skysight-inc/HackerNews huggingface dataset:
This would be done gladly. Open an issue at urllib3.future and a proper tracking will be made.

The internal resolver is recursive, so CNAME are automatically translated into addresses. What remain is the happy eyeball implementation, which is almost completed already. we wanted to wait for an harmonious feature (e.g. available across all 3 protocols)

but can be speeded up if really needed.
> Does anyone have context for why "best practice" would be to disclose before there's a fix available?

If it is already being exploited is one reason.

A fix may not be available, but if folks know there's an attack going on, they can make a more informed choice in still whether to allow the code to run: in some cases a loss of service would be better than a compromise.

If the code is externally-facing, then they bring it down; if it is internal-only, then it may be judged that the risk is low(er) and things to be continue to be run (and a maintenance window can be pre-planned for when the fix comes out).
Yes, but those investments are not coming from "VC funds". At least not ones marketing themselves as such.
> AI tools are already automating large parts of the software engineering role

Are they? I hear a lot of breathless claims about this but no-one I know is automating anything with AI. It's a useful suggestion engine/menial task helper, but anyone who's used it for more than a day knows its severe limitations.

Hell, i wish it was a lot more powerful. I have a bunch of bulma CSS to convert to tailwind. Both ChatGPT and Gemini Ultra fail miserably at what you'd think is a simple, by-the-numbers task, but nope, their results are so problematic it ends up taking more time to fix than just doing it yourself in the first place. They're useful "sparring partners", but that's about it...
Three Things We've Learned About Generative AI and Developer Productivity
Property rights. In theory you can use your nuke as much as you'd like. The problem in practice is that it is impossible to use a nuke without negatively affecting other people and /or their property. There's also the question of wether you're challenbging the state's monopoly on violence (i.e., national security) which will never apply to AI. Any AI, including futuristic super-AI's, can not be legitimately challenged with those same arguments. Because they, much like a hammer, are tools.

In conclusion, the nuke analogy is not a valid retort to the hammer analogy. And as a matter of fact, it fails to address the central point, much like your copmment accuses its parent comment of.
If you collected a list of things that companies at scale are doing in the generative AI developer productivity space, what would the intersection look like? We did this exercise at eBay, and it shows that the intersection does have a definite shape. It follows a tripartite approach — three parallel tracks complementing each other.
Two companies in the wind power top 10: Siemens of Germany, and Vestas of Denmark. As someone who worked for a while in Canadian wind power industry, the only other turbines I've seen deployed at scale here are the GE ones.
> LibraryBox is sadly no longer under development. A combination of hardware/firmware lockdown made the continuation of the project's goals untenable.

I've been worried for the last few years that this kind of lockdown is going to be the end of open source OSs for the masses.

Right now we have secure boot, and it's feasible but a pain to work around it to, say, install Ubuntu on a Dell XPS. But the next step after that is, "no, you can't disable secure boot. That would be insecure."
The common practice is to hold off disclosure until a patch is ready and has been tested, that way competent organizations will be able to jump on the problem and patch ASAP.

If you release a patch without disclosure there is a good chance many competent organizations will hold off applying it waiting for others to be the canary.

Releasing a patch and mentioning it fixes security issues while delaying vulnerability details is not much better - malicious actors with enough resources will figure out what has been changed and where the problem is. At the same time there will be a strong incentive to downplay the severity.
Spoken like someone who has never seen the waste, lack of reason, and counterproductive incentives of a highly regulated market such as healthcare and telecoms in the US.

Also, if you are not selling in the EU you would never start a high tech company in the EU. Whereas people travel across the world to found high tech companies in the US that are not even selling product in the US.
Since this is from 2022, I’m wondering how “tabular foundation models” could change this. The incredible success of DL we see at the moment comes partially from foundation models learning on a lot of “semi-related” data an “understanding” of the behavior. Something similar has been explored in tabular data as well iirc.

So I would be curious to see latest DL results.
On the other hand it is also the case that in most cases where DL based on foundation models is used, specific heavily tuned models outperform the generalistic models. And for tabular data there is a lot of experience how to make it great with tree based models.
Even the Daily Telegraph is having second thoughts about Brexit:

https://www.telegraph.co.uk/business/2024/02/28/uk-eu-are-be...
> I'm somewhat puzzled

Because you find it fine to say that "people dramatically overestimate the correctness of their [C/C++] code", but not fine to say that "people tend to depend on too many third-parties that they never question"?
Ah nice, thank you
Do you know what kind of strategies it's seeing use in?
Had a friend who was employee number 15 at a startup that was acquired for a large amount. Net result was that he earned approximately the same as a FAANG engineer over the same time period (7 years - total comp). He was able to parlay that startup build-to-acquisition experience into better positions in startups after and seems relatively happy about it.
apt. But the universe is who will decide if there will be major ai breakthrough in the near future, regardless of human antics. I mean it might still happen.
Not a European, but an American lapsed Catholic. I mean... it's pretty obvious that religion is make-believe, right? I'd love to believe it, but I've never seen one iota of evidence for beliefs of the church. Basically there was no reason to keep going once I realized that, other than to make my parents happy.
Millions Are Trapped in Modern-Day Slavery at Brick Kilns (2023) [video]
I guess not everyone can be a genius (like you?)
>> On the other side you argue for no restrictions, typically until the day before birth.

