skysight-inc/HackerNews huggingface dataset:
> Given how easy the infiltration is and how extremely hard to detect it is, likely a lot.

This particular case seems to be an example of the exact opposite. It took "Jia Tan" two years to conduct all of the social engineering necessary to get into a position to introduce the backdoor, then upon doing so, was caught almost immediately, with the initial discovery not even coming from a dedicated security researcher, but from a sysadmin who kept digging when he saw unusual performance issues.

And the threat actor here deliberately went after the weakest link in the chain. Assuming that the goal was to compromise sshd, the antagonist evidently found it too much of a challenge to attempt to infiltrate OpenSSH itself, so targeted a small-team compression project that only some deployments even link to, and still got caught extremely rapidly.
Why the speed of light in vacuum is same in all inertial reference frames?
Depends on the company you are working for in India.

At a product company like Ola or a top MNC like Google you are earning way above most Europeans excluding Netherlands, Switzerland, and maybe London, but if I had to estimate, Product+MNC companies only make up like 30-40% of the ecosystem in India today.

If you're working for a mass recruiter your mid-career salary will top off around the $8-20k range, which is Eastern European level, but lower than France and Germany (where it's around the $40-60k range).

Also, there are regional variations in salaries in India as well. You're more likely to earn much higher working in an established tech or MNC hub like BLR, HYD, NCR, or PN than in Indore, Kolkata, Chennai, or Ahmedabad, where the tech scene skews towards outsourced contracting.

Government dev salaries are lowish (depending on the Ministry and whether it's central or state), but the perks are solid.

I'd probably say the split is 35-45-20 Product-WITCH-Govt.

Edit: You said "Top". Fair enough. Yea, the salaries at top employers like Google India or Flipkart are extremely competitive by European standards and are comparable to those in Mainland China, Israel, and Canada.
most people now will say something about the commit timestamps indicating this is an Eastern European actor, but it seems like any sufficiently dedicated intelligence service could script their commits or even assign a person to keep certain sleep/wake hours just to falsify that data
Show HN: Resubscribe – ditch the survey and interview churned users instead
Hi Hacker News,

We're excited to share Resubscribe, our latest project aimed at early stage founders struggling with customer churn. We've developed an AI-powered tool that conducts interviews with users who've decided to leave your service. Unlike traditional surveys, our approach encourages open conversation, enabling us to uncover the real reasons behind churn. We then present these users with a win-back offer, tailored based on their feedback.

Our MVP is live, and we've seen our first customer gain invaluable insights into product bugs, user intentions, and consequently re-prioritize their development roadmap to better meet their users' needs.

Why Resubscribe?

- Better Qualitative Data: Get deeper insights than ever before with contextually aware follow-up questions.

- Actionable Insights: Our AI-driven analysis delivers clear, actionable insights to help you reduce churn.

- Win-Back Offers: Automatically present customized offers to churned users based on their feedback.

Try Our Demo: We invite you to try our demo at https://app.resubscribe.ai/demo. We're looking for feedback from fellow founders to refine our product. If you find it useful, consider leaving your email for future updates.

Thank you for checking us out. Your feedback would be immensely helpful and greatly appreciated!
> AMD graphics cards have less issues

Not on compute. That's the real problem. Compatibility would have happened a decade sooner if AMD's compute drivers actually worked.
Which cities? I think most American cities are kind of like busy suburbs with big business downtowns. There are some exceptions. Also the European cities I've been to feel very different from US cities
"Falsehoods Programmers believe about Time" - https://hn.algolia.com/?q=Falsehoods+Programmers+believe+abo...
That is the stated intent and spirit of the new license terms, but as others have said, ask a lawyer to be 100% certain.
Let's get rid of DST first; then we can talk about moon time...
To clarify, they did not purchase the copyright -- they purchased the trademark, and are using it to attempt to capture the practical value of the copyright. The copyright is by far the more valuable of the two, but they do not actually own it. Of the actual valuable object (the copyright, i.e. the codebase), about 80% was written by people outside of the employ of Redis Labs né Redis Ltd.
While we're at it, why not shove our financial passwords etc. into our HTTP headers for every website we visit?

