skysight-inc/HackerNews huggingface dataset:
So, you’re 24. You’re already learning C++, and that great. I didn’t write a line of code until my late 20s. I’m doing ok now. You’re well on track.

It’s hard to write code. It’s even harder get started because you’re learning how to learn. The learning curve is exponential but that also means incredibly slow in the beginning. Be patient with yourself.
They're not reasons for a CEO to get a multi million exit package.
yes, true, but also offtopic? Why are you bringing this up? This feels like 'anchoring' to me https://en.wikipedia.org/wiki/Anchoring_effect
Is all the mystery and intrigue surrounding OpenAI deliberate or just the natural consequence of a single firm holding keys to the greatest technology the world has ever seen? Crazy how casual and incidental so much of their PR seems.
I hope he's doing alright.
Did they report the crimes? No.
Could be something like spinning up the power plant to meet demand, storing the co2 and treating it when there is excess renewable energy available. Sure you could build more renewables instead, but if it can be retrofitted onto existing power plants for less cost than replacing the plant with renewables, it could make financial sense.
>Ironic considering security is often advertised as a feature of rolling release distros.

Security is a feature of rolling release. But supply-chain attacks like this are the exception to the rule.
Any fossil fuel power generation I think is permanently left behind by the current solar/wind LCOE economics, and it's only getting more lopsided every year.

Of course load leveling / industrial power generation / etc will still be a huge need as will long haul shipping (that could use carbon capture). So those would benefit.

Something to make carbon extraction from the sea/air that is economical would very much be welcomed, an actual carbon tax would help even today.
I agree, up to about junior high you can restrict smartphone/tablet usage. At about 12 it really seems like the social pressure to have a phone becomes really intense, unless there's some school wide restriction.

I guess one question is how you introduce it in a way to inoculate them against the addiction without just allowing it. Mostly, I've just seen temporal restriction, but by 16 or so they can afford to have a "burner" so it's much harder to restrict at all.
Well, I don’t plan on killing anyone so I don’t mind having an alibi.
Also no. It was rolled back hours ago, and cache.nixos.org keeps all past builds so it didn't even need rebuilding.

Orthogonal to that, the backdoor was irrelevant to nix in at least three different ways: the malicious build logic targeted rpm/deb build environments and so didn't trigger in nix's build sandbox, the backdoor code makes assumptions about filesystem layout that are invalid on nixos and so wouldn't have activated anyway, and nix doesn't include the downstream patch that results in the backdoor even getting into sshd's address space. Still got rolled back out of an abundance of caution, but nix got lucky that the attacker didn't bother targeting it the way they did debian and rpm-based distros.
Parents get in trouble for letting their kids get hurt these days. And healthcare ain’t cheap either.
Hey now, I made a killing in AWS consulting to convince megacorps to get rid of their own hardware and avoid going the OpenStack route.

The problems of pre-IaaS and pre-K8s were manageability, flexibility, and capacity utilization. These problems still haven't really been solved to a standardized, interoperable, and uniform manner because stacks continue to mushroom in complexity. Oxide appears to be on the right track but there is much that can be done to reduce the amount of tinkering, redundant abstractions, and avoiding conventional lifecycle management and cross-cutting concerns that people don't want to think about whenever another new way comes along.
Its also been a problem in Australia, Optus (2nd biggest teleco) used to allow number porting or activating sim against an existing account with a bare minimum of detail - Like a name, address and date of birth. If you had those details of a target you could clone their SIM and crack any SMS based MFA.
No Traces of Life: Israel's Ecocide in Gaza 2023-2024 (report)
> We used remote sensing to measure the scale of agricultural destruction resulting from this military activity, by comparing the region’s ‘vegetation index’ (an indicator of the health and robustness of plant life, measured by analysing satellite imagery) before and after the invasion. This comparison reveals that as of March 2024, of the agricultural areas targeted, approximately 40 percent of the land in Gaza previously used for food production has been destroyed.

