skysight-inc/HackerNews huggingface dataset:
The problem is, many users already pay. Server boosts, nitro, etc. It feels like threatening free users wont help their problem much. We see it time and time again with the enshittification of other projects that it wont work as a reliable revenue stream.
> A bit random, but has there been speculation on why this seemed to only target rpm/deb packaging?

The payload only works on systems that connect their sshd to systemd-notify -- which is not true for many Linux distributions beyond Debian-based and RH-based anyway (e.g. Arch Linux doesn't do this).
Cyber Resilience Act (2022)
George’s video may have helped precipitate another long post/call to action by Gnif regarding the gpu reset bugs that keep even AMD’s enterprise cards from being reliable enough for VFIO: https://www.reddit.com/r/Amd/comments/1bsjm5a/letter_to_amd_...
They Thought Ozempic Would Help Them Lose Weight. It Didn't Work
What I find exceptionally frustrating is that whenever there is talk about artists, illustrators, and writers being replaced, the response from programmers is almost a universal "automation is good, everything will be cheaper, they weren't really creative anyway."

It's a psychedelic ride, watching humans construct AI. Unlike other automations, it automates faster and evolves faster than anything before, making it much harder for society to adapt. I often wonder if we've crossed the threshhold of a "speed limit of adaptation".

Even if we haven't, it's an important question to ask and yet no one, especially the technophiles, are asking it except in private or in very superficial ways. Personally, I think there's an underlying fear to the whole thing: everyone fears that AI replacement may be total, so everyone is trying to get ahead of the curve so that they become the one doing the replacing, instead of the one being replaced.
It’s also super annoying getting on a bus after you read statistics claiming that 15% didn’t wash their hands and we keep getting on the bus anyway.

Newsflash. Not everyone who smokes „must smoke”. And trust me, in order to smoke responsibly you actually need a ton of self-control.
I consider myself fairly fluent in English after spending 15 years in the US, but thanks for the patronizing comment.

I know the idiom, but [that] was ambiguous in your original comment.
Although it's a joke, I'm reminded of "Sprint goals" from agile.

In practice, this never made sense on my previous agile team. Features were never the perfect size and divisible in such a way we could all work towards a unified goal. Plus, QA can't work until we're done.
I don't think a "bored kid" could pull off such a sophisticated attack while being patient for almost a few years
Because it's really hard to take away something that is legal. I don't think that is a good argument for legalising other harmful things.
> Tesla 'must' do nothing.

Of course they must. Better EV infrastructure is required.

> Building 'better' chargers isn't hard.

Good. Then Tesla can achieve it. They haven't achieved Alpitronic's or Kempower's level yet but if Tesla works at it they'll get there.

> Because actual 350kW chargers are incredibly rare and broken incredibly often.

There are a lot of them in Europe. 400 kW chargers are being deployed these days.
If they're not using a third-party service what are they using? Daily deal sounds like it's very high volume...
> We will no longer think of code as something that exists, but things that just happen.

Which is very scary: we are modelling things after nature and ourselves with our own information: this makes LLMs sometimes eerie human and thus fallible. So when you say there will be no more software, I think you are saying that some future ai/AGI will perform the work without it coding that work. So instead of writing code xy it will just ‘do’ xy ‘in its head’ and use the answer for the rest of ‘the problem’ it is solving. That is going to be just as terrible as humans doing the same thing: they will, ever so often, make mistakes and if you see a ‘program’ as being 100000s of these decisions every run, this will be terrible.

Now it is possible we will come up with some AI that does not have this issue, but we don’t even have a plan of attack on how to create that; I am your age and I am going to say we are both dead before it happens. However, because a lot of companies like terrible ideas if they save money (support chat bots is an example), surely this domain will be tested with the short term generations of AIs.
I've vaped indoors for 3 years, using a dry herb vape with flower on prescription, and we haven't noticed anything at all. I have family that visit once a year, they were here recently and didn't notice anything (my wife asked, because she's paranoid about the smell). Many others seem to agree. Maybe it's different if you use carts, I don't know what's even in those.
I think it's well-established that IQ is not correlated with empathy, and those with the highest IQ are likely to take the most wealth. I mean, look at where the smartest people are now! Wisdom does not come with intelligence, and it fact the opposite may be true.

