skysight-inc/HackerNews huggingface dataset:
Well, every interaction with the page takes 30s+ as if it's making a request to a server under heavy load. Clicking a button does nothing, clicking into the text box doesn't even show a cursor.
I think OP was referring to parameter size. You can make up for quantization by having more parameters.
I'm 100% going to clone my voice and use it on my discord bot.
The PR's two commits are signed by a key that was also used to sign previous commits belonging to that author.
WebRTC will live on. I think it will continue to grow from grassroots efforts.

WebRTC has P2P and it also doesn't require the user to have any knowledge of Video/Networking. The alternatives to it are more geared at 'video developers'. I don't know which way the future will go.
It's really not, it's not hard to do a reverse search of [broken lib] <= depends on <= [rust application] and then rebuild everything that matches. You might have to rebuild more, but that's not really hard with modern build infrastructure.

Not to mention if you have a Rust application that depends on C libraries, it already dynamically links on most platforms. You only need to rebuild if a Rust crate needs to be updated.
> if a series of scientifically sound (tabletop) experiments

Does fruit hanging this low still exist?
"Space in academic journals is precious"

Well thank god we have preprint servers which have no such stupid requirements.
The author (Jia Tan) also changed the xz.tukaani.org (actually the github.io, where the main contributor is, surprise, also them) release description to state all new releases are signed by their OpenPGP key. I'd guess that was one of the first steps to a complete project takeover.

I hope Lasse Collin still has control of his accounts, though the CC on the kernel mailing list looks kind of suspicious to me.
eh, you mean the solution isn't, so here's even more power... see you next week!
Agreed, I’ve been to two formula e races in past years, and have tickets to another two this year. I’ve been to Formula 1 which was definitely something, but still enjoy FE for the racing.
Only a very small proportion of developers make enough that they can be making what must have been north of $200k and still have another $200k difference in comp vs a peer. Low side of single-digit percentage. And I’m talking the US only, not globally.
There you have it! Romanian people taste much better than Finish!
If this question had a reliable (and public) answer then the world would be a very different place!

That said, this is an important question. We, particularly those us who work on critical infrastructure or software, should be asking ourselves this regularly to help prevent this type of thing.

Note that it's also easy (and similarly catastrophic) to swing too far the other way and approach all unknowns with automatic paranoia. We live in a world where we have to trust strangers every day, and if we lose that option completely then our civilization grinds to a halt.

But-- vigilance is warranted. I applaud these engineers who followed their instincts and dug into this. They all did us a huge service!

EDIT: wording, spelling
Related:

Apache Guacamole - https://news.ycombinator.com/item?id=29442643 - Dec 2021 (116 comments)

How to sell open source software: Guacamole case study - https://news.ycombinator.com/item?id=23624340 - June 2020 (29 comments)

Apache Guacamole 1.1.0 - https://news.ycombinator.com/item?id=22190251 - Jan 2020 (50 comments)

Apache Guacamole – Clientless remote desktop gateway - https://news.ycombinator.com/item?id=21660925 - Nov 2019 (40 comments)

Apache Guacamole – A clientless remote desktop gateway - https://news.ycombinator.com/item?id=15778902 - Nov 2017 (41 comments)

Guacamole – A clientless remote desktop gateway - https://news.ycombinator.com/item?id=15389727 - Oct 2017 (216 comments)

Apache Guacamole - https://news.ycombinator.com/item?id=11744430 - May 2016 (57 comments)

Guacamole – HTML5 Clientless Remote Desktop - https://news.ycombinator.com/item?id=8166388 - Aug 2014 (78 comments)

Guacamole is an HTML5 + JavaScript (AJAX) viewer for VNC - https://news.ycombinator.com/item?id=1503837 - July 2010 (11 comments)
> there's been a PR campaign being set up to push out Sundar.

There has been mumblings of that for the whole time he has been CEO...
Whether its reasonable is debatable, but that type of time frame is pretty normal for things that aren't being actively exploited.