That would be awfully convenient. You'd never lose them or need to deal with another native application. Just open any web page that echoes all HTTP headers and then check your account balance.

Or maybe having a separation of concerns for different applications in a general purpose computer is worth the friction.
Oh, ok. I expected a kind of techno-philosophical answer, I guess :) But according to the video linked above (https://news.ycombinator.com/item?id=39909829) the intricacies of the "why does it work" are not really understood, even by experts.
The test file containing the backdoor seems to be here:

https://git.rootprojects.org/root/xz/commit/6e636819e8f07033...
vpn: no
proxy: no
tor: no
relay: no
hosting: no
I do commend you for your views, but I'd say the nuance is (I guess like in programming or carpentry or other tasks as well), to know when precision matters, and when it doesn't matter.

It really does matter when making bread that you get the yeast, water, flour, salt concentration exactly right, and you get the temperatures exactly within range.

It really matters when boiling sugar. You're not going to make toffee correctly without a working thermometer.

On the other hand, other doughs, cakes, etc are much more forgiving, and for the majority of home cooking that anyone is doing, you're quite right that it really calls for a reactive chef who is making things _to taste_, actively keeping track of their cooking, rather than someone hoping that if they follow instructions _precisely_, they'll achieve the outcome they're hoping for.

But if you're writing a recipe book for others, not just for yourself... readers would still like to know how _you_ make it, and that calls for at least a bit of precision in the measurements and times. Perhaps we should write recipes with margins of error?
Ceiling fan becomes a "spaceship" SCARA robot arm
I see. I suppose I'm sort of partially blind to that given that I've been really lucky to mostly have interviews where the code portions were more "build this whole thing" rather than "whiteboard this function".
I don't know what AMD is planning here; but tweets and a bug tracker is not useful progress. I am not optimistic that this will be meaningful.

That being said, if they start open sourcing the firmware that would potentially be huge. And if they do actually fix some of geohot's bugs that would potentially be significant. There seems to be a small and finite set of bugs on any given AMD card that are blockers. If, by hook or crook, they fix that list of bugs then the card will probably be a lot more useful for machine learning. If they stop with the stupid crashes, everything else seems to be ok. They only need to do BLAS and data transfers reliably.

But knee-jerk bugfixing in response to public pressure is a really bad sign. This still wouldn't be the thoughtful root cause analysis that leads to high quality software. Plan->Do->Check->Act; not Panic->Tweet->Code->Crash.
Is it me, or does it seem like "invasive pear tree" has become a big story this spring, seemingly out of nowhere. Maybe I just don't follow news around this, but this spring there have been both local and national stories about municipalities dealing with these trees. I'm not saying it's not a story, just that I wasn't aware of it before and am wondering if it reached some kind of critical mass as a problem just this year.
The video conferencing, messaging, document editing, and games are things browsers can load from an external source. That’s different than running it locally.
There are rules about making the price of something too low to wipe out competitors too, I think in both antitrust and trade law:

https://www.trade.gov/us-antidumping-and-countervailing-duti...

You could probably say that's basically a complaint about giving consumers too good of a deal, but it is deeper than that.
With the amount of synthetic content that is already on the internet, and with even more to come, I think we'll unfortunately need to find a way to automatically filter that content to only what is really relevant to us.

People are using AI to create incredible amounts of SEO content, to the point where just using Google to find something is becoming increasingly useless. If, on the other hand, you had an AI agent that automatically filtered out all of the noise, you could still find the real information you need. What would be even better is if the agent could learn about the things you find interesting, and the things you'd rather avoid.

Now the question is: do you want to have control over such agents and the data they need, or would you rather let some centralized entity manage them for you?
> Water based drones instead of air. Would that make them more efficient, and able to travel further?

