skysight-inc/HackerNews huggingface dataset:
Yes, there will also be such a person.

This is one of the reasons I, overall, agree with the OpenAI position that models should be kept secret until proven safe even though there are examples of safety researchers only being able to perform some of their safety research due to open models.

It's like… OK, so regardless what you think of it, you've probably heard some people blame COVID on a lab leak: I'd say that giving out increasingly advanced models for everyone to play with at home is like giving out increasingly advanced genomes in a world where everyone needs to have their own home gene synthesiser, including highschool kids for their homework — it's absolutely fine until that gene synthesiser reaches a certain level, and then suddenly everyone catches an airborne version of HIV.

Labs may still leak (IIRC, wasn't GPT-2 leaked?), but that's how I think we should be treating models: dangerous until proven safe, not safe until proven dangerous.

"""

I also want our future AI to be literally incapable of wanting to harm humanity, akin to in software "Make invalid states unrepresentable". But, an AI which cannot distinguish good from evil is definitionally Machiavellian; and if a model can distinguish them, and if the model is distributed, then it's almost trivial to find and flip that specific axis. But I did say "and if the model is distributed": if it isn't distributed, then the "switch" can be kept out of sight and away from fiddling hands.

There is another possibile safety mechanism, which is at least worth considering: if all possible moral issues are squashed down into a single dimension (something I've previously noticed humans did, but only by going past it) then anyone with a copy of distributed model will only have one single good-evil axis to modify — they would still be able to make a demonically evil moustache-twirling villan, but they wouldn't be able to accidentally destroy the world by turning off all the dials except the one saying "maximise shareholder value by maximising the number of paperclips", nor would they be able to run a dictatorship by saying "I am the only person who matters, everyone else is my slave".

The downside, and yes there is a downside, is that this will be the morality of whoever makes the model, and basically everyone disagrees on what "good" is. For example, even limiting the world to those who follow the Ten Commandments, "thou shalt not kill" is often regarded as so incredibly obvious that it shouldn't need to be stated, and yet that specifically has sometimes included and sometimes excluded each of: meat, abortion, war, the death penalty, and suicide — can any of us truly imagine how much broader the range and depth of disagreement is in agregate, or is this, too, an unthinkable thought?

""" - https://benwheatley.github.io/blog/2024/04/30-13.54.02.html
Aldara (YC S22) | Engineer | Onsite (Barcelona, Spain) | Full-time | Significant equity

Hi, I'm Dani, Aldara cofounder. At Aldara we build software to manage HOAs and handle everything they need in their day-to-day. We make neighbor communities happy by handling their finances, incidents, and communications swiftly and effectively. We invest heavily in product and growth to become the building OS for the European real estate market.

Right now the eng team is made up of three very efficient, independent engineers who have built 5 products to support the customer's needs. We value a high sense of ownership and relentless curiosity. We want passionate builders who we also love as human beings. Join us pre series A for a significant stake in the game!

See more about the offer here https://www.ycombinator.com/companies/aldara/jobs/4DCmIVs-so...

Work is on site, working level of spanish is recommended. We're not doing visas at the moment.

Email me directly at "dt@aldara.com"
That's probably accurate. That's what happened in Germany before WWII after WWI.
The latest version of paperless-ngx can rotate documents. Check it out!
> I just found them important and informative

And how exactly is your video "Encyclopedia Historica Dinosaurs, by Robert Sabuda and Matthew Reinhart" important and informative? It's a worthless video with stock music and no talking, uploaded on YouTube four days ago without any views.

What was so important and informative about this video, and how could you possibly have found that video considering you said it's not yours?

Your other video is something that was already discussed on HN,

GitHub Copilot Workspace: Technical Preview (https://news.ycombinator.com/item?id=40200081) - Apr 2024 (322 comments)
....uhh Isnt this what Beam search attempts to fix(approximate) over greedy decoding. You know greedy optimum vs global optimum. And most LM already use beam search. Because finding the true optimum is intractable even over modest lengths.
It's raw, like if you had a Forth system with a GUI that isn't aggressively obtuse. You can touch everything in it with a BASIC dialect, and at least in some variants drop into assembler and run the hardware somewhat directly.

This allows e.g. interesting graphics programming, and there's very little that gets in the way of immediately testing ideas.
As far as the scaling, I think some would have said the same about Google Street View, but now the majority of streets in the country are mapped out. Google already has the infrastructure to be able to do the necessary mapping. And as Waymo cars become more common, I suspect they'll be able to fill in a lot of the gaps.
> ultimately we are a workplace and our policies and expectations are clear: this is a business, and not a place to act in a way that disrupts coworkers or makes them feel unsafe, to attempt to use the company as a personal platform, or to fight over disruptive issues or debate politics.”

