 more wasteful/a “Java generation CPU”? What about CPUs that support native wrap trapping?
Research isn't my goal. Within AI/ML there is a big spectrum of responsibilities and research only represents a subset (although a very important subset). I think a lot can be done if you know how to fine-tune models, evaluate them and architect a production system.
> keeping the scientific credibility of peer reviewed publications intact

What credibility? https://www.experimental-history.com/p/the-rise-and-fall-of-...
It's often confidently wrong, but it's still a useful tool.

I spent 5 minutes searching Google for what an email error code meant, it kept showing me threads on Microsoft's forums that never gave me a clear answer. Took about 10 seconds to get the correct answer on ChatGPT.

If you treat it like it's a bumbling assistant that has remarkably encyclopedic knowledge, it's a very helpful tool. If you treat it like it's truly intelligent and let it do your thinking for you, then you're going to have some problems.
I think the idea is that overflowing would be a guaranteed trap of some kind, i.e. defined behavior.
From the linked discussion:

> @jrose @fclc People who want NaN in their integers are welcome to do that in the privacy of their own bedrooms with new types they invent for this purpose.

That reminds me of OCaml's 63 bit integers. In the privacy of OCaml's own bedroom, they use one bit of their integers as a flag to distinguish pointers from integers.

See https://blog.janestreet.com/what-is-gained-and-lost-with-63-...

The results are quite.. interesting. However, it does go to show that having slightly weird private integer types is actually totally workable, so the quote from the discussion might be meant as trolling, but it's less crazy than it sounds like.
The "why" on the website is almost exactly why Ghost blog was started.
Adults accept all manner of weird claims generated by humans on Facebook, television or in their mailbox as fact, especially if said confidently and authoritiatively. So while I expect many kids to also accept hallucinations as fact, I am not sure that is a much different world.
This is a myth. I ran 150k AMD gpus. We overclocked/undervolted all of them. While they were run continuously "hard", they didn't fail. Some of them ran for years out in containers in the middle of dusty fields through 4 seasons. They don't burn out the way that people think they might.

That said, a lot of the GPUs used for crypto, don't apply to AI, unless you really want to be constrained. Just be super aware of what you're buying and what you plan to use it for.
Yes, but obtuse is probably not the right word.
You don't have to introduce more undefined behaviour. A trap could be very defined behaviour.
"embedded TPMs" are not commonplace. Intel has been pushing this hardest, and Intel still includes the TPM on the motherboard chipset and not the CPU itself in all consumer models, as of the 13th gen, at least.
I haven’t used jquery in 10 years or so, but I’m pretty sure this isn’t what you would do. You would just hide or unhide the inputs with jquery.
> Maybe... but you need to keep in mind most of these people are not really building a bubble.

No, I'd don't need to keep anything of the sort in mind. I've lived through multiple real-estate and speculation bubbles and crashes now. The arguments you make are the same sort heard before each one, and I can easily anticipate the rationales and excuses that will be offered after the next one.

You don't know how widespread this is. You don't know how many other banks are leaning on this latest house of cards, or how much of this is going on in the US and Europe as well. As far as the banks are concerned it's just one big world of suckers and they play these games everywhere, simultaneously.

And there is no "should." Capital controls will tighten. Wars will happen. Eventually, inevitably, the overhang destabilizes and this heinous crap will blow up.

Again.
Wow.

Yeah, that’s not what happened.

I previously worked in music first at CMJ, UrbMag then Fader before working with a few indie and major labels on the digital side.

Don’t try to rewrite history to make this a political or “wokeness” thing because of the view of ONE of the many contributors to Pitchfork.

What happened to Pitchfork was pure economics.

Pitchfork got old just like the article said.

After indie, they attempted to pivot and become more accepting of “young hip-hop” and world music (latin, Afro beat) that younger audiences listened to in the way that Fader did.

This worked for awhile.

Until…

1. Old Millenials and GenXers aged out

2. Music discovery moved to TikTok and the streaming platforms themselves.

The bottom line is that young people could careless what a bunch of gatekeeping olds think is the “right music” anyhow.
> admitting that something is complicated is different from saying it is not the case.

I agree. I do think "too many people take convenient science metaphors as literal" is a valid concern, especially when it comes to pedagogy, but the situation is not so bad that everyone is wrong about everything. No scientist goes around thinking molecules are made of little colored plastic balls.
This is really weird; it's not even obvious how to spend so much time in this code. By any chance, have you tried profiling? Just really curious.
> It may make sense to run an hourly or daily job to collect data from the API and then implement the filters exclusively within your back-end.

Absolutely! I thought I could get away with just in-memory caching for the MVP but it looks like I can't.
Though surely you'd agree that just because some predicted consequence of an effect at one order of magnitude fails to occur (or occurs at an acceptable level), doesn't mean said effect is therefore irrelevant at any scale. The advent of radio led to a number of predictions about negative social consequences. Similar concerns were expressed over television, and then again over social media. We could debate whatever negative consequences radio and TV had, but the exceptionally negative consequence of social media are indisputable at this point.

So too here, one could argue the positive/negative impacts of things like the calculator on our mental capabilities, but chatbots are taking this automation of mental processes up an order of a magnitude both in terms of the breadth of things that can be "input", and the variable quality of what is output.

The unfortunate thing is really the only way to test this is to basically do what we did with social media - just let a generation have at it, and see what happens.
I remember we were running 500 solaris zones and 5000 vmware VMs over 2 datacenters with 0 major outages over 4 years. I remember a (single) VM crashing and it was a really big deal (turned out it was a config issue, in retrospect a funny one although our (internal) client lost some data). And I remember we were in "crisis mode" for a couple weeks because of SAN storage issues but there was no client interruption of more than 1 minute over those 2 weeks. One of our client was running our app in a cross-datacenter cluster on bare metal with no interruption for over 20 years.