If I were designing them, I would use RTGs, where the heat from the radioactive isotopes is eventually cooled by the sea water.
What are any possible reasons to have some generative network pre-trained by someone else as a part of some proprietary software?
Your reference to data security is very valid, but why is that comment so provocative and upset?

> Seems like an unusual use case for most businesses.

You may not work in a public affairs consultancy. Companies do different things. Well drilling is also "an unusual use case for most companies". That does not make it any less important.

If your tool tries to fiddle with the content of your statement, it's not a serious tool. No one would accept their spell check tool to have an opinion on the type of content it is correcting.
Suburb haters hate because of experience, not misunderstanding.
I'm not sure I'd count your example, it's just a variation on "wander or explore".

But "Plastics" could be a candidate.
No. I'm talking about a road that snaked up the side of a hill that had trees, not a main street road.

It was the only way to access a particular area without taking a large detour. No sidewalks, you walked down on the dirt, or biked on the road and prayed
There is essentially unlimited land available to build new suburbs. The problems come in when those people need transportation to somewhere outside the suburb.
Don’t look up is in position 3 on my ‘to-be-watched’. I’m holding out hope that it is good. I know it is supposed to be a comedy, but I haven’t seen someone fully commit to it being hard satire.
The fraction of people who are doing AI at the CUDA level is far smaller than the fraction of people who are doing it at the TensorFlow or Ollama levels.
Theyre both common and they're both bad.
I believe the proper zoomer term for this is "cap"
This is used to build micrograd and essentially extensively used in PyTorch.

https://www.youtube.com/watch?v=VMj-3S1tku0

Excellent intro video btw
Read less fantasy and more history.
How do you feel about mopeds? You obviously hate cars, and seem to like bikes. Where is the equilibrium for you? Are pedal driven mopeds tolerable? Vespas? Sincere curiosity.
These are wise descriptions of the NVIDIA/AMD competitive landscape.
The immense majority of Linux users use these "abstractions". Even on the steam survey which is going to be extremely biased to favor nvidia users Intel/AMD GPUs are the majority, and if you include the Steam Deck then it's a no contest.
AI Safety and Deep Reinforcement Learning
Searching Nixpkgs in Under 30 Milliseconds
Went! Quite pleased with my results. Still feel like suburbs suck ass though.

Edit: And to add a note, telling people to "get therapy" for expressing opinions you don't agree with sucks pretty hard. I don't know what kind of therapy you're envisioning here but I struggle to think of how chatting with a well-educated and empathetic person about the utter state of our world is meant to make me feel better about it, but it's not like any therapy I've had nor do I believe anyone would really benefit from.
It depends on your expectations. I'm used to the idea that I have to drive everywhere and it never occurs to me that I would prefer walking or bicycling. In my current suburban home I'm a three minute drive from a relatively big supermarket, and an eight minute drive to a somewhat wider array of shopping. I rarely feel like I'm too far removed from any particular item or service that I need.

That said, I hate driving to work; it's a half hour drive to and from downtown Cincinnati if I keep crazy hours (I work 6-2:30 just to avoid any hint of stopped traffic, otherwise my daily total commute time shoots to 2-2.5h). I envy those of my coworkers -- generally the younger ones -- who live two minutes by foot from the building, but my dogs would have to give up their big backyard, so ... not happening.
That will have to be an argument that is made and it will be a difficult argument to make.

“Engine was not maintained well” is so deeply opinionated. The first thing they do is check standards. Was it oiled? Were the parts replaced periodically? Was the fuel type correct?

It could be a mistake. “What kind of engine?” “It needs this type of fuel.” “Oops, no, that was for the older ship. This is a different ship.” “The ship already set sail.” “Nevermind then and keep your mouth shut.”
Front-end development's identity crisis
>When one place looks like any other place has been explored before:

Heavily referred to in the article.
No, but I'd like an LLM to filter out comments like yours and delete it before I read it.
Ah thx
>And the revenue? Did it more than double? If so, they got their money's worth.

