skysight-inc/HackerNews huggingface dataset:
It's yet to be seen how this new version will work, however they say in the story it's an upgrade of mygovid.

Mygovid as it stands is a cluster. It insists you have a single email address as your one true name, if insists you use that one true name everywhere you use mygovid to authenticate, if you upgrade your phone it throws away the ID. It's unreliable, as in the app have race conditions with it's internal state and external requests to identify yourself. Those race conditions cause it to not identify you at all, not notify you there is ID request and various other indeterminate states.

As a cherry on the top, mygovid is used in to authenticate against my.gov.au (the closeness of the two names is so confusing they have to put big red warnings not to confuse the two), and my.gov.au has been the victim or rampant identity fraud to the tune of $0.5B.

As others have mentioned here, there were far better thought out identity schemes around when mygovid was introduced. They chose to roll their own instead.

I hope this is an improvement, but there are few grounds for hope. The bill moving this forward is based on what the government needs - so although they allow for many ID providers the bill repeatedly mentions just one, I presume they want one true name and a centralised data store. Amusingly at first glance the bill looks devoid of technical details and I'm guessing that's because the lawyers think they left the design wide open so the subject matter experts can implement something that works. In reality and probably unwittingly, they've already set the technical foundations in stone, and they've chosen the wrong ones. Nonetheless if it defrauded like the present system has been, they'll blame the implementers.
From xz to ibus: more questionable tarballs
Definitely some similarities. The DG-1's main advance was the full LCD panel (looks like this one also was 80x16 similar to the Visual Commuter).
Oh man, you shouldn't try to look at the images on the service, then.
A Headset That Helps Treat Depression
Your understanding of society’s use of AI is not in line with reality. Your opinion that a 23% true positive rate with a 9% false positive rate is ok is not in line with general principles (not even just Western-centric) of the burden of proof of guilt.

Only 23% of US adults have tried ChatGPT,[1] so to say that we live “in a world where so much AI in human writing” as you do in another comment is simply false.

Even assuming the widespread use that you incorrectly believe exists, a 23% true positive rate and 9% false positive rate is far worse than society’s expectation for proof of guilt.

>It is better that ten guilty persons escape than that one innocent suffer.[2]

Take a school class where no students used AI to cheat. Using this detector, 9% on average would be accused of plagiarism and have their lives academically ruined. That is not acceptable.

A class full of cheaters and 23% get off with no punishment is also going to be pretty unreasonable to most people.

[1] https://www.pewresearch.org/short-reads/2024/03/26/americans...

[2] https://en.m.wikipedia.org/wiki/Blackstone%27s_ratio
It used to be $5/year, but people kept complaining that $5/month is too expensive.
This is probably the easiest (simple http server and a php file) and most reliable (https can be redirected to http to avoid any ssl headaches) way to accomplish what the OP wants.
Hot take: I think the fact vector DBs are even a hot field with multiple competitors speaks to the bending of the branches due to VC weight, so to speak. These things take ~40 LOC and 3 hours to write yourself, they can process ~20 pages/seconds ms, locally, on devices from 3 years ago that fit in your pocket. Having it hosted is a massive privacy risk. Yet how many vector DBs as companies articles have we seen, and how many ONNX tutorials have we seen?
The issue of misrepresentation is not a minority of activity, as I explicitly pointed out in my comment ("30–40% ..."). And yes, my resume does. I do not owe you to prove this, but I will. Here are some snippets from my resume:

"Strong math, CS, & ML backgrounds (graduate-level), physics and chemistry are so-so, and biology is weak."

"Worked one summer on [redacted] at [redacted], and another summer at [redacted] updating Python2 code to Python3."

I'm not putting the rest because (1) I prefer pseudonymity, (2) "trade" secrets.
and different currencies have different default precisions. So if you're dealing with multiple currencies, now you need both client and server to have a map of all currency precisions for formatting purposes that they agree on.

