skysight-inc/HackerNews huggingface dataset:
But it wasn't caught because it was open source? It was caught basically by chance by an engineer using the distro who admits they only caught it because of a series of coincidences.
they regulary and often downgrade their gpts.
gpt4 now is about as good as gpt3.5 was in the beginning.

like 6-7 months ago there was a gpt4 version that was really good, it could understand context and stuff extremly well, but it just went downhill from there. i wont pay for current chatgpt 4 anymore
How are you able to make such a claim when foreign influence is rarely reported and takes the form of social media campaigns?

Cite a source please.
Those, and even worse the “cute” spelling variations on normal names, are baffling to me. You’ve just condemned your kid to a lifetime of minor (and sometimes more-than-minor) hassles, with very little justification.

[edit] I actually think a lot of “bad” celebrity kid names are a ton better than that crap. At least with “Apple” and “Rocket” folks can guess the correct spelling nearly 100% of the time.
Could this problem be solved by using the old Scandinavian family name etymology (i.e., patronymic/matronymic surnames rather than heritable family names)?
Port knocking involves sending a packet to certain ports on a host. It's overkill but typing http://host:port/ in your browser will, as part of trying to make a TCP connection, send a packet to that port.
Well, there's a 2024 RFC gag: https://www.rfc-editor.org/rfc/rfc9564.html

Otherwise, we refer you to the tongue-in-cheek Financial Times 'why this page was not found' rationale: https://www.ft.com/errors/page/404
Looks interesting. What are your plans for the backend - will self-hosting be an option?

Right now this looks fine for a hobby project, but massive lock-in/risk for production (what if you shut down, get bought up etc?).
Trump's Truth Social reveals $58M loss as auditor raises doubts about viability
This is almost always because of other comorbidities. People tend to get prostate cancer when older and it often (but not always) progresses slowly.. If you have other issues like obesity then you are likely to die from something else first. However, for otherwise healthy people, especially in their 60s or early 70s, it's a good idea to treat it early and aggressively. There are about 35,000 deaths from prostate cancer in the US every year; the leading cancer death after lung cancer.
and previously discussed: https://news.ycombinator.com/item?id=9338708
Well I guess the assumption is that you can just fit everything into the context and there'd be nothing to retrieve anymore.
I would hope that the majority learned that hygiene and masking are effective enough for us to continue to live our lives, but I doubt it.
https://old.reddit.com/r/amateurradio/comments/f7g1sa/gas_li...
The last atomic test was in 1992, so we have some years left.
Google's acquisitions are its moat. Google Search is only one small part of that

Google wouldn't be the company it is if it didn't also control Youtube, Gmail, Android and Chrome.
I once had a Time Warner tech blame the moisture content of the air for impacting the copper cabling to explain outages at our apartment. This both makes more sense and, I suppose, is more interesting.
Not quite. It still looks vulnerable: an attacker A without the private key impersonates a victim server V and reports their host key. A careless attacker B with the key tries to attack A, but an ends up recovering a valid payload targeting V.
Rust is now the official system programming language for Azure infrastructure, alongside managed languages, and it appears there is a soft spot to use Go instead of C#, when looking at what Azure opens up.

WinDev, Office and XBox is another matter, they are deep into C++ and COM culture.
> Is there any reason whatsoever to believe either of these?

Not a reason, but there are many people that have had experiences that align with panpsychism

It's not necessarily something that you have to believe, like a made-up story. Instead, it's something that you can experience for yourself (either through yoga, meditation, breathing, psychedelics or other forms of attaining different states of consciousness)