And if this discussion proves anything, it proves that we need to be cautious rather than flippant. We need to stop AI development, instead of waiting to see what happens.
>4. Libsystemd is a problem for the ecosystem. People get dismissed as systemd haters for pointing this out but it's big, complicated, has a lot of dependencies and most programs use a tiny fraction of it. Encouraging every service to depend on it for initialization notifications is insane.

They never did. In fact the systemd maintainers are confused on that point and adding documentation on how to implement the simple datagram without libsystemd.

>7. We need to make OSS work from the financial point of view for developers. Liblzma and xz-utils probably have tens of millions of install but a single maintainer with mental health problems.

Way more than tens of millions. Python, php, ruby and many other languages depend on libxml2, libxml2 uses liblzma. And there's many other dependencies.

>8. This sucks to say, but code reviews and handing off maintainership, at the moment, need to take into account geopolitical considerations.

Not any maintainer's job. OSS is provided without warranty. Also indication is "Jia Tan" may have been completely fake as their commit timestamps show even on the same day that their timezone switches from Eastern Europe to Asia. So at the very least, they were playing identity games.
Will people still derive pleasure from creating things if there is an AI that is much better at creating things than you?

Take game development for example, I enjoy writing games but would I enjoy it as much if any random person could create a game much better than anything I could make myself? I’m not sure. It would be like performing to an empty room. Without any audience, is there pleasure in creation?
Classic counter-answer: Javascript: f(x). Lisp: (f x).

Javascript: f(g(x))
Lisp: (f (g x))

Same amount of parens.
Correct. OpenSSH doesn't care about linux or systemd. Makes me want to switch to BSD now
That statement is stupid anyway.

Firstly, it's not true: most systemd services don't link to libsystemd. It's useful for supporting the sd_notify feature, but plenty of things support it without using libsystemd.

Rich attack surface: there was like... four dependencies that aren't glibc, and irrespective of this backdoor attempt they were almost all already being made dlopen dependencies, which would've prevented this backdoor from working since it would've never been triggered for sshd. (Note, also, that linking libsystemd into sshd was a downstream patch.)

Seriously:

$ libtree $(nix build --print-out-paths nixpkgs\#systemdLibs)/lib/libsystemd.so
libsystemd.so.0
└── libcap.so.2 [runpath]

That's what you get today in NixOS unstable.

The truth is that libsystemd and systemd in general don't have ridiculous dependency trees or attack surfaces. Most likely the big reason why this backdoor was being pushed heavily to try to make it into Debian and Fedora releases was because the clock was ticking on the very small in they had found in the first place.

There are a lot of criticisms of systemd that I think are reasonable, but this really isn't one.
> does knowing that chess engines can beat most of us take away the fun of playing chess with another person.

It did for me: I tried it a few times but now that my phone can beat me every time, it feels like a total waste of time to me. It’s personal, but I definitely don’t enjoy it anymore, not against a human nor a computer.
Show HN: Blahget – Expense tracking made easy with GPT4-powered voice commands
Blahget App is your own financial AI assistant. Manage your expenses and income through voice commands (voice to action).
-
This AI expense tracker voice assistant uses OpenAI's GPT4.
Why Do Python Lists Multiply Oddly? Exploring the CPython Source Code
I actually don’t understand how Microsoft is still such a big player when its programs are so clunky and awful generally…
And yet - my go to for writing anything is still Word -.-
Moi? I believe there is a difference between:

- Freelancer

- Contractor

- Consultant

The point being, if you believe you are currently positioned as freelancer (i.e., effectively highly replaceable) then perhaps first work on morphing to Contractor or Consultant. If nothing else, this would likely mean an increase your rates.

