skysight-inc/HackerNews huggingface dataset:
>> the hard part is contextualizing it in a way it is immediately useful. That depends on understanding the company/domain lingo, understanding users, etc.

How do you control this deterministically? It sounds like the "hard part" is variation in prompting & selectively choosing the right data to include, both of which I could see being good enough right now but hard to deliver definitively.
https://www.space.com/air-pollution-reentering-space-junk-de... immediately made me think of where all burn up space ‘junk’ goes.

> Sensitive sensors in the nosecones of the planes analyzed the chemical compounds diluted in the thin, pristine stratospheric air, which is out of reach of Earth-based air pollution sources. The researchers found traces of lithium, aluminum, copper and lead in the sampled air. The detected concentrations of these compounds were much higher than what could be caused by natural sources, such as the evaporation of cosmic dust and meteorites upon their encounter with the atmosphere. In fact, the concentrations of these pollutants reflected the ratio of chemical compounds present in alloys used in satellite manufacturing, the researchers said in a statement.
Having mentioned boycotts, I'm fairly sure I learned both on the same day. Did we both read the same hackernews link a few years ago?
30 days is way too short.
In my experience, people either realise that they accidentally deleted a file immediately or after 3+ months. The day 2-90 period is rarely where a file needs to be recovered from.
Ground News: Breaking News Headlines and Media Bias
Fake Developer Jobs Laced with Malware
A core part of the problem of UB in C and C++, is that it is gratuitously over applied.

Mercifully the article calls out the BS argument of "old hardware" justifying UB. It is simply a false argument. The overwhelming majority of UB in C and C++ should be either implementation defined or unspecified behaviour. Security vulnerabilities due to overflow or null dereferences being UB should never have been possible because there are no platforms in which those operations are not defined (some trap, some wrap, some go to infinity), but that is all under the banner of implementation defined behavior. Labelling these things as UB is _solely_ to allow performance optimizations in narrow cases, at the cost of safety in all cases.

In committee meetings I've been in recently the new refrain I'm hearing/reading that has replaced "we need to support various hardware" is an even more stupid argument: if we make it so that these aren't UB then people will rely on the common behavior and write code that is incorrect on platforms that behave differently. e.g. instead of software that is always wrong on one platform, you make software that is semi-randomly wrong on all platforms (because whether or not a compiler removes UB in one case is dependent on compiler version, flags, inlining, etc and if any of those change then suddenly the same code you had yesterday has a security bug when shipped).
Thank you for taking the time to type that up. My frustrations are similar.
The post clearly says ISP provided.

So sure you have that, but you're doing the train thing. They weren't talking about that class of device.
Wikipedia doesn't agree with you:

She holds a World Series of Poker (WSOP) gold bracelet from 2004 and used to be the leading money winner among women in WSOP history, and is still in the top five as of April 2023, despite being retired from poker, last cashing at a tournament 2010.

https://en.m.wikipedia.org/wiki/Annie_Duke

So yeah, top enough to use her professional experience as context for her books. Once you read the books you'd understand.
I genuinely thought it meant The Fucking Article until now (like RTFM)
typical online alpha, you posted that challenge with full confidence didn't you?

lets see what ftc.gov has to say about it

https://www.consumerfinance.gov/ask-cfpb/how-do-i-get-my-mon...

oh what's that, there are federal protections surrounding debit cards?

imagine going into this conversation actually knowing what you're talking about.

/inb4 "I did some quick googling, let me explain how I'm going to try and change my argument to save face"
Well it's a nuanced answer. The United States has freedom of Religion, and a large separation of Church and State. It leads to some bad but theoretically some good.

> If a person would hide a list of thousands of child molesters or would endorse killing children by giving fake medical advice to their parents, they would be put straight to jail.

Unfortunately any progress our country has made in this regard has been utterly regressed in the last 5 or so years....

But to better understand the other side of this as far as religion, consider the Catholic sacrament of Confession. A priest is not supposed to divulge confessions to anyone.

