skysight-inc/HackerNews huggingface dataset:
I'm not familiar with how distros get the source code for upstream dependencies. I'm trying to understand what Andres meant when he said this:

> One portion of the backdoor is solely in the distributed tarballs

Is it that the tarball created and signed by Jia had the backdoor, but this backdoor wasn't present in the repo on github? And the Debian (or any distro) maintainers use the source code from tarball without comparing against what is in the public github repo? And how does that tarball get to Debian?
>>It seems you did not actually read what I wrote. I put anymore in caps for a reason.

And.....did you read what I wrote? I brought up AC specifically because people online have been saying that the cracked version is faster, which I know we have tested at Ubisoft alongside with engineers from Denuvo and found it not to be true. You can of course choose to not believe me, it's the internet after all.

If you say "well I didn't mean AC" then cool, but I had no possible way of knowing what you mean, or what your cut off point is, "anymore" is not a very definitive point in time.
3k Blog Posts
Sounds exciting with the coming features!

About trust.

I would say, the firmer the structure of configurations is, the more trust I'm giving over to Github vs handling it myself.

Is Github actions a neutral VM executor that I can configure as I want to? Or does it have slot-ins for lots of different services? You are probably right that it is morally equivalent, but there is some material difference - Github now has a database of all their python-publishing repositories.
Thank god, because I can `npm install` in mere minutes and run two, possibly even three Electron apps concurrently.
Power doesn't corrupt, it reveals.
- Robert Caro
I enjoyed getting the metrics (not sure how accurate they were) but my garmin is so clunky it's impossible to sleep in. Great for everything else.
There's still life in the old combustion engine
It burns purple too.
4090 is faster in terms of compute, but the A100 has 40GB of VRAM.
> his partner later discovered the man had a string of bass draped around his neck

Incredible. I guess you have to hope the other person catches early so they don’t notice the smell!
Oh, no, it's not for the whole song. For each song, you take N samples, each sample gets converted into a fingerprint, and all of the fingerprints are stored in a database. Then when you query, you perform the same sample-to-fingerprint computation, and query the database for matching fingerprints. The database will return many false positives, but only 1 will "align", meaning the relative timing of the fingerprints returned is in sync with an actual song in the database. Once the number of aligned fingerprints reaches a set threshold, you can stop and return it as a result. That's how it performs subset matching.
All you do is write a single page in the tools folder and deploy.

We embed those tools in our parent web app, which has authentication, team permissions etc. So you will never interface with the code that does that.

You just have to focus on your business logic.

In terms of the AI copilot, the main value prop is knowing about our components, and using them to stitch together something fast. (Instead of the AI writing the component from scratch.)
This is one of the great “no shit” type studies. Good to validate basic and ancient wisdom I guess.
Humans are probably worse with knights than any other piece, relative to computers. Queen is a possible second; queen endgames are super-complex for humans since there are so many options and very few of them can be easily pruned. (I guess you can say that humans are bad with knights and computers are good with queens, especially endgame queens.)

Diagonal sliders do create lots of headaches for bitboards, but those were not used for chess before 1967 or so, i.e., more than a decade later. Generally one uses magic bitboards today (basically a perfect hashing technique to extract the bits of the diagonals a piece can attack into a neat little linear bit line), but they depend on fast multiplier and a fair amount of RAM for LUTs, which would of course not have been available on the MANIAC. I would assume that MANIAC just looped over all possible moves in the move generation phase.
i just want a DIY robot arm (6DOF preferred) that can give me massages? is there a community around this?
At least one street here got lined with those. A witty lesbian friend I was walking with identified the scent immediately, so at least the trees were good for some jokes.
I believe the main advantage of the A100 is the memory bandwidth. Computationally the 4090 has a higher clock speed and more CUDA cores, so in that way it is faster.

