skysight-inc/HackerNews huggingface dataset:
one question I still have is what exactly the performance issue was? I heard it might be related to enumeration of shared libraries, decoding of the scrambled strings[1], etc. anyone know for sure yet?

one other point for investigation is if the code is similar to any other known implants? like the way it obfuscates strings, the way it detects debuggers, the way its setting up a vtable, there might be code fragments shared across projects. Which might give clues about its origin.

[1] https://gist.github.com/q3k/af3d93b6a1f399de28fe194add452d01
At Pinterest, when we were working from one of the founder's apartment, the internet went down. Lots of debugging later and we traced it to a cable that a squirrel had chewed threw..
Check this for example: https://www.zdnet.com/article/cisco-removed-its-seventh-back...

It's not always obvious but devs adding backdoors and vulns is not all that new.

The guy may have been anonymous here but a legit dev's github account compromise could lead to the same outcome.

Each open source project decides how much vetting is applied to contributors. I don't think you can contribute to Linux without using your real name and email for example. In some countries, getting a job for the express purpose of sabotage is very common. People using stolen id's to get remote dev job's is also a thing (although I haven't heard that being abused for backdooring). At least with open source, you can audit the code for anonymous user contributions and look at their policy for it.
In the first volume of Masks of God, Joseph Campbell points out that you can break all creation myths down to 3 categories: Creationism (where there is a god that created the universe), Animism (where the universe itself is alive), and Participationism (where the universe is the result of some interaction).

He then points out that if you ask random children to make up the story of how the universe was created, the story they tell you will (essentially without fail) fall under one of these 3 categories, and you can also categorize which one the children tend to favor based on stages of development. Very young children tend to favor animism and participationism, while older children (who are becoming more self-aware of their dependence on their parents) tend to favor creationism of some kind.
Lucid starts at twice the price of a Model 3
What is supposed to be low? In my casual supermarket label reading you seem to get at least some carbs (non-fiber) from things like cauliflower and other greenstuff. I was happy when I could get stuff that all had at most 5g carbs per 100g. But I was doing very informal low-carb and not keto.
There's a middle ground between legalization and prohibition - consumption is legal / decriminalized, while sale is illegal. Some European countries follow this model for weed and other drugs.
Between Multi-Account Containers (separate browser containers for more or less every single domain), using pihole for DNS, uBlock Origin, and Privacy Badger, I scarcely ever know right away why various sites don't work for me.

I can sometimes be arsed to disable stuff until it works, but often it's a good pause where I consider whether I give enough of a crap about the site to bother.
Good catch on the wiki authors.

But I think the point of salting + hashing the password isn't quite the same as what TLS offers. It's not necessarily to prevent MITM eavesdropping, but to help protect the user from credential re-use from leaks.

What was I taught is that your server should never have the user's cleartext password to begin with, only the salted hash. As soon as they set it, the server only ever gets (and saves) the salted hash. That way, in the worst case scenario (data leak or rogue employee), at most your users would only have their accounts with you compromised. The salted hashes are useless anywhere else (barring quantum decryption). To you they're password equivalents, but they turn the user's weak reused password (that they may be using for banking, taxes, etc.) into a strong salted hash that's useless anywhere else.

That's the benefit of doing it serverside, at least.

Doing it clientside, too, means that the password itself is also never sent over the wire, just the salted hash (which is all the server needs, anyway), limiting the collateral damage if it IS intercepted in transit. But with widespread HTTPS, that's probably not a huge concern. I do think it can help prevent accidental leaks, like if your auth endpoint was accidentally misconfigured and caching or logging requests with cleartext passwords... again, just to protect the user from leaks.
Goff being one of the most popular modern panpsychists you're save to assume he's aware of its history.

I guess he uses the term less these days because it's too easily dismissed as something esoteric.
Emailchaser.com is seeking a passionate and seasoned Front-End Engineer to join our team. The ideal candidate will have a strong focus on creating exceptional user interfaces and a deep knowledge of the MUI (v4 & v5) framework.

Requirements:
* Proven experience as a Front-End Engineer (minimum 5 years); * At least 6 months of hands-on experience with the MUI5 framework; * Proficiency in NextJS is a significant plus; * Deep understanding of web technologies: HTML, CSS, and JavaScript; * Excellent problem-solving skills and attention to detail; * Ability to work collaboratively in a team environment; * Passion for creating intuitive and visually appealing user interfaces. If you believe you are a good fit, please reach out to marcelo at domain name .com
So I'm a luddite but this to me is profound.

