skysight-inc/HackerNews huggingface dataset:
Also Azure AD and Entra ID and other parts of Microsoft 365 all use onmicrosoft.com, too. A fun bonus to that particular domain is the random meaningless to people GUID-derived tenant IDs in the second level. Knowing what is legitimate, and what is tied so a specific corporate tenant, seems impossible. Certainly helps Microsoft themselves avoid XSS problems, I'm sure, but greatly adds to the confusion of what is a legitimate M365 URL.
What? Someone somewhere tried to do something and wasn't the most optimal possible solution? We should just ban their account honestly.

Comments like these are antithetical to a strong technical sharing community.
Once my 2nd-line boss complained to me that he had no idea what I was working on and why it seemed like nothing was getting done.

I told him that every morning there is a stand-up meeting, which he attended, where his whole organization spends a collective man-day of work, while each of us give 5 to 10 minute updates on what we are working on, the obstacles we are facing, and what would need to be done to enable us to finish our tasks.

What more could we be doing to inform him of what we were working on and what could be done to speed things up?

Well, the daily meetings stopped, but I'm sure nobody will be surprised that the bastard fired me a few weeks later anyways.
I call it "the chimney."
Sure. An example is classification. Take suppose a company that provides a platform for other companies but only if their businesses are supportable under a variety of regimes, such as industry (no cannabis say), sanctions and export controls, etc. Typically this is done by training up an army of people that poorly review websites and collateral by hand and make some determinations with a very low precision and recall, and a very high expense profile including training, benefits, HR, etc, with high attrition. Building these operations is complex, time consuming, and often fails to produce meaningfully useful results for years.

With LLM at GPT4 level ability and a modest investment in scraping, context, building an agent based tool you can automate the entire thing with a pretty high precision and recall (such as a 0.9 precision with a 0.8 recall, vs 0.4 / 0.5 for humans). Using classical NLP, schema matching, and classification techniques you could triage and improve human performance by as much as 20%. But that requires a lot of effort and provides important but modest improvements. The LLM approach however is almost effortless from an engineering effort (note all of the infrastructure is the same as the NLP/schema matching/classification/etc effort).

This may not seem earth shatteringly important to you, but for an enterprise this is monumental. It dramatically reduces risk, complexity, cost, and all the while improves outcomes by an enormous amount.

Another example is incident management. Having LLM agents monitoring incidents on slack as reduced our MTRR dramatically. They provide summaries for new joiners, broad cast management updates, etc, and take care of all the glue out response teams typically did but with a high degree of quality, low degree of variability, and extremely low latencies compared to humans.

Another example is policy management. Many enterprises are saddled with thousands of pages of external requirements from regulators, and those in turn create tens of thousands of pages of policy, and hundreds of thousands of LoC of control implementations. By indexing them into a Context+RAG LLM you can create a policy oracle, allowing you to create coverage and effectiveness testing, analyze for policy or control gaps, draft responses to auditors and regulators with total policy knowledge, answer legals questions, advise management on the implications of a business driven exception, etc. The state of the art before was a search engine dumping phrase based matches into a grid of thousands of rows of results, which was effectively useless for all of these use cases.
Thumpertalk

Incredibly useful for DIY dirt bike repair, threads often have step by step instructions with photographs. Motorcycle people are generally very nice unlike some of the car forums I've used.
>I think you’d have to factor in Satoshi’s opsec measures though

Lying about trivial and mundane stuff is a wildly hard thing to maintain over any period of time and, for long-term opsec, more likely to cause issues than not.

Being "linux capable" or not is mundane and vague enough (as well as applicable to enough people) that there isn't really any gain in lying about it but it adds risk in the case that you slip up in your maintaining of that lie 10 years down the road.

There are much more effective ways to resist being identified, which are also easier to maintain long-term.
Yeah I'd love to see the results... If anything if there is a multimillion dollar benefit on the table one might argue that companies should publish this data in a more useful format. But no, let's bandaid over outdated practices like PDF-only data and burn GPU cycles to do it, with 92% accurate results.
> This is more restriction than necessary, and unkind to users who may be technically unsophisticated, distracted, sick that day, or just kinda dumb.

