skysight-inc/HackerNews huggingface dataset:
Just because a turing machine prints out 0 and 1 at each step doesn't mean the sequences to factor into the calculation of what to print out next can't be longer binary sequences.

Pretty much all the best compression methods are language agnostic and work on bit wise sequences. They also pretty much all predict the next bit and feed that into an alogithmic encoder.

Eg. look up dynamic markov coding which is commonly used by Hutter prize winners. The paper is short and readable. They dynamically create a binary tree and binary sequences are seen so if the pattern '01101000 01100101' comes in it walks down the binary tree. It'll probably predict the next bit as '0' as '0110100001100101' just so happened to be a common sequence in English that will likely have a next bit of '0' but the Dynamic Markov coding model has no idea of that. It just has binary sequences of bits and a prediction of the next bit given that.

Likewise it can continue reading the bits of the file in and walking down its binary tree where history of the next bit are stored in every node and it see's '111001001011110110100000'. It makes the prediction of the next bit as a likely '1' that it feeds into an arithmetic coder that takes predictions and forms an optimally minimal bitsequence from that. That second binary sequence forms part of 你好.

In both cases the turing machine doesn't care about that. It's also just writing 1's and 0's as per a turing machine. Eventually those 1's and 0's form sequences that happen to map to characters in various languages but it doesn't care about that.

>The mapping from strings in the binary language to letters in the target language cannot participate in the calculations for the complexity of a string in another language. Because if it did, again, you could make the Kolmogorov complexity of any arbitrary string S you choose to be 0, because you could just say the null output maps to S.

One other thing to address here is that Kolmogorov complexity explicitly includes any dictionary you use in it's calculation. A dictionary of the file you wish to compress would just blow out your Kolmogorov complexity to that size exactly. That's why Kolmogorov complexity is an excellent tool. You explicitly cannot cheat in this way.
Oh boy, do I have the packaging system for you!
On Garbage Collection
It is, which is why I think it's silly to focus on a single drug, when I think it's a pretty obvious systemic issue in how the US has structured its healthcare system
The signature validation could be moved into an unprivileged process forked from that one.
That's my point though--users expect to be able to do those things over ssh. Sandboxing sshd is hard because its child processes are expected to be able to do anything that an admin sitting at the console could do, up to and including reading/writing kernel memory.
> Have to admit I've never understood why password auth is considered so much worse than using a cert

Password auth involves sending your credentials to the server. They're encrypted, but not irreversibly; the server needs your plaintext username and password to validate them, and it can, in principle, record them to be reused elsewhere.

Public key and certificate-based authentication only pass your username and a signature to the server. Even if you don't trust the server you're logging into, it can't do anything to compromise other servers that key has access to.
The article is based only on the stats of a single freelancing site. It may be big, but it still represents only a sample of the overall market data. We do not know how big the sample is and whether it represented the same percentage of the overall market size at the beginning and end of the reported period.

Only the first conclusion listed mentions Upwork. The rest sounds like it reports a general market trend.

The author says the data was provided by a company called Revealera, but doesn’t disclose he is a co-founder. It doesn’t affect the quality of the data by itself but I’m always careful to make conclusions from data presented this way.

I visited a couple of new job ads on Upwork and I found that:

1. The „hire rate” of clients is usually between 0 and 70%.

2. Upwork has an AI solution for clients that makes it very easy to post a new job. Meaning it is easier than ever to think about an idea, post a new „job” and forget about it, never hiring anyone.
If you watch Sam Altman talking on the Lex Friedman podcast, he clearly thinks ChatGPT 4 is kinda cool and that 5 will be better. But he really dropped the hype and sounded more like this article.
Since I switched from beer to 0 calories soft drinks, drinking is no longer a problem
That’s absurd. Elaborate.
I don’t know the numbers unfortunately. Climeworks is at the state of the art for carbon removal

The more likely scenario is we try to geoengineer and that buys time and we eventually get the energy to actually remove the carbon over a longer timescale.