Also, before you add someone similar to yourself (i.e., doing hands on ERP work) outsource as much of your back office ops as possible. Once you start to manage others, you'll want to focus on that, and clients as much as possible.

Finally, "a proper company" will likely require some marketing of some sort. It's very likely you'll want to outsource this as well. Marketing is one of "The Human Behavior Arts" (e.g., leadership, management, etc.) that is too often easier said than done. Can you figure it out? Yes, of course. Do you want to have help doing that? Yup! Probably.

This doesn't have to be a binary of decision and move. You have morph along a spectrum to some eventual goal, whatever and wherever that might be.
I am aware of at least 2, I'm not in the U.S. , to disclose one crime I'd have to breach confidentiality and the most likely outcome would be that the bank would get a slap in the wrist or even nothing, meanwhile I'd be sued to oblivion and it would ruin my life (the same happens with some other crimes I know about, I once tried an anonymous tip about some grifting in the military and instead of taking it they said they went fully hostile and said they'd trace my call !!).

The other one I didn't have enough proof, apparently someone else did tip the authorities and the shady payday loan company is getting a slap in the wrist. Not exactly something to instill confidence in our justice (and my country is one of the least corrupt ones!)
Noone is underestimating those kind of videos are popular, but given how much information google ingests (and sells) about us, is it too much to ask to stop being reccomended popular bullshit? Just because 8 out of 10 people watch that doesnt mean everyone needs to be served that.
If it was state-sponsored (considering the timeline, that's a real possibility), then "Jia Tan" could actually be a collection of folks, working for the same team.
Meanwhile Thailand is rolling back it's legalisation of cannabis. Even though the industry brought in over a billion USD, it will be banned at the end of the year, citing protection of health of the youth. The population seems to approve of the reversal (medical use is kept). I think a few countries will be watching carefully after seeing how the experiment goes.

Whilst the majority of users seem to be fine, it can absolutely and seriously ruin some people's mental health.
liability

> Sounds like a good way to kill off open source entirely. This is luckily unlikely to happen.

It has already happened in the EU CRA, i.e. the law has passed. Implementation details still being negotiated.

https://hn.algolia.com/?query=cyber%20resilience
Who said 'only'?

The threat of punishment is not needed to prevent most people from killing, most of the time. But it sure does help in some edge cases!
> more people destroying their lives with drugs than people who can regulate their use.

I think you are either intentionally exaggerating, or vastly overestimate the number of people destroying their lives, or underestimate the number of people who use drugs (especially alcohol, consumed by >50% of the US population).
ietfa.org and not ietf.org

looks scammy
But that's just a policy some companies have, it has nothing to do with legality.
This is formalized as having a press release at the start of PRD in product management.
It could he hardware limits, but I doubt it. Plenty of microcontrollers are running HTTP servers right now, and those are happy enough.
I am the same age and I am less optimistic about the advancement of AI to that extend. It’s a junior helper that doesn’t get tired at all and at some time in the future it may be more than that, but to eradicate my job, we are far off yet. I probably will be dead.

Whether it happens or not in my life time, I will always enjoy writing (z80 and other) code/games.
If the paper is accurate, it's actilly making fun of all the serious-sounding papers adding whatever to graphene and publishing it as noteworthy results. After reading way more papers that I wish I had to, I can say I would prefer if all paper titles were this accessible and honest.
I would personally add: test your build scripts.

There are so many bugs like the "added dot to disable landlock" added as part of this action (which can also be typos [0]), not to mention that relying on some tools in autoconf to set feature flags will just disable them if those tools are not present [1].

[0] https://twitter.com/disconnect3d_pl/status/17744965092596453...

[1] https://twitter.com/disconnect3d_pl/status/17747470223623252...
^ IBM is incompetent and only exist because of wealthy corporatations paying politicians to have long intellectual property lifetimes.

