skysight-inc/HackerNews huggingface dataset:
> most of my friends are already using tools like ChatGPT on a regular basis.

Are they?

As a counter anecdote, I don't know a single person who does. Even non techies are skipping personal assistants and such because they can run a google search themselves.
Poke at any large company at all, and you'll find that their in-house critical fundamental infrastructure thing is chronically underfunded, understaffed, bug-ridden, everyone is worried but no budget is ever approved.
Show HN: Fluo is an AI powered immersive chat room web app
Past-time IRC enthusiasts here! Fluo.chat aims to recapture the essence of those vibrant online meeting places of the past and adapt it for the modern digital landscape.
The concept of genuine, real-time interaction with strangers has become a rarity. Our journey began with a simple question: What if we could recreate the atmosphere of IRC channels but with a modern twist? We envisioned a platform that not only facilitates real-time conversations but also enhances them with immersive, atmospheric elements. We've designed each space to simulate the feeling of going out and mingling with people who share similar interests.

Features:
Music (live-streaming)

AI hosts with personalities

Venue cap limit

DMs (we call them whisper)

Live venue status & weather updates

Visuals change according to number of users

Mobile (soon)

Custom venues (ver 2.0)

P.S email fluochat@protonmail.com and tell us what venue you would like to hang out with your friends and we will create it! Would you like your live place to be featured? Also contact us!
What does this have to do with WebAssembly? That is another runtime that adds complexity. Apple has been sandboxing codecs for a long time. They run in a sandboxed process that is only communicating through stdin and stdout or something similar, if I remember correctly. You can ran native code directly. Adding a runtime with a JIT-compiler makes it harder to understand what is going on.
Arch Linux is not vulnerable to this specific attack, which requires sshd to be linked to liblzma. This link is provided by out-of-sshd patches, that Arch does not apply to their build.
Containerizing is entirely the worst response here. Containers, as deployed in the real world, are basically massive binary blobs of completely uncertain origin, usually hard to reproduce, that easily permit the addition of unaudited invisible changes.

(Yes yes, I know there are some systems which try to mitigate this, but I say as deployed in the real world.)
Very shrimple https://en.wikipedia.org/wiki/Tragedy_of_the_commons
It obviously reads as satire.
> in the 1960s a few hot shot test pilots could stick a landing on their first try.

Ha you mean the most costly, engineering first and politicized science and engineering endeavor ever attempted, and even though it was some kind of little miracle ?
"""Artificial general intelligence (AGI) is a type of artificial intelligence (AI) that can perform as well or better than humans on a wide range of cognitive tasks,[1] as opposed to narrow AI, which is designed for specific tasks.""" - the opening sentence of the Wikipedia page on this.

"[A]s well or better" allows "better" without requiring it.

I will also note that while OpenAI is indeed clear that their definition of AGI is superhuman[0], this is not a universal position[1].

[0] "(AGI)—by which we mean highly autonomous systems that outperform humans at most economically valuable work" - https://openai.com/charter

[1] "The most popular definition of AGI is the ability to perform any intellectual task that a human can do. While highly desirable, this may not align with what’s essential for achieving the singularity." - natanael.wf, Dec 2023, https://community.openai.com/t/agi-is-what-we-want-but-not-w...
>I can second this observation. I'm autistic and my brain is less adept at filtering out stimuli, so it's easy for me to detect both of those phenomena.

I have ADHD, and I wonder if it also makes us better at picking up "background" sounds, since we're so easily distractible in general, and our focus tends to drift away, unless we're "hyperfocused". It stands to reason that any change in the background is better picked up when your focus is usually so wide, so to speak, perhaps to the detriment of perceiving foreground phenomena. I'm always that one person who says "hey, what's that sound coming from such and such, can't you hear it?" or can locate their source better.
What I meant with "halting progress" is what commonly happens when a piece of software is "rewritten from scratch". Users (or clients or customers) see no improvements for years or weeks, while the business is burning money like mad.

The main reason why I am firmly opposed to "rewrite from scratch" or "we'll need some weeks to refactor¹".