Couldn't disagree more. By sending outbound links in notifications we're only perpetuating the idea that it's OK to click those in the first place. It's hardly any more difficult to just open your browser yourself. I also don't like the idea that we're not willing to accept the absolute mildest of inconveniences, when on the flip side we have loads of stories of people's lives being completely ruined when their life savings are stolen by scammers. It'd be like telling people not to lock their doors because that adds 5 seconds to the time it takes to enter your house.
Even Tidal has questionable HiFi (https://youtu.be/pRjsu9-Vznc)
This conversation is about the meaning of specific terms, not about whether I care about real investment returns. Of course I care about real returns.
https://www.asus.com/motherboards-components/motherboards/tu... has "ASUS Multicore Enhancement" bios setting which defaulted to Auto which is documented as "This item allows you to maximize the overclocking performance optimized by ASUS core ratio settings."

They have now entered the AI bubble with

https://www.asus.com/microsite/motherboard/Intelligent-mothe...

MSI has a similar setting, although I don't know exactly what models have it nor what it's called
What is the strongest evidence AGAINST Sassaman?
All right. I try my best to keep my adverts as random as possible(if they appear at all), since somehow it feels like I'm being passively influenced by viewing the same sort of adverts suggesting I buy stuff repeatedly.

The way they're sticking ads on everything with or without tracking is pretty annoying. I hope they lose money with the tech they had to dev and install vs ad returns.
> Companies don't care about code that requires a CS degree, but they care about the author of that code having a CS degree, precisely because that makes him a replaceable cog

When I was a hiring manager, the reasons why I only looked at CVs with a degree in a relevant field (CS or EE) were two. First, because it gave me some confidence that this person knows all of the basics that are required for the job, whereas a self-taught person may be missing big parts of the picture -- after all, they don't know what they don't know. The second reason is because it suggested that the candidate was willing to remain focused on a multi-year project even when some parts of it weren't "fun".

I never saw anybody as a "replaceable cog". Even if they had the same degree, everybody is different, and each member brings different skills to the table. Your job as a hiring manager is finding whether a candidate will add significantly to the existing team or not.

> If you want to fire a CS graduate you can just hire another CS graduate

If it was that simple, we would simply issue an offer to every CS graduate we come across and would not bother interviewing them. Since this isn't at all how the industry works, it's clear that here's a good opportunity to re-evaluate your beliefs.
Approximating exhaustive search is not logic or causality.
While I agree that you should rotate accidentally exposed secrets, it should be noted that you can remove old history from git reflog by expiring it

I see git reflog kinda like an OS recycle bin
Python has some design mistakes (IMO):

1. No "var" or "let" keyword, which requires you to read code, particularly with loops, more carefully

2. No multi-line lambdas, which forces you to move snippets away from their usage and come up with a name for them

3. Emphasis on classes and annotations over free functions, which is partly due to (2) but also the lack of a pipe operator, like in R

4. Modifying arithmetic operators (*=, +=, ++, --, etc...). These try to do too much at once. Use more intermediate variables and parens; it's much clearer.

5. "with" statement is a decent idea, but it should be usable without increasing nesting
If you consider it like a textbook (very small niche audience for very specialized knowledge) it does kind of match up due to the small expected volume to sell.

Authors still gotta eat.
Kaupthing [1] was offering very attractive interest rates in 2007.

[1] https://en.wikipedia.org/wiki/Kaupthing_Bank
> Stress is good for canabis plant

That's why I said "too stressed". It's a fine line you want to straddle.
> "or maybe that it's very hard for hardware companies to do software as they try to pay their software guys like hardware guys."

