skysight-inc/HackerNews huggingface dataset:
Isn't jailbreaking a form of prompt injection, since it takes advantage of the "system" prompt being mixed together with the user prompt?

I suppose there could be jailbreaks without prompt injection if the behavior is defined entirely in the fine-tuning step and there is no system prompt, but I was under the impression that ChatGPT and other services all use some kind of system prompt.
You are.

Capitalism is government regulation of a market. https://youtu.be/CRPHp2EjNR8
Well sure, no political project is perfect. But you can't let perfect be the enemy of the good.
Well, this is a site that a lot of programming nerds read. Programming articles seem to interest enough people here that they keep making the front page.

Maybe just ignore the articles that don't interest you?
They use datasets like common crawl.
Granted, I have a fairly "old" rent contract from before Berlin became posh. I guess the kid looked at current rents in German cities and then figured out that a Bahncard 100 actually isn't such a bad deal if you don't also have to pay rent ;) And TBH, as a new experience I can understand him, but I wonder how long it will take until he grows weary of the lifestyle, German cities all look a bit run down and depressing when arriving by train. Props to him for giving it a try though.
What I can't understand is why, when so much money is spent on the design of new car models, such bad decisions were ever made in the first place.

Did not one person say- "you know this is a really bad idea?"

'Touch screen' in this context an oxymoron - as it can't be operated solely by touch - you need to be looking at it.
Well where has he been? Is he waiting for the 18th chat app to be green lighted before realizing they have a huge leadership issue?
From Feb 28
While I had a friend who had a 128, we never thought to boot up that CP/M disk on his shelf. I had a Apple ][+ with a Z80 daughter card, and a Pascal compiler... so I would have been interested if I had only known (I was 12 and not reading the right computer magazines). Years later I have tried all of this through Commodore emulation. It was fun for a bit and definitely felt nostalgic.
"Let's convert this back pay that you are legally owed and we almost certainly violated a couple state and federal laws by not paying you into equity" is a pretty ballsy suggestion, but couple that with not being allowed to see the cap table is the kind of thing you have board room fist fights over.

Sounds like they should fire that primary stakeholder, claw back his equity, hire someone who knows what the hell they're doing, and hope to god the employees don't walk or sue the hell out of them - both of which they probably should do.
> Have you never met an Apple user that carried around both Lightning and USB-C cables?

Have you ever met someone that just has an iPhone? There are considerably more of them than those carrying ipads and MacBooks and switches and the like.
That's not a new problem I've met more than one react dev that can't write vanilla js.
If this succeeds, it will become the standard, and there will be specific topics that almost no chatbot will discuss.

I can imagine governments asking Cloudflare to add/remove topics they like/dislike.
Neat idea, although no longer active.

https://jasongriffey.net/librarybox/notactive.php

I do wonder how readily people would just connect to such a thing, or how readily they should just trust such a thing...
This library uses the GPL v3 license: https://github.com/scito/extract_otp_secrets?tab=GPL-3.0-1-o...

Your options are to either go open-source or remove the .proto file.
Not sure this goes in the spirit of the guidelines:

"Don't solicit upvotes, comments, or submissions. Users should vote and comment when they run across something they personally find interesting—not for promotion."

- https://news.ycombinator.com/newsguidelines.html
Testing Next.js app router API routes
France has such a rich history, it boggles my mind that they can't find more cultural inspiration there than from the USA.
I don't know, I can say the EU uses them itself...

https://ec.europa.eu/commission/presscorner/detail/en/ip_24_...

If that site needs a cookie banner I'm guessing nearly all sites do.
There was a Launch HN yesterday [0] that featured something similar on their landing page, which caught my attention as it was the first time I'd seen such a badge.

Are there other projects floating around I've somehow never seen before? The justwords.ai badge has a different look and feel to it.

