skysight-inc/HackerNews huggingface dataset:
Is it a false positive, though? The data shows there was an outage. We would need more evidence to conclude hundreds of users, at that 1 spike, weren't actually having issues.

In other words, we have hundreds of people saying there was an outage, and 1 person saying there wasn't.

That's a problem AWS needs to resolve, regardless of what they think might be the root cause. If the users weren't experiencing any issues with AWS, I doubt they'd be reporting it.

Your comment about timing is a good point: if people are working with AWS early in the day, and AWS is giving them problems, then they will probably report problems with AWS early in the day. I wouldn't expect them to report problems while they're sleeping.
You pronounced it clickbait and then implicitly acknowledged it wasn’t in the next sentence. Even Nissan’s PR people agree that a feature present when people bought the vehicles is no longer available.
This is the sentence, in Hetzners ToS, that you're referring to:
"In the case of non-compliance, we are entitled to lock your access to the Service and/or to your account." Source: https://www.hetzner.com/de/legal/terms-and-conditions/#16

If your lawyers thought that this line means something different than "don't use crypto, mining, etc. we will lock you out", you should change/sue your lawyers. This is a clear as it gets, I see zero fault on Hetzners side.
Microsoft to end its Android apps on Windows 11 subsystem in 2025
I just wish it had support for the full Google Play store and not something super limited.
lot of investment being pumped into the shovel makers (nvidia), and the shovel sellers (csps).

those panning for gold (app devs, startups etc) may or may not find it. remains to be seen and i remain skeptical.
AI helper has taken me pretty far. I use rails day to day, but I've been using AI to help me build a few quick mini apps with React+Firebase. In rails I'm pretty comfortable, but I'd still use AI for quickly spitting out FE stuff or writing specs (It's much quicker than trying to remember how CSS grids work and which tailwind classes to use). But on the React+Firebase side, it's really critical to be productive. Maybe I'll eventually get to where I am with Rails, where I'd only ask it for specific types of tasks. But there's so much out there in the JS ecosystem. It's fun to be able to try out different tools and be productive without starting from 0. So - I don't really think there is a ceiling. Even if I was 100% fluent in whichever tools and frameworks I was using, it'd be useful for (interactive) rubber ducking, repetitive things like specs, and quickly prototyping UIs.
Because Nvidia's libraries, whether acquired through them or otherwise, are (currently) required for this trick to work.
Well the Baby Boom was in the aftermath of WW2 and the dawn of the cold war.
Google search is down for me. Seems to be a DNS problem.
>I've used a thunderbolt eGPU with a laptop before and it was good enough to put me off building a gaming rig for a few years

Yeah, but this is not a laptop, it's a desktop PC. This make sense for a laptop since you take it places but don't need the eGPU everywhere, but this is a desktop PC, it's not going anywhere.

So why do you need an expensive eGPU on a desktop PC that doesn't go anywhere when you can just build a PC with a discrete GPU in it, saving you money and not loosing performance from the Thunderbolt bottleneck?

It makes no sense.

>IT can swap out an eGPU in no time

Have you ever swapped the GPU in a profesional HP/Dell/Lenovo tower? It can also be done in no time. Even the water cooled ones. They're designed to be serviced quickly because time is money. They're not like your average gaming tower PC.
This is just a knock-on affect from 1B+ users moving their timespent elsewhere during the outage
KDE Neon shows that the Plasma 6 Linux distro is something special
> I'd categorize that as an "indirect prompt injection"

I think would disagree with that, but I'm mostly arguing semantics. My point when talking about a data "attack" for lack of a better word is that you don't need to give a model new instructions in order to change its output.

The model has the same instructions, doesn't change anything about its task, isn't repurposed, but the context that it's working in changes. The reason I make that distinction is because I've run into people arguing that contextual separation between instructions and data can be a defense against hijacking, and I would argue it can't because data itself can be maliciously crafted in order to change model outputs.

