skysight-inc/HackerNews huggingface dataset:
Ah good... This is definitely a research path I've been looking into. Great to see someone else has already gone there!
Ask HN: Great, concise resource to learn LLM technical fundamentals?
Can anyone recommend a great, concise resource to learn LLM technical fundamentals including transformers, pre-training, fine-tuning, etc from the ground up starting with neural networks?

The resources I can find are either how to use langchain to write LLM apps, which is not what I want, or very deep graduate level book study, which I don't have the time for.

Something that starts with neural networks (which I am familiar with) and takes you all the way to how LLMs work, but as concise as possible.

My goal is to be able to talk about LLM technical fundamentals cogently, not necessarily code one from scratch.

Thanks!
Eh, because they do not want people there, who listen to promotions and whatever the socialsewersystems carries as hip to them.

Where there is affordable housing, there be musicians doing brave new things instead of worrying about rent and rapping rants about gentrification.
Yeah, so that means the attacker has to wait for the next schedule. As I said, that's an advantage but I wouldn't classify it as a major win.

It's different if you use a different machine for the priviledged account. Then an attacker has to take over that second machine too. IMHO this is a mucher better concept, but also increases friction significantly.
JetBrains Annual Highlights 2024
what is sexual attraction?

is it seeing someone and wanting to have sex with them? it never occurred to me that not wanting to have sex with everyone i find otherwise attractive is something unusual.

if anything i think many problems today come from people wanting to have sex with anyone they feel attracted to, or choosing a partner only because they are sexually attracted.

instead of choosing a partner because they love them and only wanting to have sex with them because of that love.

seems to me that being able to enjoy sex in the way you say is the better and healthier approach.

i think i feel similar to you and i always felt that this is normal and that sexual attraction is a concept sold by media and advertising. i never considered myself asexual because of it. i don't think sexual attraction mattered much in choosing a partner at least until a century ago or so.
In my company, they made the entire company PCI-compliant (as opposed to a small team of beancounters).

This meant that the janitors had the same security responsibilities as the CFO.

It was ... invigorating.

The consultants that recommended it made a lot of money, though, so I guess it's all good.
It’s one of the main challenges of growing meat like that too.
It also helps in large companies where lots of people may have needed the higher permissions over the years - if you do temporary permissions then someone currently/soon having those permissions needs to be hacked, as opposed to hacking any one of the many people who needed those permissions a few years ago and still have them because they weren't temporary and got forgotten about.
It's not taking them away...yet. That's the point, the conspiracy theorists among us see what's coming down the road and not what's in front of us.
The missing piece is unknowable
You make two entrances - one is "backstage and delivery guys" - thats where the people you want get in- the other is for insta-noodles and hipster-replacement folk, who want to wait all night and then get rejected in some viral video..
Part of the issue is that many defense contractors are sucked into the idea that they're doing something for the 'greater good', and the moment people en masse enter that thoughtspace, it's actually pretty easy to get them to commit terrible deeds.
GCP handles #1 with their recommended actions on IAM roles. Good luck doing this manually. GCP will give adivce on each IAM role, which person hasn't used their access in 3 months and encourage you to take action (remove it).

Instead I just remove it automatically - I now automate GCP's advice. https://github.com/james-ransom/auto-apply-gcp-iam-recommend...
The treaties are literally part of the constitution.

Also section 25 & section 35 of the constitution act talk about treaty rights:

35 (1) The existing aboriginal and treaty rights of the aboriginal peoples of Canada are hereby recognized and affirmed.
...
(3) For greater certainty, in subsection (1) treaty rights includes rights that now exist by way of land claims agreements or may be so acquired.
Until it isn't, though. When the thing you are selling is essentially a commodity, when the business model only works because you are balancing some crazy thing margins that rely on all the other gizmos to make work, when the tech supplants the most minimal staff (which is largely seasonal, unskilled, and poorly paid) possible to even keep the lights out, suddenly the fact that this went a bit sideways becomes a big, big problem. It's not like a mom and pop diner who all of a suddenly can't use the handheld CC system.
Urban humans have lost much of their ability to digest plants
How a cheap, generic drug became a darling of longevity enthusiasts
The good news is that you only need one assassin. It's not like you're trying to mass-produce dead people...
Nope. Lunch time isn't part of work time so I don't see why the employer would even care.
This is a pretty useful blog entry.