So for this specific application it really depends on where the bottleneck is
> people will want to develop the debate skills. They will feel like they are missing out in the negotiating skills people used to have

This is the world we live in. It's always been the world we live in. If you aren't seeing the negotiation, it doesn't mean it doesn't exist--it just means you weren't in the room where decisions were made for you.
Are you involved at all with the Bytecode Alliance or the decisions around the WASI proposals/standards? It feels like your take on these things would be super valuable given all the work you've done. They're a very open minded group.
In cryptography, there's the concept of a nothing-up-my-sleeve number. [1]

Instead of obscure constants, you use known constants, or at least simple methods to derive your constants.

You can do the same thing to come up with your test cases.
Bad zip? Construct a good zip of 10 files, each containing the first 10,000 prime numbers.
Then corrupt the zip by seeking to position (100/pi) and write a thousand zeroes there.

Bad JPEG? Use Imagemagick to render the first 1000 prime numbers as text into a JPEG file, then apply a simple nothing-up-my-sleeve corruption operation.

There are still cases where this approach isn't going to work: that new icon, helpfully proposed by a contributor, meant to be used in production, might contain malicious code, steganographically embedded. I think there's little you can do to prevent that.

[1]: https://en.wikipedia.org/wiki/Nothing-up-my-sleeve_number
On the contrary, I’ve been wearing my Apple Watch nearly 24 hours a day for a few years and find the sleep info extremely useful.

Really, the primary benefit I get is twofold:

1. I know approximately how long I slept for and remind myself of that all day via a widget. A short sleep is common for me, but I end up feeling foggy. Being reminded that it’s OK, I had a poor sleep, helps ease my mind.

2. I see approximately when I fell asleep and when I woke up. I end up having to add extra time if I sleep past my alarm, but seeing that I didn’t really fall asleep until late into the night helps me manage the pattern of late nights.

Both of those are easily covered by even semi-diligently tracking your sleep on paper, but having my watch do it for me is what I like!
I will only mention that I don't see LLM output as overly satisfactory.

Now. I would compare this to how humans use more carbon to move than a car for example. This could lead to a conclusion that we should stop moving and use more efficient propulsion to move. In car centered societies people move less and then need to exercise after hours more to have any sort of fitness at all.

Of course there is a grunt body (and soul) crushing physical movement as well as there is a grunt soul (and body) crushing writing work. But there is also a middle ground that would be something we aim for.
> Given all these questions, sir, what is your assessment?

I'll say that Satoshi Nakamoto was a cover identity fabricated by Nvidia's Covert Demand Stimulation Dept. After all, who has profited more from the popularity of BitCoin?

/s?
Now Apple Vision Pro Personas can float freely across different apps
As someone who has had a lot of experience with their platform and API - I do not think it was actually designed. It's duct taped and glued together.
I'm really only interested in weakly solved, i.e. "forced draw from starting position" like the 5x5 variant, not a perfect play tablebase from all possible positions.

Given that 5x5 is (weakly) solved, even though your rough estimates would put its 20-piece 5x5 starting position outside the realm of possibility, I don't think you're discounting accurately how much a reduced board/piece/ruleset can affect those exploding permutations for 6x6 as well.
Some ASICs are SoCs. Some are not.
Up until about 7 months ago I was on Freenode and then Libre IRC all the time, for years. I don't remember anything about decentralization on there. This was an import thing for me as I was writing a personal decentralized media sharing application.

The best model for decentralization I found was WebRTC. The best explanation on Decentralization comes from Vitalk Buterin: https://medium.com/@VitalikButerin/the-meaning-of-decentrali...

Before going further you have to understand that decentralized is different than distributed (federated). Distributed means fault tolerant redundancies with various degrees of independence/autonomy. Discord and Bitcoin are distributed as they still have a central point administration whether its a public ledger or username or whatever.

Decentralized really means strongly separated. For example if I wanted to communicate privately with my wife ultimate privacy means not through a third party server, but directly from my computer to the wife's computer (but encrypted relays are fine when required to compensate for transmission limitations). Accomplishing this requires decentralized transmission, which is tough to engineer even after solving for NAT.