Not quite the case. Current mainframe users haven't migrated from it largely because the simplicity of scaling up, which means they can always buy a newer and more powerful machine when current one can no longer cope with the workload. I would expect it's much cheaper than migrate to other platforms in most if not all cases, considering the costs to develop and test the applications.

They can get away with it as long as they can find someone to carry out the upgrade/maintenance work. But if IBM keeps footgunnig itself, it won't belong before those users have to jump the ship as no one can work on it any more.
Yes, and space elevators and fusion power are also just around the corner. 10 years from now is going to be great.

I've been thinking that for the last 40 years.
I think I understand what you are thinking. You may be fixing "than other ways of running them" to the end of the title, but it's actually "than it was on CPU before now".
This is a logical fallacy argument where you exaggerate. What I describe can be done in most locations, no Hamptons needed.
Luna: The First Hallucination-Free LLM
That's not sovereign citizen stuff; it's ancap stuff.
> 1a. As a consequence of (1) autogenerated artifacts should always be committed.

Or… just have downstream users run autotools as part of the build?
I think it's more likely that there are 100 real backdoors and this was one of them.
Yes and no (imho). Whether it's some uber technical language/low level, such as Assembly or Swift, an LLM would have no problem 'learning it'. It could take more or less time, but moving bits around and drawing lines is something that a machine can do faster than a human - once the machine learns. I was coding in MQL4. It would take me a couple of hours to make something that an LLM would type up in 30secs with 5mins spent on description/reqs.

And it may make 1000 mistakes before getting it right, but if these 1000 iterations happen in 1ms it is still more profitable than a human needing 10 iterations. And considering that once you teach a machine (ML) the machine will know - forever, while you need to spend dedicated time for each new human that becomes a dev.

> ..sharp decline of people's mastery of their own language

This is the part that scares me about humanity. Perhaps I read a lot, and perhaps I am a believer that words matter. People seem to be replacing everything, dummy-ing down things, racing to the bottom of intellect.

On the original post.. (I'm too old) - I am also at the I'm too old age-range. I am happy to only deal with LLMs as a user. Google tends to know everything about anyone anyway. So as long as my questions are not giving away my private/secrets (i.e. "how should I wash my 5th nipple?") then "it's ok".
But they're extremely relatable to us because it's regurgitating us.

I saw this talk with Geoffrey Hinton the other day and he said he was astonished at the capabilities of ChatGPT-4 because he asked it what the relationship between a compost heap and a nuclear bomb was, and he couldn't believe it answered, he really thought it was proof the thing could reason. Totally mind blown.

However I got it right away with zero effort.

Either I'm a super genius or this has been discussed before and made it's way into the training data.

Usual disclaimer: I don't think this invalidates the usefulness of AI or LLMs, just that we might be bamboozling ourselves into the idea that we've created an alien intelligence.
And Texas has abundant natural gas that is at historically low prices. If CO2 emission is a concern, they could deploy Allam cycle turbines at a small increment in capital cost.

Alaska is a bad place for this because the largest grid there, the Railbelt Grid, has an average power flow of only 600 MW. One cannot integrate a 300 MW (for example) power plant onto such a grid. Sufficiently small microreactors would be even more expensive, per MW.
If you’re being berated by multiple people as to your speed of delivery, then it is not unexpected for them to be convinced that they are somehow the problem, and transfer the project to whoever they feel at the time is the best choice without thinking through their decisions.

However, knowing a person personally doesn’t necessarily solve the problem.

I used to work on an open source project a long time ago (under a pseudonym) that I do not wish to name here for reasons that’ll become clear shortly. The lead programmer had a co-maintainer who the lead seemed to have known quite well.

The co-maintainer constantly gaslit me, and later, other maintainers, belittled them, criticized them for the smallest of bugs etc. (and not in a Linus Torvalds way, where the rants are educational if you remove the insults) until they left; and was egged on by the lead maintainer as they agreed with the technical substance of these arguments.