Very interesting point.
The Walt Disney Company did exactly this when I was there, and everyone dreaded it. Did nothing but waste time.
I would never buy a cheap UPS. The one time I did so many years ago, it ended up catching fire. UPS fires are the most common cause of datacenter fires, and that's the "good" stuff. Adding a UPS is not a zero-risk action that has only upsides. You need to actually think about it.

At home, I have had a single rack w/ network and server gear for more than a decade and I always run two good quality UPS, that I run a test on annually, tied to two different circuits. My setup now is a bit annoying because I'm renting currently, but when I owned a home prior to my recent move I had an electrician run two 20A Dual Function (AFCI+GFCI) circuits with hospital grade outlets to power the two UPSes in the same room but on separate circuits and breakers at the panel. I don't think that's overkill, but I think anything more would be overkill at home. When I buy a house again, I intend to do the same.

Since buying better quality UPS and testing them regularly so I can replace batteries when needed I haven't had any fires, but using batteries past their useful lifespan can greatly increase risk of fire. Expect that you should replace the batteries every 3-5 years, and that they will cost nearly as much as the UPS itself. If you're not comfortable with that, invest in a quality surge protector instead and figure out how to deal with failures. UPS batteries are a big fire risk, so you need to understand it and work to contain it. Also, keep a good dry fire extinguisher near your rackmount equipment and get it tested annually.
> When I work there the whole time, and nobody ever gets stuck for 3 months, my value is unclear.

Well, a problem that hasn't happened yet is a risk, right? So you can apply risk assessment math to it:

Value = Estimated risk of the problem occurring * Cost if it happens
I think this is the first time I've seen someone say they outright hate git. Why?
this of course demonstrates the limit of LLMs. without some kind of temporal/spatial knobs, they'll overwrite similar but distinctly different datasets.
Whenever I am stuck with a photography problem I ask at

https://www.dpreview.com/

and usually people there get me unstuck very quickly and I learn a lot from other photogs. The exception is in stereography and light field photography where there aren't that many people who know about it and even those who do a little don't understand the fundamentals well. But for ordinary things like taking flower pictures and sports photography (my main thing these days) it amazing.
Bezos, Nvidia Join OpenAI in Funding Humanoid Robot Startup Figure AI
Recognizing the limitations of cloud drives
I get what Sam did was wrong -- but uh... doesn't it look like everyone is going to get a return on their investment? Like -- uh -- weren't there far worse players through all this than Sam at the end of the game? For example the SPAC borderline scams that lost investors billions?

Something smells really strange here...
Found the young'un :)

That's too attractive to malware peddlers. It's not particularly widespread currently, mainly because most of the content has been centralized into the same big silos... But what you're envisioning here is just going to get abused by abusers
Electrical tape. You see this with underwater gear, stuff like hose bundles down to commercial divers. The tape won't last long, nor is it very strong, but it will not damage the cable. You will have to inspect and replace it regularly but its various failure modes wont result in someone's air line being cut through due to vibration..
The "double space" for typewriters comes from style guides based on typesetting which was based on limitations of the type used in the ancient days.

There's much argument over whether it is proper or not, and if so, how much. See The Elements of Typographic Style or A Few Notes on Book Design - https://mirror.math.princeton.edu/pub/CTAN/info/memdesign/me...
> meta P.S. I’m refreshing this and reading the replies — what a rush! So much more rewarding than what I should be doing. :)

I always find a bit of humor in discussions such as these on social media.

Glad you acknowledge it.
I was forced to change UPS relatively recently (a few years ago) because the cheap but not bargain-basement PSU on my computer didn't work with the non-sine-wave output of my UPS. Call them poorly-made if you like, but either I got unlucky or they're fairly common.