This report is great evidence of the man-made nature of this famine, to be presented before the International Court of Justice. The Court recently indicated additional provisional measures[1] to curb use of famine as a means to wage this war:

>In its Order, the Court observes that, since 26 January 2024, “the catastrophic living conditions
of the Palestinians in the Gaza Strip have deteriorated further, in particular in view of the prolonged and widespread deprivation of food and other basic necessities to which the Palestinians in the Gaza Strip have been subjected”, and that “Palestinians in Gaza are no longer facing only a risk of famine, as noted in the Order of 26 January 2024, but that famine is setting in”. In the view of the Court, “the provisional measures indicated in the Order of 26 January 2024 do not fully address the consequences arising from the changes in the situation . . . , thus justifying the modification of these measures”.

[1]. https://www.icj-cij.org/sites/default/files/case-related/192...

Twitter thread: https://twitter.com/ForensicArchi/status/1773675994332700678

Archived: https://web.archive.org/web/20240330050341/https://forensic-...
No, rotary engines are terrible. For one, the equivalent of variable valve timing doesn't exist/cannot exist for rotary engines, unless Mazda creates a miracle. VVT and VVL lets you do some insane things in terms of efficiency and good engine behavior, so the rotary falls behind a lot.

The rotor is pretty much unable to be cooled too.
Github making suspect repository private and hiding recent account activity is wrong move and is interfering with citizens investigation efforts.
That doesn't really sound like a right and if it is you probably signed it away when you bought the car.
> How is it illegal for the CEO to have a vision for the future of the product?

It's not, but naming your product to intentionally mislead people into thinking that it's the present of the product is
It does make you wonder why they felt they wouldn’t be overplaying their hand. At this point, even if they reversed course the trust is broken.
It's okay to make a distinction between transient and steady-state communications. If the steady-state is p2p then that's good enough for me. BTW I've never built one but I've read that WebRTC can connect browsers on a local LAN if they can see each other's IP address. (This is actually an experiment I'd one day like to do.)
Yes, but even states have only finite resources, so even for them compromising an account would be cheaper.

(But you are right that a sleeper would be affordable for them.)
Separating assets from liabilities, and cross-charging between related entities often seems to surprise those who don't own and run businesses. But it's basic business 101 which is pretty common everywhere.

Think of it this way. You build a business over 40 years, accumulating value along the way. You would be crazy to leave all that accumulated value in a high-risk entity (which a business naturally is.) So periodically the value is separated from the risk.

So, for example, a business owning the building is nuts. The building is a different asset class, and should be in its own structure. Any reasonable new owner who acquires a business and building in one bite will move to separate them.

This is not scammy or fraud, its the ways things are done and should be done by the original owner.
Ad blockers work just fine on iOS, I don't see any ads at all on that page on my iPhone in Safari. Just using 1Blocker, nothing fancy
The Github profile linked in the article is pretty bizarre:

https://github.com/Jrbiltmore

I took a look at some of their repos, like "QuantumOS", and the code is nonsense! Each file has some simple code (sometimes in the wrong language) vaguely related to the filename, but none of it seems like a part of a larger whole, or substantial enough to do anything. It's as if they came up with a list of filenames, then asked ChatGPT or a similar language model to write each one.
It was literally called "Full Self-Driving".
Tesla hasn't used the term robotaxi in official material.

But they do regularly use the term "full self driving" which it definitely does not do.
Maybe Github should at least move it to a new URL so people can learn from this security case first hand.
https://en.wikipedia.org/wiki/Arm%27s_length_principle

There are a lot of the cases when the law requires arm's-length transactions, and those transactions definitely aren't arm's-length.
There's a few obvious reasons

- It's disguised malware which they probably don't want to host (even if it's widely reported, not everyone will have heard). It's probably significantly easier to disable the repo than for them to roll it back - and even if they wanted to roll it back it's not clear where to roll back to, and introduces more confusion.