Did that revenue double because of the contributions of the extra headcount, or because of the temporary artificial economic situation of that period that doesn't apply anymore?

From where I was standing, the revenue massively spiked during the pandemic way before the mass hirings even happened, let alone have those people become productive enough to have a positive impact on the bottom line. It was an open secret that a lot of newly hired people during that period were just keeping seats warm at home collecting nice compensations while playing videogames and doing next to no work (a lot of people were gloating about it on reddit and in my circles).

Given that knowledge, was it any surprise for anyone that this was not a sustainable increase and a correction would follow at some point in the future?

> but it's still a betrayal to hire so much, have them generate more money for your company, then drop them when convinient for the company.

Agree, but most tech companies aren't there to provide social services, but to make a profit, as much of it as possible. If people want ethical employers that will never let them go, maybe they should give up on 400k+ TC big-tech jobs, and become school teachers, nurses or social workers instead for much less money.

There are plenty of tech jobs out there that won't crash or won't let you go the moment the shit hits the fan, but they also won't pay anywhere big-tech TC.

It's like gambling, big money also comes with big risks. Similarly to 2008, the ones with the biggest compensations tended to also be the first ones to be let go in the process of reducing operational costs.

People aren't complaining about making bank, earning orders of magnitude above average pay during the good times, right? Then why do they expect sympathy when the charade that made them bank for a while comes crashing down?
To do so is to redefine the second on the moon.
That redefines the Watt, the Joule, the Newton, the Ampere, the Pascal, the Becquerel, etc.

It even makes a voltmeter read incorrectly.

Moon-meters would be different from Earth-meters.

Careful.
I think we’re lucky that the compromise was ham fisted enough to be trivially detectable. I’m sure other, better attacks exist, implemented by smarter actors.

Software is a national security threat because IT is increasingly dependent on computing. Plenty of civilian tech is being used in Ukraine to good effect.

Smart stakeholders are going to watch where stuff is used and target the supply chain. It may be Russians, Mideast stakeholders, or domestic extremists.

Software is to 2024 what a truck bomb was in 1994.
> how would you slice cold butter by grams?

It's more sensible than slicing off butter by spoons, where a spoon is not a square, except the slice of butter is a square!
HuggingChat Assistant plugged on the HN front page
> Everyone is different, but man... I'm the guy that likes to fire up the bbq and chat with neighbors in the backyard while the kids are who knows where (but safe) in the sprawl.

I do this in "the city" right now (I BBQed some lamb on Sunday; my neighbour got a new motorcycle (Scrambler 1200XE) and I chatted with him about it). The Oh the Urbanity channel has a video on the (mistaken) idea that "urban living" = Manhattan / Hong Kong apartment blocks, which is certainly not the case:

* https://www.youtube.com/watch?v=BCmz-fgp24E

Here are some examples houses in an urban area with front yards, back yards, and garages (attached to lanes):

* https://www.google.com/maps/place/150+Geoffrey+St,+Toronto,+...

* https://www.google.com/maps/place/70+Jackman+Ave+Toronto,+ON

A little less square footage:

* https://www.google.com/maps/place/125+Hampton+Ave,+Toronto,+...

* https://www.google.com/maps/place/50+Geoffrey+St,+Toronto,+O...

Plenty of that was build pre-WW2 in ways that didn't depend on cars:

* https://en.wikipedia.org/wiki/Streetcar_suburb

* https://www.youtube.com/watch?v=MWsGBRdK2N0&t=1m8s

Suburban design is the worst of both worlds: lacking the density of the urban so infrastructure is inefficient and so is transportation, and basically bulldozing what makes more rural living nice (closeness to nature).
> AMD's opensource drivers are mostly a shim that wrap firmware blobs

I went and checked the size of AMDs vs NVs firmware blobs and the 2 GSP firmware that are used for new NV cards in the linux-firmware package (https://archlinux.org/packages/core/any/linux-firmware as references for what I checked) result in it being the single largest folder in there (40MiB). Compare that to the largest amdgpu firmware file which is at 392KiB with the entire folder of 562 items being <20MiB.

