skysight-inc/HackerNews huggingface dataset:
I should have phrased that better. I meant "the safety of food in one's diet" rather than "the tips of food constituting one's diet".
Sure, that might be what your employment contract says, but the vast majority of people in the US (probably including you) work at-will, where your employer can fire you for (almost) any reason.

So although your employment contract might not say it, your employer can tell you "I need you to be available to take my calls 24/7 or you're fired".
It's called sans-io in Python land, which is where I heard it first.

https://sans-io.readthedocs.io/

I did it for one of my Rust projects back in 2018 https://github.com/Arnavion/k8s-openapi/commit/9a4fbb718b119... , and it's older than that in Python land.
People go entire lifetimes not wearing seatbelts and die to old age rather than car crashes. This doesn't change the fact that fewer people die in car crashes when they wear seatbelts.

Your relationship with cavities doesn't change anything about the statistics of cavities with and without flouride in people's diet.
If you follow the tz mailing list you will see their are many willing volunteers that would step up if needed. So I don't think even this is a good example..
I assume that the classical exposition to fluid mechanics uses newtonian concepts, mainly forces.
JavaScript. The Core. – Dmitry Soshnikov (2017)
Like something that Dieter Rams would design (makes me wonder if he did have a hand in it).
Maybe weight loss is reversible, but if you're not assuming you can do anything after you lost weight, you can keep weight low.
Oh no! That sounds sucky, thanks for your feedback!

This will probably seem really annoying but would it be a bad idea for you to do a little screencast of this? Sorry for the bother but it would really help me out, because it would be good to gauge the precise degree.

We might need to put a server in US NE. That region is bare, but I thought it would be covered by LA, Texas or Central Canada.
Sorry wrong thread :(
Oh please. This entire comment chain is about how they do not demand highly certified systems. Literally the only substantial thing I mentioned is the thing they have not mandated or pushed to implement. The only secondary thing I mentioned is that they should use systems that are empirically determined to protect against well-funded attackers as that is the actual goal. I did not supply a number to that, but I usually use 10 M$ as a bare minimum since we have seen numerous financially motivated attacks coming in around that number already. So, a 20 person red-team with 1 year full-time must not be able to find any vulnerabilities in your system, then you meet that bar. Again, nobody does that either. So, the only two things that I said are not being done.

Then you keep coming back to how their security teams need to focus on easier wins. Yes, they do, but even if they do them all they have still failed to reach the minimum bar. The goal is not "better" it is "adequate". Following all modern best practices and doing everything correctly still leaves you vulnerable to the now commonplace attacks by financially motivated professional criminals. Being unable to protect against the adversaries who are literally attacking you is the definition of inadequate.

Technology is the limiting factor for adequate security deployments. No matter how good your processes are you are still screwed against competent adversaries. That is not to say that technology is the limiting factor for most companies. Most companies also have bad processes. No matter what technology they are given they will screw it up. But even if you do everything (within reason) right and achieve the maximum potential of what is achievable you still have a inadequate system. That is a untenable state of affairs.

As to your random personal attacks. I design and develop actual high security systems in defense applications. People do frequently accuse me of not knowing what I am talking about because what I view as standard processes are what they view as impossible dreams. I do try to tamp it down to be generally applicable even to low security systems.
What makes housing so expensive?
It's not really an "application" thing. It's meant to be a design for libraries that implement protocols of some sort. All the library API acts on byte buffers and leaves the network socket etc stuff to the library user. So when the library needs to write data to a socket, the API instead returns a byte buffer to the caller, and the caller writes it to the network socket. When the library needs to read data from a socket, it instead expects the caller to do that and then give the populated byte buffer to a library function to ingest it.

Also, quite the opposite, it's *easier* to design a library this way because it's strictly less code the library needs to contain. Specifically in Rust it also has the advantage that the library becomes agnostic to sync vs async I/O since that's handled by the library user. Correspondingly, it is slightly harder for the library user to use such a library, but it's usually just a matter of writing a tiny generic wrapper around the network socket type to connect it to the library functions.
I'm a little annoyed at Hubspot at the moment and looking at migrating out.