Removing upstream dependencies and replacing them with other deps, with no-code, or with self-written code² is a task that takes long time during which stakeholders see no value added other than "we reduced the risk"; in case of e.g. SAAS that's not even risk these stakeholders are exposed to, so they then see "nothing improving". I'm certain a lot of managers, CTOs and developers suddenly realize that, wow, dependencies really are a liability.

¹ I am not against refactoring, just very much against refactoring as standalone, large task. Sometimes it's unavoidable because of poor/hard choices made in the past, but it's always a bad option. The good option would be "refactor on touch" - refactoring as part of our daily jobs of writing software.

² Too often do I see dependencies that are redicoulously simple. Left-pad being the posterchild. Or dependencies that bring everything and the kitchen-sink, but all we use is this one tiny bit that would've cost us less than 100 lines to write. Or dependencies to solve -- nothing really? Just that no-one took the time to go through it and remove it. And so forth and so on.
Some form of this "but what about the consumer" argument is rolled out every time a corporation screws up. It's an incredibly effective way of deflecting responsibility by claiming to be acting in someone else's interest.

My rebuttal is "moral hazard." Why should Boeing bother making planes that stay in the air if they can always count on a slap on the wrist and, in the worst case, a bailout.
Two high profile examples, Celeste and Deadcells use Monogame and Heaps (Haxe). They weren’t ported to Unity. Celeste and Towerfall Ascension are two examples of very high quality games that bucked the trend and just used a low level renderer (Monogame). IMO they are better because of that.

But besides that point, the very reason why many games are ported from their niche library to Unity or Unreal is mostly just for cross platform support. Not because the game creator has a preference for Unity or Unreal. They are forced into it through lack of choice if they want cross platform. If Love2D, Phaser, Flixel, and any other niche 2D game library had an easy way to target consoles they would get a whole lot more use, but they don’t because the lower levels are extremely complex and engine/framework/library developers can’t support it. WebGPU appears to offer a path forward in that regard.
Work Is a Place
(For anyone who is reading this, I think the parent is referencing driving cars)
Did you read the article? He's not advocating for doing 10 times as much.

He's just setting the bar for fluency / excellence in a topic.

He even says

> Either that, or admit that you’ve got higher priorities. No one succeeds at everything. If you’re not willing to do ten times as much, just level with yourself: “I’ve got better things to do than learn a foreign language.” “I’ve got better things to do than become a great economist.”
There's a reason people tend to burn down rain forests.

Well, two reasons: money from the cleared land, and rain forests tend to be unpleasant reserves of biodiversity with all sorts of nasty plants and flying insects that want to lay eggs under your skin.
Location: London, UK

Remote: Yes, but hybrid/in-person preferred

Willing to relocate: No

Technologies: Rust, C, C++, Linux, AWS, TypeScript

Résumé/CV: https://istherecake.com/Shanee-Vanstone.pdf

Email: shanee@ifnotequal.com
> Hopefully, Lasse Collin will consider these possibilities and address them in his response to the attack.

Here's the thing: Lasse Collin was overloaded back in 2021. I've no particular reason to believe that isn't still the case. He needs help. Dealing with this solo is an incredible amount of work. Also, he needs help from a verifiably trustworthy source, verifiable in a way that doesn't require a lot of effort. In practice, that almost certainly means help from a major open source company.

I seriously doubt that's going to happen, because the people who really need to learn this lesson won't, because it's probably not in their financial interest to realize that supply chain problems start with them doing things on the cheap. While we keep on running the world's infrastructure like XKCD 2347 every so often everything's going to topple over.
I think this just as big of a problem among women. The loudest voices talking about both women's issues and men's issues tend to be quite sexist and obnoxious. Feminism has a misandry problem just as much as the men's rights movement has a misogyny problem. In both cases, it deters non-hateful people from participating, and that contributes further to the problem.
Was missing Germany. Corrections as speedy as this is why collaborative open data is so wonderful!
Man Group Tech | Java Engineer | London, UK OR Boston, USA | Onsite 3 days per week | Full Time

As an Execution Developer at Man you will be building the tools, platforms and algorithms that enable Man’s investment engines - AHL, Numeric and our Discretionary teams - to drive forward their centralised global trading operation

Your challenges will be varied and might involve building new execution algorithms, the platforms on which they run, simulation environments, intelligent order routing, connectivity to execution venues and brokers, tools for high touch and quant traders, monitoring capability, post-trade performance analysis and software to optimise all aspects of the trading lifecycle.