This situation is perhaps a little different as its not an accidental bug waiting to be discovered but an intentionally placed exploit. We know that a malicious person already knows about it.
No, it really is. I've got experience with multiple languages / multithreading approaches and could argue it means 3 different things. I don't know what others think the question is about.
Radicle: Peer-to-Peer Collaboration with Git
I'd argue sticking with the turbo hybrids in 2026 is the outcome of a sunk cost fallacy: FIA have already acknowledged the complexity has been unsustainable by dropping the MGU-H; Red Bull successfully campaigned for the engine freeze just so they could get RBPT set up for 2026; Renault have been totally unable to catch up even taking full advantage of the reliability loophole and moving to split-turbo. Surely dropping turbos and electric propulsion would save more than going back to more cylinders would cost.
An open-source equivalent: https://github.com/fjxmlzn/FindMyHistory
I like the decision tree analogy
No, you skipped the context, which says that in the introduction you talk about special cases to build intuition, and then provide the general result in the technical part.
At first I thought that this surely could not be true as of today, but it looks like it is.

There is AF_UNIX support, but only for streams and not datagrams: https://bugs.openjdk.org/browse/JDK-8297837

What an odd decision. I suppose that you could execute systemd-notify but that's a solution that I would not like.
What about the parent comment? Nothing he said was substantive. "Read your own article" "Like… shut up." "I don’t give a shit"

https://news.ycombinator.com/newsguidelines.html :

> Comments should get more thoughtful and substantive, not less, as a topic gets more divisive.

> When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened to "1 + 1 is 2, not 3."

> Please don't fulminate. Please don't sneer, including at the rest of the community.

> Please respond to the strongest plausible interpretation of what someone says, not a weaker one that's easier to criticize. Assume good faith."

Oh and just for you, wpguy:

> please don't create accounts routinely"
I'd assume chances of monetizing this are incredibly low. There already is an init system that understands systemd unit files, the name escapes my mind unfortunately. DO-178C might be a selling point literally, but whether there's enough potential customers for ROI is questionable.
Low to mid experience and trying to land FAANG-alike or finance jobs, I think. The “merely” 1.5-3x median household income comp range sure seems to have remained healthy, even for newbies.
Under Limitations: Datagram support
Makes me wonder if he's an owner of the github organization, and what happens with it now?
I've never had a web presencse for my associated emails due to wanting to avoid spammers. I don't have a false identity.
>I would argue it does bite them, but by the time it does it's someone else's problem.

In almost all cases, it's the consumer that gets bitten.
They already dropped the MGU-H from the 2026 V6 engines in order to convince Audi and GM to enter as engine manufacturers since that component addend extra cost and had no applications in road vehicles so we can assume that they wouldn't have been thrilled to enter if they had to developed V10s now.

Yeah, maybe Ferrari had unlimited moneys for V10 development, but for Mercedes Daimler already is skeptical about the benefits of the F1 program, and Renault's engines just suck this season, and Honda left the F1 program in 2020 then decided to not leave just for Aston Martin but would have probably nto been the case had they needed to switch to V10s.
I've been rated in top tier/exceeds status for the last two years as a Senior level tech employee at a FAANG. This is after working up from entry level at hire, and promoting two times. Despite high performance and successful delivery of large projects, my base salary* has increased less than 3% in three years.

Every single year, the company has come up with an excuse to not raise base salaries. It typically relates to economic intangibles, stock performance, or whatever corporate alphabet soup they choose. People hired halfway through my tenure got hired on with substantially higher base salaries, some who are a level below me.

I really enjoy the work I do, but I just can't sustain less than 3% income growth over the course of the next three years. That's why I am looking elsewhere, not because I want to, but because I have to. Some roles I'm seeing below Senior level have starting salaries 50% higher than mine.