- They were probably getting a continuous stream of reports regarding the repo.

- The repo was generating a continuous stream of "lol wow" comments on every object in it regarding the situation.

- They are probably concerned about fallout towards their reputation.

- No one has a pressing need to access the repo. You can't safely use the code from it etc. I'm sure someone will upload it somewhere for study soon enough. (Preferably in such a way that it's obviously to be treated as malware)

- The most likely scenario is that momentum will gather around a fork which will be a different URL anyway...
Not odd at all! The bits-per-second rate that spectrum was getting from a tape was 1200 bps.
Talking to AI 12 years ago :-)
It's very common in autoconf codebases because the idea is that you untar and then run `./configure ...` rather than `autoreconf -fi && ./configure ...`. But to do that either you have to commit `./configure` or you have to make a separate tarball (typically with `make dist`). I know because two projects I co-maintain do this.
Why do you think that "having a vision and working towards it" necessitates naming the product as if the vision already exists _today_? If you don't think that it does, why are you intentionally trying to derail the discussion by ignoring the actual thing that people are criticizing?
Number transfers in other countries is also mostly just a question of a bit of social engineering.
The article claims it knows the direction of causation, but has no proof.

Aren’t these just both caused by other factors? (Skill level, desire for stability over spending, etc)?
Because it's extra hassle?
Scam Bankrun-Fraud? Couldn’t happen to a nicer person.
My guess would be quiz-games like Kahoot or similar.
London is 600 square miles and has numerous routes into and out of the city. Manhattan is 23, and is an island with a handful of bridges and tunnels.

As a percentage of the whole, the City of London is trivial, whereas this "congestion district" is about half of Manhattan (even more if you account for central park).
Such systems should be airgapped…
That's not what they meant. And, S3-compatible object stores already exist. Ceph, for one.

Cachable, scalable apps that you write as part of a web-centric business are ones that use in-application level knowledge to coordinate with the web framework to use caching services at each level of depth of the stack, be it 3rd-party Cloudflare or DIY CDNs (varnish/squid), memcache/NoSQL/database-level.
Do you have overall objectives and goals for the learning? If you set yourself an end goal, the learning is automatic. For example with martial arts, the goal was getting to black belt, and then possibly winning tournaments. Martial arts and fighting is a really good analogy because it is very simple. The instinct to win is more than enough to get you to train and drill the same things over and over again. The same can be for anything else. If the end goal isn't there or is motivating enough, the learning can be a drag.

There is a meta to learning (meta is a term used in gaming for winning strategies that can be learned outside of the game itself). After a while I think learning anything becomes easier, there is only a finite amount of knowledge in the world and it has a regular structure. Whether it's math, music, sports, or whatever, at first you learn the tactics, then you learn the "map" of the territory, then you start moving along this territory while updating the "map" until you get to your desired destination. What I'm trying to say is that at some point you don't even need to learn something, it becomes somewhat pointless unless you have an end goal, It is enough to learn the map and have the major milestones on there in case you need to go there in the future.
It’s been a few years since I worked there, but I suspect situations like this are still played by ear. They may have run books for it now, but I think human judgement is still a significant factor.
They consistently undersell their product. ChatGPT was released silently, with no marketing more than a tweet. GPT-4 was just a blogpost, despite how much of a scientific leap it presented for mankind.

Compare this with Google, which on the release of their inferior chatgpt, proclaims the "GEMINI ERA". Which is the typical marketing approach of exaggeration.

Since OpenAI undersells, even a random tweet will be interpreted as the coming of AGI. Since Google oversells, even their impressive achivement (Gemini 1.5) gets no hype and is quickly forgotten.
Go and python are my languages of choice but I hear that .net is even better at this.
I can think of two approaches for such companies:

a. Use commercial OS vendors who will push out fixes.

b. Set up a Continuous Integration process where everything is open source and is built from the ground up, with some reliance on open source platforms such as distros.