I recently had to implement DKIM for my app. I finally figured it out, but I had a similar experience to the author.
Getting hit by a motor vehicle will ruin your life. Getting hit by a bicycle will ruin your day, maybe week.
> I think this is something everyone could get on board with.

I don't think you've met very many Republicans, certainly not the ones I'm related to or have interacted with.
Hmm, this leaves me with mixed feelings. It's obviously easier if everyone just adopts libhyprcursor instead of implementing a spec themselves and everyone having to iron out interoperability issues. Hyprlang doesn't look large, it's probably on the same order of magnitude as your average JSON decoder/encoder, but OTOH it's kind of a bespoke language versus other more "standard" options and I think this is likely to hinder adoption more than anything else. It's another "thing" whereas the desktop is already full of INIs, XMLs and JSON files.

Then again, I have no stake in the matter. I think if Vaxry wants this to be adopted though, dropping it onto the world like this is probably not the most likely case to get there. It probably would've been worth bugging maintainers for other compositors (kwin, sway?) to see if they had any input/thoughts on the matter. I can only imagine Hyprlang as a dependency would've come up immediately as a discussion topic (I could be very wrong though.)
That the first port of call is to blame the people on board is completely expected. This one is interesting because the explanation is "our flagship aircraft has a kill-everyone-onboard switch on the pilot chair that someone pushed".

That's not totally reassuring from Boeing. I guess it adds to the accumulating reasons to never get on one of their aeroplanes.
Kind of.

Lab meat may be in a sterile environment, but it’s vulnerable to a lot more too. (As OP was saying)

Like an operating theatre is cleaner than a slaughterhouse, but that’s because the bar for what would cause contamination is that much lower.
Potentially 1.4 million units of Insulin per day per cow!

Holy cow!

Edit: As per WebMD a type 2 diabetic needs 10 units of insulin per day.
Orrr just buy a domain and get a wildcard LE cert? All of the benefits, none of the hassle, and no subdomain leaking.
What a frustrating, poorly designed puzzle.
Thanks, that's very helpful.

1 and 2 make perfect sense and are easy do demonstrate but 3 seems to me to be incredibly difficult.

I haven't found an easy way to advertise convincingly to somebody who (quite reasonably) grants you a limited amount of attention that custom things won't be a nightmare. It's the kind of thing you only tend see when you get dug in the weeds and hence people will tend to make assumptions based upon surface details.

This is a problem I'm struggling with.

I think robot/cucumber could require less code if they were better abstractions (and would be more loved), but I find it hard to illustrate that an abstraction is going to be good or bad, particularly to people with limited attention and particularly to people who don't necessarily have the skills to recognize a good abstraction.
I really love the trend of simply restating what an article argues against without addressing the actual article's points.

I had an exhausting discussion on Reddit about why storing UTC is not always sufficient from commenters who continually proved they hadn't read the article or the rest of the the comments.
The article says IAM supports what the author wants, and that it can also be used in dysfunctional ways

Article would communicate better if it started out with the idea (which is cool) rather than a long, detailed, easily misinterpreted rant
The researcher was studying dishonesty... So I gather that she was more interested in dishonesty?
Thanks for sharing. Where does it even say you need to use every piece?!
How to Play Renju
1 nov 2011, but this is a type-approval requirement.

> Type approval describes the process applied by national authorities to certify that a model of a vehicle meets all EU safety, environmental and conformity of production requirements before authorising it to be placed on the EU market.

So your 2012 Aygo has probably been type-approved before that date.
Not to everyone. If it's clear to you, you could helpfully explain it.
I feel like all the innovation around wireguard is a reaction to this situation.