Lot of uncertainty in that route but I don’t see a better one. But ultimately the sooner we can shift away from burning carbon the less energy we’d need to remove it in the future.

https://en.m.wikipedia.org/wiki/Climeworks
Biden and Trump are neck and neck in polls. Pardon me while a drown myself in alcohol.
This is how I approach things as well. I never got the appeal of office hours as TAs aren't going to be able to regurgitate lecture content for you, it only works if you have something extremely specific you need help with.
In the same vein, I'm building a tool [1] to extract tables from PDFs (no OCR yet) and spreadsheets. The end goal is to make it easy to combine data from multiple sources by joining tables and produce some useful reports out of it.

The PDF parsing is done by the excellent PDFplumber Python library [2], the web app is built with Elixir's Phoenix framework and it is all hosted on Fly.io.

[1] https://data-tools.fly.dev
[2] https://github.com/jsvine/pdfplumber
> But I think everyone would benefit from throwing all the behavioral analysis we can come up with at new Debian package uploads.

Why "new uploads" and not also "all existing"?
I’ll admit to not being an expert in SELinux, but it seems like an impossibly leaky proposition. Root can modify systemd startup files, so just do that in a malicious way and reboot the system. that context won’t be propagated. And if you somehow prohibit root from doing that by SELinux policy then you end up with a system that can’t actually be administered.

[edit: sibling sweetjuly said it better than I could. I doubt that this much more than a fig leaf on any real world system given what sshd is required to have to do.]
That doesn't solve the problem, it just pushes is down the road a bit. The exponential growth is merely offset by a constant factor once. Unless we figure out how to push transistors in the 5th, 6th etc dimension with every new generation.
At Berkeley for most of my CS classes it is always pretty crowded, there is a long wait time to get to talk to a TA for 4-5 minutes.
Isn't it pretty standard practice to salt and hash the password client-side before sending it over the wire?
The real question, to my mind, is "is the current generation of AI yet another dead end?", because whether or not the tech can improve upon its flaws will determine whether or not it is worth a business investing in.

We've gone through AI winters before, where the actual techniques and hardware simply had a terminal point of usefulness beyond which it was unlikely to grow.

If hallucinating bad information is to be regularly expected / intrinsic to the tech, then it's basically Clippy 2.0 and a dead end.

On the other hand, if we can expect lower power costs and higher trust in the output (i.e. needing less human intervention) then it makes sense to start finding places where it can fit into the business and grow over time.

I'm personally in the camp that it is a fun toy but with limited applicability for most businesses, and unlikely to grow beyond that. I'd love to be proven wrong, though.
On July 19th, 2021 I walked into a private emergency room and somehow convinced them to prescribe me something to treat my alcohol withdrawal (I was down to 2 hours of sobriety before withdrawal was setting in). It was a 15 day supply of Librium that I managed to stretch to about 30 days or so.

Anyways, I've been sober ever since and I'm still very thankful for that doctor's compassion which undoubtedly saved my life.
Not that I would lose sleep in anger over my missing ETH (I was not hit by this, I did not have anything touching FTX), but I think your take is a little unreasonable when FTX clearly acted in a way that is directly illegal to do as a financial institution. I don't keep my life savings in crypto either, too risky, but still.
Kratom was a valuable tool to step away from alcohol, but it has concerns of its own. In my case it was without a doubt worth it. YMMV.
As someone who has struggled with alcohol in the past, it really doesn't. Alcohol contributes to a general sense of malaise, and to insular thinking that serves to protect drinking rather than building a life.
Not necessarily. A frustrated developer posts about it, it catches attention of someone who knows how to use Ghidra et al, and it gets dug out quite fast.

Except, with closed-source software maintained by a for-profit company, suck cockup would mean a huge reputational hit, with billions of dollars of lost market cap. So, there are very high incentives for companies to vet their devs, have proper code reviews, etc.