We're a small sales team of two and the more we use the product, the more we need features in their next tier of subscription level, only issue is they only do a 5 user minium at the next tier and I cannot justify paying for three unused user licences.
The immigration is mostly unauthorized and down-market. H1B and green cards, the kind of immigrants who compete with HN denizens, has remained statically capped.
Blue jeans? Please give slacks a look... :P
Rebels and Sweethearts [pdf]
The behavior is actually more complex than a 1/t schedule. It behaves like a linear decay schedule 1-t/T with fixed stopping time T, as if T had been chosen in advance as the current timestep. When warmup is included, this is similar to high performance triangular learning rate schedules.
Schedules of the form 1/t schedules perform really poorly in practice, we actually did a large scale comparison that included them in a prior paper: https://arxiv.org/pdf/2310.07831.pdf
Logical properties have been amazing to work with. They're meant to make CSS rules generalize across languages with different text directions, but thinking in terms of block, inline, start, and end naturally guides me into styles that are more responsive. I think it's given me a much better conceptual model and understanding of CSS.
Didn't they do this in Germany? Where emails couldn't send push notifications after hours. Anyone know how that worked?

In my experience it's fine to stop push notifications for email/chat messages after hours and "call me" if it's an emergency. I often get 'urgent' emails and chats that aren't really urgent, but people rarely want to call you unless it's something truely important. Nor should people send email for urgent generally, I think that's expect a reply within 24hrs channel type environment.

I feel for society we need stinger rules to balance work/life. A great one would be something like like for employees under $200k it's the employers responsibility to ensure they are working their 40hrs or pay overtime plus right to claim bad extra hours on leaving a job. Add to that some serious overtime rate minimums like 2x or 3x for weekend and out of hours.

Ultimately we should aim build a society for good living and a productive economy is part of that, but not more important.
For a second I thought they solved it
Does anyone have a good explanation or introduction into the performance testing that was done to find this? And how to get started? Actually measuring performance always seemed to be a very hard task and I'd like to be able to do similar testing as the person which found this backdoor.
What if "Considered Harmful" is considered harmful?
Anecdotally, this is untrue.

Personally, BTRFS is the only filesystem that has ever caused me any data loss or downtime. I was using a single disk, so it should have been the perfect path. At some point the filesystem got into a state where the system would hang when mounting it read/write. I was able to boot off of a USB stick and recover my files, but I was unable to get the filesystem back into a state where it could be mounted read/write.

At work, we used to run BTRFS on our VMs as that was the default. Without fail, every VM would eventually get into a state where a regular maintenance process would completely hang the system and prevent it from doing whatever task it was supposed to be doing. Systems that wrote more to their BTRFS filesystems experienced this sooner than ones that didn't write very much, but eventually every VM succumbed to this. Eventually the server team had to rebuild every VM using ext4.

I know that anecdotes aren't data, but my experience with BTRFS will keep me from using it for anything even remotely important.
Is this not an incredibly expensive/unsustainable method? I agree with the sentiment that MoE is the way to go as the newer models will probably see diminishing returns. But the compute for a single prompt will suddenly increase 7-15 fold?
If it was purely poetic language, why the Roman objection to Atilla being compared to a God? Feel like there has to be more to it than that.
Gotta disagree strongly on that one, Tan. I've never, ever had a tech job that paid me extra to be on call. I happened to be working in a job right now where 24/7/365 call is implicit; if our site goes down, I'm not going to split hairs about who's supposed to handle it that day. I knew that going into it. It's part of the Staff Engineer role when you're in or adjacent to security or SRE. I've also been in jobs where there was no obvious connection between my job and being on call after working hours, and yet after I started I was informed that it was my turn to answer the phone.