Then, let's consider the danger on the other side. Historically, Governments swooping in and grabbing lists of church members, what happened next was not looked well upon.

And so the US has this sometimes almost horrifying level of separation of church and state, where people do have the freedom to worship, however other benefits are abused [0][1] and we even have let folks that infiltrated three letter organizations keep their church status [2]

[0] - I still remember the baptist sermon of "I am not telling you how to vote! I am not telling you how to vote. But the bible says X will go to heaven and Candidate Y does not X"

[1] - Churches do not have nearly the same level of oversight as a normal nonprofit

[2] - "Operation Snow White"
My point (in relation to the top the of the thread I responded to) is that there are other things beyond the name that are more important/relevant when evaluating why the product wasn't successful.

If Scuttlebutt had an amazing feature that had a viral component to attract people, was easy to use and had no roadblocks for distribution, it would likely succeed, regardless of the name (like github).

But it's not. Scuttlebutt is a complex system, requires users to understand concepts like public keys and distributed systems, content discovery literally involves chasing other people around the internet to spread the gossip to you, the client was primitive, the development team had a size of one, etc, etc, etc... Those factors are way more relevant to understand why it hasn't taken off. Even if Scuttlebutt had a perfectly "appropriate" name, it wouldn't matter.

To put it another way: "Glimpse" is a fork of GIMP, and the author forked only because of the name. How many people actually cared enough about it to switch? How many people left Photoshop and started using "Glimpse" because that was the tipping point? Or the inverse: look at the whole Twitter -> X "branding". How many people left Twitter because of the name change vs because of the other changes since Elon took over?
Its usually with simple things like code completion on logging, boiler plate, repetitive tasks etc. I am surprised sometimes how copilot knows what my next step is. I am typing in the start of an algorithm and copilot gives me the rest. And it predicts a lot of things correctly. It saves me tons of time. Another thing what i like is that I no longer need to no all the programming language related syntax. In the past I looked up stuff on stackoverflow. Now i simply type a short comment like "reverse the array...". Copilot automatically suggests the right syntaxes. Sometimes need some adjustments, but thats fine.
> More impressive still, was she would be able to learn new toy names through inference. I'd come home with a new toy turtle, hide all her toys, say "go get your Turtle!", and she'd come back with the new toy.

Is it possible that she already knew about turtles before, though?

In that case, she might just be running a rehearsed routine. You know, a shell script.
Whole series is in YouTube https://www.youtube.com/playlist?list=PLUA9kG1DciUwY2VSvIGk3...
Discover has always had the strange cash back thing. No need to find an ATM, just go into any grocery store, buy a soda or cigarettes, and have the cashier give you up to $100 cash or whatever the limit was. I wonder if anyone uses that service much anymore, but I can remember it being quite popular as an alternative to the dodgy and high-fee ATMs in the back of shitty bars back in the day.
I haven’t had issues with the annual credit report process personally. The system is shitty though.

Equifax will give you a copy off your real credit report once per month if you sign up with them which is better than the other two will do. The rub though is they try as hard as possible to make you think you have to pay for it and every time you sign in you have to decline to pay.

It’s so fucked up. If we’re going to have our lives controlled by credit agencies, then individuals should be able to access their real score at any time for no cost and no bullshit. What a fucking racket.
> The navigational issues started after Odysseus conducted a planned maneuver called lunar orbital insertion on Wednesday night, which put it in an elliptical orbit around the moon. That ended up being extremely “fortuitous,” Altemus said, because it led mission controllers to try to use a navigational subsystem called “laser rangefinders” far earlier than planned (the lasers were going to be activated for the first time during the final descent phase).

> After reviewing the data, the company realized the morning of landing that the lasers were not working — because they did not turn off a physical safety switch on the component while it was still on the ground.