I suspect Google would cite the same policy this manifesto cites as evidence of it's support as a reason to remove/sanction people posting this manifesto to company resources.

That Google is an obvious hypocrite over Israel's behaviour doesn't seem to me indicative that they've totally flipped on every other issue, or that things this manifesto considers political would be considered political inside Google.
... which, from TFA, adds up to 19 hours (ie >2 extra working days) per week, time that could be (and is) spent seeing other patients.
"Coding is art" and here's the proof!
And the denominator isn't just the number of Boeing whistleblowers but the number of similar cases where whistleblowers could have died and raised suspicions, but didn't. We can't just cherry pick the Boeing example after the fact.
Unless you're getting it tested in a lab, the number is not very accurate. Genetics also plays a large part in how much you can raise it.

For most casual people it's just a single data point that seems all encompassing so they go:

number goes up = good.

Most professional athletes don't really care about vo2 max all that much.
In theory, yes. But in practice, at least here in Eastern Europe, there is such a shortage of doctors that even if they became three times more productive, there wouldn't be any meaningful changes in demand.
For example, I haven't had a personal doctor for the past five years because they don't have any free capacity. Last month, I called the doctor twice because my child was sick, and they told me I shouldn't call them so often.
So I think we're a long way from that happening.
This is actually quite nice - many years ago I build https://github.com/takeoff-env which was tooling around making local development easier with docker volumes - one thing I never got around to was something like this where you can easily connect different databases and tools.
If passkey is an additional factor, I'm on the same boat with you. You can sync them all the way down.

But if it's the only factor, I can't see a difference between password reuse and passkey reuse. If I can recover it in any way, then it's (very) game over.

So I'm not mad that you can't sync a passkey if it's the single factor. Because as we don't reuse app passwords for multiple devices or normal passwords for multiple sites, we shouldn't use the same private keys on many devices, allowing a more granular and better approach.

Of course this is my view and some people won't agree. I prefer a good multi-layer system, not a single passkey opens the whole world style one.
You forgot the scarequotes:

"Security" at the capitol...
You are invoking an argument that's called "group selection" [1], it's the idea that genes propagate based on whether they benefit the species as a whole. This argument has been heavily criticized and it is not used much in the mainstream evolutionary science. Perhaps group selection has some effect in some niche, limited circumstances but it doesn't seem to be a significant driving force of evolution.

You don't need to invoke group selection to explain dying though. Dying might be an evolutionary advantage, not to you, but to the genes that make you. Which is not the same as the species, at all [2]. Organisms die not to make space for others but because building the mechanisms to keep young indefinitely is not worth the price compared to spending these resources on reproduction mechanisms. Or because the right combination of genes that allow you to have free lunch just wasn't reached yet. If there was a magic mutation that prevents mammals from ageing without any other effects, I'm pretty sure that gene would spread. Quite possibly to the detriment of the species.

(Beware, not an evolutionary biologist, just somewhat interested in the topic.)

[1] https://en.wikipedia.org/wiki/Group_selection

[2] https://en.wikipedia.org/wiki/Gene-centered_view_of_evolutio...
The downvotes to your comment illustrate how deep the rot perpetuated by XCCP, IRGC, FSB, Qataris, etc has gone.

Not to say concern about domestically originating extremism isn’t warranted, but, if you’re downvoting a comment on “I’m most concerned about sources of social influence from the most regressive governments on earth”, you’ve got some serious bias
Arab betrayed by their own hospitality yet again.
Figma’s Journey to TypeScript
This is what STIR/SHAKEN is supposed to do. Your phone and carrier in the US probably support it, but it’s not obvious. On iPhones there will be a little check mark under the number for inbound calls on your recent call list. This doesn’t carry over to things like voicemail however - where the check isn’t shown.

This model also doesn’t work for businesses that route all outgoing calls through one number, as that is essentially caller ID spoofing.
Google is getting even worse for independent sites
> have implemented support for passkeys

Why do you assume they have also implemented correctly for all cases?
I know that companies run on Windows. Nearly every company I've worked for has subjected me to it. Many companies could switch away from windows and the reasons they don't include things like "we've always done it this way", tech support (both in terms of vendor support and in-house IT) is easier and cheaper with Windows, workers tend to be more familiar with it, etc. These are reasonable considerations, but nothing that can't be overcome.

For many companies that are running specialized windows only software, some of that software will have only been written for Windows in the first place because Windows was either already being used by the company or because that was the expectation. Again, not unreasonable. When companies write their own software they write for the OS they have. When software companies want to sell their programs they'll naturally tend to target the most popular OS being used. It's sort of self-perpetuating that people use/write software for what they (or most people) already have.