Power supplies tend not to advertise their compatibility with non-sinewave power, but UPSes will certainly make it clear if they produce sinewave output. So the safe option is to get the UPS which gives the PSU what it's expecting.
How do you do that once it's on Github's servers?
On uses, see https://news.ycombinator.com/item?id=39481554#39482302 and on llama.cpp support - https://news.ycombinator.com/item?id=39481554

Gemma support has been added to llama.cpp, and we're more than happy to see people use it there.
Isn't Brave supposed to be a security first browser? I thought this was their whole thing? So why are they using a non-local LLM? Forget your thoughts on AI for a second, and just consider what has to be done for these tasks. If you ask it to summarize the page (like the example) it has so send the information elsewhere, off your computer. Same with the PDF. This really undermines security and creates an way that exposes all your data. Their paid service even uses Claude so not entirely controlled by them either if you fully trust them to E2EE that data and then not store it.

So according to Brave, using their AI leaks:

- your searches

- What you're viewing

- What you're typing

Did Brave just turn into the Chrome that it once so hated? I guess it is just orange chrome.
I'm no audiophile, but even when downloading the highest quality files and playing them locally Spotify is still noticeably worse quality than the default AAC files that Apple Music downloads for me on my purchased music. Spotify just sounds like there is no depth to any of the sound, where I can immediately feel the difference with Apple Music - especially with percussion heavy music.
> their problem of their training set being deeply flawed

The world is deeply flawed. If you do an unbiased search [0] of the real pictures of people in such-and-such profession, you get a vague approximation of the people actually in that profession. This does not approximate what Google or anyone else wants the demographic to be — it’s the demographic of people matching the query, times the expected number of times their photographs appeared in the training set, times whatever weight the model gives to those photographs. The naturally picks up whatever may be wrong with society that resulted in this distribution.

If people of X race/gender/whatever are underrepresented in profession Y, and you search for photos (or synthesize them by generative AI), do you want a sample drawn from the actual distribution of photos or from a distribution with the underrepresentation corrected? And what does correcting it mean?

[0] whatever that means — maybe just giving uniform weight to all the distinct pictures of decent quality that are on the Internet. The actual selection criteria won’t change the result too much.
I'm very positive I can actually understand the terminology used in discussing machine learning models if it was presented in a way that describes the first principles a little bit better, instead of diving directly into high level abstract equations and symbols.

I'd like a way to learn this stuff as a computer engineer, in the same spirit as "big scary math symbols are just for-loops"
Google Tests Killing the News
> My understanding is that sr.ht doesn't allow a user without an account to collaborate with a user that has one. So effectively _all_ developers must pay for the privilege to "work" on a project.

That is a misunderstanding: sr.ht only costs money if you host your projects there.

Since the official supported workflow is email-based, you don't even need a sr.ht account (paid or otherwise) to submit patches.
I wish I could do that, but then that would impact my "scoreboard" on the anti-phishing tool and they would yell at me or send me to remedial "training" too. They really like to see that useless button pressed that just patronizingly tells me "Yes, this was a training exercise".

At the moment in my current corporate email address this the number one source of spam, just all the internal phishing testing emails. It feels like the attempted cure is worse than the disease and I hate getting so much useless trash.
agree wholly. ADHD feels like a real monkey's paw of a condition. Huge benefits but the buts can be crippling.

I can do what most do with just 10% of my time or attention. But the remaining 90% balances it out in terms of my overall usefulness being just about average.

If I could scale that useful 10% even 5x, I'd be in some interesting places. but the more I try to fight the condition, the more futile it seems, like waging war upon yourself.

I'm in my mid-30s and I know no better about dealing with it than I did in my 20s.
Often (but not always) they fall less victim to the “loudness wars” compared to the same track mixed for stereo.
I called them and questioned them about this - they didn't even come down my street, and yet claimed that they "attempted delivery". The customer service person was honest enough to say there was no code for the driver to say "too busy, can't meet my unrealistic targets".
> Why is this on Hacker News?

Anything that is on HN is on HN because the community likes it
Worse yet… the game ai pro books are entirely free for digital copies. You’d basically be paying $120 for it to be stitched together into a single pdf, instead of one per chapter

http://www.gameaipro.com/
There's a world of difference between building networking equipment and GPUs though.