And then they happened to have the NASA LIDAR package they could use as back up. And then the lander tipped over, but not on the side with the important equipment on it. Good lord they were lucky.
Rare or even legendary.
Web archive user's $14k BigQuery bill shock running queries on free dataset
My German shepherd is 9 and tho I don’t think she could learn 100 different toys, it’s fun to be like “blue ball” and “go get a toy… no not that one” etc. Beyond learning that stuff, this dogs emotional radar is incredible. When she was younger if I was watching sports and something stupid would happen she would immediately comfort me and climb in my lap. And as she’s gotten older I don’t even have to say anything. If I am quiet deep in thought about something that is upsetting me, she knows it. Just beyond a sweet heart dog.

Definitely seen articles about yawning in unison with dogs and that’s exactly me and her. She’s basically my shadow. I’m convinced she can hear my heart beat and listens to my breathing. It’s always funny to reach for the tv remote and she’s getting up because that’s become a cue. Dogs have a lot of those.
Microsoft catches the Wi-Fi 7 wave with Windows 11
JRuby Prism – A new parser for a new era
But tyfighter has some reason. People take such articles, and use them to beat up anyone writing C++, arguing that they are stupid to use such an undependable tool.

So, yes, people who know what they're doing can ignore such articles, as a first-order effect. But there are second-order effects from such articles, and while they don't change anything, they are rather unpleasant. Hence tyfighter's anger - he gets tired of being on the receiving end of the fallout from such articles.
YT too: S1 E1 https://www.youtube.com/watch?v=Y6BXaGEuqxo
Please name one FOSS project that has found its success after being renamed to something more "appropriate".
yep, they absolutely use propaganda’s to achieve a scarecrow effect. Remember all the info they fed journalists about bin Laden hiding in networks of underground caves? Then it turns out he is hiding at a family members house with all his relatives?
I'm not interested in many decentralized things. I have multiple chat apps from separate companies on my phone, that's my decentralization.
This seems palpably worse than just having Stable Diffusion (or Sora) kickout something that looks vaguely like you... like they steal your photo/video likeness and can use it to make you say whatever.
I made a comment in another post a few weeks about strategies to poison your apparent profile. Any strategies?
Proton 9 Beta Makes More Games Playable Under Steam Play, VKD3D-Proton and DXVK
Wine 9.3 Brings New Hid Pointer Driver and Better Internet Proxy Support
Even though you are joking he didn’t anticipate Gpus or ASICS at all. The paper says “one cpu one vote”.
One still has it on there, you can see the vertical lines at the very bottom of the image, not cropped out yet.
Ask HN: How to Stream HN to a TV in my office?
I love HN. We love HN.

Too few technical people get it.

I want to take over a TV in my office with a rich terminal of live HN posts and commentary.

How would you do it?
And EagleCam was not deployed at landing due to complications of the LIDAR software change, so instead of releasing EagleCam and not seeing the landing (due to the unexpected lateral movement), they can use the camera to confirm the status of the lander. So lucky.
You seem to be falling into this common trap of confusing "finding a human's body hiding offline in mountains of Pakistan" and "figuring out the name of a guy thinking he is shitposting anonymously on the internet" (and that if we assume that the "shitposting guy" was just that, and not some remarkable researcher with some very specific skill-set, and also not affiliated with any 3-letter agency in the first place — which is hell of an assumption as well).

(Also, doesn't matter, but just for the record, I don't recognize your assumption as "fair". It's not like a I deny it, it's just way too many assumptions for a discussion involving more unknowns than any real factual information at all.)
Overall I agree with you. But the people writing the C++ standard library have to care.
Yep, he was spot on. And crazy to think that they only spent 3 weeks designing it.
Because behavior does eventually get defined somewhere. Just because it's not defined in the C standard it does not mean you can't reason about it.
I skimmed the paper, but a lot of it was over my head. As someone not very versed in image generation AI, can anyone help me understand? This sentence (which another commenter highlighted) appears to be the key part:

> I-LoRA modulates key feature maps to extract intrinsic scene properties such as normals, depth, albedo, and shading, using the models' existing decoders without additional layers, revealing their deep understanding of scene intrinsics.