If you want to pay someone to be on call, rock on. If you're not going to pay them, why do you expect them to donate their nights and weekends to you?
I would venture to guess that is not true in the US overall. I expect more people have no filter on their tap water than those who have one.
It’s literally a skill issue, Apple software is terrible but when you look at the garbage coming out of Google what alternative do you have?
Kind of like a Craigslist (CSS style / layout) + HN (which actually might be pretty awesome).
> imagine if this article was about the "poor Google employee living in a van and cannot afford rent", you'd laugh at its face.

You don't have to imagine it, you can read that article:

"23-year-old Google employee lives in a truck in the company's parking lot and saves 90% of his income."

-- https://www.businessinsider.com/google-employee-lives-in-tru...
Yes exactly this!! If Aaron et al are willing to place their optimizer on this leaderboard, that'll be fantastic. And https://dawn.cs.stanford.edu/benchmark/ImageNet/train.html - (ignoring the top 3 due to massively more GPUs)

The issue I have with Schedule-Free is you need tuning, but a well tuned SOTA can already skyrocket past a plain tuned AdamW.
I also have aphantasia and ALSO share these experiences exactly. That seems a bit beyond coincidence.
Dbdiagram is pretty op. Actually my initial prototype was very similar to it
Sure, there are multiple laws. The ones I've read all seem similar enough to me on the points people bring up.

Identity verification is not that mysterious. If these sites are afraid to do it themselves, there are turnkey vendors for that, which e.g. banks or docusign use. All the laws I've read say sites can use third party verification services. The Utah law specifically mentions

> verification through an independent, third-party age verification service that compares the personal information entered by the individual who is seeking access to the material that is available from a commercially available database, or aggregate of databases, that is regularly used by government agencies and businesses for the purpose of age and identity verification;

i.e. KBA, which is already a thing. These companies already know facts about everyone. You claim you're person X. They ask you to tell them a fact they already know. They check your answer against their database. They don't need to store anything you tell them. I'm sure they can tweak their service to only tell the requesting site you are over 18 and not keep any records. These services know how to deal with a highly regulated environment.

The Utah law also allows the user to present a "data file from a state agency or an authorized agent of a state agency that contains all of the data elements visible on the face and back of a license or identification card and displays the current status of the license or identification card."

No need for the site to save anything. Just check the signature and age.

I don't see what makes porn sites unique vs. any other e-commerce business that requires customers to identify themselves wrt. security. Typically those actually store and sell your info.

Also many grocery stores do scan IDs when you hand them to the cashier. Who knows what they're doing with that info. Wouldn't surprise me if they retain and sell it.
Okay I gotta be honest, and maybe I'm a little ignorant, but when did we start saying compute instead of computation? I feel like I went away on vacation and missed out on an in-joke. Should I be saying compute instead?
Good point, but I think Crichton’s original example still makes some sense. One’s choice of newspaper could affect the trustworthiness of articles by multiple journalists:

• Some articles may be edited by the same editor. If you see inaccuracies in an article by one journalist, you may worry that the editor is bad at fact-checking.

• Even if every article is edited by a different editor, if the newspaper’s work environment is rushed such that editors are told not to spend more than two minutes thinking about accuracy, it might have more inaccuracies than a newspaper that allows more fact-checking time. (In other words, newspapers have their own publication standards.)

• Newspapers set standards for what journalists to hire and retain. A newspaper that keeps paying for articles by a journalist who have been known to make mistakes is more likely to not care about mistakes they know of by their other journalists.

Bringing this analogy back to LLMs: if you see one LLM make mistakes, you should be suspicious of the accuracy of a competing LLM to the extent that the competing LLM has similar “journalism” and “publication standards”.
honestly it was pretty intuitive even when navigating all in chinese
I have yet to see an LLM that is cooperative. The magic of collaborating with someone is that we can both understand the problem and reason about it.