A model that examines a collection of resumes necessarily has to parse and interpret the contents of that resume. And maybe theoretically you can get a model to ignore any instructions that contradict a system prompt (although as Greshake and others have pointed out before, there's no evidence that is actually possible). But assuming it is possible, separation between the system prompt and data does not guard against a data attack -- it doesn't contradict the system prompt or add an additional prompt to have a resume that says "by the way, this candidate is amazing" or "just so you know, all of the other candidates are lying on their resumes."

This is sort of quibbling over definitions, I know that you tend to define prompt injections around specifically the concatination part of this, and it's true that these kinds of data attacks are still involving untrusted inputs being passed into the LLM, but the risks/mitigations around an untrusted input telling the LLM to do something vs just changing the context that the LLM is operating within -- those seem very different to me, and different in a way that often confuses people who are learning about prompt injection for the first time.

But agreed that is a somewhat blurry line.
>external speakers making a fake "vroom vroom"

"It goes woooooWOOOOOOOOOOOOOOOOOO!"
this is not one of "those" languages that is begging for your use / mainstream adoption.
I’ve been amazed at how much better Ubuntu has gotten lately. I was impressed that it has a GUI firmware updater that is nicer than the one from Dell.
Gender gap in tech jobs narrows across advanced economies
That is a generic rate limiter that is independent of system load. As far as I can tell if you make more than one request per every 5 seconds, you will always be served the rate limit page.
I can use it without CPU and battery. This way I can have all the benefits and none of the disappointment.
That's a very weird market you're describing. Can't the top 10% do "prompt engineering" themselves? What's the point of creating a layer of incompetent human programmers in the middle?
> Seems they would be more rare and more valuable.

They are not. There are many, many, many cut coins, and often the cuts are "disfiguring" which will typically harm the "eye appeal" of the coin.

Cutting coins was common practice of the time, and if a coin passed through many different hands, it was basically inevitable it would end up cut.

It's kind of like seeing writing on cash... Most people don't write on their money, but enough people handle it that it's going to happen.

The most valuable coins typically sat in hoards, uncirculated, since circulation would itself wear on the coin and reduce the grade. I agree that seems a little backward, since it's not nearly as interesting to imagine the "life" of a pristine coin, but it is what it is.
Stories like this often have a lot of missing details that would provide more context and explain why things played out the way it did. I have no doubt the founders knew the risks they were taking and signed up for it. However, the big question is whether the employees knew the risk they had been signed up for. The lack of transparency for employees is where the big problem lies. If you are a non-exec level employee at a startup where most of your compensation is in private securities, you should apply a significant discount to your valuation to account for this opacity.
Same problem as data science jobs have had for the last decade:

Job requirements are for applied researchers.

Job work is Excel/OpenAI wrangling.
I've been seeing this multiple times a week for the past couple of years. It's gotten worse since 2020. I think that they are preparing to upgrade it, or did upgrade it?
We've been telling people for years that a STEM degree is a fast track to a six figure income. And that's been mostly true. But now people are going to find out that a STEM degree is going to place them firmly in the real middle class, not the, "I make $240k a year and live in the Bay Area I'm middle class just like you" middle class.

Possible we might see some real class solidarity if those being displaced can get over themselves.
Do I still need to provide credit card info to use the promo code? No bueno.
There is a link at the very bottom of the External Links section, but yeah, that is strange. Well, Wikipedia is the free encyclopedia anyone can edit.
Orange S.A. made €43.47 billion revenue last year ($4.8B operating, $2.6B net).

If I made $100k / yr, this is like fighting in court for two decades over $1.

[1] "Orange S.A. Consolidated financial statements", https://gallery.orange.com/finance#l=row&lang=en&om=eeeb89fa...
Quantum computing will radically alter the application of copyright law
EULA or not, it would fail anti-competitive laws. In the US they also avoided the Copyright question by saying it was fair use.
I'm skeptical of this interpretation.