>If the cosmos is conscious in the way that we are and the speed of light proves to be a limit, then its thoughts would take thousands or millions of years to process.

Thanks for sharing.
What examples do you have in mind? I ask because both of my in-laws passed from very aggressive cancers, but there really isn't much I can point to as meaningful signs. In hindsight, it did seem like a lot of people in their neighborhood also passed from various cancers, but even then they were all different types and I'm not sure it was statistically significant.
THE SOFTWARE IS PROVIDED “AS IS”, WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Can you take the snappy one liners back to Twitter? Or at least try to have them make sense.

Guilt isn't necessary to be annoyed at someone's word choice. The chosen words are presenting an implication that eating animals is morally wrong, and if someone doesn't believe that and eats animals then they are right to be annoyed by the implication that they are acting immorally. No guilt necessary.
This actor, and others like them, may have dozens or hundreds of these things out there. We don't know. This was only found accidentally, not via code review.
Wait, I though the cheesemakers are blessed?

What if it's Whiz?
Thanks! That’s a little disappointing since I would have thought that the way it hooked those functions could’ve been caught by a generic heuristic but perhaps that’s more common than I thought.
It's old and there are probably friendlier options out there now, but

https://github.com/moxie0/knockknock/blob/master/INSTALL
"OpenAI has said Altman does not have financial interest in the fund despite the ownership."

Can someone explain how this could be true?
Imagine how many more would have died if no one washed their hands.
This looks related to some other problem:
- There is Alice's server which provide service X
- There are clients like Bob who needs this service.
- There is Mallory who thinks clients doesn't need such service. Mallory have significant resources (more than Alice or Bob).
- Mallory thinks it's ok to block access to Alice' server IF it's known that it's Alice's server and not some random site. Mallory sometimes also thinks it's ok to block if protocol is unknown.

This problem solved by XRay in all of it's versions. It could be possible (if overkill) to use mostly same methods to authenticate correct user and provide eir access.
I'd say Ned Stark Associates, Fancy Bear, etc.
Sorry, but why would 'April Tools' be better?
I'm not a lawyer, but I've been involved in a fair bit of venture fund formation.

A fund is not an incorporated entity, but rather a partnership of two persons. In a limited partnership, one of those persons is the general partner and does all the work and assumes the related liability, and the rest are "limited partners" who just commit capital.

Banks and tax authorities only open accounts for actually-formed partnerships, not hypothetical partnerships that might happen in the future. But, you need a bank account for the LP investors to send their money to.

So, in my experience it is super common to have a temporary Initial LP, which is usually a related person (one of the founders of the firm acting in their personal capacity, for example), to allow the Initial LP and the GP to form the fund and open the accounts. Then the Initial LP withdraws in the actual closing event where the investors sign onto the partnership agreement and commit their money.

I have never seen an "initial GP" though. I believe the explanation, but can't really figure out why one would be necessary. Maybe they wanted to incorporate a GP Co, but didn't get around to it?

Love to hear any theories why this might be useful..?
Congrats on open sourcing your project!

I see that it relies on mongodb, at a first glance this seems a good fit for a forms oriented product - looks like using a document db for actually dealing with documents. How did it work out for you? Would you choose it again?
that's great for him. i'm glad he enjoyed the $$$ playing with VR. that has nothing to do with my point about his irrelevance to this LLaMa discussion.
Not sure how to meaningfully participate in the movement, but certainly to watch Terraform Industries progress should be quite interesting.
Awesome but it should be divided by 10, not 1.23
Your attitude reminds me of the religious fundamentalists I grew up with, who were still arguing about "evolutionism" and expressing skepticism over the idea of geological time as recently as the '80s and '90s.
If open source, free software is a good enough ethos for your code base, it should be good enough for your community communications. Supporting only a proprietary locks out a swath of users & Discord in particular is an information blackhole—and now with ads!
Oh wow, don’t encounter Lichtheim too often on most parts of the Web!

There’s a third volume, too. Nb they were released far enough apart that later volumes contain errata for earlier ones (like calling out fraudulent or mistaken dates on some of the works, which errors weren’t discovered until after the volume was printed)

I’ve read them cover to cover. Tried that with single-volume collections of Akkadian and Sumerian literature, but they were way harder to follow—too fragmentary, too little context. Didn’t finish either.