One needs different types of competence and IT Operational readiness in each approach.
Command-man on a mac. It's all connected!
For server applications I don't think so (despite the recent hype driven by businesses marketing the cloud services). Managing multiple writes and durability needs the same or even more effort and attention than running PG or MySQL. And on top of it SQLite is missing many often crucial features. For me, those are the type system and functions.
I don't think it would help much. I work on machine learning frameworks. A lot of them(and math libraries) rely on just in time compilation. None of us has the time or expertise to inspect JIT-ed assembly code. Not even mentioning that much of the code deliberately read/write out of bound, which is not an issue if you always add some extra bytes at the end of each buffer, which could make most memory sanitizer tools useless. When you run their unit tests, you run the JIT code, then a lot of things could happen. Maybe we should ask all packaging systems splitting their build into compile and test two stages, to ensure that a testing code would not impact the binaries that are going to be published.
I would rather to read and analysis the generated code instead of the code that generates it.
I don't think most companies can say why they're not at least isolating workloads with something like Kata Containers and why they're using only glorified cgroup jails, have an inventory of all the services they're running and why, can point to which machines have authoritative copies of data, how they back it up without replicating corruption, and how they'd do disaster recovery/BCP on it.
Sam Bankman-Fried defrauded people. He didn’t intentionally create a digital black market, where everything from hit jobs, narcotics, poison, weapons, and human trafficking could (and were) conducted.

And since there are many well-known marketplaces for legal activities (eBay, Craigslist, Kijiji, Facebook Marketplace, AutoTrader.com, need I go on?) then the only defining feature was that this was a black market.

One cannot “accidentally” do this. So yes, aiding and abetting countless crimes and possibly murder —> life sentence.

In that context do you still find it unjust?
>Since Google oversells, even their impressive achivement (Gemini 1.5)

It's not that impressive given Claude 3 Opus seems to beat it by almost every metric in spite of having way less funding and a smaller team behind it.
By this logic you could say that leaving a poisoned can of food in a public pantry is not a crime because poison is legal for academic purposes, and whoever ate it took it willingly.

Also, I think getting malicious code into a repo counts as a compromise in and of itself.
Bizarre- the repos I looked at all had obvious signs of being GPT-generated.

Some examples

1) https://github.com/Jrbiltmore/Quantum-Transformers/blob/root... - notice the ChatGPT-reminiscent "Example usage" and "Placeholder for _ implementation" which is common across the repos

2) https://github.com/Jrbiltmore/QuantumOS/blob/root/ai-framewo... - "Example ___" and "Assume the model has _"
The missing part of the story is when we made an early prototype using GPT-4, leaving it on overnight, and realizing that we've spent several thousand dollars of OpenAI credits...
https://news.ycombinator.com/item?id=39872062
The thing about airliners is that they run out of fuel or get shot down. It's not like you can hijack a few and use them repeatedly for decades. They only way they're decent weapons is if you use them immediately.
Also worth mentioning:

If you wanted to listen to same song over and over and over again, you could record it on side A of a cassette, disassemble the cassette to remove the excess tape, reassemble it, and then record the same song in side B.

(Assuming your cassette player had auto reverse)
Yes because your suburb is representative of every suburb obviously. You’ve solved it!
Yet another example of why privatisation of utility functions is privatise profits socialise losses. Of course they believe pumping torrents of shit into the sea is OK.
It wouldn't be hard to check by BGP AS.

Stack Overflow routinely didn't work at one MAANG because of egress from a narrow range of IPs appearing to be bot-like behavior, but it was really an enormous amount to traffic from ~10k's of users.
> This story is really important, because it is essentially putting a community’s history at risk. To me, it feels like a harbinger of what we could see in the future re: domain purchases.