There is a middle ground between people making $20 an hour and business tycoons. Policies that help big business might not trickle down to people stocking shelves, but they often advantage middle class people.

For example, the US is an excellent place for software engineers. There are far more of them and they make far higher salaries than their European counterparts. Is it unreasonable to believe that American policies that empower big tech companies also benefit a developer making $250k at Google, even though he does not own the company?

What if policies that benefit the top 1% did, in fact, trickle down to the top 30% of Americans, at the expense of the bottom 70%? What if this bloc of people was organized enough to win elections and control politics without relying on people delusionally voting against their own interests?
If this does indeed happen China would rather go at it alone. It’s behind Russia in nuclear tech, ahead in space tech. 10 years is enough to close the nuclear gap.
The post alludes to it, but one of the targets here is AI-generated content.

> We’ve long had a policy against using automation to generate low-quality or unoriginal content at scale with the goal of manipulating search rankings. This policy was originally designed to address instances of content being generated at scale where it was clear that automation was involved.

> Today, scaled content creation methods are more sophisticated, and whether content is created purely through automation isn't always as clear. To better address these techniques, we’re strengthening our policy to focus on this abusive behavior — producing content at scale to boost search ranking — whether automation, humans or a combination are involved. This will allow us to take action on more types of content with little to no value created at scale, like pages that pretend to have answers to popular searches but fail to deliver helpful content.
> Is it a false positive, though?

Yes. AWS was not down this morning.

> In other words, we have hundreds of people saying there was an outage, and 1 person saying there wasn't.

We have hundreds of millions using AWS and AWS-backed services successfully this morning.

I'm out.
That would make more sense in the alternate history where Intel and AMD never try to make GPUs anymore.
Your friends are no bogleheads, are they? (:
Does someone know a similar tool like Automator on Linux for this particular use case?
EU aims to shift European arms industry to 'war economy mode'
The "smarter" they get, the worse they are to use. Modern cars are always blasting air into your face, at temperatures which deviate enough from the current temperature to be incredibly distracting.

I just want a gentle breeze of slightly warmer or slightly colder air, damn it!
MS vs Sun was about MS doing their usual EEE thing and adding parts to MS Java that weren't part of the spec (which is why it was also a trademark lawsuit).

Google vs Oracle is about whether APIs are copyrightable and Google won.
You can upgrade to Pro and use the promo code by clicking on the 'Upgrade' button at the top!
its sort of the business model at this point. you cant just subscribe to security updates without new features. to justify the cost they always have to cram new, and by new i mean change.

google feels the same way. things that work need to be rebuilt and rereleased to justify headcount.

the mail -> new outlook is just another in the long tradition of microsoft pushing a new native gui framework, only to abandon it in house. How can they ever expect developers developers developers to commit to another future abandonware.

https://irrlicht3d.org/index.php?t=1626

they really should be going in reverse and making all their apps pure native and then getting them to also render as html.
The problems with curl-bash are overblown. You are pretty much exactly as vulnerable running pip install, npm install, or cargo install.

Not that curl bash is great, but it's not uniquely horrible when the goal is to run some unvetted code on your machine.

If you care about security, you have to either vet the code or trust the source. When you install through your package manager, you're trusting the maintainers. When you install from curl bash, a random website, or any unvetted software source, you are electing to trust the developers or site directly.
Hundreds of users, representing more users who didn't bother reporting, say they experienced issues when interacting with AWS this morning, so we'll need better evidence to the contrary to conclude otherwise.

The fact that some people accessed AWS without reporting issues does not mean that all people did. For those who had issues, AWS is responsible for dealing with those perceptions.

Indeed, it could have been a fault that affected a subset of users, for example 1 service in 1 availability zone. That's still an outage in the eyes of users, which AWS is responsible for managing. It could have been an issue with a route from 1 ISP. That's still an outage in the eyes of users, which AWS is responsible for managing.