Gilgamesh is amazing though, and easily the best pre-Homeric work I’ve read, zero competitors are even close.
This exact virus (H5N1) has at least 15-30% mortality. The exact number is really hard to know, because there have been too few cases, but it's certain to be at least 20 times as deadly as SARS-CoV-2.
It could mean there were other agreements, where he didn't put any money into the fund and all profits were contractually obligated elsewhere?
> If this trend continues

My favorite one is that half the US labor by mid-XX century would be telephone switchboard operators. (Fuzzy numbers.)
Congratulations!

Though I can't still wrap my head around it:

1. Terraform needs to produce hydrogen using electrolysis. Turning hydrogen into natural gas requires more equipment and energy.

2. Simultaneously, we transform natural gas into hydrogen through natural gas reforming. Currently, hydrogen is vital for fertilizers and refineries. This also uses energy and a lot of equipment.

So, before we produce synthetic natural gas, displacing hydrogen produced by fossil fuels with electrolytes should be more economical.

On top of that, fertilizers such as ammonia are way easier to ship worldwide than natural gas.
That's insane. How exactly does this happen? Are there no EDR/IDS who can detect an RCE at the connection stage?
A million dead people, sufficiently far from us in any particular dimension, don’t matter. It’s a funny piece of human psychology. Deaths years ago or years in the future, or in Africa or wherever. Just don’t matter to most people. Goes double when they are “other”.
https://hn.algolia.com/?query=port%20knocking%20obscurity&ty...

20200515 https://news.ycombinator.com/item?id=23187662

etc.
Anthropic as a company only was created after GPT-3 (Dario Amodei's name is even on the GPT-3 paper).

So, in same time OpenAI have gone from GPT-3 to GPT-4, Anthropic have gone from startup to Claude-1 to Claude-2 to Claude-3 which beats GPT-4 !

It's not just Anthropic having three releases in time it took OpenAI to have one, but also that they did so from a standing start in terms of developers, infrastructure, training data, etc. OpenAI had everything in place as they continued from GPT-3 to GPT-4.
It would be really interesting if laws worked like this. If violent crime is too high, alcohol sales are shortened by an hour. This continues until violent crime is low.

Same thing with drunk driving. In fact, bars need to have some culpability as well if a lot of their patrons are causing destruction. Maybe this will encourage them to self-police and not over-serve.
Right. So that is about perspective, in the sense of ability to observe things.

This seems separate from capacity to understand them, after gaining the ability to observe them.

I'm not convinced by the second part, about human knowledge becoming too gnarly for humans to cope with except by group effort. This a breadth vs. depth question, but depth is the winner over time I think.
> if you blanket-ban IN/RU/UK/CN/HK/TW/IR/MX/BZ/BA

The list of countries there: India, Russia, United Kingdom, China, Hong Kong, Taiwan, Iran, Mexico, Belize, Bosnia and Herzegovina

I’m amused that the UK is in that group.
Former house of WWII hero (Raoul Wallenberg) may be demolished for Michigan dorm
As a father of a daughter named Claudia, it has that property as well, although that doesn't help you since you have a son.
Interesting... Though you can edit whatever log file you want
Great example: can't scale enough to remove their 30 requests per minute (!) rate limit and enable billing, barely meets 3.5 levels of intelligence, etc;

People don't seem to understand that scaling out LLMs efficiently is it's own art that OpenAI is probably learning lessons on faster than anyone else
> Panpsychism requires that the universe updates its state by conscious choice, which we already know happens

Can you clarify what we "already know happens"?

Even for humans, it's not clear that "conscious choice" exists and causes changes in state, because we don't know what the mechanism is that can cause a state change other than state at time T-1.
> The best thing you can do is create an environment where they feel comfortable coming to you when they mess up.

They also have to know that doing certain things online constitutes "messing up".
> allowing any random component is not the answer.

Leave that up to the owners of the device, they know better what they want than you do. Will there be scam attempts? Sure there will, like there are already. Inform about that risk - without exaggerating for monetary purposes - and let the customer decide. Not you, not the manufacturer, not the government.
The good news is that masks and hand sanitizers are much more effective against the flu, as seen in the pandemic when it virtually disappeared.
In my mind, this is part of the mysticism of the movement. If you define a word widely enough, then anything can fit. I hate to invoke this, but this often feels like a Motte & Bailey argument. If you want to call "God" the energy which started the big bang, you're sort of smuggling personification into something which really bears zero resemblance to traditional religious ideas. And so it is with consciousness. If we define consciousness widely enough so that a planet, galaxy, etc, could be considered conscious, then we've smuggled a familiar and personified concept into an arena where it doesn't really apply.