Not to say that AMDs firmware is open source or so, it certainly isn't, but even comparing the amount that is possibly done is somewhat laughable.
There is. But it’s easy to forget because it’s an unexpected nap
Yeah. Lina Khan being appointed to the FTC is one of the most exciting things I've seen out of the federal government in my entire life. Anti-trust enforcement has been basically dead for longer than I've been alive, and her appointment sprung it back to life. Yes, there's been some stumbles there (the Activision merger suit was famously badly played), but you expect some missteps when resurrecting a dead agency with strong headwinds.

If you're a fan of reigning in the big tech companies, the admin that appointed someone like Khan deserves another four years.
Sounds like you might want to step away from the computer, walk around and meet people in these "racist suburbs" that you lambast. There's very few around me at least that are white majority. I see worse race and class divisions in the city neighborhoods.
A happier happy path in Turbo with morphing (2023)
Even if AMD could allow CUDA to run on Radeon GPUs from a technical perspective, how would that work out legally?

It was my understanding that a big part of what makes CUDA so good is all the math libraries that Nvidia wrote and optimized for their GPUs. Are those libraries licensed to run on non-Nvidia GPUs?

To me, it seems like what AMD needs to do is invest heavily in the ROCm ecosystem to bring it up to the level of CUDA. But yeah, it probably would take a long time to catch up.

You have to hand it to Nvidia here. They invested in the GPGPU vision long before it was economically viable. Their long term focus has allowed them to reap incredible profits from AI now and crypto before it.

Contrast this with the Intel approach of halfheartedly trying a new market every couple years and abandoning it after it’s not immediately successful. See Larrabee for the relevant example. But also Optane and their 5G cell modem as other notables.
I think he meant to write wolf in sheep's clothing. It probably refers to their user-first marketing in contrast with their privacy issues and imminent enshittification to provide returns on VC money.
Google's Protected Audience Protects Advertisers More Than It Protects You
Bret Victor's List of References
These comments make it sound like Jon Stewart himself wields no power. He commands an audience he can take to any platform he wants. It just looks like he took a liking to the pot of money Apple put in front of him.You can't really make the argument that Apple is the only game in town for Jon Stewart.

Free speech laws protect against government supression of speech, not corporations.
Jeff Bezos – About big companies [video]
Funder? Finder? Sunder? Just generalize it to Nunder already!
Where exactly did you live? My experience is the polar opposite.

I'm visiting my native city in souther Europe after 2+ years living in the US suburbs (Seattle). When I go outside, there is a plaza full of children playing (I can hear them from my window in a 5th floor), people sitting in a bench chatting, and terraces full of patrons. In my suburbs in Seattle I never see children "going to school", I just see a School bus that stops and has some kids jumping inside. I also never see anyone around when I walk the dog, except that faithful old man going for his morning jog.

Also how is having the ability to drive everywhere more humanizing? here I just don't have to. Yesterday I had 15 minutes until a meeting, so I just went downstairs, crossed the street to pop by the supermarket, bought something and had time to spare to join the meeting. In the US it would take me that much just to drive to the closest strip mall.
Data Anywhere with Pipelines, Event Notifications, and Workflows
It's been a long time since I've visited Starbucks
Not in the Bay Area. Or manhattan. City living is for the wealthy. Working folks live in cheaper places like East Palo Alto.
No. We get that. It's part of the problem. It's bland. It's generally hideous and it's all the same.
Ain't it the truth
>All evidence suggests that current LLMs don't scale (EDIT: they do scale, but at a certain point somewhere around GPT4 the scaling slows down very quickly)

There seems to actually be no evidence that LLMs dont scale. All data from LLMs leading up to GPT4 indicates they scale incredibly well actually.

Do you have a single paper you can point to that says otherwise?