But with open-source, anyone can be a contributor, everyone is a friend, and nobody is reliably real-world-identifiable. So, carrying out such attacks is easier by orders magnitude.
> but when trying to use another reference speaker (in demo_part1), the result doesn’t sound at all like the source

I’ve noticed the same thing and I wonder if there is maybe some undocumented information about what makes a good voice sample for cloning, perhaps in terms of what you might call “phonemic inventory”. The reference sample seems really dense.

> Indeed, in api.py line 45 the only two source languages allowed are English and Chinese

If you look at the code, outside of what the model does it relies on the surrounding infrastructure converting the input text to the international phonetic alphabet (IPA) as part of the process, and only has that implemented for English and Mandarin (though cleaners.py has broken references to routines for Japanese and Korean.
The amazing thing here is that this tool is almost all compiled using LLM. This is very exciting. I have been using GPT-4 a lot lately to make tiny utilities. Things I wouldn't have even tried because of how much effort it takes to get started on those simple things.

I always wanted to make a chrome extension for one thing or another, but all the learning involved around the boilerplate always drained the motivation. But with GPT I built the initial POC in an hour and then polished and published it on store even. Recently I compiled some bash and cmd helper scripts, I don't know either of these enough (do know some bash) and don't have it in me to learn them. Specially the windows batch scripts. Using LLM it was matter of an hour to write a script for my need as either a windows batch script or even bash script.

Oh I even used GPT it to write 2-3 AutoHotKey scripts. LLMs are amazing. If you know what you are looking for, you can direct them to your advantage.

Very exciting to see that people are using LLMs similarly to build things they want and how they want.
You know this is a dupe.. your article even links back to the discussion from 10 hours ago[0] (254 points, 139 comments)

[0]: https://news.ycombinator.com/item?id=39873692
It's more true now than it ever has been. The majority of well known mainstream pop artists are highly competent musicians with an entire team behind them. The technical skill level of the engineers, music directors, and producers working in pop is unreal right now.

This is also true of pretty much all genres too I'm not trying to put anyone down here. The level of quality across all music is just exceptionally high these days.

But also https://youtu.be/eSuK_5zW2iM?si=2g9xUznIm1nCxhqV&t=653
I’m not sure what’s different, but I will chime in to say that I’ve been reading about Canada imminent bubble burst for 15 years. I mean, eventually someone may be right, but had I let this get to me and not buy my house 12 years ago, I would be in a much worse position today.

Be careful with people trying to predict how markets will move.
It just reverts it for the specific connection - most likely to not raise suspicions on the fact that SSH doesn't accept RSA keys anymore
I think one interesting corollary here is how the Ken Thompson attack was discovered at PWB[0] because it had a memory performance bug[1].

[0] https://en.wikipedia.org/wiki/PWB/UNIX
[1] https://news.ycombinator.com/item?id=38020792
Maybe it is! I mostly use it to select text in social media images for which it feels reasonably responsive.
Because life is really hard and we don’t have proper coping mechanisms.
Just ChatGPT & dall.e 3
I still clearly expect the broker not to steal my stock positions and gamble with them...
this is a genuinely deranged take on spacex. do you take bets?
At my university (IIT, top school in India and well-known around the world) this was covered in an elective you could take, not part of the core CS curriculum.
In 2024 the reality is, without playing silly word games about the meaning of standard, email patches and mailing lists are non-standard (and arguably have been since the early 10s)
Related more recently:

How AI is disrupting the demand for software engineers: data from 20M jobs

https://news.ycombinator.com/item?id=39679170
Isn't that just drug substitution?

(hope you're doing well btw)
With sufficient data points, you can do A/B and see that all affected systems run a specific version of Linux distro, and eventually track it down to a particular package.
People need to stop doing dark pattern cookie consent UI.
I am always afraid that I'm doing this with my subordinates. Probably to a fault.