Have fun.
Show HN: Hide What You Dislike – Chrome Extension to Hide Stuff by Text/Link/Img
First you validate the no shit, and then you can ask why!
LLMs for People Management
There seemed to be, early on, a lot of materials for supplanting middle management with LLMs. Has there been further research on this? When searching Scholar and Arxiv the terms wind up bringing up these positions and their respective use cases for other LLM tasks. There are some papers for HR tasks but I'm not finding much now, but I remember some materials about summarizing stand-ups, dividing up work, etc. Anything ring a bell? Perhaps I should be looking at business process automation? Thank you if you have any good links.
https://www.axios.com/2023/11/02/hunterbrook-hedge-fund-jour...
That's pretty cool! You should get her to write it up so it's not forgotten.
They indicate a similar strategy to Hindenberg Research [0]. They take speculative stock options on the assumption that the target of their investigation will see their stock fall after the media arm of their business publishes the investigation.

[0] https://news.ycombinator.com/item?id=39123608
I'll always remember this comment re: Overcooked 2:

https://news.ycombinator.com/item?id=31618955#31624381

> If you put your heart in it, you learn to communicate effectively under pressure (especially when trying to conquer those 4th stars), tolerate/move-on from each other's mistakes, and control your temper around each other.
yeah, I was expecting chess piece variants like Fairy Chess.. but there still can be! But do we add wind and fallout? Or make it a MAD type of thing where the meta-game is a kind of Prisoner's Dilemma? Either way, we could call it Manhattan and give it a go..
AWS Deadline Cloud
Quadratic Teams and $5.6M seed round
Common Pear trees have also this fish smell. Everything pollinated by flies has an offensive smell in one or other way. This is bad but can be desirable at the same time (no wasps or bees in the narrow streets).
Rotating Polygons on the Circle of Fifths [video]
We've encouraged a low fertility rate so that replacement migration can occur[1].

[1]: https://digitallibrary.un.org/record/412547
What kind of answer are you looking for here, specifically? The questions you're asking seem to be about how OpenAI's closed implementation works in terms of the biggest open research question in the field. What kind of answer do you expect?
This doesn't surprise me. A personal anecdote: a couple of years ago I traveled to Japan for the first time. During my time there, I walked much, much more than I usually do. As a result, I was physically exhausted at the end of each day, and had some of the best sleep I've had in years.
on the one hand, it's obviously stupid and a preposterous waste of resources, on the other hand, it's a moral good to incinerate VC money if the VC are so fucking stupid as to give it to idiots like this guy.

so who's to say which is better.
How many degrees of freedom do you actually need, and what reach? Those parameters (plus speed) drive a lot of choices.

1-2k build cost is tiny in this space. I've paid that in individual motors (specialized ones, to be fair).
> If they want things done quickly they can do it themselves

I mean they kind of did. And that was the problem.
They made the same calculation with Google Play Music and "merged" it into Youtube Music. Not to worry, they migrated all my music over! Except most of the Youtube "Music" was people's personal uploads of dubious quality. I ended up moving to Spotify instead.
GP is talking about executable blobs (drivers) more than anything. Yes, binary protocols will lead to binary test blobs, so what.
Agreed ! It looks really good. But not sure where or when I do the AI prompting ?
It’s because when you take all information together, on average it’s correct for those topics. If the consensus was incorrect, you would get incorrect answers.
“before each investigative piece is published, the newsroom would send it to Hunterbrook’s affiliated hedge fund (Hunterbrook Capital), which could trade on the news”

via Math Levine’s piece on Hunterbrook from Bloomberg earlier today: https://archive.is/search/?q=https://www.bloomberg.com/opini...

edit: archive.is appears to be down. here’s the link to the original: https://www.bloomberg.com/opinion/articles/2024-04-02/a-hedg...
In fact gVisor is the opposite, it injects more guard instructions between the application and the kernel across the syscall layer in order to make stronger security guarantees. These additional guards slow the application even further by however long it takes to perform necessary permission checks.