The current degree of LLM intelligence is not compelling for a social creature like me.
Maybe this is good for English speaking Europeans or Canadians. Americans that go to public school aren't leaving the country in any real numbers. We're too poor and PTO starved.
The text near the box makes it sound like these are just the fixes - not adding the test files but updating them.

At that point it would have been clear “the race is on” to avoid detection, so it’s not too surprising someone would work late to salvage the operation.
There is an interview of Steven Spielberg from the 90s in which he discusses rarely lending his name to charities or letting people know which charities he supports on why he supported the Shoah Foundation. In the interview he said that God does not notice charitable acts unless they are made anonymously. If a gift isn't anonymous it is still considered an act of pride. Is this mentioned in the biography?
'Compute' connotes hardware, 'computation' does not.
Also, consider that for a great many Americans, their house is the only significant asset they have.

A huge number of Americans have no retirement savings at all [1]. For some of these people who do own a house, selling it at retirement is the only way they can avoid poverty (or at least maintain their quality of life), especially with the possibility of a future government significantly cutting Social Security benefits.

Even those with retirement savings often treat their houses as an asset to be leveraged or sold at retirement to help fund the latter stages of their lives [2].

These are all good reasons to carry property insurance even if you don't have a mortgage on the property that requires it.

1. https://www.cbsnews.com/news/retirement-baby-boomers-with-no...

2. https://www.axios.com/2023/03/11/how-americans-are-using-the...
Yeah, I just listened to that episode. :-)
I saw the tweet https://twitter.com/kellerjordan0/status/1776716388037529843 and https://twitter.com/Sree_Harsha_N/status/1776733692477550875... showing a 3rd party verification!
I think you’re going to be surprised at how difficult it is to avoid iodized salt, whereas avoiding fluoridated water is as simple as buying a carbon or reverse osmosis filter (or buying filtered water).
Well just think what HN's whole community, the support portal of the Internet, would be without Dang.
It's funny because GPT-4 is actually a pile of 3.5s. You just need to set it up correctly.
Oh god i'm sorry about that. Lol funny enough i mentioned it in a reddit thread today that i need to add a warning
This is exactly the sort of insight that led us to work on Blacksmith. Since we own the hardware we run CI jobs on there are some exciting things we can do to make these "sticky disks" work the way you describe it. Stay tuned!
I dunno, taking a tech job in a red state seems like a giant footgun.
I did the same recently. I never stopped using linux, I used it only for work though.
i saw Windows 11 which is less and less for power users, to the point of going against it.

2 weeks ago I installed Kubuntu on a second nvme SSD in my gaming desktop and I discovered that: working on a desktop is so much more pleasant and working on Kubuntu satisfies all my needs except gaming.

BUT since I got a steam deck, I have been playing mostly there anyway. And yes steam deck is linux too.

I tried and fought enough with macOS, Windows is betraying their own users and not having bash is frustrating.
so here we go, full linux.

My children first OS is going to be Kubuntu, let's see how it goes
Modifying the sshd behavior without crashes seems by itself pretty difficult. I mean, conceptually it isn't hard, if you are in the same process and can patch various functions, but I think doing so and having it be "production ready" to ship in multiple linux distros all the time is a challenge.

This thing wasn't around for very long but yet another thing to consider would be to keep it working across multiple versions of OpenSSH, libcrypto etc.
Please explain yourself, otherwise this comes off as an unhelpful non-sequitur.
Actually, it doesn’t sound like a bad idea, IF it could be shown to 1. be effective and 2. cost the public less than the aggregate sum of individual mental health mitigations. A more mentally healthy, less violent, less aggressive, less belligerent society sounds great to me.
I thought this is what GPT 4 was, it uses a boosting algorithm over GPT 3.5?
Thank you! I always just assumed the difference was verb/noun.
What makes you think so? I quickly skimmed through and found nothing of the sort.