*I am aware of the concept of total compensation and I do get company stock, but you can't pay bills month-to-month on funds that are six months away from being available, and you aren't sure whether you'll see a 6% upside or 6% downturn.
The author (a mathematician) is not proposing that mathematical research papers be written for a general audience. He is proposing that they be written in a better way for mathematical professionals.
It's been pretty interesting to see some research trying to solve this. For example, Stanford researchers recently published QuietSTaR[1]. This makes LLMs "think" before they speak. By generating a chain of thoughts and just choosing the best possible path from the generated thoughts.

This method is better than Chain of Thought and I think is a step in the right direction.

[1] https://arxiv.org/abs/2403.09629
What's an "Infinite Polygon Engine"?
> a lot of mathematics has gone past the point of diminishing returns when it comes to its usefulness or even artistic elegance as an abstract art of the intellect.

This reads like a quote from 200 years ago.
Credit Card Swipe Fees Are Going Down. Are Points Going with Them?
I’ve also heard that because of lockdown only the stronger variants of different viruses made it. So we’re dealing with them now. But I haven’t heard of any study about it yet.
No kidding. They told me they wouldn't reimburse me if it happened again which is why I deleted my AWS account and moved to something else.
It's fine to have a word reused in different contexts, but we've had a lot of "gemini"s in computing/tech, and in fact we've had an actual mobile computer device named gemini already ( https://en.wikipedia.org/wiki/Gemini_PDA ).
Lang's Fairy Books are interesting though obviously very "of the time," as we say. But in those and his work editing the Folk-Lore Journal (of which I have a few volumes) he was taking on or nurturing some really serious anthropological literary work. Check out up Sidney Hartland's The Forbidden Chamber, which establishes Bluebeard tales as a "type" seen across multiple cultures and times.

https://en.wikisource.org/wiki/The_Folk-Lore_Journal/Volume_...

Really interesting stuff. His translations with Leaf and Myers are nice but not exactly poetry, I wouldn't recommend them to anyone as a first read of the Iliad.
Didn’t California already have a homestead exemption and a senior exemption?

https://www.boe.ca.gov/proptaxes/homeowners_exemption.htm

https://www.boe.ca.gov/news/2021/NR-21-02.htm
It's not ironic, this change is really sinister IMO. They want you to waste more time after you've submitted the security report and maximize the amount of back and forth. Basically the hope is that they'd be able to pester you with requests for more info/details in order to "resolve the issue" which would give them more time to exploit their targets.
Oh man. The was a scenario that didn't cross my mind. I was too narrowly focused on the technical aspects rather than the social aspects of security. Great point.
Did something like and unlike this a while ago. Payment processing system, multiple microservices written in Java on a cloud platform. Tool runs on a developer machine, uses the cloud tools to SSH into a running container and run jdb. It can add a breakpoint, wait for it to get hit, then do a selected thing - resume immediately, delay a while then resume, throw an exception, hang forever, etc.

The main tool can also manage the platform, so start the app, kill individual containers, etc. And inject payment messages, and wait for payments to be sent out.

So you could write test plans like "add a breakpoint in ValidateAccount::isValidSortCode, inject a payment from customer A, wait for the breakpoint to get hit, inject a payment from customer B, throw a NullPointerException, then check that the payment from customer B gets delivered".

We didn't do systematic testing of failure at every point, as in the article, but it was very nice to be able to automate testing of error cases without having to have special code in the app for it.
> It feels much more like the Soviet Union collapsed than the US won.

Soviet union just collapsed faster than US. US was in orders of magnitude better shape after WWII. This gave it >5 decades longer slippery slope than USSR had. But it will collapse in a decade, especially if it attempts to go head to head when China takes back Taiwan in 3-5 years.
But what is the end goal of OpenAI? Be a non-profit AI R&D leader, convert to for-profit and then sell(license) its AI tech to other companies or get acquired and then eventually devoured by Microsoft?

In this shape and form OpenAI is not a threat to Google; since Google is extremely versatile, taking in consideration how fast they adapted to iPhone threat with their alternative smartphone OS(Android) and taking in consideration lack of clear long-term vision of OpenAI's leadership.
I want to preserve samples of my voice as I age so that when voice replication technology improves in the future, I can hear myself from a different time of my life in ways that are not prerecorded.

