skysight-inc/HackerNews huggingface dataset:
I expect they release GPT-4.5 in the next couple of months. It should have a longer context, and better benchmark results, but not dramatically better than GPT-4. It will probably be just enough to reclaim the crown.

I do expect a lot more from GPT-5 though, it definitely should not be making any silly mistakes, and hallucinations should become very rare. Basically I expect it to become a lot more reliable. Hopefully by the end of the year. They raise the monthly price for ChatGPT access, but I’m ready to pay more for a significantly better model.
Live 12 is out now
Sorry, I wasn't clear. It was a year.
It very much is the norm, lots of security research companies have similar policies. It’s called coordinated vulnerability disclosure, or CVD. Rapid 7 is throwing the random company under the bus to protect users of that company’s software.

And of course to market Rapid 7.
Commercial pilots perform frequent recurring training in highly accurate flight simulators which can recreate just about any kind of system failure or emergency situation. It is normal in this training that they are given multiple simultaneous failures, along with confusing or unhelpful ATC instructions.

Some professional pilots choose to engage in leisure activities that improve their aviation skills. Sullenberger was a glider pilot. I know a few ATPs that fly aerobatic aircraft on the weekend.
> Where is the Einstein or the Darwin of anthropology?

Diamond is more the Jean-Baptiste Lamarck of Anthropology.
> 2. A government trying to protect you from said businesses.

While still protecting the “business freedom” of the said business.

They could have forbidden cookies and tracking altogether, but they are too probusiness for that.
(Ricky from Cloudflare here)

Our bot protection can help with that :) How can we make this easier? Any other product/feature requests in this space I can float to our product team?
That's great for hobbyists and tinkerers, but when Joe Schmoe off the street thinks, "man, I sure am tired of the full screen unskippable ads in Windows 15", he's not going to follow that up with "I guess I'll go buy a low power hobbyist board to tinker with an alternate OS for nerds". Whereas today you can still just install Linux on the same laptop you're already using, and sometimes even Joe Schmoe off the street does just that.
Super curious as well
SpaceX fuels up Starship megarocket in test for 3rd launch
Facebook has a similar page:
https://accountscenter.facebook.com/ads/ad_topics

Both show alcohol, gambling, parenting, and weight loss as sensitive topics commonly limited
Scaling a streaming service to concurrent viewers Veeps
Tesla Berlin gigafactory goes dark after alleged eco-sabotage
I really hate this take. If a company refuses to pay more than the gray market is offering, then they are the ones at fault for putting their users at risk. Go and guilt trip the entities who are undervaluing the time and effort spent finding vulnerabilities. I place zero blame on researchers selling vulns unless the software company is willing to pay at least as much as the gray market.
Location: NL

Remote: yes, or hybrid

Willing to relocate: No

Technologies: deep experience in stream processing and backend development, Kotlin, Java, Kafka, SQL, Clojure, AWS, GCP, Azure. Looking to get back into AI.

Resume: https://www.linkedin.com/in/chrisblomnl/

Email: whowantstobehired@chrisblom.net

I am a dedicated and versatile software developer with an MSc in Artificial Intelligence and over 12 years of experience in developing innovative software in various domains.
My expertise is designing and building reliable, fast backend systems that handle lots of data. I can support the entire development cycle, from gathering requirements to design, architecture, planning, implementation, testing, DevOps, monitoring and optimization.

Furthermore, I have experience in building interactive dashboards, data visualizations and AI applications such as automated planning, machine learning and natural language processing.

My goal is to deliver high-quality software that solves complex problems. To achieve this, I value understanding the problem, rapid iteration and collaboration with colleagues.
No not really, I already narrowed down the product lines to only XPS. And 13" is actually one of their less messy sizes, there are the 4 XPS models and 7 Latitudes.

Then within each of these the configurable parts vary, but you're potentially picking processor, RAM, GPU, SSD, and even display resolution. It's not any simpler than the options within one of Apple's laptops, except Apple has a total of four laptops in all sizes.