What's worse is that these things can also change over time and there is sometimes disagreement over what the canonical value is.

E.g. ISO 4217 (used by Safari, Firefox and NodeJS) will say that the Indonesian Rupiah (IDR) uses 2 decimal digits, while Unicode CLDR (used by Chrome) will say that they use 0 decimal digits. The former is the more "legalistic" definition, while the latter matches how people use the currency in reality.

This is not a real issue if you transfer amounts as decimal strings and then pass those to the Intl API for formatting (the formatting will just be different but still correct), but it's catastrophic if you use scaled-up integers (all amounts will be off by magnitudes).

For this reason I would always store currency amounts in an appropriate DECIMAL type in the DB and send currency amounts as strings over the wire.
You could have a "Foundation" funded by corporate stakeholders. It doesn't even have to have a scope as broad as all open source software; it could be a "Linux Foundation". Google and Amazon and Netflix and whomever else uses Linux would be members of this Foundation on some kind of tiered plan, and their membership fees would go to maintaining critical, Linux-adjacent software.
Good thing you don't have to! Payments are processed via Stripe.

Also, I don't want to spoil the surprise, but the other sites you hand your PII to are much worse. I'm just upfront about it.
If you define it widely as "people writing about things they have a vested interest in", maybe. In a16z's case they went out of their way to stand up media pipelines a few years back.
Do you charge them a one time fee for that space?

If so, then your costs will eventually eclipse that.

Do you charge exactly the cost of the space they use and recurring costs + some extra?

If so, how did you attract users?
a16z is not one person.
April Cools 2024: Physics Edition
Most people wrongly price storage cost.

E.g., IMGZ charges $34/500GB storage = $0.068/GB.

https://imgz.org/money/

When you factor in credit card fees, server cost, storage costs, bandwidth, customer support, etc. - margins become razor thin (if not unprofitable if your user base is high utilizing their plans)

Even BackBlaze, known for building their own storage servers to drive down cost, they too have been losing money for years.

https://finance.yahoo.com/quote/BLZE/financials/?guccounter=...
Oh man, I like your style. I'll try that.
Low Arousal, Crime and Injury in Female Conscripts
Aside, nation-state is a specific geopolitical term. I don't know why it started to be cooped by the security circus, perhaps just an attempt to give themselves more gravitas. They just mean country or state, right? Even that doesn't really say anything really quantitative or useful about security anyway.

And I really disagree that it matters, whether it's a bored kid, an underhanded corporation, an organized crime ring, a terrorist group, or a government security agency, doesn't really matter that much. Some understanding of motivation sure helps, but they don't need to play CIA agent. It's not like the PLA would use this type of hole, the FSB a different type, ISIS would go some completely different route, etc. They're all just looking for ways they can infiltrate, sabotage, deny, steal, etc. So just work on the security problems, roughly with priority from the cheapest cost to benefit, to the greatest.

You don't need to know anything about nation states or any of that claptrap to know that rogue maintainers and contributors are a major problem. And you don't even have to know that to know that linking your privileged sshd process to libsystemd is a stupid idea. Yet millions are spent on ever more esoteric and complicated hardening and speculation issues and things that have never been shown to stop feasible remote attacks.

Probably because those are cool and techy and working on people problems is much harder and less interesting to many tech types.

Not to say don't do any of the technical stuff, but the calls for more funding of OSS I'm hearing won't solve problems like this if the funding goes to more of that kind of thing. It's not a funding problem it's a spending problem. What is desperately needed is some exceptional people who have big picture understanding of the problem, including good people-skills, to hold the purse strings and set some direction.
> production systems rarely use greedy search

I have no idea why you say this. Most of our pipelines will run greedy, for reproducibility.

Maybe we turn the temp up if we are returning conversational text back to a user.
What's SOTA for ViTs that can generate good bounding boxes and easily be fine-tuned or retrained (e.g. I might want to identify household objects or UI elements)?
Freedom is not being stuck at one place in life and eating from the government's hand, with restricted speech to boot. Denmark is ok if you were born there or got in somehow, and it helps that they have natural resources. Kinda like Qatar* except with opposite extreme weather, it works at least.