>> The Democrat who sponsored the measure said it would allow abortions at any point in pregnancy up until the point of childbirth in certain cases.

The phrase "in certain cases" clearly implies that there are, in fact, restrictions, so you're just wrong to go on the example you've provided. Further, you've said this position is "typical" and yet you only provided one example that doesn't even appear to actually support your claim.
yep, it's great. One of my favourite things about HN.

I, for one, will lament these days when the AI overlords take over and we just ask AlexaSiriGPT to write all our code in the same breath as turning on the radio.
I have, and I didn't hear one of them complain when USB-C iPhones were released worldwide.
I mostly disagree on the analysis, because it starts from the premise that Apple will lose more by continuing with the current stance. IMHO, that's backwards: being a for-profit company, Apple (and to a lesser extent, Google) has been using every lever they get to stall for time and get a few more quarters of those sweet App Store profits. Whether it's a bad strategy to wait until the very last time to comply is still to be seen.

Still, a very interesting read I'll keep to the back of my mind.
>… then there’s no reason…

The reason is to avoid getting dragged by Rapid 7. If you don’t play by the generally accepted community standards for coordinated vulnerability disclosure, you can expect the researchers to point that out as loudly as possible.

It’s extortion, but the alternative is going back to companies ignoring security issues and not telling users about problems.
Ask HN: Why would I use private banking?
I was fortunate to recently sell my company for high 6 figures in cash. Several of my peers are trying to convince me to put it into a discretionary managed fund through a private banking service but I've shopped around and they want around 1% p.a. for custody and management. However I've always thought I can't beat the market and so the best long-term investment is a All-World passive index tracker with very low fees invested through an online brokerage.

I don't want to get involved in deals and private equity etc, I just want to invest the money and have it available for me in 20 years when I retire. Since the fees have such a significant impact on the performance long-term I'm wondering why would I go the private banking route, what am I missing?
Strictly speaking, those fat Cookie banners are unlawful under the regulation of the GDPR; the GDPR mandates that a site must not behave functionally different given consent or not, as long as the functionality is not related to a specific user.

Unfortunately there are only so many GDPR compliance officers around, and they have to focus on the bigger fish to fry.
> As a European I always have mixed feelings when this comes up. First things first, the European NATO members signed a contract to use 2% of GDP for defense and some are not doing that. Not right, they have to honor their agreements.

While its true that some countries do not honor the agreement, there is often some context missing here. The 2% agreement was made in 2006, shortly after that the financial crisis came. Priorities changed and because for most Europeans defense is actually seen as deterrence and not political influence - as you yourself posit, the 2% norm didn't seem particularly important given the economic collapse we were facing. Nobody believed there would be a war, surving the financial crisis was much more critical to us Europeans.

After Russia annexed part of Ukraine in 2014 however, there was a renewed commitment to the norm and spending did actually increase quite a bit - and is still increasing. The EU combined now does spend 2% of its GDP, some countries less and some countries more. Most countries who still do not meet the 2% do have a policy to increase their spending. Since 2014, there is not a single EU country which did not increase their defense budget (in terms of GDP). The only countries where the budget is decreased (again, in terms of GDP) are Turkey and the US.

> But for the rest the Americans seem to have their own motives to have a large army that goes beyond defense and then it feels a bit strange to hear that America has to pay for a big Army because the Europeans don't do it (except the Europeans really should stick to 2%). As the Europeans have less incentive/possibility to use their military for anything else but defense whereas the Americans do.

Excellent point.
Recommendation engines: search, feeds (tiktok / youtube shorts / etc), ads, netflix suggestions, doordash suggestions, etc etc. Also happens to be my specialty.
> A good example not having enough artillery ammunition.

US military doctrine doesn’t use much artillery anymore so why would it still spend a lot on artillery ammunition?

US uses maneuver warfare with air support and precision munitions. No one expected to provide a bunch of logistics support to a non-NATO ally that uses our Cold War enemy’s doctrine.
Amazing stuff. My three year old son was diagnosed four weeks ago so this really resonates with me.
> That's confirmation bias.

Did you actually read the article? Google literally is telling them to remove content that they don't want. This article is confirming bias.
If you like this and ever find yourself in the Madison, Wisconsin area, be sure to drop by the mustard museum in Mt Horeb (or wait, did it move to Middleton?).

