skysight-inc/HackerNews huggingface dataset:
I think the example could be better in this article. Let's say you have a function that takes a database id, an email address, and a name. They're all strings. If you pass arguments to this function and you mess up the order for some reason then the compiler has no idea. Hopefully your unit tests catch this but it won't be as obvious. Branded types solve this problem because you can't pass a name string as an argument that is expected to be an email address.

If you argue that this is not a common problem in practice, then I tend to agree. I haven't seen code with mixed up arguments very much, but when it does happen it can have bad consequences. IMO there is not a big cost to pay to have this extra safety. In TypeScript it's ugly, but in other languages that natively support this typing like Scala, Rust, Swift and Haskell, it works nicely.
The discussion was about the safety of AI and pausing AGI/AI out of fear of it going rogue or killing people. Lavender is actually doing that as a state sponsored military AI.

The technology is now out in the world and all AI/LLMS can be used in the general world community.

I would assume Palintir has offerings to do this Weapons-based AI killing people. Are there humans in the loop?
That’s overt influence showing they aren’t afraid to use their muscle. Of course they’re willing to use more subtle messages.

The same govt that screwed the entire world with Covid-19 will use tiktok for nefarious purposes. This isn’t a stretch.
Even if they are somehow right and actually found the person that runs Anna's Archive (something I doubt quite seriously), the lack of real evidence presented here pretty much sabotages the entire lawsuit. It would make much more sense to hire investigators and do some actual research about their suspect before moving forward in court.

As it stands now, this lawsuit absolutely should be thrown out. In the future, even if they have more compelling evidence, it will be harder to try again. They've also potentially tipped off their suspect, giving them plenty of opportunity to stay clean and triage the continued operation of the website to other parties.

As they say, if you come for the king, you best not miss.
This paper broke ArXiv's HTML generator: https://github.com/arXiv/html_feedback/issues/1090
Yes, China is the number one threat to the US and we've been at war with them for the past decade+, both an economic war and cyberwar.
We have a rather large amount of experience with sanctions and people trying to evade them.

I think we might be able to manage to identify a company with hundreds of millions of users trying to mask themselves by... changing their name.

It's not like we're going to firewall them off. The bill bans distribution of the app in the US app stores and US companies from offering any kind of internet hosting services related to the app.
Zod has branded types: https://zod.dev/?id=brand
it works really nicely with Zod schemas
FWIW you wouldn’t need to add the `transition-link` class to every A tag, you could just do `.link-list > a`.
Lawyers and lobbyists are not mutually exclusive.
Open source for traditional software means that you can see how the software works and reproduce the executable by compiling the software from source code. For LLMs, reproducing the model means reproducing the weights. And to do that you need the training source code AND the training data. There are already other great models that do this (see my comment at https://news.ycombinator.com/item?id=40147298).

I get that there may be some training data that is proprietary and cannot be released. But in those scenarios, it would still be good to know what the data is, how it was curated or filtered (this greatly affects LLM performance), how it is weighted relative to other training data, and so forth. But a significant portion of data used to train models is not proprietary and in those cases they can simply link to that data elsewhere or release it themselves, which is what others have done.
Chinese backed threat actors have basically hacked into every major Fortune 50 tech company and stolen R&D.
WhatsApp adds global support for passkeys on iOS
This is why it’s critical to provide new angles to the problem itself, not just a bunch of solutions many of which has obviously been considered already.
It’s just going to be sold to someone else. Tiktok will still be a competitor to meta. Not getting banned
1. That's completely missing the point. The will of the Senate isn't the only thing that matters in our system, as it has concrete protections even for minority rights (for example, free speech for Nazis, as distasteful as it is to most of us) that cannot be overridden by mere legislative fiat, and thank goodness for that.

2. This bill, among other things, tells American private companies they must censor their app stores by excluding a particular application. It is, inherently, an act of censorship, and I think there's a good chance it doesn't survive court review. At the very least, it'll be years of litigation.
To me the real benefit of branded types is for branded primitives. That helps you prevent mixing up things that are represented by the same primitive type, like say relative and absolute paths, or different types of IDs.

You really don't need the symbol - you can use an obscure name for the branding field. I think it helps the type self-document in errors and hover-overs if you use a descriptive name.

I use branding enough that I have a little helper for it:

/**
* Brands a type by intersecting it with a type with a brand property based on
* the provided brand string.
*/
export type Brand<T, Brand extends string> = T & {
readonly [B in Brand as `__${B}_brand`]: never;
};

Use it like:

type ObjectId = Brand<string, 'ObjectId'>;

And the hover-over type is:

type ObjectId = string & {
readonly __ObjectId_brand: never;
}
Even for 3-codepoint strings it already wouldn't fit in any computer that exists. And that is not sufficient to encode all 1-glyph strings.
mysteriously with a helping of random too!
Face Swap Online Free
It only "promotes polarization" if you have already decided that anyone who uses it "dumbs down the level of discourse." If you instead give them the benefit of the doubt that they're trying to make an intelligent point about a situation or dynamic, and then try to understand that point, and then reason about that point's validity, then you will finally find yourself actually engaging in the "level of discourse" that you purport to (but are actually undermining with your kneejerk disdain).
Hey, this is neat!
You pay for cell service on your phone, which lets you access things like Google/Apple maps, spotify streaming, etc.