[0] https://news.ycombinator.com/item?id=39591972
only they bring something new. Many of the languages posted here don't fall in that category. Can't learn something if you have already learned it before
"Obligation" implies they have some sort of requirement.
I am talking about a use case that works for you but not others - due to preference, hardware limitations etc.

My car can only turn AC on and off. What about me then?
Shen was on here ages ago. Probably back in like 2012 if not earlier. Programming languages and discussions on them pop up all the time as new folks discover them and it makes for good continuing talks.
500 Days in Amsterdam Without a Bike: A Journey of Mind, Body, and City
> Even in Germany, a software dev with a burn rate of 10k a year must be seriously in profit each month.

That comes down to ~840€ per month. Unless you live deep in the countryside, life is not going to be much cheaper as a non-nomad.
Does Rapid7 get paid by customers to do that for 3rd-party software the customers use and then they report it to the upstream vendor (JetBrains in this case)?
While we've been doing pottery for about 30,000 years, and woodworking for perhaps 10,000 years, we've only been programming (digital) computers for about 75 years or so.

We're still figuring out how to do it. Trying new programming language ideas is a big part of that... I started with Fortran 77, and man oh man am I glad I can program in Go now.

Thank you language experimenters!
For normal non-life threatening situations where the person is not deprived of medical care, probably somewhere around 20 weeks...

>Similar to previous years, in 2021, women in their twenties accounted for more than half of abortions (57.0%). Nearly all abortions in 2021 took place early in gestation: 93.5% of abortions were performed at ≤13 weeks’ gestation; a smaller number of abortions (5.7%) were performed at 14–20 weeks’ gestation, and even fewer (0.9%) were performed at ≥21 weeks’ gestation

For medical conditions that threaten the life of the mother there shouldn't be a limit, the life of the host should never be compromised, though in late stage pregnancy when the fetus would be viable outside the womb care should be taken to take this avenue first.
Judging by the adverts they show me, Facebook thinks I'm originally from a small city in Florida, that I moved from the US to the UK and want to give up my US citizenship for tax purposes, that now live in specifically both Cambridge and Waterlooville even though those are opposite sides of London, that I own a potentially dangerous breed of dog that the UK just banned, and that I'm a hermaphrodite in need of both a custom-fitted bra and dick pills.

None of those are accurate.

The only adverts they've shown which are relevant to my interests are for Babbel, except I already had that years before they started showing me the ads.
> Francis French

This is a whole other level, since Francis basically means "French".
Not forgetting the case of the Seat Málaga that had to be marketed in Greece as Seat Gredos because Málaga sounded too similar to "Malaka". I'll let any fellow greek readers explain the meaning ;)
Here's a good example: https://youtube.com/watch?v=oqQwWRalcA0

It's different than a "cootie catcher."
The "end-game" for cheating software is just a camera pointed at the monitor, or an HDMI splitter. Run the video feed through a not-invented-yet AI/ML model, and the model will control your character via valid USB keyboard/mouse inputs.

"Behavioral" anti-cheat will have to finally become a thing. As a game designer in 5-10 years, you won't be able to assume the operating system will be privy to any data which indicates cheating is happening.

I believe the right answer would be to cluster players by behavior signatures, leading to all the bots being in clusters with eachother. Then bots can mostly just play other bots. Over time you can merge known "human" clusters together so that different play styles get to play in the same matches. This also has the benefit of clustering "toxic" players together - both by chat content and in-game player behavior.
Shen is well over a decade old: https://news.ycombinator.com/item?id=3026384
The issue here is that the vendor did release patches, but then tried to hide that they fixed a vulnerability. This is usually called "silent patching", and it's controversial. As with any disclosure discussion, there are lots of opinions here and everyone likes to call everyone else irresponsible.

If you're pro-silent patching, you might argue that it reduces the number of people who know about a vulnerability, so publishing advisories is irresponsible.

If you're anti-silent patching, you might argue that it reveals the vulnerability to the people who monitor patches without giving any warning to the affected users that they need to patch, so not publishing advisories is irresponsible.