It's this exactly in physical form + tastings. Honestly really cool, and the "Pupon U" T-shirts are appropriately silly (assuming they still do those anyway).

https://mustardmuseum.com/
if you have an degree, you have at least a few skills. to migrate to the us you have to get an visa or get an visa from an company that vouches for you. Since quotas apply for these kind of visas you will have trouble getting one, especially since many companies have an hiring freeze or lay of people to look good on paper.
That page is less discoverable. From the Shen homepage, I click on Learn and hope that they have a 15 minute intro? Vs I go to Learn X in Y Minutes, Crtl+F "shen", and I immediately get what I want.
What happens with these non-mandatory programmes is that a manufacturer can give the programme money to buy their standard equipment vehicle and then the programme will buy the appropriate car from a dealer. The vast majority of vehicles are purchased this way.

This way they can't manipulate the vehicles being tested. The easiest way for your new 4954 model to get excellent NCAP scores is to make the actual 4954's people can buy from a dealer all good enough for excellent NCAP scores, the NCAP will just buy one and test it and it should score well because it's a 4954.
> The cost per byte created is basically zero

Running the data centres has massive costs in terms of the energy required.
So I think rust is maybe not the right hammer, but the first part is definitely wrong.

I'm not sure where your data comes from, but memory safety issues are roughly 50% of all exploitable security vulnerabilities.

They were also about 50% of all crashes of android apps (null pointer exceptions)
My 7th grade science teacher (hi Mrs. Ericson!) had us make tetratetraflexagons in 1998 and I thought, literally until today, that she had made up that word. She also has us make science-themed dodecahedrons so I guess I should have been clued into the fact that she secretly loved geometry / topology.
to what end?
Did Douglas Adams travel in time.... this is scarily accurate!!! My BMW keeps turning off the volume if I wave at anything in the direction of the touchscreen. There is a little infrared camera near the roof that can sense hand-gestures and turn volume up or down ... and lots of other things.

Douglas Adams so spot on I want to cry!
It’s not uncommon for security researchers to require coordinated disclosure (although often with longer timelines) even in paid engagements.
It's the trolley problem.

If you don't disclose the vulnerability, users are potentially open to attack because you didn't tell them about a vulnerability that you knew about. If you do disclose the vulnerability, you potentially alert attackers to take advantage of a vulnerability in the short time before users can address it.

From the perspective of someone discovering a vulnerability, disclosing it is the more ethical thing to do because users should know that they are vulnerable and have the opportunity to prevent harm to themselves, even if it means making a service unavailable or degraded for a short period. If you tell them about it and they are attacked, that's on them. If you don't tell them and they are attacked, that's kind of on you.

I agree there's some grey area if there no known exploits, but a lot of times these vulnerabilities are found in response to an actual out-in-the-wild exploit.
Drakon – A visual language for specifications from the Russian space program
> I can imagine governments asking Cloudflare to add/remove topics they like/dislike.

This is already possible using the existing WAF so it sounds like you want to focus your efforts on the democratic processes which would prevent that from happening.
How’d that work out for you with the Brexit vote? Still placing your undivided faith in polls by people that benefit from presenting a particular ideology as being popular?
So according to that article, you're not allowed to use the word "ninja" at Google?

Is it because they assume Japanese people would find that offensive or what?

Personally I find the overuse of the word "Ninja" in tech cringe, same as the use of the word "Rockstar". But just because something is cringe, doesn't mean it's offensive.
> Uch. TRAINS. They’re a necessary evil in many of our lives. Horrible big tin cans full of smelly people that never turn up on time and make you late for everything. The less time spent on them the better. At least for most of us in the UK, anyway.

Wow, is this the common attitude about trains in the UK? how dour
The tech background is likely IT and not AI. They used ChatGPT and they thought it’s conscious
They need to attack Exxon, instead of Tesla.

https://thehill.com/policy/energy-environment/4494543-exxon-...

Elon is a turd, but at least he's not pushing fossil fuels or "clean burning coal".
There seems to be differentiable tree models now that perfor somewhat better than e.g. XGBoost https://github.com/Evovest/MLBenchmarks.jl?tab=readme-ov-fil...
>Standardization is something that is happening in all global markets, not just in the EU, and that's how we have resorted to using the same standards with everyone in the world (including on the internet), not just with europe. The USB-C became a global standard because it dominated in the free market , before the EU standardized it.

That's missing out some crucial parts of the history of this standardisation effort.

Before the EU mandated USB-C, they basically told the industry "choose a standard or we'll impose one on you". The industry (mostly) went for micro-USB as a result, and then moved over to USB-C.