Cloud security, especially from AWS, is (as described elsewhere in the comments) byzantine, but I've always felt that the real underlying problem is generic advice that only serves to protect the backside of the cloud provider. What's really needed are crystal clear patterns that cover >95% of actual use cases.
I think it’s more likely that we just grow cells into basically a large living meatball.

Why go through the effort to grow skin, eyes, and bones when all we want is a wad of meat
This is the important question.

We evaluated several horizontally scalable DBs and Cockroach was by far the slowest for our access patterns.
Yes. AFAIK "Table wine" (and table beer in northern regions) was pretty light. Just enough alcohol to kill germs.
"language you know" saas starter kit, get to the github repo and search for issues/activity (remember to include closed issues when you are looking)

A better question would be: what should I look for in a SaaS starter kit?

You will get a lot of opinionated responses, but for me at least, what I'm most interested in:

- admin dashboard

- ability to integrate/generate different billing/invoice/payment options

- multiuser strategy

- deploy options
Yes, this is where experience still matters, specifically around the anthropology (always) and archeology (sometimes) of technology in a given organization or class of organizations. All solutions have variable contextual applicability.
I've got the same preference for fingertip grip, And I've been thoroughly satisfied with the Trust Primo wireless. It's more of a "normal mous shape" than the magic mouse, but it's rather small, lending itself to a fingertip grip quite well.

My only gripe is poor quality components. In a couple years one of the buttons will give out and stop working properly. On the other hand it's a $10 mouse so getting a new one isn't a huge problem either.
I may be thinking IE11 then.
Some realize one should not give up essential private data for small, temporary conveniences. This point is lost on those whose livelihood depends on convincing the public otherwise.
That confused me too. Isn't that literally the wrong way around to how it should be?!
yeah this is exactly what I'd do alright.

I think the move away from landlines to mobiles is increasing that expectation further too.
Apple Acquired Canadian AI Startup DarwinAI
>This one is interesting because the explanation is "our flagship aircraft has a kill-everyone-onboard switch on the pilot chair that someone pushed".

Wait till you hear about the yoke, or any of the other flight controls.
The Most Terrifying Game You Can Play with ChatGPT
90s SciFi TV Shows Made Possible by This Software [video]
>Replace self-signed certs with a self-signed CA? [...], why not just use LE and get a real cert?

I went back and forth between self-signed CA vs LetsEncrypt.

I liked the self-signed CA root because you can create end-entity certificates for internal ip addresses such as 192.168.1.13 instead of domain names. (No domain name purchase and no public DNS records pointing to 192.168.1.13 required.) The public SSL services like Let'sEncrypt and ZeroSSL can't issue certs for RFC1918 ip addresses -- for obvious reasons.

On the other hand, I didn't want to import my custom CA root certificate into all 8+ devices around the house. (desktops+laptops+phones+tablets+etc.) So, Let'sEncrypt won in my case on that basis.
The world is governed by probabilities. What more could go wrong if algorithms did too? /s
The irony is that youtube was largely built on copyright violation with taking everything that existed in video before youtube and giving it away for free.
> You are not a big fan of the EU after this?
Downloading apps from internet is a very cheap price for becoming a "big fan of EU" :D
Seems like you want your wit to be rewarded more than tested?
That is a good practice for any statistical software you are using. You should validate your R code with Python or Julia.
It's not super user friendly but you should be able to use conditions to achieve this https://cloud.google.com/iam/docs/configuring-temporary-acce...
DNS-01 + a wildcard SSL cert takes care of that unless you need third level domain names.

I think the last time I issued non-wildcard SSL certs for my domains was when I was still making the mistake of self-hosting email and the entire setup was a rickety mess.
If you don't have other sensor data, like cell tower and Wifi, then GPS still has a pretty poor performance. Another problem of GPS is altitude. GPS is not really designed to give a good altitude reading, especially when you are in the mountains where only get satellites readings from over your head and don't have readings from the satellites on the horizon.