Maybe you're just a "minimum details" kind of person, and providing full details is irresponsible. Or maybe you're a "full details" kind of person, and restricting security professionals from accessing the information they need to do their jobs is irresponsible.

In summary, I'm irresponsible for leaving this comment and you're irresponsible for reading it.
The Comet Strike Theory that just won't die
That is because most polling is not a representative sample of peoples' beliefs and is untrustworthy. The "mainstream" polling and coverage of Brexit is a great example, or the polling and coverage around the 2016 US presidential election.
Interesting to see that it's written more "low level": vanilla JS and jQuery (nostalgia kicks in). I guess it's analogous to why linux/windows kernels are still written in C language.
Cryptographic design review of Ockam
Afaik Rust (currently) uses WTF-8 [0] to store Windows (WTF-16) strings which is a very useful encoding if you need to deal with such strings in your programs written in other languages as well. The conversion is essentially the same as UTF-16 -> to UTF-8 except you interpret unmatched surrogate pairs as (reserved) Unicode values with the same value and encode those to UTF-8 as you would any other Unicode value. So this doesn't use exactly the same trick as TFA - instead of using invalid UTF-8 encodings it uses "normal" UTF-8 encodings of invalid Unicode values (specifically exactly those that were reserved when extending UCS-2 to UTF-16). Or in other words, WTF-16 <-> WTF-8 conversion is the same as UTF-16 <-> UTF-8 conversion but without (some of) the error handling.

[0] https://simonsapin.github.io/wtf-8/
Do you know of any (families of) examples of tabular datasets of any size (you can choose what "big" means) where deep learning convincingly outperforms traditional methods? I would love some quality examples of this nature to use in my teaching.
But, of course, some of us are in that lucky 10,000 [0] who haven't learned that particular lesson yet.

0: https://xkcd.com/1053/
So how does it work form a user's POV? I connect to the network and then get a "sign-in" like screen that lists all the files on the device? Or does it route all requests to the local server? Can you make this airdrop compatible?
Interactive SQLite Documentation
Why keep out the context included in that bbc article?

> Under current Virginia law, third-trimester abortions are only permitted if the risk to the mother's life is "substantial and irremediable" - language that Democrats wanted removed.

> The Democratic bill sought to allow for late-term abortions if the mother's physical or mental safety were at risk .

> The procedure would also have required sign-off by only one doctor, rather than the three required under existing law.

This isn't "let anyone have an abortion at any time", like you're implying.
We have a local variation of mustard that has only recently become popular nationwide. My dad is a diehard fan and I always found it amusing how he made sure he brought a few bottles every time he went to the US. He really didn’t want to be without it, but it also apparently intrigued some americans who supposedly really liked it.
Using Web Bluetooth To Read BBQ Temperature Sensor Data
The kind of carsharing I use is company-run, so it's basically just rental, but billed by the minute and with parking spots scattered all over the city. I imagine they have a very expensive fleet insurance in the background.

There are also a handful of "peer-peer" carsharing systems where you let other people use your car and I have no idea how insurance would work there.
The patriots mentioned in GP don't distrust Biden, they distrust the entire system and elections and representation, everything. Disliking Berlusconi motivated Italians to vote him out of office, not to burn down Palazzo Chigi. That's the difference I meant above.
Exactly. I have a mild accent, but my dad still has a thick brogue. Would a car understand him? Not if it's using the same algorithm as YT's captioning.
In every business the basic building blocks are always the same:

1. Satisfying customer needs better than the competition
2. Generating cash
3. Producing a sufficient return on invested capital
4. Growing well
> More regulation was a huge part of the successful campaign to get the UK out of the EU.