Edit: (can't reply to the reply) @tsimionescu it seems you just want to contradict whatever I say, that's your personal opinion. If you want a reason, you can come up with a thousand different ones. I'm not trying to convince anyone of anything, just offering a point of view for a, hopefully interesting, conversation
If you're running a 1M context LLM I assume you are well past memory constraints since the weights alone are 10s of GBs.
the thing with the Boltzmann brain is that, even though it sounds compelling (in a philosophy thought experiment / random thought kind of way), I think there's one main criticism that shuts it down. If the brain is having all these experiences/thoughts itself, it came up with the idea of a Boltzmann brain, and the laws of physics, and logic, etc. So therefore, the laws of physics that Boltzmann brain is using the justify the Boltzmann brain are completely made up by it, and can't really be used as a valid argument.
I've actually been behind a firewall that blocked outgoing connections except on several well-known ports. Had to run my SSH server over the port usually used for HTTPS just to get it unblocked.
People were talking about space elevators before graphene or carbon nanotubes existed. I think the original idea came from Heinlein and when I was a kid there was no material that was even remotely feasible but it was still a tech that people talked about being possible in the "near" future.
> say that port knocking is pointless and security theatre

Who was saying that?
Or it could be that the addressable audience is larger for OEM car parts. Many more people have the hand tools necessary to work on cars. Not many people have ball grid desolderers needed to replace chips in highly dense pocket electronics.
Aren't bluetooth and wifi typically on the same module these days?

The worst interference problem I've heard of is how USB 3.0 uses 2.4ghz and therefore can cause problems with devices connected with it.
Cool. Awk is a nice tool for semi-simple record-at-a-time processing.

As far as I can tell, this implementation is much slower than other awks. Most awk implementations use a non-backtracking regex implementation (as do Rust and Go). By contrast, this seems to be using a backtracking implementation (e.g., like Perl and Python). For simplicity that makes sense, but for some regexes this kind of implementation can be many orders of magnitude slower.

My guess is that this slowdown doesn't matter for a typical toybox user, where small code size is valued. Thanks for the link!
Pretty sure it’s still the case from recent convos I’ve had with friends in crypto, it’s just no one talks about it anymore because crypto is massively unrelevant right now
First thing I thought of too. Anyone know if there a list of more articles similar to these three?
Have the heads of the targeted projects - including xz (Lasse Collin?), OpenSSH (Theo?), and Linux (Linus) - commented on it?

I'm especially interested in how such exploits can be prevented in the future.
Was the performance issue pure luck? Or was it a subtle bit of sabotage by someone inside the attacking group worried about the implications of the capability?

If it had been successfully and secretly deployed, this is the sort of thing that could make your leaders much more comfortable with starting a "limited war".

There are shades of "Setec Astronomy" here.
Picogrid scores new funding to connect the military's stovepipe systems
Over the weekend, I added this to a common bit included in all my NixOS systems:

-networking.firewall.allowedTCPPorts = [ 22 ];
+networking.firewall.interfaces."tailscale0".allowedTCPPorts = [ 22 ];

I probably should have done this ages ago.
The pattern of wrinkles on the back of your hand is absolutely unique. The space of possibilities is larger than the number of atoms in the universe. And yet there is no why for the wrinkles on the back of your hand. Nothing chose it. Nothing is perfect about it. Not every improbable thing was chosen.

The anthropic principle doesn't explain a goddamn thing! It rejects the notion that we need an explanation for some things, because they could as well as been randomly chosen and we'd still be here all the same with absolutely no why whatsoever.
> Australia has among the highest incidence of Crohn’s disease in the world

We really need to look at supply chain and environmental factors.
But this is just current state. Token costs continue to go down and contexts will continue to get larger.
That's just the usual way of attempting to connect to an HTTP server running on a different port. Sometimes you see websites hosted on port 8080 or something like that.
Stanford researchers publish subsurface thermal map for continental US
Ongoing Satolution of Japan
With comments, it depends on the case. When reviewing code, or on an architectural refactoring with no new code being inserted, comments being more visible is certainly desirable. In a normal setting of writing code, comments should fade out.

You can have the best of both worlds, by switching themes with appropriate coloration whenever you like. In emacs there are a ton of themes, each with it's own emphasis on coloration, but you can also make your own easily, or tune an existing one. I have commented already on how to tune one, using modus themes, on the same thread.
The GPT algorithm isn't a secret.