It is not necessary to have such checks in a unikernel because the kernel inherently trusts the application because together they were constructed in the same pipeline. The hardware then protects the two together.
OnScreen: AI generated long form sci fi TV show
Does anyone know the model of the cassette recorder in the article photo?
Fascinating discussion. What I'm looking for in a tech stack for my web app:
CRUD - simple requirements at first but could be developed over time to include more social/community functions.
Good dev experience, I'm a relative newbie and will be learning on the go.
Inexpensive to host, no unexpected bills.

My tech stack should have the potential to scale nicely, in case it ever needs it.

So I'm not looking for much, just
Easy - Powerful - Future Proof

Sounds like the OP's stack is not it.
Look into the training process - https://www.youtube.com/watch?v=zjkBMFhNj_g

The goal of the initial pretraining phase is to make it good at predicting the next word. The rest of the training process is aimed at making it (1) helpful and (2) as correct as possible.

I think some people oversimplify things by calling LLMs "next token predictors" and they leave out the tuning towards helpfulness and correctness.
Essentially this is was distributions such as Debian do for your (if you trust them and their security enough which depends on your requirements). xz is noteworthy because someone spent more than two years trying to subvert this.

Note that the distributions used by package managers such npm, pip, or cargo do not do this. So be wary of the "all old is bad and needs to be rewritten and C does not even have a proper package manager" crowd. (memory safety is a good thing though)
I worry that it may mainly lead to spamming become even cheaper and more effective more than it will aid technological advancement.
Also goodness be if you're a celebrity and get kept alive for hundreds of years as a head in a jar.

Thank you futurama for your carbon neutral solutions.
Is it legal and possible for the NSA to socially attack someone with mental health issues this way?

I'd like to rule-out some state actors by the mere heartbreaking act of socially engineering and targeting a person in pain.

Not even considering the original maintainer may be a US citizen (idk).
Love Antennapod also. I even took a similar path, from Pocketcasts to Antennapod.

It's the best full-featured F-droid app in my opinion. I might even rank it second after NewPipe as a top-tier "killer app" on F-Droid.
The Simpsons predicted it: https://simpsons.fandom.com/wiki/Sun_Blocker
I've certainly observed what looks like that kind of behavior, but I don't personally feel rude at all for using the services of a cashier.

In my own shopping, I just use whatever seems likely to be fastest or less hassle -- for me.

If I've got a bunch of stuff, I'm heading to the cashier because they're better-equipped to handle a volume of stuff than I am at self-checkout.

But if it's just a couple of small items, then the self-checkout seems fastest: Scan, plonk, scan, plonk, invoke the incantation so that it can take my money[1], and pay it.

(Unless one of those small items involves something like beer or something else requiring an ID check, wherein: It's back to the cashier.)

[1]: In my neck of the woods, Wal-Mart gets this best, with as few as one button-pushes required to pay and leave (and there was a time when it was zero button pushes to use a debit card at self-checkout there). Dollar General gets it worst, requiring at least 8 button pushes (with three different input methods! it requires input on two different touchscreens and one physical keypad) to pay them and get on my way.
You have to tradeoff between privacy, automation and cost.

The scenario you described is tough to solve because of edge cases sort of like FSD.

If you want that work done then its cheaper to hire a maid. It would be nice to have complete privacy and have a robot perform all those tasks flawlessly but the price point would make it economical to get a human to do it.

Perhaps you can get someone to drive the robot but that puts privacy at risk.

Same thing with sex robots it is cheaper to hire a sex worker so until something that can get us past the uncanny valley I don't think we will see a robot revolution quite yet. The hardware alone is prohibitively expensive and there is not enough people tinkering at the problem (because to hire humans is always safer and easier and cheaper).
Rust is not a drop in replacement right now in the sense that it does require more learning curve, but for example if colleges switched to teaching everything in Rust, then you would see its use on the same level as Java.
I get it now. I can see law enforcement as kissing up to the powerful in a way similar to the IC kissing up to the President, and also Trump has used LE to further his ends and promises to do more if elected.