GM wants to charge for a separate internet service tied to your car, that still goes over the cellular networks, in order to access these exact same features in their head unit. It is completely redundant. CarPlay already offers a near perfect experience in this regard, without charging an extra monthly fee.
Do you consider caffeine and alcohol mind altering substances? I do. Perhaps you’re ascribing too much intensity to the experience of using THC daily. For many folks it’s the base level or else our minds get a little wonky. See my other comment about my OCD/counting/introvert behavior.
Outside of the sexism part this PIP/Focus whatever dance is typical Amazon behavior.
Would you prefer pay-as-you go instead?
I'm working on an LLM powered SaaS and thinking about having some kind of prepaid credit system instead of a subscriptions. I personally hate subscriptions with fiery passion.
Netflix is definitely a technological powerhouse, it just we, mortals, can't benefit from it.
These drugs are similar to intense concentration meditation. You might want to familiarize yourself with relaxation meditation beforehand.
Wait a few years and then root around in the datacenter dumpster once they toss the old gear after tech refresh (between 3-10yrs depending on the gear)
I don't have an issue with non-compete clauses if they offered fair terms to the employee but frequently they don't. Something like, we will pay you some reasonably high percentage, if not all, of your salary for the duration of the time we don't you working for a potential competitor. Also, it's much most personally costly for a private citizen to defend enforcement of non-compete than it is for a company.
Who gives a shit? What's the benefit of converting the United States into China Lite?
TBH, I'm not an expert here.

What you're describing looks like webauthn which is used to verify the identity of a user by creating a private key on their HSM/TPM when the user signs up, and usually requires biometrics or a PIN iirc. This is used for future authentication events - which usually return a JWT.

This JWT that says "My name is Justin. I am logged in. I am an admin".

What I'm trying to solve for is "Make it so that the JWT doesn't work, except with the computer it was issued to".

In the setup I'm proposing, the JWT your server creates has your client's webcrypto Public Key in it (Naturally you verify it before putting it in there).

Now, whoever steals your JWT needs to be able to sign things with the private key that's locked on your browser - which is hard if you set it to inextractable.
Used this for a few quarters now and have gotten alot of value out of it and saved a bunch of the sales engineering team's time!
The app itself looks very basic and cheap. Can copilot really not do this? I have no idea because I don't use Tailwind but copilot knows the depths of some obscure npm libraries so I would assume so.
So captchas are obsolete now?
Nobody mentioned wokism except you.
TIL, thanks. That makes sense given how the length prefixes look like but I never thought about it. I wonder if this was by chance or if the UTF-8 creator thought about it.
I've been using openapi-generator for this for quite some time. I love the principle, but find that their generators are not all top notch, and the template-based approach is very hard to contribute to.

One thing I do not see with Stainless is also using it to generate the server side of the API.

We use OpenAPI as a design doc, and generate client SDKs and Datos for the server from the same spec. This gives us pretty solid control over interoperability.
TikTok amplifies whatever is in China's interest to amplify. Today, it happens to be voices opposed to Israel. Tomorrow, it could easily be the opposite. The goal is to generate geopolitical chaos to veil other actions (Taiwan, South China sea, Chinese migrant injections into Panama...).

A society's strength comes from its unity of will and resolve. Social media can be used to attack that unity... and has, not just by China.
If you're gonna use an antivirus just use Windows Defender. There really isn't a reason to use anything else these days.
I helped maintain the public API language bindings at Stripe for many years, and although I'd defend it to the death as the right DX (SDKs are so much easier to use than raw web APIs), it's hard to appreciate just how onerous of a process this was before Alex pioneered a codegen-based solution.

Some of the language SDKs were dynamic (e.g. Ruby, Python) and could adapt automatically to small API changes like if a new field was added in a response. Some were not (e.g. Java, Go), and for every API change, someone had to manually make the change to that SDK's codebase (add a field, add a struct, add a function for a new endpoint), get it reviewed and merged, and cut a release. As Stripe got bigger and there were API changes all the time, the only way this was even remotely functional was that we had a couple heroic workhorses that'd watch for changes and open hundreds of PRs a year for them. Honestly, in retrospect, it's amazing this even worked.

Getting everything switched over to a generated solution was an arduous process because the new generated code had to be API-compatible with the existing code so that the cutover to generated bindings didn't break every Stripe user under the sun. We eventually got there, but it took a long time.