The RLFH data — users giving a thumbs up or down, or regenerating a response, or even getting detectably angry in their subsequent messages — is.

PageRank isn't a secret.

Google's version of RLFH — which link does a user click on, do they ignore the results without clicking any, do they write several related queries before clicking a link, do they return to the search results soon after clicking a link — are also secret.

That the Transformer model is a breakthrough doesn't make it a moat; that the Transformer model is public doesn't mean people using it don't have a moat.

Hence why I'm criticising the use of "moat" as mere parroting.
Alzheimer's is colloquially known as Type 3 Diabetes in some circles. https://www.ncbi.nlm.nih.gov/pmc/articles/PMC2769828/

Edit: I'll accept that "colloquially" might not be the exact proper word.
Is there a useful definition of "consciousness" that is empirically testable with some sort of instrument such that you can point it at a squid and say "yep, that one has consciousness!" ?

I ask because I've never heard such a definition nor has anyone actually ever told me what the instrument is that detects this. Until then, I figure there's no such thing as consciousness... it's just what superstitious monkeys say now that they feel silly talking about "souls" which is the old word that used to be used for this superstitious concept.
'Godfather of AI' speaks on threat of tech surpassing humanity
> It's weird that there is such a stigma surrounding keto.

It upsets both orthodox/80’s health advice and environmentalists (pretty liberal towards animal products).
thanks man i really appreciate it :D. hoping to make more cool projects in the future
Well, I think he's probably right, it's just a shame that he's going through this difficulty. I hope he ends up succeeding in his goals.
AzulJDK and Android JDK would be better examples, as Oracle JDK is just an Oracle-blessed build of OpenJDK.

The difference from libc though is that there is no problem in distributing a program with your preferred JDK, and multiple Java programs can live on the same system while each using its own JDK and even communicate risk free with each other.

Also, different JDKs are significantly more similar in the API they offer to Java programs than different libc are - at least for a common core of functionality.
The most fundamental argument for panpsychism is that it obeys Occam's razor FAR better than the "emergent animate matter" hypothesis. Panpsychism requires that the universe updates its state by conscious choice, which we already know happens, so from the perspective of Occam's razor we would actually need to explain why it DIDN'T happen for non-animal matter.

Additionally, if we go with the emergence hypothesis, we have to explain the mechanism by which permutations of the states of matter can create a new dimension of "feeling" and "awareness" where one did not already exist. That's a tall order.
We need less/more/same regulation, whichever one satisfies my desires at any given moment!
Port knocking is bit like a lazy person's VPN. You might as well get off your butt and install a vpn solution and use ssh via vpn. The time and effort is almost the same nowadays anyway. The chances of both vpn and ssh being exploited like this must be zero.

Worse, most corporate, public wifi, etc networks block all sorts of ports. So at home sure you can open random ports but near everywhere else its just 80 and 443. Now you can't knock. But your https vpn works fine.

Also a lot of scary stuff here about identity and code checkins. If someone is some contributor, how do we know if their creds havent been stolen or they've been forced via blackmail or whatever to do this? Or how many contributors are actually intelligence agents? Then who is validating their code? This persons code went through just fine, and this was only caught because someone noticed a lag in logins, which by then, is a running binary.

FOSS works on the concept of x amount of developer trust, both in code and identity. You can't verify everyone all the time (creds and certs get stolen, blackmail, etc), nor can you audit every line of code all the time. Especially if the exploit is submitted piecemeal over the years or months. That trust is now being exploited it seems. Scary times. I wonder if how FOSS works will change after this. I assume the radio silence for Theo and Linus and others means there's a lot of brainstroming to get to the root of this problem. Addressing the symptom of this one attack probably won't be enough. I imagine some very powerful people want some clarity and fixes here and this is probably going to be a big deal.