If you wanted a 15" laptop from Dell, you have 1 XPS, 2 Latitudes, 4 Inspirons, 2 Vostros, and 2 G Series. All of which are an ambiguous mix of actually different models or new/old revisions of the "same" models.

Looking at pricing on the XPS 15, 64 GB RAM adds $450, the RTX 4070 is $1200, upgrade from i7-13700H to i9-13900H is $450, you can option Windows 11 Pro for $50, there's a higher resolution screen for $300 (or $800 if you didn't option the fancy GPU), it's not cheap over here either.

The one place where it really feels like Apple is screwing you compared to Dell is SSD pricing.
are you using chatgpt 4 for that? The free version of chatgpt isn't close to as good as the latest paid version. Even copilot is better than the free version of chatgpt.
> it's pretty obvious that religion is make-believe, right?

If it were that self-apparent, wouldn't we expect Kant, Kierkegaard, Anselm, Anscombe, Heidegger, Gödel, or the countless other philosophers and heavy thinkers of the past several centuries to have not even wrestled with the question?

Heck, even Antony Flew, a contemporary philosopher of religion who was a staunch advocate of atheism for much of his career, later declared himself a theist. Did he simply fail to realize that it's pretty obvious that religion is make-believe?

What do you know that they didn't? What did they know that you might not?
Private equity can be a good place to put the money, but that doesn't sound like what was suggested to you. Usually to get into private equity funds you need to be a "sophisticated investor" (aka mid 7 figures). The reason private equity can be good is that it unlocks access to companies that are not traded publicly.

Index funds are probably a good idea. It wouldn't hurt to put 10-20% in something more active, blue chip, etc. Some of the online brokerages offer various levels of advice for very small fees (30ish basis points maybe). They could help you select appropriate index funds and other investments based on macro trends etc.
Ask HN: Is our landing page good enough? (seeking critical feedback)
So for context, our previous landing page was a disaster, so I was tasked with giving it a remake with the following parameters...

Brand voice: fun, non-serious/non-corporate,
Primary brand colors: purple, pink, blue, white,
Target market: small to medium digital/marketing agencies

Here's the website link: https://www.justbeepit.com/

I've shown this to my team, and this has been live for the past week to welcome visitors from our AppSumo launch. But I wanted the opinions of more seasoned/experienced business-savvy eyes.

- is the USP clear?
- does it draw you to try out the product?
- suggestions for improvement?

Thanks!
Life's First Molecule Was Protein, Not RNA, New Model Suggests (2017)
I don't think so. Here are my simplified definition of words, I don't think they are very controversial or meaningless:

Capitalism is ownership of capital by corporations who are protected by the state.

Neo-liberalism is a version of capitalism that thinks the state sucks and must stick with the minimal protection that enables private ownership (vs banditry).

Communism is ownership of capital by the state and the abolishment of private ownership.

Socialism is more fluid, but the core is redistribution of wealth to effect just outcomes.

All of the above involve the government applying rules so 'something' doesn't get out of control, whether its evil bureaucrats or evil corporations. All of these can be done democratically (usually in varying degrees) and with the rule of law, or end up in a form of oligarchy or lawlessness.
This is really exciting to see. I applaud Stability AI's commitment to open source and hope they can operate for as long as possible.

There was one thing I was curious about... I skimmed through the executive summary of the paper but couldn't find it. Does Stable Diffusion 3 still use CLIP from Open AI for tokenization and text embeddings? I would naively assume that they would try to improve on this part of the model's architecture to improve adherence to text and image prompts.
Go and explain that to a Romanian or a Latvian. Not so long ago, their citizens were prepared to give up everything to leave these countries. That is no longer the case. You're deluding yourself.
This seems extortion adjacent enough that, if I was counsel for JetBrains, I'd advise a call to the FBI.
Interestingly all 3 of C900, C128 and the Amiga are/were to be ~1985 machines (maybe 86 for the C900). I'd think from the specs (memory, CPU power, multitasking OS, hard drive as standard for the C900 etc) point of view the C900 was competing more with the Amiga than the C64-compatible 128k machine that didn't have architectural prospects of addressign more memory later.
> This isn't "let anyone have an abortion at any time", like you're implying.