What exactly does "modulates key feature maps to extract intrinsic scene properties" mean? How were these scene property images generated if no additional decoding layers were added?
IMO, Leaked is probably the better word here. Equifax did not steal the data in the first place either, they recorded/copied it from other sources which leaked or sold it to them.
Sounds like the attacker is getting pretty smart about this stuff too. They have a self-hosted registry with the offending package so it can't get yanked from the actual npm registry

>The attackers now host the attack from mave-finance/next-assessment. The malicious dependency is json-mock-config-server which is not listed in the npm registry, but rather is served from npm.mave.finance as before, the registry listed in .npmrc.
Eliminating a statement by assuming UB will never happen is a compile-time condition.

I think the problem is more that it’s not as if there’s a single place in the compiler saying “aha! UB! let’s surprise the developer!”. It’s the effect of propagation through multiple optimization steps.
Hi! I'm a former compiler engineer who specialized on undefined behaviour.

Would you like warnings on:

* int f(int x, int y) { return x + y; }
* int get_x_coord(Point *p) { return p->x; }
* void compute_and_cache(const char *key) { *get_cache_bucket_for(key) = compute_value_for(key); }

I'm curious, what would you do with a warning on every load or store through a pointer?

On the flip side, I can offer -fsanitize=undefined which will catch when you do many things that have UB at runtime. It does not change the ABI which means that there are some bugs it can't catch, but deploying it is easier since you do not need to recompile all your libraries with it (like your C++ standard library and C library, in particular). You can use this to help you build unit tests that send intentionally overflowing values into your functions and show that they do not overflow. It turns untestable problem (since you cannot check for UB after it happens) into a problem you can write deterministic tests for.
> GPT-4 is already less than $1 / day and that’s only going to go down.

but only the Government has access to it uncensored.
I'd love to know if you and the parent poster bought these units from a real store or Amazon?
And too greedy. Why would he be doing this weird startups and marketing schemes if he already had all the money?
Right, but it’s not uncommon for a repo to be private with sensitive data that is identified and “removed” (using something like bfg or git-filter-branch) before being made public.

Naturally, if it’s a key or something else revocable those extra precautions should be taken regardless of using these tools, but that isn’t an option for some types of data and this implies that users have no systematic recourse.
It's possible to opt out of the TheWorkNumber [0] by postal mail. You might consider it. [1]

[0] https://employees.theworknumber.com/employee-data-freeze

[1] https://krebsonsecurity.com/2017/11/how-to-opt-out-of-equifa...
> Update their dependencies within two months of a critical security vulnerability being patched (Mar 10 to May 12).

They thought they did, but failed.

> In the event of a breach, detect it within a reasonable timeframe (76 days is not reasonable when you're the Fort Knox of financial information).

Impossible to guarantee. A sophisticated enough attack might never be detected, regardless of the competence of the security department.

> Have a reasonably well-segmented network such that a compromise in a single user-facing web app doesn't lead to your entire network being compromised.

It is impossible to so completely segment a network. If I can get the data via an authorized program, that means there's a path between networks and a hacker can potentially exploit that path.
Everything from the film quality to the camera work (including physically pointing at the screen with a finger) to the announcer's voice and cadence is so accurate for the era. The 4:3 screen also brought back fond memories of the time.
Palantir provides this by re-packaging and re-selling GPT-4, Claude, and Gemini
DVD's New Cousin Can Store More Than a Petabit
Yeah, no. Yes, in theory undefined behavior can destroy your entire program. In practice? Not so much.

I do not care about bogeymen that exist in theory. I don't even care about bogeymen that affect your code. I only care about bogeymen that actually affect my code.
yeah. RPC masquerading as REST is what people do now.

if your web service had a truly RESTful design then all you would need to do is point something like postman (or a browser) at it and it would be able to automagically figure out the whole set of available resources and interactions instead of having to use all this crazy swagger/OpenAPI stuff. there's a whole cottage industry around this api stuff rn.

i guess this is what happens when you put "programmers" in charge of a hypermedia system. everything becomes an RPC and nothing is standardised.