I wouldn't be surprised if a big identity trust initiative comes out of this and some AI stuff to go over an entire submitter's history to spot any potentially malicious pattern like this that's hard for human beings to detect.
How do you "just" accurately evaluate the error state space of an LLM relative to a real business process? Sounds approximately impossible to me.

If you already have the business process robustly defined as code, then the utility of LLM is unclear. The value prop of LLM is in fuzzy business processes like parsing arbitrary helpdesk tickets.
There are over a million dead in the United States for whom your statement is not true.
I don't care about Musk's reputation. The problem is they make shit cars.

I had a model s and the next car I got was the Porsche Taycan. The Taycan is built to such a high standard that the Tesla Model X (which I was planning to get) felt like a toy in comparison.

I think that's the case for a lot of people. Competition has increased and Tesla makes shit dumpster fire like the truck whose trunk will chop your finger if you keep it near the door by mistake.
None of the ideas posited here are new

That's comes with the 'general purpose nerd messageboard' territory, it's in some way true for almost everything posted. It's got lengthy caselaw:

https://hn.algolia.com/?dateRange=all&page=0&prefix=false&qu...
Cars that are 30 years old don't connect to the Internet in general or cellular networks specifically (for core functionality). Desire as they might, Nokia couldn't meaningfully support a 3360 today. There's no AMPS or IS-136 networks for the phone to connect to.

Dell doesn't support thirty year old OptiPlex PCs, Intel doesn't support thirty year old CPUs. These don't have any serial pairings, they're just old and long out of production.

Ford isn't going to support a thirty year old Mustang either. Part manufacturers might still make compatible parts but that's more about sub-components being shared among many years of product models. You could find a power supply for an old OptiPlex because it uses an ATX connector on the motherboard. You might find a NOS battery for a 3360 but that's only because a battery conformed to a spec shared among many models.

Out of support smartphones will see their certificate roots expire making using the Internet not practical. This is true of Android and iOS. I don't know why ten years of active support for a very complicated device somehow isn't good enough.
Well, that would have meant interacting with other people...
> Sure, but it's not really nature

Yeah, bee keeping isn't really nature, it's agriculture (humans harnessing nature). That doesn't mean we have to go 'hardcore' because it isn't nature. We can try to keep it close if we want, and I think we should bias that way, where feasible.
Some versions of port knocking require a specific type of packet.

https://github.com/moxie0/knockknock
I don't know about the C64 implementation, but some Shift locks also acted as a shift toggle rather than just "all caps"/"shift stuck", so you could use shift to "unshift" during shift lock to get a lowercase letter or a number.
Perhaps consciousness is an attributeless void where being aware of it is possible but describing it is not.
At least TOTP is just a long, random, server-assigned password, where you you don't type the whole thing into during login attempts.

You can write down the full TOTP secret, and make new 'TOTP keys' whenever you want. Suggested apps: Firefox Extension named "TOTP", and Android App named "Secur". You don't need the heavier apps that want you to create accounts with their company.

Using a TOTP key only provides a little more protection than any other complex password, since you're not typing in the whole thing during a login attempt.
Apparently none of it? In the control cities there was no change in violent crime after the law went into effect.
https://superuser.com/questions/1406140/monitor-screen-that-...

https://www.theregister.com/2020/01/09/office_chair_emission...
Good education, no. Important education, yes.

School, and often our parents do not teach us that there are plenty of narcissistic greedy assholes that will eat you alive. Instead too often we find that the leaders of the organizations that should be teaching us what to look out for, ARE what to look out for.

This person learned that lesson and got out rather than many people I see trapped in situations like that.
The plan is to run a waitlist beta over the next few weeks! And we'll go public immediately after
The artists themselves are usually coauthors with other people they collaborate with. I'm not aware of a modern day figure with an analogous role to one someone like Irving Berlin had at the time. The songs that chart today are lyrically new and are not new covers of songs from 10-20 years ago. There is no more Great American Songbook in the sense of songs that are written once and covered many times.
What's it for? Also it doesn't give the same results as using google.com in the browser.
> Many of the biologics are also quite new, and the long term effects of taking them are not well understood.