I like Stainless' mission because after seeing the crazy maintenance hassle that all of this was at Stripe, I think it makes way more sense to save all that engineering time for your more concerns, and outsource this problem to someone else. A plug-and-play way of getting high quality SDKs in all common languages that get pushed to appropriate repositories for distribution and comes with quality companion documentation.

We've actually had pretty good luck at my current job with open source tools like openapi-generator [1], but this sort of codegen is so convoluted that the sustainability of a pure open source solution makes me a little afraid, and you still end up doing a lot of the last mile work yourself.

---

[1] https://github.com/OpenAPITools/openapi-generator
This is the answer to all the above. These shares give you a right to part of the profit, but cannot be sold.
Really cool - thanks for sharing! I thought about using cubemap to have the whole planet simulated but, since I only use the effect as a part of a skybox, it would be wasteful. You also use particles instead of textures. Are you familiar with the work of Larry Yaeger and Craig Upson? They created Jupiter for "2010", and used similiar, particle based approach.
Racer Speeds to 2nd Phase with Robotic Fleet Expansion and Experimental Success
Ideally, you're right. Realistically, Apple has to choose between using their powerful silicon (the GPU) for high-quality results or their weaker silicon (the Neural engine) for lower-power inference. Devices that are designed around a single power profile (eg. desktop GPUs) can integrate the AI logic into the GPU and have both high-quality and high-speed inference. iPhones gotta choose one or the other.

There's not nothing you can run on that Neural Engine, but it's absolutely being misunderstood relative to the AI applications people are excited for today. Again; if chucking a few TOPS of optimized AI compute onto a mobile chipset is all we needed, then everyone would be running float16 Llama on their smartphone already. Very clearly, something must change.
I am not worried. Someone will make a search engine to find the model that knows your answer . It will be called Altavista or Lycos or something
Qualcomm faces cheating allegations, X Elite scores claimed to be fraudulent
> generative polish

I don't think we're far away from models that are able to take video input of an almost finished movie and add the finishing touches.

Eg. make the lighting better, make the cgi blend in better, hide bits of set that ought to have been out of shot, etc.
Following negative exponential growth towards the top makes some sense. You want to have more weight towards the bottom/middle for balance. Interesting that the bulk is in the middle of the stalk.

edit: Maybe I misunderstood? I'm a bit confused on width/length here.
You know what business use? SSO. The service doesn’t have SSO? Then not enough business are using it or you’re a startup who wants to save money.
Your audience is limited to handful of services and small startups while trying to add benefits that only big players need.
For one thing, I can search for any text I’ve ever take a photo of. Finding a picture of someone I took 20+ years ago by searching for a single work I remember on their t-shirt is pretty cool, and is all done on-device.

I think it’s important to remember that there are a bunch of actual useful AI-driven features out there that aren’t just GenAI chatbots.
You can give GPU to VM and containers without any overhead these days. However, Nvidia always placed roadblocks when you aren't using their data center hardware in datacenters.
How to Bike to the Airport
Your last submission to "Who wants to be hired?" states you are not willing to relocate. Maybe this is a determining factor in the lack of engagement from recruiters. I think the post-Covid era for software devs is seeing a lot of employers wanting assets to come back to the office.

I wouldn't worry too much about the gap, cover that with freelance work or some side-gig...

If you're in dire straits, pivot, look for work somewhere else you might have shun in the past... like Government...
OzarksGo
Yeah you're right, my slight bias against the clinicalization of psychedelics probably slipped through there! Thanks.
> GPT3 was a 175 bln parameters model. All the big boys are now doing trillions of parameters without a substantial chip efficiency increase.

It's likely not the model size that's bigger, but the training corpus (see 15T for llama3). I doubt anyone has a model with “trillions” of parameters right now, one trillion maybe as rumored for GPT-4, but even for GPT-4 I'm skeptical about the rumors given the inference cost for super large models and the fact that the biggest lesson we got since llama is that training corpus size alone is enough for performance increase, at a reduce inference cost.

Edit: that doesn't change your underlying argument though: no matter if it's the parameter count that increases while staying at “Chinchilla optimal” level of training, or the training time that increases, there's still a massive increase in training power spent.
Importantly, this was a law passed by Congress and signed by the president. A fair vote by all the representatives of a Republic should be able to do anything constitutional. And what's constitutional can also be amended by a large majority.
It's definitely a use case that's pretty common. I've been in post-sales/tech support most of my career but it's a similar battle. Leads to a lot of waste of technical resource time. Though I think probably being able to point as much as possible to documentation is probably where I would start.
I don't give a shit about flags but as a veteran it still pains me. I think flag burners like Koran burners just like causing pain.
You verify against the signature that's in the current version. Now this may mean that you need to do stepped upgrades to versions that are cross signed to get new certificates. That or you have at least one https update method that gets a signing cert for the application.
have to add tsoding to the already mentioned channels
Show HN: An OSS drop-in replacement for Vercel's Image Optimization service
Yeah structural typing assumes that all fields with the same name & type mean the same thing, but that clearly isn't always the case.
I would use Pytorch as your starting point. Its metal backend is pretty quick on Apple Silicon, and it's the most widely used library for everyone from hackers to foundation model builders.
Block building it's own Bitcoin mining silicon
> the end user could be MITM'd already with a root certificate maliciously installed on their device