For software that couldn't be run using something like WINE it would take time/money to replace or rewrite that windows software. That's a hurdle, but not an impossible one to clear. I've worked at companies that were entirely dependent on the AS/400 or Lotus Notes, but they somehow made the investment and found other solutions. As much as I don't think web apps and SaaS are a good idea, those options will make it easier for some companies to let go of windows too.

Right now, it probably wouldn't make sense for a lot of companies to stop using Windows. The same can't be said for what most people have installed on their personal computers though. The more alternatives to Windows spread outside of the office/factory the easier it gets to replace it in the workplace.
There have been times in the past where we took something moderately simple (random number generation once you've got a good entropy source; digital signatures) and turned them into a monster (Dual-EC DRBG; ECDSA). It turns out those were bad ideas.

The more I read about passkeys, the more I feel we're creating a new monster here. I'm just glad there's no "alg:none" option included.

If you have a device that can store and sign with resident keys for a private/public key infrastructure, I don't see why we need all the extra complexity unless you want to charge everyone $4.99/mo for a key management SaaS, or force the last remaining Win11 users who log in with a local account onto Microsoft Accounts and Windows Hello (which I understand is the only way to get passkeys in edge without third-party software or devices).
Once you make something a standard it is hard to get rid of it even if there is an obvious better approach.

Mapping is explicitly regulated so no need for an indirect barrier.

AFAIK it is the same other places. If a Chinese company wanted to do an extensive commercial map of the US it would face all sorts of regulative hurdles.
Qualia is magical thinking. It implicitly assumes a Cartesian theater, and leads to infinite regress.
Big Tech's big green card problem
Kolmogorov–Arnold Networks: Alternative to Multilayer Perceptrons.
I never understood why people are chasing some stupid numbers, constantly comparing to each other, and then are unhappy or push themselves into injury. Such an unhealthy mindset for life overall.

That's really the opposite of what sports are supposed to be for 99.9% of the people. Who cares how life and training of some fastest guy in XYZ category looks like? Go at your pace, progress slowly also at your pace, also good strategy for life overall. You also don't take tips for driving in traffic from top formula 1 driver, do you, sorta worse than useless.

I do naturally push myself a bit when I run alone, to the point when even say 5-6km run makes me tired and drenched in sweat, but certainly not first 10-20 runs after some lull (like now broken foot, starting gently next week). And running is really just training for other more adrenaline sports for me, not chasing kms and preparing for races. But never pushing beyond whats OK for my body, and with experience one knows oneself very well in this regard.
Th soviet mechanical and rf engineering efforts were very well regarded during the early cold war period, and I would argue, much more sophisticated. Language did not stop the USSR. It was the economic policy like banning some disciplines based on ideological grounds like cybernetics etc.

Check it out, the things for which a western scientist or engineer is given credit, were discovered/invented much earlier by soviet counterparts! What do you think about Kotelnikov?
Every app on your phone runs as a different user
Given the hoards of candidates for game development and IoT jobs, putting up with the pay and hours, at least two of those are quite sexy.
Why would someone want to put their data with your service? Its never been hard to use a database to begin with, honestly even easier than an API call.
It is another way to call a "user", hence why I used the word indentity instead.
It sounds really really inconvenient when you have a lot of accounts on different websites. Imagine login to add new passkey andremove the old passkey for 100 websites (and my password manager already stores much more than 100 accounts).
By itself, sure, it's a fully general counterargument.

My point is: saying "There is no ${X}, please stop reading sci-fi" is also a bad argument, because it's also a fully general counterargument.

The idea is not crazy-wrong, it's a falsifiable hypothetical with not-unreasonable foundations: https://en.wikipedia.org/wiki/Longevity_escape_velocity
This is less of a video grab tool and more focused on making a CLI tool/demo look more slick: https://github.com/BuoyantIO/demosh
Practically speaking, what tiled video games could take advantage of this? I think generally it's important for tracks in these kind of games to be aligned with the grid and to minimize the number of sprites needed. Having discrete straight and curved pieces like a toy train set seems like a good fit for the problem game designers face.
I'm happy that they are wasting their money then.
Show HN: EchoDuck – This tab is my server
EchoDuck allows you to create a private Static Web Server instantly from files on your machine.
I think the parent poster is referencing "holes", a book and later a movie. The plot involves kids being sent to a punishment camp where they are made to dig holes in the desert.
I didn't see mention of a vulnerability other than the use of a common default password with Ubiquity. So naughty, but users really should be now be in the habit of changing default passwords, and not leaving management interfaces open to the internet. For pfSense I think I recall a slew of XSS vulnerabilities in the past, but I think that has been it. I haven't looked at pfSense in a while since switching to Vyos though.
> Preventing extraction is pointless because it has the same effect as the first one

Yes, but it might raise oil prices, effectively making the carbon tax apply globally. Unless OPEC just compensates by increasing production. IMHO carbon tax indeed better tool for EU/US, given that most of oil production out of "our" control
Bet. $10,000 you won't be able to buy one for the same cost as a regular stake.