We are continually expanding the markets, asset classes and regions in which we trade as well as the styles in which we trade them. The team is responsible for designing imaginative and flexible software and tools to keep pace with this change.

Our systems are almost all running on Linux and most of our code is in Java, with some Python and TypeScript.

We use Kafka as the backbone of our platform, Aeron, Git for source control, Jenkins for continuous integration, Grafana + Prometheus for metrics collection, Docker for containerisation, Ansible for architecture automation, and Slack for internal communication. But our technology list is never static, we constantly evaluate new tools and libraries.

Man Tech has a small company, no-attitude feel. It is flat structured, open, transparent and collaborative, and you will have plenty of opportunity to grow and have enormous impact on what we do. We are actively engaged with the broader technology community.

o We host and sponsor London’s PyData and Machine Learning Meetups o We open-source some of our technology. See https://github.com/man-group o We regularly talk at leading industry conferences, and tweet about relevant technology and how we’re using it. See @manquanttech Essential Skills o Exceptional technology skills; recognised by your peers as an expert in your domain o A proponent of strong collaborative software engineering techniques and methods: agile development, continuous integration, code review, unit testing, refactoring and related approaches o Expert knowledge in one or more programming languages, preferably Python, Java and/or C/C++ o Proficient on Linux platforms with knowledge of various scripting languages o Strong knowledge of one or more relevant database technologies e.g. Oracle, MongoDB o Proficient with a range of open source frameworks and development tools e.g. NumPy/SciPy/Pandas, Pyramid, AngularJS, React o Familiarity with a variety of programming styles (e.g. OO, functional) and in-depth knowledge of design patterns.

If you're interested, please get in touch with Milly Parrott milly.parrott@man.com for London and Sarah Salta sarah.salta@man.com for Boston
That's what the NTSB investigators on board since the crash would be seeking to find out.
Well said.

It's a lazy comparison between crypto and AI.

Crypto is a bunch of scammers selling securities in an unregulated market. It exists simply because politicians move too slow.

GenAI is more like the invention of electricity or internet. People will figure out ways to build on top of the invention.

I'm sure you can go back to the 70s/80s and find that many people have said the bubble would burst or that the technology would never be useful.
I'm very much in favor of keeping assisted suicide legal. But I'm concerned about it becoming too much of a norm.

In my country, I doubt that depressed 20-somethings would get approved for euthanasia. But for aged people, especially with beginning dementia, I fear that it could become a societal expectation to choose euthanasia, and that creepy eugenicist arguments about being a "burden on society" are making a comeback through the back door.
The word "typical" sort of turns it into a tautology. Whatever your idea of gender is decides which blacksmith is typical and which isn't.
Language features, many, I would suppose. Now, using some of the stuff from the standard library, could blow things up.
My next side project will be a desktop app for Mac and Windows (I do not thing the linux market for the app will be big). I will first try to see how far I get with Fyne which is a kind of cross platform framework in Go. It supports all desktop and mobile platforms. I experimented with it about two years ago and liked it then already.

I dislike to install browser based apps so I prefer not to build those myself either.
> damages will be so big reinsurers are going to take a huge hit; they're probably not used to that.

Nah, the re-insurances actually are used to big hits. Munich Re, one of the biggest in the world if not the biggest, pays out billions of dollars a year from nature disasters [1].

[1] https://de.statista.com/statistik/daten/studie/200297/umfrag...
Is XZ embedded affected by any of this?
SEEKING WORK | Serbia (Europe) | Remote

I have 11 years of experience in making software.