But I wonder where to draw the line between LE and IC. All LE does some IC work, at least if it comes their way.
Programming questions for specific web frameworks or devops tools or how to use a tool like jq for a specific query.
Given that merchant fees are typically lower than 3%, and that there's also scheme fees, cost of capital (in a post-ZIRP environment), operational, and fraud costs to be paid from that, (much) less than 3% actually ends up with the issuer (which they can then share with Robinhood as the program manager).

In fact, interchange fees are actually public, so you could even look them up and do the math:

https://usa.visa.com/content/dam/VCOM/download/merchants/vis...

https://www.mastercard.us/content/dam/public/mastercardcom/n...
Apple wouldn't let Jon Stewart interview FTC Chair Lina Khan, TV host claims
Unity is so much larger and more complex than a graphics middleware.

It comes with physics engines, telemetry, networking, a c# runtime and probably even more.

I don’t think that any of the adobe suite would ever be built in unity bc why do they need to ship a physics engine with their photo editor.

Not to mention that unity is backed by an, imo, untrustworthy company who’s obviously willing to change pricing structure on a dime and retroactively.
DECT uses 1880–1900 MHz in Europe, other countries use similar frequencies, that's not an ISM band.
> Planned economies generally have not fared well in history, not only from economic value added perspective, but also from the fascist political systems they produce as a by product.

The best-known planned economies were socialist and were under constant attack from outside capitalists (hard to make a buck on some other country making life better for its citizens).

Socialists are notable because, like Woody Guthrie's guitar, they kill fascists. Capitalists tend to ignore that because they don't like to admit that strong capitalism is one of the pillars of fascism.

If you can't be bothered to read a book, at least start with Wikipedia:

https://en.wikipedia.org/wiki/Planned_economy
I found out about Zuse because I was tasked with giving a presentation about an important German, when I was taking German classes at the Goethe Institut. Probably bored the hell out of everyone listening, but it was a bit of an eye opener as he's not so commonly discussed.
Here's what I would look at. (This goes with any certification or degree). Does the learning experience contained within the masters degree look like it would be worth learning. If so then you can go do that learning and accidentally get a degree while you are there. If not, then you'd be participating in pay to win, a game in which the house always wins.
Basically anything where a bishop would win, but a queen would put the other side in stalemate.

For an extreme example, see https://en.wikipedia.org/wiki/Babson_task.
The type any exists. The type unknown exists. The types actually have no meaning at runtime.
I use it regularly on Android Auto. Not sure how representative my case is, but I have had to initiate playback from my phone. It doesn't seem to show up with a visible interface and icons the way that, say, Audible does.

But it does play the audio.
“Look, I’m not saying do it… I’m just saying run it through the computer to see if it would work.”

“Whether it would work is not the issue.”

“So you think it might work?”

https://www.youtube.com/watch?v=s_4J4uor3JE
Exactly. Strangely this is actually tax efficient for both parties.
Same story for the iPod, same story for the MacBook Air, same story for the iPhone.

I think we'll see the same story play out once there are a few "killer" apps for it, and some of the features are refined (pass through sharpness, for example), and it gets a bit cheaper.
What’s the story with threading on the web these days? My impression was that the browsers have purposely and permanently handicapped some things necessary for performance in order to prevent things like rowhammer and speculative execution exploits. But I haven’t paid super close attention.
My wife and I will play through point n click games together. There's no "pressure", but I find I have more fun bouncing ideas on how to solve puzzles with her, and it doesn't really matter who's playing at that point.
You are confusing legal and societal obligations, again. OpenSource maintainers and coders don’t owe you anything, so please stop pretending that they do.
too many cooks (and too much money) in the kitchen