The EU then saw that there were still some notable outliers (e.g. Apple) and decided to follow through with its threat of imposing a standard connector to force these stragglers in to line with the rest. The point was to have a standard, not necessarily to push any one standard that the EU most preferred.
Wood-Bodied Automobile (Woodies)
This is about the vehicle. The Bulgarian company is welcome to acquire a French registered vehicle and let it drive in France for years - it might come with extra requirements around having a French subsidy.

As stated elsewhere: This is politics and does not really change the fundamentals. Change take time. When countries in the EU gets more assimilated, more and more of these restrictions will be lifted.

You ought to see the trajectory and direction more than the absolute position of the legislation.
If the answer was to wipe out humans, then it would be a pretty dumb solution no?
> Are they? I hear a lot of breathless claims about this but no-one I know is automating anything with AI.

It's also impossible to take those aforementioned breathless claims at face value with the absolutely absurd hype around AI. I'm not even arguing good or bad here, I'm just saying no one will shut up about this.

And it's still not AI, it's machine learning. Nothing wrong with that but when a product's name itself is already bullshit...
Completely agree here. I use it daily both ChatGPT Plus and CoPilot, it’s great as a slightly better google to fire off queries to while I investigate something else. But it does sometimes fail miserably and I wish it was better.
I thought this was to shield sites from illegal scraping for ML...
I understand better now -- and I was focusing on the AI aspect because it's an interest. But I get the value prop and thanks for taking the time to explain :)
there https://github.com/jawah/urllib3.future/issues
An idle thought: there are special purpose models whose job is to classify and rate potentially harmful content[0]. Can this be used to create an eigenvector of each kind of harm, such that an LLM could be directly trained to not output that? And perhaps work backwards from assuming the model did output this kind of content, to ask what kind of input would trigger that kind of output?

(I've not had time to go back and read all the details about the RLFH setup, only other people's summaries, so this may well be what OpenAI already does).

[0] https://platform.openai.com/docs/api-reference/moderations
I made a tetratetraflexagon for my wedding program. I ended up making a script to use ImageMagick to convert four images into two images suitable for printing on both sides of an 8.5"x11" sheet of paper. The scripts, example images, and instructions are here:

https://www.timpark.org/making-a-tetratetraflexagon/
That's a neat name! If "seeding" is the word for distribution in a peer-to-peer network, then a "radicle" (not a "radical"!) must be named after:

- "In botany, the radicle is the first part of a seedling (a growing plant embryo) to emerge from the seed during the process of germination.[1]"

https://en.wikipedia.org/wiki/Radicle
There's a lot of hardware out there that is available though isn't there?

Arduinos, Raspberry Pi ?

Maybe not ideal for this situation, but still available, with lots of handy extra hardware rather than relying on repurposing some other hardware not at all meant to be used in this way.
Several years after their last funding rounds, so the amortized yearly returns would be well below market. Most of the general partners at the VC funds involved likely "lost" money (it'd have dragged down their carry), while the limited partners would have seen below-market returns...
What do you mean by

> The ones I listed have classical C and C++ like value types available to them

I don't really know what that means or how it's related to the discussion of lifetimes.
Yeah. The amount of compute required is pretty high. I wonder, is there enough distributed compute available to bootstrap a truly open model through a system like seti@home or folding@home?
> But the single market is what it’s for. Without it, the EU would cease to exist. To understand what motivates EU, as an organisation, you need to understand the single market.

> Whenever I point out on social media that the single market is the purpose of the EU, I get bombarded by replies saying: “No you’re wrong. The EU was founded to preserve peace in Europe. Gotcha!

I think the author is right here, and that this misapprehension is way too common.

The EU was a way for a bunch of colonizing countries to get rid of their colonies and still keep their level of wealth. Call it "peace" but that all comes back to having enough economic productivity that had previously come from their colonial wealth extraction.

I think that to the extent that the EY does not understand that it's there for economic productivity, the more that the EU will fall further behind the US on productivity and wealth of the populace.
Show HN: Gram Jam – A daily word puzzle with a twist
Gram Jam is a spatial word game where the goal is to efficiently utilize your limited tile swaps to make words. Since initial launch, I've added a second mode. There is now the classic: an endless arcade style where you're going for high points, and the daily: where you have a fixed number of swaps and you have to clear 36 tiles.

I've been developing Gram Jam for the last two years with the goal of creating a more challenging word game while learning interactive web design. This week I launched the user account feature which allows user data backup and account sync. I have also spent a _ton_ of time tweaking all the animations and UI flourishes, so I hope you enjoy it!
does 'season' mean '3 months' or 'year'

i'm not from the uk
So, you are telling me that you live two seperate and secret lives to hide the fact you own illegal dogs?

In all seriousness so, for all the effort and data companies like facebook have, the product, targeted ads, is just bad. And sometimes hilariously so.
I actually want the opposite: protection on my sites from being scraped for AI training purposes. Though I feel like this is a lost battle already.

Edit: looks like I'm not the only one, hello privacy-minded folk! waves