I implied nothing of the sort. I'm disappointed that you inferred that, and that tells me that I could do better in the future (although I'm not entirely sure how, see below), but it's still on you for making assumptions about what you think I believe based on my comment.

If you read my entire comment you'll see stuff like:

> Individual people often have considerable more nuance, but that nuance is not allowed in the political discussions in both major parties.

Please, show me where a major Democratic party discussion has taken place where they drew a line. I've shown you one already.

> On the left, if you try to draw a line at some point, if you are a man, you will be dismissed immediately and told that you have no right to tell women what to do with their bodies. Either gender, you will quickly end up in a position where you are trying to get between a woman and her doctor and trying to have the government make medical decisions. And that's the most charitable take they will have for you. Sometimes it can get much, much worse.

Have you really never seen this?
Actually

> Shen owes its origins to work done in the 90s by Mark Tarver on applying high performance automated reasoning techniques to the problem of type checking programs. The first version of the work SEQUEL (SEQUEnt processing Language) premiered at the 1993 International Joint Conference on Artificial Intelligence under the title 'A Language for Implementing Arbitrary Logics'.

https://shenlanguage.org/OSM/History.html
I saw an ad recently "You'll never code as well as ChatGPT." I suspect we'll see some changes to both how and why people code, and it's entirely likely that application types which are difficult for AI to code will become scarcer.

Similar dynamics have happened with cloud/mobile/commodity hardware/PC. Every time there is a change, there are folks who claim that the old way was easier and had been working forever.
I think maybe you're making a more general statement than what LibraryBox was about.

LibraryBox was hardly anything that Joe Schmoe was capable / willing to do either.
Nvidia bans using translation layers for CUDA software
I took a French TGV (the high speed one) a few times last year, and it was still pretty nice. Tickets were quite reasonably priced too.
Real-time parsing of incoming news events and live scanning of internet news sites - coupled with sentiment analysis. Latency is an interesting challenge in that space.
The goal is to grow. Capitalism has growth imperative. It is the subtext behind everything. The moment growth stops, you dont stay the same, you die. So don't be mad if the 'next patch' sucks, we're in a train and there's no stopping it.
I like the format of the WhizLabs tests. It seems to be a fast way to study and pass certs since you can just review the questions you got wrong and they have documentation excerpts/links.
Hackers exploited Windows 0-day for 6 months after Microsoft knew of it
Open Letter: Build AI for a Better Future
You can rephrase it all you like it doesn’t change the question: why would the US spend a bunch of money on artillery ammunition when it and its NATO allies don’t use artillery? Why waste money on something we don’t use?

The US armed forces make a lot of dumb choices with their funding but “underspending on artillery we don’t use” is not one of them. Even with hindsight it doesn’t make sense.
Automatic climate control is one of those things that sounds good and is nice when it works but never works properly in all situations. I much prefer manual controls.
That's the thing about trust: not everyone uses it the same. There are documented examples of malware being injected to millions of dependents through package managers, so we know that "hierarchical trust" does not work.

The big difference with a distro is that I choose to trust the distro maintainers, which is only a handful of people. Whereas with your hierarchical trust, you choose to trust many random people.
Fintrac statement on ongoing cyber incident
It probably is easier than ever, but if I think about doing it, who is going to randomly connect to my device and download files?

And who ... "should" want to with all the security considerations and etc?

Still it would be a very cool hobby project none the less.
Uff, that's a good point.
> package.json is used at runtime by node.js and strictly parsed as json

It still constitutes an unfriendly developer experience -- people have had to make workarounds to document what complicated scripts do, and why they use certain dependencies, etc. I understand how JSON.parse works, but this still isn't the best behaviour.

Note that this is just one example of unfriendly UX in NPM as a whole -- this isn't the hill I'm dying on, so to speak, I'm just giving an example of how I believe the industry is being held back by tools which just haven't kept up with demand.
I've been thinking about doing something a little similar in spirit to this, namely smart payment credentials for LLMs to protect against misuse in situations where you have an LLM that makes buy/no buy decisions.