In recent years (from 2017), I've been working as a senior/lead full-stack developer with React (Next, Gatsby, Remix, React Native, etc.) Node, AWS (Lambda, Amplify, AppSync, DynamoDB, etc).

In the past, I worked with different technologies and projects, including web, smart tv, and mobile apps, using Angular, Laravel (PHP), Ionic, and many other tools.

I'm available to start immediately.

Predominantly worked with companies based in the US, and with startups

LinkedIn: https://www.linkedin.com/in/dusan-stamenkovic/

Email: dusanstameni@gmail.com
There's AOT wasm too. Firefox uses it to sandbox some stuff. https://hacks.mozilla.org/2021/12/webassembly-and-back-again...
I don't believe they're terrified themselves. I believe they're grifters who are preying on the fears of others.

A subtle, but important distinction.
I keep thinking this. This comment feels like the elephant in the room people don't want to say because of getting downvoted etc.
I'm interested it HTMX, but for a project like this I couldn't afford to lose out on React's ecosystem of pre-made components where the goal was to ship a professional looking SaaS web-app quickly.
So in other words LD_AUDIT is useless? If it's that easy to overwrite the GOT I fail to see the purpose in audit functionality.
Is this what you're referring to?

> Regarding sshd authentication bypass/code execution

> Arch does not directly link openssh to liblzma, and thus this attack vector is not possible. You can confirm this by issuing the following command:

> However, out of an abundance of caution, we advise users to remove the malicious code from their system by upgrading either way. This is because other yet-to-be discovered methods to exploit the backdoor could exist.

https://archlinux.org/news/the-xz-package-has-been-backdoore...

I'm not finding anything from Arch mentioning dpkg/rpm, the linked article above is the latest article about the xz compromise from the Arch homepage.
Tokens don't have to be units of language, they can be any arbitrary chunk of an input stream: https://arxiv.org/abs/2006.03677

(I'd be a bit surprised if our brains are transformers; from what I understand, we're much more sample-efficient than most of our AI so far).
There seems to be a fundamental misunderstanding with a lot of these writeups. Are they 100% sure history was not rewritten at any point? Going back in time on the repo prior to listed involvement doesn't do anything as the attacker had full control. Starting from the last signed release prior to their involvement is the only way to actually move this forward (history may be fully lost at this point), the rest is posturing.
> because any woman knows how false this is.

In what way is the statement you quoted false?
Well that was unexpectedly awesome. It's useful to read even for people doing enterprise AI work, just to understand the workflow that went into improving the output quality.

I've been dreaming about this possibility since about the release of GPT-2, amazing to see someone made it. The current status-quo is very dissatisfying: sci-fi is only really made by a handful of huge US networks that insist on filling stories with useless but pervasive, offensive and ham-fisted attempts at social engineering. Beyond being bad in its own right it often breaks the script, e.g. you can guess who is going to end up being be a bad and good character just from their race and gender, making it hard for script writers to genuinely surprise you.

That said, I don't think having AI write the scripts from scratch is the right way to go here. The dialogue for the first episode still smells of RLHF, with characters being far too complimentary to each other and having bizarre verbal ticks. And is it needed? The world is full of people with smart stories who want to tell them, but we're in an era when reading is in decline. So the most interesting part of this is all the tooling that comes after that point: the rug smoothing, the AI-generated voice acting and especially the game engine based renderer that can generate videos given simple instructions. The blog posts sort of glide over that part, I guess due to the author's background in game engine development, but it seems the most useful part actually.

The key here is going to be connecting people with different skills in an open-source or more YouTube like system that allows people to remix each other's show kits (bibles, 3D objects, scene lots etc), so someone who develops a great world can accept fan episodes written with that show kit and then share in the monetization of them. Something like that would make story telling way more decentralized and allow it to get somehow "back to reality".
> I was implicitly referring to myths, legends and epics which are way older than just 2 or 3 hundred years

I think this only works, if at all, if you stick to surface detail. Maybe not even then. Zeus, say, was quite keen on shagging men (and women). This would definitely have been coded as very non-masculine, say, 50 years ago, and still is today, though to a lesser extent, but the Greeks wouldn't have seen it that way.