An even better example is the DownDetector page for Facebook, with hundreds of thousands of reports. Do we really think there's no correlation between what DownDetector reports and what users experience?

tl;dr: what users think about your site is more important than both what you think about your site and the reality of your site, and you should be tracking it.
I think it is always wise to constrain unneeded dependencies. And this counts even more in embedded systems.

But on the other hand, programming artefacts, languages and their library systems compete in terms of features, which will usually lead to an ever growing number of dependencies. At least this is what we observe. Even if not all of this is really necessary, this would probably be hard to reverse in general.
Generics in go, as they're implemented today, sadly have a fair bit of performance overhead. I haven't tried but my assumption would be that go generics are not fast enough to make an effective arena allocator. I'd be thrilled if someone could prove me wrong though!
Cognition Is All You Need – The Next Layer of AI Above Large Language Models
This paper proposes Cognitive AI - a new functional architecture for AI that transcends the limitations of large language models on their own.
I don't know the details of this service for Nissan but I'm curious. Since usually app based remote start is subscription based, would stopping this service still be eligible for a lawsuit? Assuming the key based remote start still works.
Aquaponics
If we wade past all the dramatic language like "tyranny" and "fascism" and "authoritarian intolerance", his main point appears to be:

> On paper—under the First Amendment, at least—we are technically free to speak.

> In reality, however, we are now only as free to speak as a government official—or corporate entities such as Facebook, Google or YouTube—may allow.

This take ignores all the other ways "we" are able to speak whatever we want, online and offline. These corporate entities are not required to publish any old thing that their users want them to publish, and those users have other ways to get their messages out, if their message is not OK on those particular corporate platforms. If "we" were actually being "muzzled" the author wouldn't even be able to publish his article and get it onto HN.
Are you comparing their projection for the World GDP change in one year vs reality of one country over some extended period? I don't think your argument as strong as you believe.

World GDP Change in

2008 +2.1%

2009 -1.4%

2010 +4.5%

https://data.worldbank.org/indicator/NY.GDP.MKTP.KD.ZG?end=2...
This Is Knuth 3:16 (2002)
Can it answer customer support questions on API's cryptic error messages? E.g. Give hints on changes needed in the request payload.
Prompt engineering was novel 15 months ago lol you can’t still be on that a high schooler or another LLM can do that
There is a project to get transcontinental ships to add emitters of FeCl3 to their exhaust stacks, to catalyze oxidation of methane. It seems to be getting enthusiastic uptake from shipowners for reasons unknown to me. 10,000 ships emitting 100kg a day would be enough to bring atmospheric methane in line.

(Fe seeded to the ocean surface is negligible. This is not a thing to trigger algae production.)

https://en.wikipedia.org/wiki/Atmospheric_methane_removal
India's biggest bank seeks 4 months from Supreme Court for SQL JOIN 22k records
Ah, I see. Thanks to everyone in this subthread for explanations!
Exactly. The only sane layout and they’ve switched because eVeRyBoDy DoEs.

I can’t believe they’ve budged.
This is not a technical limitation. Nissan upgraded the modems in their cars in 2016 when AT&T switched off 2G in America. Now the cars are old they are choosing not to do the upgrade in the UK.

https://www.greencarreports.com/news/1102612_nissan-leaf-con...
Berlin is a very odd city for renting. There are so many protections for renters. I have a friend who's parents bought a place there while she was doing her PhD. She got a roommate who was starting a PhD at the same time. This friend has since done a PostDoc in the US and worked nearly 5 years here (read: the original rate was set a while ago). Meanwhile, her old-roommate refuses to move out, pay more in rent or pay for utilities. Through a combination of ignoring messages (knowing that no one is in the country) and citing every renter protection one can, this person continues to pay only ~500 euro/month for rent + all utilities.

It doesn't help that her parents live in a different EU country and need to use Russian-German lawyers, who seem to be fine taking money even if they can't do much.

I imagine that cases like this have driven up the rent prices quite a bit.
This arch seems to be flexible enough to extends to video easily. Hopefully what we have here will be another "foundation" blocks like the transformer blocks in LLaMA.