I would also like to give my children this as a novelty of preserved family history so if I so desire, I can have fun with them by letting them hear me from different ages.
The same paper should have both: an introductory section that lays out the intuition (possibly via special cases), and the main technical body which provides the terse technical details.
> You twisting the narrative to fit your agenda.

The students don't advocate any position on Prop 13. It's a popular law, and I'm a betting man, I would bet that the average Californian supports it, so the average student-now-adult does, and indeed, maybe that's why it was so hard for Jones to make a persuasive case. Unambitious students want low taxes more than they wanted better educations - sounds stupid, because it is. Anyway, my agenda is only the surprise at the students being the bad guys.

I think their privacy got validated for some sense of privacy. I just don't think it matters, at all. I think they are wrong to care about it so much, and the particular way and circumstance and sense their violation occurred, keeps me protected for my privacy in all the ways it matters. They are totally orthogonal. Tough cookie.
Related XKCD: "How close would you have to be to a supernova to get a lethal dose of neutrino radiation?"

https://what-if.xkcd.com/73/
How Stability AI’s founder tanked his billion-dollar startup
Okay sure, we can make that argument. But that's not what they said. "Profiting" off public money is just embezzlement.
See, people drop dead from OSS projects pretty frecuently, usually because they take on other life responsabilities and there is no cushion or guard against a bus factor.
Then it is very easy to get credentials compromised or have your project took over by someone else.
Maybe our consumption habits are different, but why would you want an AI buying your groceries?
All of us act, much of the time, on varying degrees of autopilot. It's unlikely that the automatic parts of the brain can read, although presumably they are quite capable of pattern-recognizing and processing learned symbolic language like traffic signs (and even that's by no means guaranteed – so many humans merrily ignore or miss changes in signage in traffic, having traveled the same route a thousand times before).

The strength and type of stimulus required to "wake us up" – for the brain to realize there's something novel or unexpected that requires the activation of higher-level, analytic parts of the brain – probably varies a lot from person to person, but just a bunch of text is not always enough to do that unless accompanied by familiar semiotic language, which is of course the reason we use symbols and colors to make important messages more likely to be perceived and understood. The best wake-up signals are, of course, those that physically prevent you from doing something you intended to do – a locked door, for example.
Maybe I'm miss understanding things, but it seems like anyone can publish an exploit on the internet without being a crime. In the same way encryption is free speech.

It would seem unlikely this guy would be also logging into peoples boxes after this.

It seems a much tougher job to link something like this to an intentional unauthorized access.

At this point, we have no confirmed access via compromise.

Do you know of a specific case where the existence of a backdoor has been prosecuted without a compromise?

Who would have standing to bring this case? Anyone with a vulnerable machine? Someone with a known unauthorized access. Other maintainers of the repo?

IANAL but it is unclear that a provable crime has been committed here
To think of non-evil versions just consider cases where right now there's no voice actor to replace, but you could add a voice. E.g. indie games.
Imagine someone tried to revert all the commits you ever did. Doesn't sound easy.
You absolutely can put Kobe on a Wheaties box without problems legally, IF you do not sell it. That's "fair use." It has not been tested in court yet, but precedent seems to suggest that creating voice clones for private use is also fair use, ESPECIALLY if that person is a celebrity, because privacy rights are limited for celebrities.
There has been a lot of news/retrospectives but this is new, and is based off of "Company documents and interviews with 32 current and former employees, investors, collaborators and industry observers"
Where climate hawks meet China hawks
Ahh, those seems like great reasons. Double congrats, and thanks for answering!
> The CHSH experiment suggests otherwise: that when one person loses the other person is less likely to also lose, such that the likelihood of both losing is only 15%. How can this happen? I haven't a clue.

That’s easy, even without quantum mechanics. All you need is to have a different distribution of lottery tickets. Print tickets such that, if one wins, the other is more likely to win, which you can do by having the number of winning spots per ticket be random and correlated. For example, there could be a 50% chance that neither ticket has a winning spot and a 50% chance that each ticket has one winning spot.