The UK was and is a cultural outlier in Europe. Even if this were true (which I'm not convinced it was), it's not representative of what's going on in the rest of Europe.
Just as the RAF is again in the news with police raids in search of historic members...
The 2022 Acura MDX has that too, but it's not a "may or may not", it just doesn't. Thankfully they fixed it in the 2023 model, but I still don't understand why it's not fixed in the 2022 model since it's obviously software and both get OTA updates.
It was never JVM. Converting to dex happens on developer side, and that severs anything JVM-like.
Read the Roon
Another project that is still going as far as I know: https://internet-in-a-box.org/
The heroes we don't deserve: Those who work on web standards
Or even the more boring stuff like "F1 team Racing Point's brake ducts look suspiciously similar to the brake ducts of the previous year Mercedes, which won the constructor cup..." because Mercedes was kind of the parent team to Racing Point and "shared" the design. I also remember Ferrari trying a new way to attach mirrors, which was deemed illegal, but it shows how tiny the gains they chase are.
Machiavelli I – S.P.Q.F. (Begins Machiavelli Series) (2012)
ziplink??
It's not that they aren't welcome out of some kind of hubris.

It's that singles and doubles aren't profitable for the VC fund.

The VC business model is based on promising investors high return in return for high risk. Typically the fund will take a management fee along the line of 0.5%-2% a year, sometimes frontloaded a bit to account for the higher cost of marketing and finding investment opportunities. 0.5%-2% does not get you rich unless you're a huge fund with very tight operations - it costs money to have people following up a large portfolio. For most smaller funds the management fee will tend towards the lower end, and will just keep the lights on.

Then on top of that you get carry. Carry can vary enormously based on your reputation, and your promises. Specifically, the higher the threshold before the carry kicks in (the hurdle), the more you can insist on retaining above that.

A not untypical example would be to retain 20% of any return over an amortized yearly return of ~7%-15%.

Put another way, in this case $400m of investment was made. The last round was 3 year prior, but much of the capital had been in the company much longer. The VC's in question would, with a 7% hurdle rate need a return of $490m before they'd see any money beyond the management fee if this company was typical of their portfolio and the entire $400m investment was "only" three years old (much of it would have been older).

As such, if the VC funds in question were otherwise successful, a $465m exit would have been dragging their profit down. Not as much as if it'd gone bankrupt, but this was a really bad exit for the VC's, and basically represented the VC's having written the company off as a failure and salvaging what they could before they lost more.

The investors in the VC (the limited partners in the VC fund) would have done better, but keep in mind 7% represents roughly the return of an index fund over time, so for them getting "only" $465m back after it had sat in the VC fund for years will also have represented a significant opportunity cost vs. putting the money in a safer vehicle that might have returned more.
This case aside, the real issue is Rapid7 having a written policy of throwing users under the bus to gain publicity by publishing vulnerabilities before they have a chance to update. Contrary to what the "security journalist" claims, this isn't the norm.
This guy tried 30 common mustards and picked out the best [0]. I find myself nodding in agreement at his picks--hard to beat a bottle of trusty ol' Gulden's in the fridge.

0: https://www.insidehook.com/food/30-best-mustards-tried-summe...
I don't know what "norms" Rapid7 is expecting JetBrains to have followed, but this article certainly makes them come off in an entitled, power-tripping light, like their glory is more important than security.

I'll be adding them to my list of "companies I'll never do business with".
It’s not that simple. You’re right that many places have compliance policies but that’s not all, or even most, of the benefit. WAFs are useful any time you don’t have a team of experienced 24x7 engineers who have complete control and knowledge of each and every application on your network, which isn’t the case for any large organization.

When things like log4j come out, it’s really nice to be able to have a vendor like Cloudflare or AWS deploy a single rule off-hours which will cover all of your public facing services, especially when some of them are not your own code or hard to deploy. It’s one thing if a patch is a single line change pushed out in your CD pipeline than if it’s “beg the vendor for an update, get an emergency CAB approved, and follow the 97 step Word document”.
Yeah, that's part of the confusion here.

Some models do indeed set some of their rules using a concatenated system prompt - but most of the "values" are baked in through instruction tuning.