I'm happy to put my real name and money in an escrow account to the first person who wants to take the bet against me.
Amazon requires cloud events to spend 80% of time talking about generative AI
Capabilites are just another way of doing role management in processes, and require identities for administration anyway.

It is yet another way of managing processes identitities.
1000 years would give me time to climb all the mountains, walk all the rivers, hike all the trails, and start a family, write those books, and learn to play those instruments, and still have time for a round-trip to another star.
Seems to be down, any mirrors?

https://blog.funcall.org//lisp%20psychoacoustics/2024/05/01/... -> 404
> a single failure in a startup doesn’t make someone an idiot

Depends on the failure
This paper has some interesting ideas. I feel like it should get some attention here. Although this paper has been submitted a couple of times already, it did not receive any attention. I am resubmitting it again, maybe trying my luck this time.
Sorry, I don't think that helps at all. If anything, it comes across with a "You should skip the avocado toast" energy.

The vast majority of these things are not all that important to most people, not like prices of groceries, household goods, clothing, energy, childcare costs, transport costs..etc.

I don't care that cars have nicer features now, if buying a new car is most of my annual wages pre-tax. I don't care that I can fly to more interesting destinations from SF when I can't afford to go to urgent care without having to switch to rice and beans for a week. I do on the other hand care when my grocery bills double unless I spent multiple hours a week collecting coupons and driving around to find sales. I care when I have to wake up in the morning shivering because I can't afford to keep the heat at even close to a comfortable temperature.
There's also https://womp.com as an SDF modeler
Conflict Resolution Strategies for Engineering Managers
Rivian to Receive $827M in Illinois State Funding to Expand Normal, IL Facility
Why do you think it is reuse?

You will not use the same passkey for multiple application/service.

You will generate a passkey per application/service.

I will certainly though not disagree on security... if that is your thing then do not sync private keys around, but the tradeoff is always there.
If security would be critical, I would favor client certs with smartcards, but browsers do not support that "too well"
Yes this is annoying in all these same debates which point to Netherland / Denmark - the infrastructure elsewhere is just not there. Lanes shared with cars (or just taking away from car lane so no normal cars fits in anymore) isn't a solution, just adding friction danger zone. Or dedicated bicycle lanes wide enough for a single row of cyclists, if even that.

Also look at those 'old' basic bikes they use there, you don't need more on those flatlands and everybody is fine with 20-25kmh. Add tech bros or generally young folks with fast ebikes and escooters going 50kmh and things change.
>increase of supply lowers the price at equilibrium

The thing you're missing here is that "healthcare services" and "doctor's labor" aren't the same unit. Ceteris paribus, efficiency increases allow the price of healthcare to decrease while the price of doctor's labor increases. The thing that makes this non-contradictory is that a single doctor can now produce "more" healthcare. Economics says the opposite of what you think it does here. Increasing productivity drives expansion in market size, which drives up the ratio of value in the market to its labor inputs which drives up salaries.

Like I said, there might be important real-world reasons why these scenarios won't play out in medicine the way the theory predicts. But so far, you haven't provided any.

Manufacturing has also seen the opposite of what you are saying here. Global manufacturing production value has exploded over the last century, quite literally lifting billions of people out of abject poverty. In particular the last 3 decades of enormous per capita income increases in China have been driven by industrialization. I'm guessing you're taking a US-centric view that is exclusively focused on the local collapse of US manufacturing. This is to do with globalization and free trade, not improvements to labor efficiency.
> it's impossible to start a new passkey provider because you'll never get 1000s of websites to put you on their allowlist.

You ignore history. and human nature.

Everyone will just hardcode a big `if microsoft || google || apple` and call it a day. And over time local gov will require companies under their TLD also add gov.TLD and that will be status quo forever.

As other commenters mentioned, EU official login (which accepts SMS but not TOTP!!!) already works with passkeys with only weird approved devices (mostly android/ios apps which try very hard to detect non-stock roms)
Yes, it would be a great idea to update the wording as there is no way to derive that from the current one.

Even being sympathetic, my thought reading this was "probably bad code quality/rotten core despite the great feature set".

You can have a "History/Background/Origin" section where you put exactly what you wrote in your comment and it will be fine.

This notwithstanding, thank you very much for developing this app! I will look into deploying it on my server, it will be of great help to people around me who often need manipulating PDFs but are not super technical!
Did you turn down an interview because their product was not 100% finished?
Something I enjoyed was listening to the talks by the LibreSSL team cleaning up the mess in OpenSSL that (in part) caused the Heartbleed bug.

One of their strategies was to drop the macro soup and simply program against the "libc we would like to have", and then add compatibility shims to materialise their ideal libc instead of conditional compilation at the point of use.