I'm not advocating for any of those specific solutions and given the choice I would probably use something else, but when I see that my previous CTO wanted kube for single-VM deployments, and a former architect collegue wanted kube for apps that were going to be used by 3 to 5 clients maximum (and in both cases to be run by very small and untrained teams), I think the kool aid has been more than drunk, and I'm now avoiding it like the plague.
The way I see it, 20+ yrs experience in tech. A CS master's does not add to your tech career. The majority of tech employers are looking for your ability to do the job, not the degree. The advantage of getting a master's is that it gives you a set path to study what you want to learn. Doing it on your own is very hard.

It sounds like you want to change your specialty so it might be worth it for you but don't expect employers to hire you without actual work experience.

My advice is to look at many, many job descriptions for the type of job you would like to get and guide your studies given what you learn from them.
> You will have FFI interop issues: what if some foreign gives you such a value, which is correct in its domain. It will have to be specially handled and widened/promoted to a type that can hold it.

That's more or less what you have to do in Java if your FFI is passing you an unsigned type. You need to use a 64-bit signed long in Java to hold a uint32_t, and a BigInteger to hold a uint64_t.

I mean, you can certainly store that unsigned 32-bit int from the FFI call in a 32-bit signed Java int, but then you have to use special methods on the Integer class to do unsigned comparisons and arithmetic.

Agreed, this is a lot of friction, but there's long-standing precedent, at least.
Show HN: I made a local wrapper for Automatic 1111
I made an open-source Python library for the Stable Diffusion Web UI. It's a direct alternative to Huggingface Diffusers except it has more features + runs the same scripts as A1111 so the results are replicable. Please give it a star on Github! https://github.com/saketh12/Auto1111SDK
We do like our anthropomorphisation, and I prefer to say that ChatGPT and its pal likes to "bullshit". They're neither "trying" to tell the truth nor trying to lie - they trying to sound plausible, with a cheerful disregard of the value of truth.

I'm done anthopomorphising now.
Sure and journalctl even has `--output json` flag that I suppose would work here. But still I think native journal support would be just convenient, and would avoid needing this two layers of filtering (first journalctl and then logdy)
It seems like there is demand for simple search tools that focus on a single product. The big marketplaces don't have good search filters for most products and probably struggle to justify investing engineering effort. Paired with affiliate links, it looks like there's good money to be made building these. I like that these appear to be data-centric instead of review-centric; I don't trust random review websites.
Do the original Mac
> I have honestly no idea where all this traffic is coming from.

Aren't there HTTP request headers that tip this off?
To avoid having the nose on the way: you make the assembly small enough that you can have one per eye.

Curved lenses are not common now but there’s no theorerical reason they couldn’t exist.
It's not a faberge egg lmao
Well, that's the case for signed integers in C as well.

(But only on a technicality: because every program where that breaks is not technically C, and the compiler is allowed to assume this doesn't happen.)

I suspect the Lisps you talk about use arbitrary sized integers by default? Python also has that default. It's a good default. If you want to optimize for size and want an integer of limited size, like a 64 bits or so, you should explicitly specify.
GPS location, depth, exposure settings, focus distance could be incorporated into the signed data. Also if the image is high enough resolution you could pick out individual pixels/subpixels in the screen.
New Improve Team Code Quality in Unity and .NET Projects with Qodana
Calling all .NET and Unity developers! JetBrains Qodana, the code quality platform for teams, can help you create games that users love and code that your team can be proud of. You can also use all the custom Unity-specific inspections that come with Rider as part of continuous integration!
TPM integrated/embedded to the CPU is the most common way of having one and they are not vulnerable to this exploit.
As long as you _know the right answer_, ChatGPT is a very useful tool

90% of the time I know the code I want to write. ChatGPT just writes it for me, when I read it I can confirm it is what I would have written, or fix it if not (or more likely: tell ChatGPT to fix it)

This means I don’t have to google for syntax, canonical ways of doing things, etc.

If you are asking ChatGPT for facts, triple check everything it tells you. Or better still, paste the Wikipedia entry to it first, then ask for the style or type of writing you are interested in about those facts
If you are interested in reading about JOINS in detail, ClickHouse has good blogs around it:

- https://clickhouse.com/blog/clickhouse-fully-supports-joins-...

- https://clickhouse.com/blog/clickhouse-fully-supports-joins-...

- https://clickhouse.com/blog/clickhouse-fully-supports-joins-...

- https://clickhouse.com/blog/clickhouse-fully-supports-joins-...

- https://clickhouse.com/blog/clickhouse-fully-supports-joins-...
> places won't hire you as a professor unless you have at least a Master's -- relevant work experience be damned

I believe this is largely to make sure that professors have plenty of experience of what it's like to be professored AT, at the relevant level. I've actually changed my own mind about whether that's a good argument or not (you can have fun guessing in which direction I've changed my mind), but anyway, having been a professor myself I'm pretty sure that's what they're thinking.
Adam is the type of guy that will never understand that WeWork succeeded as much as it did despite him, not because of him.

(Former WeWork employee and current shareholder)
Haha yes! I think even their website design is great, it reminds me of a purer form of the internet before cookie banners, popups and auto-playing ads.
> Continuing on is always better than crashing, at least in my context.

In that case, you can just detect a crash (eg with an external watchdog), and replace your process with one that runs fizzbuzz.

Fizzbuzz is wrong, but so would be continuing-no-matter-what-happened in general.
I don't know, I think a lot of final products don't come out that close to the blueprint to begin with, or don't stay that way for long once put to use.

It's how things are expected to be constructed, but expectations are not always realized.