Many years later, the co-maintainer attempted a hostile takeover of the project, which did not go as expected, and soon after, multiple private correspondences with other people became public where it became clear that the co-maintainer always wanted to do this, and gaslighting other maintainers was just part of this goal. All of this, despite the fact that the two of them knew each other.
I think the most important aspect of the ruling is not legalization, but depenalization.
And what makes you think that there would be no threat of punishment in say, an anti-statist society?
I discovered Felix a couple months ago. It's a shame he has disappeared since making this blog post.
> He might be a brilliant programmer and problem solver, but that incident left a very sour "Grifter" vibes.

Your algorithm for "who is a grifter" is buggy. You can tell someone is not a grifter based on what code they ship, not what words they say ("Cypherpunks write code" being the mantra).

Failure doesn't prove someone is a grifter, btw. Not acknowledging failure is what makes one a grifter. A grifter would continue to draw a Twitter salary without actually fixing anything and were many such cases before Musk took over! Instead, Hotz quit upon realizing that he couldn't do what he said and publicly acknowledged that he couldn't fix Twitter search.

This is also why his companies/projects have bounties instead of "internships". Their code is open source and actually writing code is a simple filter that eliminates people who don't write code but are good at _saying_ that they will. By not even guaranteeing a paid internship in exchange for a pull request, he ensures a contributor's incentives are aligned with improving the technology as opposed to gaming a hiring process. And he pays cash for bounties so you can accurately evaluate whether it's worth your time to contribute.

In other words, he learned from his failure at Twitter that if Twitter's code had been open he would have been able to make an accurate assessment of whether he could fix it by actually submitting a PR!
by buying out the completion, e.g. skype. For the most part the triple "E" has not altered all that much with the time.

Alternative venues include the default installation of windows to (almost) every laptop in existence.
That's indeed fantastic. It also gave me perspective on something: the reasons there are so many interactions is because of the number of collisions: a water molecule will collide 10^14 times in a second. Mind-boggling stuff.
No, it makes sense with the philosophy of german law. It's not illegal to harm yourself. It is not illegal to flee from the police or from prison. But of course there are various crimes surrounding the allowed behaviour.
libsystemd is too juicy of a target, especially with the code reuse that does not appear to take into account these attack vectors.

Perhaps any reuse of libraries in sensitive areas like libsystemd should require a separate copy and more rigorous review? This would allow things like libxv to be 'reused', but the 'safe' versions would require a separate codebase that gets audited updates from the mainline.
Just the one attack vector that we know of. There could be many, which are yet to be discovered
I too have never tried cannabis, and I too support legalisation.

Not because of the effects it has on the consumer, but because the effects it has on the producer.

It depends on where you are, but where I am - the UK - the producers are primarily enslaved. A fact that is rarely talked about.

Recently there was a big drug bust. The headlines all described how many dogs were freed - less than twenty. But deep in the articles behind euphemistic language you could read that one and a half thousand enslaved people were also freed.
> AI agent that takes a question and outputs a node based workflow

That rings useful to me. I find it hard to trust an AI black box to output a good result, especially chained in a sequence of blocks. They may accumulate error.

But AIs are great recommender systems. If it can output a sequence of blocks that are fully deterministic, I can run the sequence once, see it outputs a good result and trust it to output a good result in the future given I more or less understand what each individual box does. There may still be edge cases, and maybe the AI can also suggest when the workflow breaks, but at least I know it outputs the same result given the same input.
Why not say this about something like self-harm, they might like that too. Both seem to cause damage to the self
That's a thorny question. Self-employed is an option, but it limits the possibilities: a small project/library won't bring enough funding, so you'd have to acquire more projects and funding. A larger company doing only OSS could work. It can help keeping all those languishing projects up to date, because it's simply part of someone's job now instead of voluntary work after hours. Such a company could also organize security checks and vet the contributors. Didn't Redhat work like that?

But it's not a solution for all problems.