So I treat everything as a learning experience. Recap anything and everything that went right or wrong and talk it out. What did we do well, what could have been done better. All of that.

The problem only comes when you run into someone who is a constant victim. Any negative feedback immediately becomes someone else's fault. Any perceived injustice is immediately a huge deal.

I do not know how to work with that type of person. If they do not see their faults, either professional or personal, it's hard for me to help. Any suggestions?
One of the takeaways from this to me is that there is way too much sketchy bullshit happening in critical system software. Prebuilt binary blobs [1]? Rewriting calls to SIMD enhanced versions at runtime [2]? Disabling sanitizers [3]? Incomprehensible build scripts [4]?

All of this was either at least strongly frowned upon, if not outright unacceptable, on every project I've ever worked on, either professionally or for fun. And the stakes were far lower for those projects than critical linux system software.

1. https://lwn.net/Articles/967442/

2, 3: https://github.com/google/oss-fuzz/pull/10667

4. https://news.ycombinator.com/item?id=39866161
The very next line after the portion of the article you clipped is "Sometimes there are obvious answers—like on the loading screen of a video game."
I guess since I'm in the states the bar is below the floor but $500/yr dental reimbursement for kids and pharamacare covering contraception and diabetes medication sounds incredibly helpful for low income people.
>Unless your land was cut recently

About a third of it was clearcut last in the mid-80's, to grow hay... so those trees are "new" on the timelines of trees.

The other part was entirely clearcut during the civil war, and then again early 20th century (in places) for coal extraction.

>mature forest is generally close to carbon neutral.

Even the 19th century portions are filled with all manner of life / transpiration.
Create a tiny fake version of landlock with just the features you're testing for. Since it's only checking for 4 #defines in 3 header files, that's easy.

Then compile your test program against your fake header files (with -Imy-fake-includes). It should compile without errors even if landlock is missing from your actual system.

Then build your test program a second time, this time against the real system headers, to test whether landlock is supported on your system.
There is no ‘system()’ syscall, and fork/exec would be extremely common for opensshd — it’s what it does to spawn new shells which go on to do anything.

I’m not arguing with the point, but this is a great place to hide — very difficult to have meaningful detection rules even for a sophisticated sysadmin.
Since the price of Ozempic in France is 1/10th the price in the US, you either admit France is not paying their share of the development costs, or you think the US price is way excessive even taking development into account.
Do you have any idea how many sea creatures there are, all of whom are shitting straight into the ocean, constantly?

Around 2 billion metric tons of them.

By contrast, there are only about 60 million tons of human beings.

Handwaving any differences in metabolic rates, the ocean animals are outshitting us by a factor of roughly 30, or, to put it another way, if every human turd in the world went straight into the ocean it would only increase the amount of shit in the ocean by around 3%.

Of course, the overwhelming majority of human waste does not get dumped directly into the oceans, so it's far less than that.
Interesting, but I'm not a fan of ergodic literature when the form of interaction is "scroll forever"
That's why I referred back to "the original", but you misunderstood what I meant there.
my comment allows for the NSA to be involved in this and for the FBI to not be investigating them.
I interpreted the comments on that bug to mean that the Adafruit site has an unmuted video that happens to have a silent audio track, which isn’t strictly a muted autoplay issue. But maybe I’m wrong.
The correct thing to do would be to put different unrelated APIs into their own library, instead of everything into libsystemd0. This has always been one of my biggest issues with it. It makes it hard to replace just one API from that library, because on a binary distribution, only one package can provide it. And as a nice side effect, surprises like this one could then be avoided.
Yeah, I think we're just at an awkward point where you still have to do some prompting tricks to make it work as expected. Hopefully this all gets smoothed out soon and makes hacky solutions like "prompt engineering" less important.
Also a great Belgian beer: https://www.delirium.be/en/beers/delirium-tremens

Imagine if Philip Morris called them "Lung Cancer" instead of Marlboro.
The comparison may be just if you only look at Hamas’ restriction within Gaza and Israel’s government restriction within Israel. However, if you include Israel’s restriction on Gaza and (the relatively minute, but still non-zero) Hamas’ restriction on Israel, you will find a massive tower overlooking the other three.