You can test that yourself by running local models (like Llama 2) in a context where you completely control or omit the system prompt. They will still refuse to give you bomb making recipes, or tell you how to kill Apache 2 processes (Llama 2 is notoriously sensitive in its default conditions.)
Cool site.

Minor potential bug report:

searching for "Knock$" returns three places called "Knock" but the red dot map highlight only highlights one of them, no matter which you hover on.
The ideal way is to release a security advisory that some CVE patches are coming with no details, so that upgrades can be prepped coordinated for a known patch day.
It does: https://shenlanguage.org/OSM/15min.html
It’s not performant if you’re using JavaScript APIs. But it’s also possible to write to a canvas with WebGL, which is hardware accelerated and is much faster than jQuery. I believe (although I can’t find a source for it now), that xterm.js used this strategy.
This is a great write-up. I will definitely implement a subset of this for my father, who is a type 1 diabetic. While he has lived with it for close to 25 years and has a lot of experience managing it, occasional slip ups still happen. Just recently, he had a small fracture from falling down during a hypoglycaemic episode. This might help prevent that or at least lessen the impact.
Reassuring - thanks for clarifying that up.
Debian and RHEL have classic GNU userland (thus, GNU/Linux), Android does not. With normal Linux, it has only common kernel (even though heavily modified) and maybe musl (as an alternative libc).
My car has no physical climate controls etc. I just use the voice controls.

“Hey Google, set the driver’s side heated seat to one”

“Hey Google, turn off the steering wheel heater”
> See?

I see you being deliberately antagonistic and strawmanning an opinion you disagree with.
I've worked on models trained on ultra-large tabular data. It still took substantial effort to beat tree models (custom architecture specifically for this particular domain, something I haven't seen elsewhere out in the open).

When tabular data is mentioned, one of the unspoken applications is finance. There, my guess is that one of the issues is that data is not very IID and thus latent "events" are fairly sparse. Combine that with the humongous amount of raw data, and you get models that overfit.
In a delicious bit of irony, there is a very large, peculiarly villainous American company whose website has never shown me a cookie pop up…
I'm pretty sure it's less "dark patterns" and more "remembering your preference isn't 'necessary'".

Which, technically, it isn't.
My hypothesis is decision trees are more robust to nonstationary distributions. If the variance and means of the features shift dramatically, the model isn't going to blow up, because it's not additive.

In the domains where NNs work well (image processing and language), you're dealing with a predictable and stable distribution of values. Elephants might look a bit different in the train and test set, but you're not randomly getting 100x the variance of the input data. The decision tree just isn't going to care as much, because splits around the mean will lead to the same outcome.

Another hypothesis is that zooming into bivariable relationships is more important in tabular data. Neural nets are better at local and global context. But they struggle if all that matters is the relationship between two columns of data because of the additive nature. Large networks can figure it out due to model capacity, but then you'll run into overfitting.
All good points, but now you moved the trust requirement from me having to trust the people working on the code, to me having to trust the tool that hosts the code. I'm not convinced your model is better. :P
> The single market is, from the perspective of the EU itself, its single most important project.

although i am not of course the eu itself, nor do i even live there, i think this is incorrect

world war i lasted from 01914 to 01918 and killed 17 million people

world war ii in europe started 21 years later, lasting from 01939 to 01945 (though it started earlier in china) and killed 73 million people, mostly in russia

the 'european communities' were founded in 01952, 7 years later, and later grew into the eu. their single most important project was, and is, preventing or at least delaying world war iii, because it was, and is, widely believed that world war iii will kill a substantial fraction of the world's population, reducing the level of human development substantially and possibly causing human extinction

this is commonly believed to be more important than the single market, even, i venture to say, within the eu

world war iii may have started now; in retrospect, we may decide that it started in february 02014

the post is of course correct that the single market was a major instrument of this peace from the beginning, but it was and is only one such instrument, not the final product. in terms of keeping governments from bombing each other, probably the atomic cooperation is even more important