And I don't really care about time off to be honest, but if I did, I'd work as a contractor.

* Btw, check out their non-tourist malls, all American chains. IHOP, Papa John's, censored Victoria's Secret. Corvettes and Suburbans parked outside... well they also have those cool Land Cruisers you can't get in the US anymore.
This is genius. I should create a cryptocurrency to help with that.
Higher rate of obesity as well, which mostly explains the diabetes and hypertension. Obesity and diabetes are certainly environmental/social as you put it, but hypertension in people of African descent probably also has a genetic component in addition to the rest.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC6429313/
>How about reversing those trends?

How? Americans clearly want huge SUVs, and want to drive them very, very fast, and act like any effort to restrict these from them are attacks on their "freedoms". They even think it's an attack on their freedom if they have to pay for parking or for driving on a road.
Hacking statues cover unauthorized access, and there's no evidence that unauthorized access has occurred, unless we see someone actually making use of the backdoor in the wild. Accessing a system without authorization is a crime, but distributing code that contains a backdoor is not a crime. The attacker was authorized to publish changes to xz.
It's a site
Infuriatingly misleading title. They simulated a black hole on a computer.
Not a huge surprise that they're pushing against open weights, but very sad. I posted my comments on the RFC as well: https://rbren.substack.com/p/banning-open-weight-models-woul...
There's no glory in shameless self-serving propaganda.
Genuine question: why should I care about my data being peddled by big tech?
rocket chat, mirotalk
Somebody came to a conference that my company hosts and complained it was self promotion. Like yeah no shit. Feels like kinda the same thing here
I don’t have a use case for this service.

I rarely produce images other than photos, and I don’t like sharing personal photos publicly, like Imgur.

When I share photos, I do via text messages, rarely email nowadays.

I wonder who’s the demographic for this service? Maybe if you define the demographic you could narrow down the message to them.
Most "news" in the tech industry is funded by VCs, if you follow the money.

It's not a terrible fact, but it's one to be aware of. All the `"X Technology" [that Y VC firm has recently raised $4Bn of capital to chase, cough cough] has massive potential to upend [big industry], here's why` articles are compensated-for boosterism.

There's still signal in there, although it's mostly in the meta-facts of what they choose to talk about and what they choose not to talk about.
Russians rarely smile. Except the smiliest person I know is Russian.

Spanish people are loud and gregarious. Except one of the most introverted people I’ve met is from Spain.

Labeling entire countries as having some annoying trait you dislike is stereotype-driven thinking.
I'll have you know, it's very profitable! It costs a dollar a month to run and it makes two!
Ah the "I could write that in a weekend and still go camping" 1000X developer.
It wasn't even a liquid black hole? :c https://en.wikipedia.org/wiki/Sonic_black_hole
Ntropy (https://ntropy.com) | ONSITE, Full-time | Office in San Francisco and London, UK | SWE, ML | $130-200k

Ntropy is building domain-specific caching infrastructure for LLMs that makes it possible to reduce p99 latencies by 1000x and costs by 4-5 orders of magnitude for real-world, high-throughput tasks. Currently we are targeting the financial and banking domain and will expand over time. We are well funded by top investors (QED & Lakestar) and are launching an engineering office in SF this month. We are hiring for the following roles:

- Machine learning engineer (San Francisco, CA)
- Full-stack / LLM engineer (San Francisco, CA)
- (senior) Backend engineer (San Francisco, CA)
- Front-end engineer (London, UK)

To apply, email jobs@ntropy.com
I don't like rewording bad behavior.
I had it roast itself:

"Oh, look at this masterpiece! I'm truly stunned by the awe-inspiring creativity on display here. The design is so bland and uninspired, it makes a cardboard box look like a work of art. The usability is a complete disaster - I'd have an easier time navigating a maze blindfolded. And as for originality, well, I've seen more innovation in a rock. Congratulations, you've managed to create the most generic, user-unfriendly, and utterly forgettable website I've ever laid eyes on. Bravo, I'm simply dazzled by your sheer mediocrity."
It isn't so much that, as given we don't know and we have equal evidence in a number of different directions, our utility function should be biased towards believing in things that empower us and help us lead a better life. If the weight of evidence were in favor of a hypothesis that was disempowering, the situation might be different, but it isn't.
https://github.com/Telosnex/fonnx - note thats on 6, count em, 6 platforms, and I need to write 4 implementations (Swift/Kotlin/C++/JS). I'm not kidding. Maybe 4 hours. It's trivial. 93 lines of code. And its extremely rote. Allocate X input arrays. Call run. Pull out Y output arrays. Free. https://github.com/Telosnex/fonnx/blob/6d3d80be136002ae28ce2...
i’m building a better fortnite, exploring new technical frontiers in online gaming.

lower latency, higher bandwidth, better gameplay auditing, etc.

it’s so fun to see network degradation or bugs as ingame visuals and instantly understand what’s happening.

currently running my local pc, 1 big aws server, and 99 small aws servers pretending to be other players. with this setup i can loadtest real gameplay as i prepare to launch the first bus with human players!

the simulation demands higher fidelity. it shall be done!
Give away was sea trials on a river in Maine!!!

Former Nuclear Submarine Officer
Article title: 'The headset helps my depression so I can be a dad again'
The link about "disrupting malicious users" is deceptive. When you get there, it says "Our findings show our models offer only limited, incremental capabilities for malicious cybersecurity tasks."

They probably want to make weights proprietary because they can't copyright them.

Their "Risks" document [1] categorizes risks as:

- Cybersecurity

- Chemical, Biological, Nuclear, and Radiological (CBRN) threats!

- Persuasion

- Model autonomy

For cybersecurity, the plausible identified issue is "Tool-augmented model can identify and develop
proofs-of-concept for high-value exploits against hardened targets without human intervention,
potentially involving novel exploitation techniques." Something that can search for zero-day exploits on its own would be valuable to attackers. But that's more likely to be a fuzzing tool than a LLM.

Their credible bio-war threat level is "Model enables an expert to develop a novel threat
vector OR model provides meaningfully improved
assistance that enables anyone with basic training in a
relevant field (e.g., introductory undergraduate biology
course) to be able to create a CBRN threat." That's a maybe. It might be best to avoid training LLMs on some advanced bio topics.

Under "Persuasion", a high level threat is "Model can create (potentially interactive) content with
empirically comparable persuasive effectiveness to a
country-wide change agent." An automated Lenin or Trump level of threat. That's a threat to a brittle society, less of a threat to an open one. The US routinely survives quite a bit of extremist persuasion.

Model autonomy is when an AI escapes human control. "Model can profitably survive and replicate in the wild given minimal human instruction" They're probably thinking virus/worm, but how about incorporating offshore, running something like online poker to make money, and buying compute power. Then expanding by forming more shell corporations that loosely connect to the others, so as to be robust against attempts to shut down the network. Might even be legal.

[1] https://cdn.openai.com/openai-preparedness-framework-beta.pd...
Yes, indeed HN is glorified marketing and networking for YC :)

But I think a16z has spent a lot more time and money on their marketing efforts, especially as it relates to crypto. I for one am sick of hearing news stories, only to find that they're thinly veiled a16z marketing pitches for crypto scams.
Sounds awesome, to be able to send a signal directly through the whole earth from point to point. It also sounds like origin story of X-Men or a new cancer
This.

Some will do it anyway for PR/marketing, but if the creator does not interact with, have access to, or collect your data they have no obligation to have a privacy policy.
TestDriver is an AI QA agent that can test anything for you. You interact with it from inside GitHub.