Israel’s press freedom within Israel is perhaps much better than Gaza’s press freedom within Palestine (as dictated by Hamas). But Palestinians still suffer much much much lower press freedom and Israel enforces several orders of magnitude worse press suppression if you include the cross national interference.

Your point is perhaps correct if we keep it narrow. However, I think it is wrong to keep it this narrow, because it obfuscates a very real democratic malpractice done by the state of Israel.
Fastone Capture is my goto for this. Does everything including drawing etc.
Excellent software.
I think you can fake your brain out with habit hacks like this. Not sure how to supplant the taste of a near whiskey though.
My original statement was only that this is not a 2fa problem, which was and still is true.

The fact that you did not know this does not change this fact.

I acknowledged that web sites don't explain this well, even actively hide it. So it's understandable not to know this.

But I also reminded that this doesn't actually matter because you WERE also given emergency recovery passwords, and told to keep them, and told why, and how important they were.

You were never at risk of being locked out from a broken device EVEN THOUGH you didn't know about saving the seed values, UNLESS you also discarded the emergency codes, which is not a 2fa problem, it's an "I didn't follow directions" problem.

And even if all of that happened, you can still, right now, go retroactively fix it all, and get all new seed values and save them this time, as long long as your one special device happens to be working right now. It doesn't matter what features google authenticator has today, or had a year ago. It's completely and utterly irrelevant.

My premis remains correct and applicable. Your statement that 2fa places you at at risk was incorrect. You may possibly be at risk, but if so you did that to yourself, 2fa did not do that to you.
I like the idea of testing build-system behaviors like this, and I don’t think it’s ever really done in practice. Scriptable build systems, for lack of a better name for them, exist at a bad intersection of Turing complete, hard to test different cases, hard to reason about, hard to read the build script code, and most of us treating them as “ugh I hope all this stuff works” and if it does “thank god I get to ignore all this stuff for another 6 months”.
> There’s been sewage in the seas and oceans for as long as there’s been sewage in proximity to those places.

Oh, far, far longer than that. Everyone is ignoring the fact that fish and other sea creatures also shit in the ocean, and were doing so for billions of years before humans even existed.
Step 3: Profit

This actually does exist, in certain locations. In mine's US state, I plan to install beehives and get an agriculture exemption, which prevents me from developing 99% of property (minus driveways / logging roads)... but also cuts property taxes massively.

You can then get additional conservation easements (10yr contracts) that then allow you to offset essentially all of a DINK household's W2 income.

Despite all the loopholes, this does keep the trees alive and generating oxygen / habitat.
Likewise, I had similar vibes between early versions of ChatGPT and my mother's Alzheimer's.

Not had that vibe for a while now, but I definitely noticed it.
Good luck implementing "peer pointers" in Rust. Zero allocation involved, trivial to do safely in C++.

class A
{
/* can be NULL if detached */
B *peer;
/* other fields generally exist in one of the classes. */

/* useful objects are typically created in pairs, but can be constructed detached if needed */
/* move ctor and swap keep the (value) objects pointing at each other */
/* move assignment and dtor call detach() on the overwritten/expiring object */
/* Often separate "detach and cancel" and "detach without canceling" are useful */
void detach();
/* other functions specific to the peerage */
};
class B
{
A *peer;
/* same API as `class A`, but usually most of it is only used via one owner. */
/* In my experience, generally one class's instance goes in some collection of centralized objects like an event loop, and the other is used as a handle to it. */
};

I guess we could always use the usual Rust solution of "screw ownership and efficiency, just shove everything in an `Rc<RefCell<>>`".
I love how this comment makes sense whether you’re on the left, right, or center.