While Cisco was THE brand at the right moment, they didn't have any secret sauce.

Nvidia though (sadly), the industry has been playing catch-up with them forever.
Maybe, but I work on my own codebase and my collaborators work in theirs. Its analytical work and not software development though.
Martin Shkreli pulled off a similar feat, still went to jail for the fraud even though he made investors whole.

https://www.nytimes.com/2017/07/26/business/dealbook/martin-... | https://archive.today/gH2zT

https://en.wikipedia.org/wiki/Martin_Shkreli#Criminal_convic...
Faster Wordle Estimators
The product quality and experience differential between Spotify and literally every other competing music platform, is so unbelievably large that if Hi-Fi is the the straw that broke your subscription's back I tend to think "feels like that guy had other stuff going on" [1] (for example: you're just trying to stir up drama).

In a world where Apple Music, Tidal, and YouTube Music cost $10/month; Spotify could cost $30/mo before I would start questioning whether it is delivering enough of better experience to justify its higher cost. And, probably, $40/mo is the straw that breaks the subscription. That's how much better Spotify is.

I'll pay for Spotify Supremium whenever it drops. But, seriously, no one cares about Hi-Fi quality. I'm actually more interested in the bundled audiobook hours that have been rumored.

[1] https://getyarn.io/yarn-clip/f26113fb-c28b-4919-858b-f6e6600...
The Coming Tyranny of Air Purification
I would imagine security is one argument. There are plenty of people and groups out there who have lost large amounts of BTC and who would like to believe that satoshi has the power to restore them or otherwise manipulate the currency.
Installing Windows involves filling in about 6 inputs then waiting an hour. This results in a device that will happily chug along without user involvement for a decade. (Yes, it will have ads and automatically restart for updates, but frankly most users don't care. I do, and disabling ads and automatic updates took me 30m of digging, and it's been 6 years since I've seen a Windows dialog. I suppose I turned off the "featured articles on lock screen" flag when it was added a few years ago too.) My mother still uses her 10+ year old Surface without issue. She's a non-technical user who's daily drivers are Apple devices.

What value would Linux provide my mother?
Make it micro.

I want mini robots cleaning dust and debris, silently and out of my way. I don’t want macro bots getting in my way
It's interesting; I'd never say that about chefs or folks in the restaurant industry.

Plenty of other unhealthy habits in that line of work, don't get me wrong. But little association between the pleasures of food and making the food.
I don't think that's the right conclusion. Air Canada made a nonsensical argument in this case and lost, but that doesn't mean there aren't effective ones.
I guess a good dotcom isn't everything. Or maybe $category.com isn't a good dotcom, at least when $category has established competitors.
Why do you think they want his identity because he did something WRONG?
This is why you do an internet search instead of just looking at what the vendor says, and/or look at what the vendor actually ships for support. If you see something like a binary blob, run away. If you see stuff shipped upstream, go ahead.

As a counterpoint to your experience, I've had great luck buying laptops off of Canonical's approved hardware list.

As a corollary, I've had worse luck buying computers that come with Linux pre-installed, only to discover that the pre-installed distribution is very specifically and carefully configured and includes proprietary bits and it's impossible to install any other Linux on the device or upgrade it.
I see one space - https://web.archive.org/web/20140403012916/http://www.finney...

EDIT - really interesting, could very well be Hal, every sentence after a period ends with 2 spaces - view-source:https://web.archive.org/web/20140403012916/http://www.finney...
Oh this is interesting. Basically any "unproven" remedy or treatment can be called upon by any doctor, if they're willing to forego insurance and some legal protection.

I was under the impression that patients having to "wait" for approvals would be missing out. But in theory you could get a lot of experimental treatments if you're willing to take the risk?
but you're one of the meso guys, it would've been interesting to hear your opinions on what i said, outside the quible about dates. in my recollection vvvv leaned heavily into the aesthetic conventions around toplap at the time, and you must recall what i'm talking about judging by dates on your project page.