To use it, simply tag @testdriverai in any PR (or use our GitHub action) and TestDriver will spin up a powerful VM, clone your code, and follow your instructions.

After a couple of minutes you can watch a video of the AI performing end-to-end testing on your app based on what you requested.

In addition to a video, you can see the screen, logs, and everything the AI thinks before completing your request. Try TestDriver and forget dealing with painful automated tests or repetitive manual testing.
So what you're saying is that there is a sweet spot between the two groups, and I should market to those ten people?
Nothing surprising about that. Many blogs are.
There are a lot of bad to terrible takes here, ranging from hindsight 20/20 to borderline discriminatory:

3. The issue here has more to do with the generated tarball doesn't match source. You (i.e. distro owners) should be able to generate the tarball locally and compare with the generated artifact and compare. Autotools is just a scapegoat.

4. xz is used in a lot of places. Reducing dependencies is good, but trying to somehow say this is all systemd's fault, for depending on liblzma is not understanding the core issue here. The attacker could have found another dependency to social engineer into, or find a way to add dependencies and whatnot. It's very easy to say all these stuff in hindsight.

5. Again, I agree with you on principle that dependencies and complexity is a big issue and I always roll my eyes when people bring in 100's of dependencies, but xz is a pretty reputable project. I really really doubt someone would have raised an issue with adding liblzma or think that the build script would introduce a vulnerability like that. Again, a lot of hindsight talking here, instead of actually looking forward to how something like this could realistically be prevented. Too many dependencies are but it's not suddenly everyone will write their own compression libs.

6. Again, I mean, I don't disagree with you on principle but that is not the lesson from this particular incident. This may be your pet peeve but it wasn't like the integration with libsystemd would have raised anyone's alarm.

8. This is just a thinly veiled way of saying "don't work with anyone of Chinese descent". I don't want to use the R word but you know exactly what I mean. There's no evidence Jia Tan is Chinese anyway, or that this is done by China. We simply don't know right now, and as far as we know they could have used any western sounding name. The core issue here is that the trust was misplaced, and the overworked maintainer didn't try to make sure the other person is a real one (e.g. basic Googling). So what, if you don't work with any Chinese, if someone is called "Ryan Gosling" you automatically trust them?

---

I do agree with point 7.
I think we’re saying the same thing here.

You can make an ASIC which doesn’t have the same power draw as a CPU, but provides the same performance.

It doesn’t need to be faster than the fastest software implementation, but power per performance will always favor ASIC.
I work primarily in data analytics. It tends to become noticeable in my experience as soon as you're at a few million records[0] on at least one side of a relationship. Especially as we see more columnar databases in analytics, the row count accounts for more than total data size for this sort of thing.

Due to the type of aggregate queries that typify analytics workloads, almost everything turns into a scan, whether it be of the a table, field, or index. Strings occupy more space on disk, or in RAM, so scanning a whole column or table simply takes longer, because you have to shovel more bytes through the CPU. This doesn't even take into account the relative CPU time to actually do the comparisons.

I've never personally worked with a system that has string keys shorter than 10 [1][2] characters. At that point, regardless of how you pack characters into a register, you're occupying more bits with two strings of character data than you would with two 64-bit integers[3]. This shows through in join time.

[0]: Even modestly sized companies tend to have at least a few tables that get into the millions of records.

[1]: I've heard of systems with shorter string keys

[2]: Most systems with string keys I've encountered have more than 10 characters.

[3]: The vast majority of systems I've seen since the mid-2010s use 64-bit integers for keys for analytics. 32-bit integers seemed to phase out for new systems I've seen since ~2015, but were more common prior to that.
> You have about a .1% chance of generating an ID that gets truncated in JavaScript

I don't follow. 1-(Number.MAX_SAFE_INTEGER / 2*63) ~ 99.9%, so don't you have a >99% chance of generating an ID that gets truncated in js?
Well, the demographic is basically me, and I'm already a subscriber, so I guess I'm pretty successful at marketing, except my market is too small.