If a malicious root certificate is installed, then the user’s system is already compromised and signature validation won’t help.
Isn't the point of a library like tailwind that you don't need an AI assistant??? Sorry for the ghlibbesh comment but if you're summoning AI then why use tailwind? Just use regular.
They almost certainly would have standing. Banning their app from the app store clearly directly affects them.

But they could instead just allow people to login on the mobile site and install it as a progressive web app, instead of forcing them to use the app so they can track people better.
The worst bit of greenwashing in Britain is the Drax power station https://en.m.wikipedia.org/wiki/Drax_Power_Station

It’s the largest power station in Britain, originally built to burn coal, but now it burns trees shipped from Canada. It isn’t sustainable.
When it was supposed to go from LA TO SF for less money than they’re going to spend on this route? Yes.
Yeah no, IMO this seems totally extraneous and a layer of complexity not worth introducing to any project. I've never encountered a case where I care that I need to differentiate between two types of exactly the same structure, and my gut feeling (without actually prototyping out an example) is that if this actually makes a difference in your code, you should probably be making the differentiation further up in the flow of information...
Biden signed a bill that could ban TikTok. What happens next?
For a while now, even before the latest AI models. Paid services exist (~2$/1k solves https://deathbycaptcha.com/)
The AI Agency Narrowing Effect
It's strange to absolve "business" and then blame the government for problems caused by business.

First the post-2008 asset bubble; why does that exist? Lenders became extremely lax with credit requirements and created an incredibly toxic debt bubble. Sure you can argue the bailouts and subsequent low interest rate environment maybe have been the wrong medicine, but it's easy to say that in hindsight when at the time several people had been wiped out.

>If you think fentanyl is not a critical component of the US’ homelessness crisis I don’t know what to say

Why is fentanyl a problem in the US? I think it's insincere to pretend Purdue didn't have an outsized effect on this problem. They pushed opioids on doctors and flooded rural america with oxycontin. Once addicted Americans could no longer get oxycontin, they turned to heroin, and the increased demand of heroin created the conditions for fentanyl to flood the market.

>Pensions are the most protected assets on this planet

401(k) were almost completely wiped out in 2008. Why focus on pensions when most people's retirement vehicles today are tax-deferred investment accounts?

Businesses are free create deeply systemic issues and when those behind the issues are rich and the problems externalized onto the rest of the country, we are free to turn around and blame the "bad" government.

It's like licking a door handle and blaming the human body in the "drivers seat" for cells dying when it raises the internal temperature to 102 degrees. How about instead of blaming the immune system for the 102 degree fever, we just don't lick door handles?
Where train networks are extensive, frequent, and reliable the ridership numbers are huge, orders of magnitude beyond what a road network of equal right of way could hope to support.

I have no issue with people choosing a car. I have issues where a car is the only choice due to the built environment being actively hostile to all other forms of transportation. Walking --> Cycle --> Train depending on how far you want to travel is far more sustainable and opens options for far more people than car-centric infrastructure where only a car is functional.

Building out a train network also doesn't mean we shouldn't also have a quality road network as well; there are plenty of long tail needs where a vehicle that can go direct point-to-point is very valuable. We just need to be building more than just a road network as roads alone simply cannot handle the needs all travellers.
Lots of words to hide the lack of argument. Did you use ChatGPT for this one? I hope so, because nobody's paying you to defend Altman's hypocrisy.
Yeah, I'm staring at my use of chatgpt to write a 50 line python program that connected to a local sqlite db and ran a query; for each element returned, made an api call or ran a query against a remote postgres db; depending on the results of that api call, made another api call; saved the results to a file; and presented results in a table.

Chatgpt generated the entirety of the above w/ me tweaking one line of code and putting creds in. I could have written all of the above, but it probably would have taken 20-30 minutes. With chatgpt I banged it out in under a minute, helped a colleague out, and went on my way.

Chatgpt absolutely is a real advancement. Before they released gpt4, there was no tech in the world that could do what it did.
I’ve been working with the Stainless team over the last year, and I rapidly went from being highly skeptical of outsourcing SDKs to being one of the team’s biggest fans.

Separately, as a consumer of many afterthought-ish SDKs for popular services, I’m extremely excited to see their work opening up to more developers. I hope it raises the bar for SDKs everywhere!