It's interesting that this has become a talking point now for basically any new therapy. As soon as something new and promising comes out, we "don't understand the long-term effects" -- but this discounts (1) the years and years of research and development that go into them (2) the decades of research and development that has gone into the underlying platforms (3) the trials that have happened and (4) the known and understood negative effects of the disease being treated.

The FDA tends not to yolo new therapies.

We see this with GLP-1's all the time. They have side-effects, what will happen later, etc -- as though obesity doesn't have side-effects, and predispose you to every disease known to man?

I feel like this all started during the COVID vaccine hysteria, but maybe it was always there and I wasn't paying attention? I feel like a decade ago when a new treatment for a chronic disease came out people threw themselves at it.

I guess maybe as a concrete follow-up question: how many years would it take before you felt comfortable with it, and why that number specifically? 10? 20? 30?
I spent some time puzzling over what "winkle" might be a typo for before realizing it was a British verb I was unfamiliar with:

"chiefly British : to displace, remove, or evict from a position"

Apparently the etymology is the periwinkles are difficult to remove from their shells: https://www.merriam-webster.com/dictionary/winkle
NASA's Trio of Mini Rovers Will Team Up to Explore the Moon
More complex than a hull shape that is perfectly fine with just sinking in in a little deeper when load is added or redistributed. The control system you don't have or need is inherently less complex than the control system you do need.

It's not exactly a problem impossible to solve, SWATH have already been operated half a century ago, but it seems to be rarely worth the effort.
> the collective West is unable to even hypothesize the nature of over the course of 8 years of investigation

Another hypothesis is that 'the west' is unable or unwilling to publicly disclose what they found, maybe to not further escalate the conflict.

> manufacture consent ahead of $60B “foreign aid” vote

Consent for what? Is the foreign aid vote a referendum?

You seem very passionate about this subject and judging by some of your previous comments on the matter you are holding a heavy bias. I don't believe there is any argument or piece of proof to change your view. Therefore, I don't believe it's worth for anyone to engage with you on this subject. Just wanted to call this out.
Control Data Corporation's CDC 6600
Ah, that Jon Bois aesthetic. Smooth jazz/pop instrumentals, Google Earth zooms, and "did I say X? I meant X+LARGENUM" reveals.
You're giving a (very weak) reason - personal experience while in altered states of mind. Of course, people doing at least some of these practices also personally experience all sorts of other false things, many which they themselves don't believe when outside the altered state, such as vivid hallucinations.
The Clipper chip? Not sure if that's what they had in mind. Nowadays it's maybe just how the NSA has rooms attached to backbone providers like https://theintercept.com/2018/06/25/att-internet-nsa-spy-hub...
Well laws of physics is what gave us radio in the first place.

Some of my favorite video documentaries are on how it was theorized and then slowly developed over years and decades until they finally got to spark-gap transmitters.

https://en.wikipedia.org/wiki/Timeline_of_radio

But just imagine listening to spark-gap morse code radio broadcasts for years as amateur and then suddenly someone does a broadcast test of actual voice (violin!) That must have been incredible to hear wirelessly.

24 December 1906 Reginald Fessenden, that was the leap that eventually gave us wifi

https://en.wikipedia.org/wiki/Reginald_Fessenden
With Azure now only considering C++ for existing projects, and new projects require explicit reasoning why C or C++ instead of Rust, I expect some internal pressure at MS to do the right thing.
The loss was expected, and I think was noted as expected in the IPO filing; it lost a similar amount in 2022.

Edit: clarity.
Sounds like it would be a neat excuse to get the children to go out when it's sunny!
That's only the intro to the article and if you want to discuss that you can do so here - https://news.ycombinator.com/item?id=39848657

The article then goes on to make other points about AI and automation.