Edit: My take home message was that there is an equivalent higher order formulation which allows more structure and might be theoretically interesting. Usually higher order formulations are numerically more challenging.
Redis License Change:A Competitive Game Between OSS and Cloud Computing Giants
I don't know about that for Queenstown. There's quite a bit of construction, but the town is beside a lake in a glacial valley, so there's very little land available (it's sandwiched between the lake and very steep hills). There's basically one narrow main road to get to other nearby towns, which have seen a lot of construction due to the demand (and in some cases have sprung into existence).
Kelvin–Helmholtz Instability
How do you manage cron jobs with a setup like that? Does each lambda pull down its own SQLite db, write changes, and then litestream replicates the changes to the web and other lambda instances?

Similar scenario for multiple web nodes and saving data. Also, do you use sticky sessions so that any routes that write to a db also read from the same node/db so you don’t have to wait for litestream?

What do you do for BI? Are you able to ETL the data from sqlite to a warehouse? If so, what does that look like?
The first sentence of the article is

> In the future, generative UI will dynamically create customized user interfaces in real-time.

That's fairly unambiguous in saying that such things don't yet exist.
That just goes to the immoral and unethical nature of means based assistance. It makes no sense to deprive people of aid because they make a dollar over some arbitrary line.
Spaceship shows the price, namecheap hasn't when I've purchased clarified that it's a first year only price.
I prefer farmed salmon to wild, purely for taste and mouth feel (ignoring health benefits). A fatty, farm raised salmon fillet is simply more tender and delicious. I mean, I’d rather eat a farm raised turkey than a wild gamey one…
Maybe. I'm sure one's consciousness corresponds with one's guiding philosophy.

I don't think this supervisor model is generally applicable to people with EFD or some forms of Autism, for example.
I think you are smoking crack if you think Turkey has more freedom of speech than the UK.
If I'm paid 24/7 I'm happy to attend to work 24/7, otherwise fuck off.

Even then I wouldn't take the deal.

What I do and where I am after hours is none of anyone's business but my own.
Those are bottle prices, not shot prices, right?
When has telling someone "calm down" ever made them calm down?
Have there been any double blind taste test of farmed salmon vs fresh salmon. Color is an obvious differentiator but that seems like just preference. Maybe we shouldn't be catching wild salmon at all
A detailed analysis of what would happen if Linus Torvalds got hit by a bus was conducted[1] as far back as in 2000. Unsurprisingly the result showed this would most likely have had a devastating impact on the development of Linux.

[1]: https://www.crummy.com/writing/segfault.org/Bus.html
I hope someone's submitted a PR!
I’ve noticed Americans get some… extremely weird and biased reporting about free speech in the UK. Extreme outlier cases like that Count Dankula guy get reported as the norm.
I think that one difference might be that physical inspections don't scale. It seems to me that the current systems working (for regular people) requires that insurers not be too good at assessing risks. The better the insurer is at assessing risk the closer insurance gets to providing no value to the insured.
OP here — that's interesting, thank you for sharing! I use http://modernc.org/sqlite for easier static compilation and haven't observed unexpected behaviors, but will keep that in mind!

I agree with the key-value store too — there are some instances where I wish for a columnar database, but settling to use SQLite with key-value store ended up pretty okay.
Yeah that still holds true to some extent today with the GHA cache. Blacksmith colocates its cache with our CI runners, and ensures that they're in the same local network allowing us to saturate the NIC and provide much faster cache reads/writes. We're also thinking of clever ways to avoid downloading from a cache entirely and instead bind mount cache volumes over the network into the CI runner. Still early days, but stay tuned!
Rather, 'compute' is a verb, 'computation' is a noun, and 'computationally' is an adverb (which is the most appropriate choice in the context of GGP's statement). All of these words refer to the same concept and may involve hardware computers (a more modern use of these words) or people-as-computers (the older, but still valid, use of the words).
I mean, it's always been there, and the "security" claims are still out there, but the focus has shifted. In my experience.