But in the mountains, altitude is also a very important information. I was up at basecamp in Nepal (south side) and Tibet (east and north side). The basecamp in Nepal is in a very tight spot. Bouncing signals is there a problem. Even radio is a problem.

BTW: I commute daily with train, here in Germany. I play Pokemon and I have problems getting a GPS fix with the latest iPhone when I'm not directly at the window.
You write as if there is a finite supply of "entertainment" which comes out of thin air. If someone is consuming, then someone is supplying. You mentioned yourself that the ones supplying are the locals. So, in your analogy the locals are getting jobs in night clubs, restaurants and construction to feed the needs of this "consumption class". In economies without tourism, this is done by producing export goods.
It’s high time we accept that social sciences have nothing scientific about them, and are just a mix of political ideology and astrology.

I already said this before and I’ll repeat it. Media constantly portraying social sciences and their findings as actual science, is a big culprit of all this disbelief the masses are showing towards real science (the physical and natural sciences).
isn't that only common because of the sequential shifter that is actually easy to miss what gear you're on? I don't remember seeing it on "normal" manuals
Mold is used on dozen varieties of cheese, on cured meats like salami, in Asian cuisine (Tempeh/Oncom, miso paste, soy sauce).

More generally, fermentation and bacteria are essential to most cuisines in the world.

If you feel put off by the idea of eating mold, I feel sad for your taste buds.
I thought this was gonna be about how it's hard to keep secrets out of memory in a GC language. I had a friend working with Go and was surprised that on some heap-dump there was some secret-key they did not want exposed. So you have to set some ENV var (GOGC) so it clears faster.
I guess we were expected to be astonished that a simple 2D game about connecting lines became 3D in a browser or something.
One quick google search and you can find multiple links for that, including some that were posted here. wasn't proven to be false but that the evidence used was not much of evidence either.

here the first one in my results:

https://retractionwatch.com/2017/02/20/placed-much-faith-und...
IAM could be way better with some default tools. For all I know they already exist, but I haven't seen anything close in the training or poking around.

Example, even with something as abstruse as SELlinux, you can literally just attempt whatever you're trying to do, and then pipe in the failure log into `fail2allow` and the permissions will be set to least privilege automatically and then it just works in most situations.

You can also pipe in the failure log to the policy advisor and it spits out a bunch of advice in plain text as well as a copy / paste command to implement it.

IAM is horrible if it can take design notes from SELinux.
Chances are Google didn’t make it. They hire a ton of design studios and vendors for stuff like this.
You can boil it down to this:

* SPF: Tell the world which servers are allowed to send email for your domain

* DKIM: Weak version of digitally signed email, add a header that only mailservers that have the private key you supply can generate. Tampering invalidates the signature (for example when an email gets relayed for a second time). The private key used counts for your whole domain.

* DMARC: Tells other mailservers what to do when the SPF and/or DKIM check fails, and also allows you to set an address where to send reports to. These reports contain counts of messages that failed the SPF and/or DKIM checks.
This is true but you have to also consider the autoregressive component. In your example, it's 50 steps per iteration of the model, where the model is executed once for each token in the output.

So practically speaking it's a bit more complicated to calculate how much the model can "think". Of course once a token is output it is committed to that (in the most basic scenario), but that doesn't mean it is not still "thinking" as it produces subsequent tokens.

> perhaps a notepad

Exactly, the context and previously output tokens can be considered such a notepad since they are input for the next steps of the model.
The cognitive dissonance from trying to keep both AWS IAM and GCS IAM in my head at the same time, when they're almost but not quite entirely unlike each other, is maddening and gives me Induced Dissociative Identity Disorder (IDID).

They should merge them together into one big happy standard, and call it Worldwide Enterprise Access Rights Environment (WEARE).