The idea being to make sure that a payment credential has been requested by a legitimate chain and only then provide a single-use token (or similar).

Is there anyone working on agents that can consummate transactions out there who is thinking about this area that might like to chat? Email address is in my profile if so.
I think the multi ethnic German nazis were not really what they were intending.
Isn't there a funny saying about this kind of situation? Something about two economists shitting their pants...?

Economist-A offered his friend, Economist-B, $20 to shit his pants. Then the deal was reciprocated, with Economist-B offering Economist-A $20 if he shat his pants. At the end, Economist-B turns to his friend and says, "does it feel like we both just shat our pants for nothing?," to which Economist-A replied, "no, we created $40 of value."
<I never understood why trains are so expensive in England>

Given passenger numbers increasing in the last couple of decades have given trains huge economies scale reducing their costs and yet fares go up, public subsides go up and train companies bust. The only answer I can think of is UK trains are expensive because we are really bad at running them.
Yeah I really dislike controls of any kind on the steering wheel. Should not have more than a horn button in the center.
Who in practice pins their dependencies (transitive included) on audited versions?
Still mostly NLP and image stuff. Most actual data in the wild is tabular - which GBTs are usually some combination of better and easier. In some circumstances, NN can still work well in tabular problems with the right feature engineering or model stacking.

They are also more attractive for streaming data. Tree-based models can't learn incrementally. They have to be retrained from scratch each time.
>I'm very much in-favour of the private vulnerability research and responsible disclosure, but the "no silently patching vulnerabilities" sounds more like dick swinging to me than actually wanting to improve people's security.

Rather than dick-swinging, it's generally an acknowledgement that large organizations move slowly and need a bit of prodding to apply patches in a timely manner.

If you're a big-and-slow company, there is a significant difference in how quickly you'll worry about applying the patch that says "here's a minor patch" and the patch that says "here's a patch for a severe vulnerability".

I have worked with several companies which simply will not update something unless they are either mandated to or it is a large enough security risk.

Read more about Rapid7s opinion on silent patching at https://www.rapid7.com/blog/post/2022/06/06/the-hidden-harm-...
To put this in context - The kid is 17. My daughter is 17 and she goes to school (11th grade) in Germany. I am an immigrant here so not sure how common this is in Germany but I assumed that kids at this age usually are in school. Kinda feels strange that someone so young is fending for himself and living in trains. Not saying it is bad, but just very uncommon. Also this is probably a "try it for a while" thing rather than the permanent / long-term lifestyle.
I am indeed making a more general statement.
Defending the status quo is not environmentalism
We posted it from the Rerun account today: https://twitter.com/rerundotio/status/1765031236492259751
> deep learning architectures have been crafted to create inductive biases
matching invariances and spatial dependencies of the data. Finding corresponding invariances is hard
in tabular data, made of heterogeneous features, small sample sizes, extreme values

Transformers with positional encoding have embeddings are invariant to the input order. CNN's have translation invariance and can have little rotational invariance.

It's harder to find similar invariances to tabular data. Maybe applying methods from GNN's would help?
Shouldn't that be a 20% total comp cut? A 25% pay cut if other benefits are untouched could potentially be reasonable.
this is a very VC-brained comment to make on a peer-to-peer open source project. let's instead ask if there are any single points of failure to the protocol and service, and if so, are those sustainable regarding developer time, effort, and compensation?
How will I have any expectations of run-time behavior if I have to hope that my graph will fuse or fail to fuse at run time?

Reminds me of the issues that haskell programmers face when an innocuous change causes list fusion to fail tanking performance; to know how to coax the compiler to fuse again you have to have intimate knowledge of how that fusion process works which isn't visible in the API; you need knowledge of compiler implementation/behavior.

programmers do not like this kind of instability.
When all the products look similar, I appreciate it when someone takes risks and does something with personality.