Also, there's a bit of a filter here. To some extent, the ancient stories that you're likely to be exposed to are the ones which are most comprehensible to a modern reader; if a story requires a deep understanding of an alien society to make sense to the reader, then it's not a _good_ story for a general audience, and you're unlikely to be exposed to it unless you go looking.

Even taking something as simple as this: https://lettersofnote.com/2016/07/22/what-do-you-take-me-for...

The world's oldest known letter of complaint. On the surface, it's kind of relatable, but if you read it in full, there are some pretty weird details which don't make that much sense without further context.
Fair enough then.

(I don't have a twitter account, so I couldn't learn this myself).
You're in for a treat - the tech scene here is phenomenal.

First of all, obviously we have some of the best hardware engineers on the planet, but they all work at TSMC / nvidia and live in Hsinchu so those of us in Taipei never really get to hang out with them.

If you're into it, there's a shitton of cryptocurrency companies and devs out here.

TONS of gamedev companies, especially in the mobile market.

The market is all over the place, we have some really god-tier engineers and then hordes of people building the worst websites on earth in Java / Spring or PHP.

My favorite thing about tech here is the newly formed Ministry of Digital Affairs, headed by https://news.ycombinator.com/user?id=audreyt , who is quite famous in the FOSS world. You can just go to their office during open office hours and have a discussion with them if you want to talk about digital issues, as long as you agree to the conversation being published for anyone to watch.

In line with that is the supremely awesome g0v: https://g0v.tw/intl/en/ Their regular hackathons and slack server constitute an incredible community of tech-associated activists building all sorts of solutions to problems such as fake news (which is a huge problem in Taiwan due to CPC spies / saboteurs), illegal factories, civil defense, etc. If you're in gaoxiong, I highly recommend coming up to Taipei for the next hackathon!

In taipei there's also lots of groups doing regular coworking meetups as well as self-study nights, in English. As for mandarin, I mean, take your pick, every university is chock full of clubs, not to mention meetup.com.

I've been building a software engineering co-op to connect the really skilled english-speaking engineers here with gigs that are befitting their skill level, we're at https://508.dev .
I don't think joeyh wanted to imply that PNG uses liblzma. PNG is just a convenient place to put opaque binary stuff that'd trigger an xz compression bug.
This is the basis of gender fluidity. An individual is free to balance both as they see fit.

From all of the ancient mystic philosophies that I've read, gender is always abstracted from sex and biology is unidentifiable at that abstraction. Regardless, those two gender identities exist as an inseparable harmony; a yin and yang.
... but `xz` is pretty much feature complete to me.

Lasse Collin was doing bug-fix-only release just fine.
Call me insane but I feel like that's just a rebrand of WEI or will evolve into WEI.
Just like everyone hated FLoC and when Google introduced Privacy Sandbox everyone was silent about it.
In German though "Ganze Zahlen" is not ambiguous. At least in my entire life I have not seen any other understanding of it and every child at school learns about them and that they include 0 and negative numbers, in contrast to natural numbers ("Natürliche Zahlen").
I agree, the context is important here. My use-case was B2B SaaS.
Also the market will only bear rate increases to an extent and so some of this cost will actually be eaten by the shipping industry and the insurance industry and result in lower profits.
Right? I'm surprised I don't hear this connection more often. Is it perhaps because photogrammetry algorithms require sharp edges, which the splats don't offer?
Why not? Users are going to love AR adaptation of Genshin or VRChat, and Apple sure is going to do everything they could to stop it, probably up to furry-washing it.
Sunshine is one of my favourite sci-fi movies for all the wrong reasons. The premise and setting is total bullshit handwavium.

But I absolutely loved the story, tension and slow boil. The cast as you say was brilliant.

It's a B-Grade disaster movie /really/ well executed.