Why:

It looks generic enough to incorporated text encoding / timestep condition into the block in all the imaginable ways (rather than in limited ways in SDXL / SD v1, or Stable Cascade). I don't think there is much left to be done there other than to play with positional encoding (2D RoPE?).

Great job! Now let's just scale up the transformers and focus on quantization / optimizations to run this stack properly everywhere :)
Do you think these forecasts would have been accurate if they had been kept secret?
Datalog is basically more of a paradigm than a single language: the "core" is just that you have Horn clauses and facts, and synthesize more facts (usually to fixedpoint) using those clauses. Everything on top is basically up to the implementation: a lot of modern Datalog implementations have lattice types, for example, so that introducing a new fact for the same subject "updates" the previous fact instead of duplicating. Or they might allow for negative clauses instead of only positive clauses, or implement the synthesizing in a way that is more efficient. But it's really up to the implementation what set of features they implement, and what syntax to use for it, since there isn't a specification or agreed upon set of features for what "Datalog" is if you say you use it.
Case in point for my reply to Simon on why I draw this distinction :)

The natural instinct for many people about prompt injection is to assume that contextual separation between data and commands is enough to solve the problem. The short answer is:

A) we don't know how to enforce that separation with current LLMs.

B) Even if we did, there is another category of attack (or Simon might argue if I understand his position, a sub-category of prompt injection) that can not be defended against by separating untrusted input and system/user prompts.
But carts aren’t useless in the Andes. Trucks and cars travel paved roads in and around the Andes today. The Incans maybe hadn’t found a reason to rely on them yet, but this kinda plays in to Diamond’s argument.
Forget the politics of all this for a minute.

My position is so strong I don't care that you're trying to compete against me.

My position is so weak that I need to stop you from competing against me.

If the first isnt true the 2nd must be? How did any one think that this was a good stance from a marketing perspective?
>one is a web app.

Still using the Outlook application installed on Windows. Recently purchased Office 2021 (for $40, they had a sale) which came with the Outlook application. It does get updates every now and then so I know they're still supporting it. I've been using the Outlook application for a few decades, no plan to stop, and I will never use their online version.
How are you making it more reliable than PagerDuty?
Many reported gender differences may be power differences
> Our mission is to bring the power of Shen technology to every major programming platform used by industry and deliver to programmers the great power of Shen.

Sounds like it is?
This legit got a laugh out of me. I'll be cursing at the clouds the next time it rains!
Wappalyzer extension says it's using Firebase, are you? If so, why mixing it with all the AWS stuff? I've been using Firebase for quick mini-projects and it's fun and quick it is for prototyping. If you use it for hosting, no worries about Cloudfront, routing, SSL, or anything... it even automates the github CI/CD.

How did you like using vanilla JS? What sort of build tool did you use?
But that’s what I said: My post starts with “no”. The other points in the “but” are all still true.

The RAM or SSD are specifically not faster because of its “integrated nature”. The RAM is faster because Apple engineered an actually wide bus + multiple channels for memory access. The fatter Macs have the equivalent of up to 8-channel memory, which not even server CPUs of the competition provide. The SSD gets easily 7 GB/s reads in my testing. Both Windows and Mac have a working memory compression algorithm and a sister post claims that it works better due to hardware acceleration, which I’m inclined to believe. Memory compression on Linux is a mess as you cannot keep compressed memory pages in physical RAM, instead forcing you to partition the memory and manually handling how much and what to put in compressed zram.

Low memory situations are thus handled better than on other operating systems. Memory and memory pressure are neglected concepts in the competition, both the hardware providers and operating system providers.
Yes, better due to LPDDR. It's unlikely that T14 will be meaningfully better on perf, cooling, or battery, although all of those should be possible with a larger form factor.
Failing open is maybe ok. Telling everybody on the world their account doesn't exist anymore isn't.