I would not buy one. Probably, I am not the Target Group. In any case, I want them to succeed.
If the decisions were being made in North America, iPhones would still be having a lightning connector.
Thanks for this, OP. This is why I come here.
> I'm not sure how they fit in.

Neither is IBM, to be fair. POWER is in a lot of ways an exercise in "throw as much junk into the part as we can with no thought to efficiency and see what the benchmarks say".

But surely the idea is the same: SMT hides memory latency with parallelism just like lots of load/store units do, so why not both? Datacenter loads that IBM cares about are very often fetch-limited (e.g. queries into a database RAM cache are basically guaranteed not to be nicely L1-cache-local), so maybe the numbers work out. Seems wasteful in traditional/consumer scalar loads for sure.
I will never understand "I said $dumb_thing and the fact everyone downvoted me for saying $dumb_thing proves that $dumb_thing is right!"
In his position, train robberies aren't the first problem that comes to mind. Just somebody stealing my backpack with all my earthly possessions.
They didn't forget anything. Try playing it for 10 minutes, it's fun :)
You sure? Coordinated disclosure works like this. I find a vuln. I give you a timeline of my release. You accept that and work with me to acknowledge it and prepare your users. We negotiate release timing. Sometimes, if there is no evidence of exploitation we can push it out a little. If you stop communicating or act in bad faith I am doing whatever I want. You didn’t pay me and your users deserve to know. There are so many bad faith orgs that will try to avoid disclosure entirely or act downright hostile towards security researchers. Someone’s wires got crossed at JetBrains. Rapid 7 discloses a lot of vulnerabilities using this exact process. Many orgs use coordinated disclosure. They don’t all use the same timelines and processes, but those are the broad strokes. I have helped disclose many vulns using coordinated disclosure so I get where Rapid7 is coming from. It’s like this: It’s my vuln info. I will do whatever I want with it. I decided to give you my entire process and timeline to give you a chance to deal with it. You decided to ignore my “terms” and stop participating in the process. I am free to do what I want with the vuln now as I have exceeded my ethical obligations to help you.
I notice the college thing but I don't think it's a threat, as long as they are still able to solve problems well and understand the code that they're writing[1].

[1] Yes, we no longer understand assembly code but that one isn't based on fuzzy logic.
Right, at least that's clear now. You said that "It's practically a non issue that people are blowing out of proportion", I believe that the end of copyright is not a non-issue.

But yeah, ignoring the issues others have is a good way of living in a world with no issues at all.
The 88×31 Archive
I'm going to assume when you say "people don't need people" that you're talking about social contact.

My question is: why do you post on HN for others to read? Why not just write your thoughts in a journal and keep it to yourself?
Yeah, the entire concept of badges is so bizarre to me, but I'm old. There was another post some time back that would scan a user's post history and tally up how many points posts made using various reward levels. It was an obvious gamification with achievement type badges. I really hope that the person that did that gain valuable skills on how to use a 3rd party API and used it as a learning project. Other than that, what's the point?
The general theory is that there's really no such thing as silently patching. Consider:

- Company silently patches issue. Patches have to be applied, which can take some time if people don't know they need to apply them. Even in the case of automatic updates, patching can be delayed if it requires an app restart, for example.
- Malicious actors examine patches, work out exploit, begin exploiting in the wild.
- Customers left in the dark.
- Company assumes that having issued patches is good enough, substantially delays disclosure.

Co-ordinated disclosure aims to prevent all of that by ensuring everyone knows about it at the same time. That removes some of the ability of threat actors to exploit and allows SOCs, EDRs, etc., to update as well, so anything unpatched gets caught. If there are workarounds or other defenses that can be implemented until patching is possible, those can be employed as well.
In the latter scenario it's not a good look for either party. JB looks like they want to slide under the radar but R7 looks like it's extorting them.

From a biz perspective, though, why would anyone go to R7 if there's a possibility of them disagreeing with you a throwing you under the bus?
Gerbil Scheme has a standalone httpd
Gerbil now sports a standalone httpd, with servlet support.