A great example would be trees: trees "sleep", they communicate with each other. They have immune responses, they mate, etc. But there's no coherent reason to think of trees as conscious, unless you just stretch the definition outside of its common meaning.
Been a while since I've looked at it, but pretty sure std::format validates and parses most (all?) format strings at compile time. There should be no runtime penalty.
> Panpsychism requires that the universe updates its state by conscious choice, which we already know happens...

Do we know this?
The problem is then the reputation to humans reviewing links. A legitimate company sending from legitimate-company-transactional-emails.com looks exactly like a phishing scam sending from legitimate-company-scam-emails.com. This can be mitigated by not putting anything important in the email ("You have a new message on MyChart, figure out on your own how to view it."), but people will be confused and it will waste support time.

It's honestly really bad no matter which route you choose, which is why everyone is so intent on getting you into their mobile app that can spam you without affecting their reputation.

Also, even if marketing emails are sent from a separate domain, sales people can be sending so much "spam" that your normal humans-at-the-company emails start getting rejected. I think this might have happened at my last startup; email reputation got bad, interview candidates didn't get their interview conformations anymore. But I might be misremembering.
If you find coral deposited more than 100ft above sea level, it's another marker of danger... although perhaps on a longer time scale.

Hawaii has several examples of this (coral found at sites over 500ft) from what are assumed to be Mega-tsunami.

https://www.e-education.psu.edu/earth107/node/1610#:~:text=O....
Most, if not all, bars and/or bartenders already have culpability for “over serving”.

https://en.wikipedia.org/wiki/Dram_shop

>Within the United States, laws that impose potential liability upon businesses that sell alcohol for injuries caused by their patrons are usually called dram shop laws or dram shop acts
> bigger foundations like Apache or Mozilla

What bigger foundations? Apache foundation has yearly revenue $2.1 million. Why do you think they reacted as they reacted to log4j? There are no resources.

Open source is running on fumes.
This might be the next direction of EU legislation.
This is going to sound maybe darkly humorous, but one of the reasons we haven't been able to make much use of AI is because the natural language content is itself nearly-universally incorrect, incoherent, or just plain gibberish.
It's true even in published documentation - they are full of garbage.

The garbage that gets tossed back in the AI team's face is a very similar flavor to when I first started doing doc analytics but with older techniques (topic modelling, embedding, ontology, clustering, some xquery/jquery/mongo crap, good ol' regex). We saw things like single digit percentile commonality between configurations that were, on-paper (and in the logistics system!) identical, or landing gear classified as a fuel system component, or whole assemblies without fasteners.

What happened from that great revelation from back in the day?

Absolutely nothing. There was no funding to fix any of it, because dollars and charge codes came from new projects. The directive remained: just shut your mouth and keep churning XML for the latest gee-whiz kludge sold to some sorry USMC procurement department head. No one reads the damn thing, no one reviews it, and it'll take an officer dying from your product before anyone notices.

The absolutely terrifying take away I have from this is that some bright spark upstairs is going to realize they can generate garbage all day long so much more cheaply with generative AI, rather than taking a biiiiiiig step back and consider whether publishing garbage was a good idea in the first place. I'm going to put money on "Nope!", which I guess is the place to make money right now.
Not even the next town as the experiment was conducted on one neighborhood and compared to a 'control' neighborhood.

Not too sure how I feel about them using laws to conduct experiments as people supposedly have equal protection under the law. I also wonder how the business owners feel about this.
How many of those ~500k users at a high level have differing thoughts? Like how do you stick out as 1 in 500,000 if everybody thinks the same way and shares the same kind of content and feels the same way about it?

What kind of content can you expect to find on Trump Media app? Is it like the same topic every single day? Doesn't that get old? How do you drive engagement?

Once you find 500k people who think the same way, how do you find the next 500k? If they don't think the same way, won't they feel like they don't want to engage with that platform because they won't fit in?
This Guy

https://news.ycombinator.com/item?id=39877604
As per my other reply to your other reply, when I've written code that actually does `await` in a loop, it already does all the work concurrently. There's a code sample that illustrates what I'm familiar with.

On the other hand, the language designers are not random framework authors. They know what they're doing. There must be some reason why `Promise.all` exists. I just don't know what it is.

To re-iterate, I understand the difference between serial and parallel tasks. But I have also found that it's possible to do parallel tasks with `await` in a loop. So I'm still missing something.
Do you have another source of income? If someone just use it without giving you money or code contributions, would you feel ok?
The team behind this has been putting out some quality work recently. Very glad to see it.