¯\_(ツ)_/¯
> I mean, that's kind of tautologically true, but doesn't really say anything?

It makes sense if you're more interested in engineering than money. Stop challenging yourself and you stop growing.
Git can potentially clean dangling commits `git gc --aggressive --prune=now` . Gitlab offers this as part of housekeeping. However, be aware: this garbage collection does not work if you e.g. reference a commit in an issue. (Like creating an incident that references the offending commit)
In the bit where he shows

void error(const char* msg);

int successor(int a) {
if (a + 1 < a) error("Integer overflow!");
return a + 1;
}

and says the if is compiled away at -O3, does any one know if it remains at any lower optimization level? I know some of the more aggressive optimizations intentionally ignore some checks, I don't know if that applies here. I found the -O3 odd for trying to help make his point, unless it doesn't work at -O2.
Spitballing here… it could have been a test to see how easy they could get a digital currency into common use. The idea of a digital currency offers the Fed a lot of advantages… no money laundering, traceability, etc. it could actually advance them if well executed, not threaten them.
Rename PDF files based on their content using GPT
Yikes this thread has so much anger in it
> implementing the Redis protocol would imply changing our architecture significantly and negatively affect performance

Yes, you’d be doing a fair and honest benchmark if you want to compare yourself to Redis.
> other sources which leaked or sold it to them.

Every data source (such as a bank or credit card) provides that data to CRAs because consumers granted permission to do so when entering into a business relationship. Either that, or it's publicly available data purchased from aggregators.
The seems like a perfect use case. Quickly find all the foot guns you didn’t know to look for.
I think there is something about the monkey brain in people that if you give them an item, they think they own it. It doesn't matter that it's just a loan or they are supposed to give it to someone else.. they think they can do whatever they want with it and anyone is lucky that they didn't mess with it. This seems to happen in the food service industry as well with the whole attitude of "be nice to us so we don't mess with your food!" The monkey brain can't help but think that it owns an item that it managed to grab.
That's why I think that we need a psychological trick to make humans in package management think differently about the packages. Maybe writing something like "Fedex FAMILY Owned" on each package could do the trick. Although when I worked in a shipping facility I think people were so busy that there wasn't much "thinking" either way possible. Still we will probably just go with robots though.
Yeah, that's what's broken
Houthi Attack on Ship Led to 'Environmental Disaster,' US Says
In Dune, the villain is arguably the emperor, and we only find out what will happen to him on the last page, the last page of a whirlwind chapter that concludes all sorts of things that were building up for the whole book. So I don't accept your assessment that Dune ends less abruptly than Snow Crash's.

I don't see how Shakespeare gets excused because he wrote stage plays, but Stephenson does not because he writes books. They're both fictions, with endings that could have been wrapped up with more ceremony.

No gotcha, I'm not even trying to persuade you of anything. I'm trying to point out that Stephenson's reputation on endings is largely undeserved, pretty much just a self-perpetuating myth, and that even if he does have a few abrupt endings he is not unique in this regard. I never hear anyone complain about Herbert's or Shakespeare's endings, which are demonstrably abrupt.
Yeah, the guy who renamed it to "Glimpse" is now worldwide famous for solving the only problem with the project. Designers are dropping Adobe Photoshop in droves and giving the project the complete recognition it rightfully deserved.
Name changes can be locked; I'm in an Enterprise Grid org and our display names/usernames are synced against our employee profile. We're also required to SSO every single time we launch the desktop app so once you're terminated you're definitely not getting back in (they deactivate accounts very quickly too, so mobile is likely not a major concern).

Basically the only thing you can change without filing a ticket is your picture and some mostly-irrelevant freetext fields.
> This is very much what I want the human to define and the code should fit within the guardrails set by the tests.

Most systems are pretty predictable. it("displays the user's name") isn't very novel, and is probably pretty easy for a LLM to generate.