Maybe if they signed up enough celebrities to sing a song about it, it would make the world a better place...

https://www.youtube.com/watch?v=s3wNuru4U0I

https://www.youtube.com/watch?v=4tLvzyb3_Uc
In my experience bikes have it because lots of them are a pain in the ass to put in neutral and is easier to see the light than to feel with the clutch.

The neutral is also in between first and second, so its a bit finicky.
I agree with people saying IAM is not that complicated. On the other hand, I think I also agree that IAM is extremely complicated. It's both. I'm serious!

The problem with IAM isn't the functionality it offers; it's almost exactly what you want. I mean look at what it actually does, isn't it literally exactly what you would do? Sure, maybe the terms are confusing or something, but on the whole... it's hard to argue that what it offers isn't basically what you want. You want to allow identities, to do things. You group those things into roles. And so on.

That said, the more powerful and granular permissions and ACLs get, the more grand the architecture you have to craft to make good use of it, and I think at some point, your own IAM rules become a work of engineering themselves. You wind up having to specifically engineer around and for IAM. This is not unique to cloud IAM; when doing complex NixOS setups, I have occasionally realized that my webs of plumbing secrets through SOPS to systemd units, and setting up group permissions for UNIX domain sockets between services, winds up getting quite complex quite quickly, and that it is basically, yes, engineering of its own sort. And if you add cgroups and network namespaces and nftables rules and seccomp, god help you, it's even worse than IAM! And that's just on a single machine...
Many silicon valley companies pay a similar base, but make up the difference in equity. Most individual contributor tech roles cap out at a base between $150k to $250k.

Once you make $200k base and $200k+ in equity, you consider yourself worth $400k+. Even if the equity portion isn't really being paid by your company, it's being paid by the shareholders, it's still money in the bank.

This drastically closes the amount of positions you're willing to consider, as many companies either don't pay in equity at all, or aren't growth companies whose initial offer of equity will double or triple.
In this age of cars I want dumb cars with an engine that I could optionally plug in my smart thing if I wanted.

Even Toyota has gone too smart with their in tune crap.

Give me a cockroach car that survives for 50 years. No other bells and whistles. Just some connectors for them.
Postgres updates are definitely a pain. MySQL is usually just a matter of upgrading the package and restarting the server for the projects I run, but postgres is a full dump and import process.
For Google and Microsoft? That's literally their business model.
To be more exact, it's far easier to just shell out the cash for a domain name (or get a free subdomain from somewhere) and then just map the DNS on that domain to your internal infrastructure. That way you can just use letsencrypt certs without any hassle.

If you don't want to expose network details, use something like Tailscale to get unique internal IPs and map those. (Don't use Tailscale's own MagicDNS, that one logs individual certificates for machines into CT rather than giving you a wildcard cert for your tailnet).
I think this is a different case though. The point of those "temporary priviledges" is not so that someone only can use them sometimes, it's that they only do use them sometimes.

What you say (that people should only have the permissions that they need) is orthogonal to that.
Plus they can't assume a different role or do administrative IAM stuff.
I've been experimenting with using Hyprland (a Wayland WM) on my laptop, and ironically Qt apps have been the ones that misbehave the most. Everything seems happy to use my preferred icon theme, but when hovering over a Qt app, the sizing greatly changes. I've mostly just gotten used to it (plus I never really got their overall theming correct) but I might have to try this out and see if it fixes my issues.
This isn't "anything remotely political" is it, it's a highly contentious culture war issue among the chronically online. I was disputing the claim actually made, not a different claim you appear to have understood I was making.

For what it's worth, I agree with that KYM's opening paragraph is better and less-biased than Wikipedia's.
Something feels off about sticking Einops (a great utility library for tensor reshaping, been around for years) as a footnote in a "LLM 2023-2024 hype" list - it's an anachronistic inclusion. Feels like the author creates a narrative that starts with LLMs and acts like everything else is a building block for LLMs.
Probably the most important reason this story got big is because it involved Dan Ariely, a popular author and perhaps the most famous active researcher in the world.