Huh? It's just a domain name. None of the history in none of the archives is going away.
SMS is not E2E encrypted, so for all intents is just a plain text message that can/has been snooped. Might as well just send a plaintext emails as well.
Fully supervised self-driving?
Or hiring them to do it for years without telling them why until they need a favor.
There isn’t a single contemptuous comment. Did you write this in anticipation of them?
Issue spam & harassment become a problem at scale.
I'd say that CCTV is quite different to wiretapping. You (generally) wouldn't have the expectation of privacy in a public place, most people would expect that phone calls, messages, etc do remain private.

Now, GCHQ is no better than the NSA for that either, but I don't think CCTV is a good comparison.
Show HN: I made Five Nights at Freddy's playable in real life
It's FNAF in real life with real cameras, real people, and a surprising amount of cardio. Have fun!
Any chance you could release the source code some day? I'm very curious how you pulled this off!
This sounds like projection.
I'm sorry you're choosing to let corporations exploit you instead of fighting with us for better wages. But that's kind of on you, not on us.
The "rich person driving into the city" is a scapegoat. Get rid of those people (whom I absolutely do not care about taxing; it's fine, whatever), and the streets will still be crammed with the traffic supporting all the people who live here. And under this plan, those trucks, buses, taxis, etc. will be taxed to the tune of billions of dollars a year.

As someone who hasn't owned a car in well over a decade, but lives in NYC and pays for things here -- and yes, even takes the occasional taxi when the MTA sucks -- this is what I resent. Setting aside the corruption and incompetence of the MTA (which we should absolutely not set aside), this is little more than a regressive tax on the people who live here, dressed up like anti-car activism.
> dickriding

https://www.urbandictionary.com/define.php?term=Dickriding

I guess I'm not in the right demographic to know the term.
Show HN: AI for researching personal health issues
I have some chronic medical conditions, and spend a lot of time asking about different drugs and supplements. Wanted to create a resource that others might get value from. It's trained to always provide citations, and to urge people to see their doctor before making major decisions. Open for feedback.
I have no idea, lol. Maybe the signal handling behavior? You can't signal PID1 (unless the process has installed its own signal handler for that signal). Even SIGKILL won't usually work.

That's my entire problem with systemd though: despite the averred modularity, it combines far too many concerns for anyone to understand how or why it works the way it does.
Not actually. Even if you enabled passkey, you still can login to their phone app via SMS. So it is not more secure. People who knows how to do SMS attacks certainly knows how to install a mobile app. And BofA gave their customers a fake assurance.
This is very unnerving
Yeah, you said that on the other thread. How big is London? How big is Manhattan?

(hint: one is about 30x bigger than the other.)
It did indeed say a future update would make your car eligible for the tesla network as a robotaxi, then they later removed the language.

Here's the diff:

https://www.thedrive.com/content-b/message-editor%2F15519938...

https://www.thedrive.com/tech/26840/tesla-transforms-full-se...
Sure, doing surgery on the weights is not feasible, but doing surgery on the training data is possible (and is done for certain benchmarks).

That's where it gets interesting. If you tell the LLM what the bad data is, it could examine its own training set and fix the mistakes. Get enough LLMs with diverse enough training sets, and they will correct each other.

If models are stochastic parrots, you might expect training data to devolve into corruption via a negative feedback loop, but the opposite might happen if models are actually intelligent.
Very interesting, thanks. I wished / wondered back when I was on a React project, why the memoization can't be turned on by default. I felt performance opt was left to the dev in React. Dioxus seems to have taken this into the framework, which I think is a great decision.
> How many of those are you actually required to use systemd for?

That depends on what other software you want to run, because systemd's design heavily encourages other things (distros, libraries, applications) to take dependencies on various bits. See also: every mainstream distro.

> Namespaces were implemented before systemd, have been used before systemd in widely used systems (for example LXC and many others). Namespaces and similar kernel features are not tied to systemd.

Didn't say they were. But I don't have to use LXC or many others in order to use the most popular distros and applications.

I do have to use systemd for that, though.

Which means I have to have namespaces enabled.