But you could imagine a pair of tickets with internal radios, such that, when you scratch one, it tells the other one, and together they simulate a general function where the joint probability of (win on ticket 1, win on ticket 2). If you set up the probabilities appropriately, then you can’t use the tickets to send a signal, and the result is referred to in the literature as “non-signaling boxes” (the magic tickets are the boxes).

Quantum mechanical entanglement can do something like this, except that the probability distributions you can generate with entanglement are a subset of the more general non-signaling boxes.
https://affiliarena.com/a/bdc/
Some of those commits might fix genuine vulnerabilities. So you might trade a new backdoor for an old vulnerability that thousands of criminal orgs have bots for exploiting.

Damage wise, most orgs aren't going to be hurt much by NSA or the Chinese equivalent getting access, but a Nigerian criminal gang? They're far more likely to encrypt all your files and demand a ransom.
It's mechanically simpler until the apex seals blow out. Then you are fucked
Yeah, if you work on the applied side of math it can be very similar to what people do in physics. But I was thinking more about pure math.

Edit: I think the main difference there is that in applied math they still prove that the models are mathematically correct. In physics they just show that the model align with experiments and skip math formalism.
Yes, this is the chosen "solution" to banner blindness
I'm not sure how you came to this conclusion, but that's not true. Well neither narratives are rather. There is no reason to believe fuchsia doesn't have a future anywhere Linux currently runs, but also, the goal isn't necessarily to supplant Linux.
>The legal industry is self-creating this issue because that makes their services more necessary.

I guess that is similar to software industry creating insane complexity to make their job more necessary.
I’ve wondered about the same point for a long time. In smaller language models of chemistry the tree search in decoding has made a huge difference [1]. If the training data set doesn’t include the right conditioning it may be hard for the LLM to learn to associate high probability answers with more useful answers, however, this seems like a solvable problem for many subdomains.

[1] search for branch-and-bound in: https://pubs.acs.org/doi/10.1021/acs.jcim.0c00321
What exactly is "all-ponies-and-rainbows" about this sentence:

"One of the main problems in gauge theory is understanding the geometry of the space of solutions of the Yang–Mills equations on a Riemannian manifold."

The author is not proposing to write wordy prose. He is proposing to write understandable prose instead of incomprehensible pages of equations.
> I must dive into each rust binary I distribute as part of my system and inspect their Cargo.toml

A few things:

1. It'd be Cargo.lock

2. Debian, in particular, processes Cargo's output here and makes individual debs. So they've taken advantage of this to already know via their regular package manager tooling.

3. You wouldn't dive into and look through these by hand, you'd have it as a first-class concept. "Which packages use this package" should be table stakes for a package manager.

> Then what? Do I fork each one, bump the version, hope it doesn't break everything, and then push an emergency release!??!

The exact same thing you do in this current situation? It depends on what the issue is. Cargo isn't magic.

The point is just that "which libraries does the binary depend on" isn't a problem with actual tooling.

People already run tools like cargo-vet in CI to catch versions of packages that may have issues they care about.
Understandable. Just another best selling book was butchered by USA filmmakers.
This also means that Google might know who they are, unless they were careful to hide behind VPN or other such means.
Ok, so then evaluating whether Thomas Kurian is doing a good job, discussing and pressure testing the rationale behind his proposed targets and strategies, figuring out how they fit in with the broader company strategy and communicating this vision effectively, having a contingency plan if Thomas Kurian leaves or a better candidate for Cloud CEO appears on the radar. These are just off the top of my head.

You seem to believe “Delegation” is a passive act; the reality is Hassabis would end up spending, generously, about 1/10 of the time he is now thinking about things like how to monetize LLM’s.
Any recent books you suggest on "direct response marketing and copywriting"? I've tried to read "how to win friends and influence people" "ogilvy on advertising" "traction" but haven't taken actions yet.