skysight-inc/HackerNews huggingface dataset:
> On 23 July 2021 Russia's Ministry of Justice added The Insider to its list [ru] of "foreign mass media performing the functions of a foreign agent".[66][67] On 14 December 2021 a court in Moscow ordered the outlet to pay 1 million rubles.[68] On 15 July 2022, the publication was banned in Russia alongside Bellingcat. Following this restriction, any Russian citizen who aids Bellingcat or The Insider may face criminal prosecution; they would also be restricted from citing their publications. The office of the Prosecutor-General of Russia said that they were banned due to "posing a threat to the security of the Russian Federation"

https://en.wikipedia.org/wiki/The_Insider_(website)
> “pedants”, not “pendants”

I noticed my fat-finger mistake, but it was too late to edit.

> worry about clear and effective communication

Oh, I do. That's why I object to using "literally" to mean "figuratively", i.e. the exact opposite.

I mean, I don't object to ignorant people using words ignorantly; but lexicographers know better, and should be calling out ignorant usages.
It's like anything else, it depends on how many people you want to get. Apt alone will get you 50%. Add pacman and that's another 30%. Yum is another 15%. Nix is another 2%. Foo is another 0.3%, bar 0.1%, and so on and so on. (Numbers are made up).

You don't have to do anything, it's just about how convenient you want to make it.
If you learn the Dewey Decimal system, you can go to the library and find a book to teach you to use a drill press. On the other hand, if you take a drill press to the library looking for a book, ...
From the threat vectors you presented, I assume you already trust the vendor. That means you trust their installation script. You are, after all, going to run their binary after the installation!

In this case, I assume the reason to inspect the script is not so much that the script might be doing something bad, but rather that you may have downloaded the wrong file to begin with.

With that in mind:

> Distributors usually give you a way to verify that what you've downloaded is correct

The first thing is that not all software is downloaded from Linux distribution repositories. This technique doesn't work if you're just downloading an installer from a website or Github releases page, etc. Sure, many also provide you with a checksum that you need to manually verify, but the shell script in question can also do the same. In fact, it can help by automating the check after it inevitably downloads the application's binary package.

In this case, the vector is you getting something different from what the vendor intended you to download. An example would be if your connection had been MITM'ed and a malicious package had been sent in its place.

This is largely a non-issue these days with TLS certs everywhere, SNI, OCSP stapling and other protections that more or less ensure you're connected to the right server.

> What if you make a typo and somehow pipe an HTML document to your shell?

That's quite the bad luck!

In this case, the user made a typo.

Most `curl | bash` commands are copy-pasted from a website rather than typed out, so this is _mostly_ a non-issue as well.

For those cases where the user typed the command and got it wrong, for it to become a problem, at least these 2 things need to be true:

* the typoed URL actually downloaded something that the shell can interpret

* there are commands in this downloaded document that actually wreak havoc to the system where they ran

I fail to see a scenario where that would happen. Not that it's impossible, but it's so unrealistic that if it happened to me I might just shutdown the computer and go buy a lottery ticket!
In practice, that's what would happen. Move around until seeing some larger gravitational pull, likely indicating some deposit. However, formally, this is not correct due to the mere fact that the gravitational force is proportional to 1/R^2, just like a Columb force. Thus, there are infinite numbers of mass distributions that produce the exact same gravitational field on the surface. The planet could be hollow, and we would not know it only from the field measurements.

A practical constraint is mass density, which has maximum and minimum values. We can make a crude approximation that the planet's density is constant, evaluate the field on the surface from the planet's shape and compare it with measurement. This would be more useful, but still, it wouldn't tell us whether there is a combo of water reservoir and a large massive deposit below it.
If it turns out to have been a suicide button, then what the the IA needed most was the kind of person who would not have pushed that button.
Can you help out a reader who does not know any Perl?

I tried it in the REPL and found that "Illegal division" can't locate method "illegal" in package "division", so presumably that gets ignored, same with method "by" in package "zero", and that "at /tmp" is the simplest version of the string that produces the error message, which apparently is more severe than the missing package warnings and terminates the program?

I'd guess the / is the operator for division, and the "tmp" is getting initialized as a variable and coerced into an integer? But "/tmp" doesn't do it, and "/tmp/" does something with regex, so I'm not sure why the parser would split it there.
Chinese culture is very different than western.
(I'll preface this by saying I'm not a parent, and I don't raise children. I imagine it's not an easy endeavor. But...)

> you have the option of either giving up and losing your kid to the phenomenon, or giving them FOMO and complexes by depriving them of a phone.

Are these really the only 2 options you see? No "teach your child about the issues with being on a phone all day" or "set reasonable restrictions on phone usage"?

Edit: People replying to this comment seem to have forgotten the role of parents.
We don’t know how large the universe is, and how (un)likely life is. Life could very well be highly unlikely with respect to the size of the universe. We currently have no good way to tell. The only thing we know is that life is not impossible.
So does this set a precedent that OpenAI knows it should be paying the millions of rights holders who didn't grant it a license and yet saw it use their IP to generate billions of dollars of revenue?
We're a homeschooling family with a single Pinwheel phone shared among our three kids. It has no browser and no way to access social media. But it does have basic smartphone functionality, like phone, texting, photos/videos, music, etc.

In contrast, our kids tell us all the time that their peers in various extracurricular activities almost all have unrestricted phone and technology use.

I would like to hope that if we raise our kids with "healthy" technology use, then they will ultimately be better off.

But my fear is that unhealthy technology use is so pervasive that they'll end up in the same sort of unfortunate situation as being the only humans left after a zombie outbreak.
> It is not required and will likely never be required to provide a 9 digit ZIP for reliable delivery.

That depends on who you are.

If you are a regular person, then yes, 5 digits is sufficient. But if you are a sender of presorted commercial bulk mail (which is discounted from first class), you may actually be required to provide a 5 + 4 + 2 = 11 digit ZIP.

That little barcode the post office prints on your letters is actually just the 11 digit zip. The final two digits are the last two digits of the house number. So "123 Any Street, Anytown FL, 45678" the final two digits of the zip would be 23.
The article directly contradicts you:

> Elena also provided a veneer of plausibility for the Šapošnikovs’ lavish lifestyle. Despite Šapošnikov’s modest income from Imex (around $650 per month), the family bought real estate in Czechia and Greece at a value far in excess of what their collective income could account for. As Czech investigators note, “in some cases their official income could not cover even their phone bill for the month.” Furthermore, Elena owned a company registered in the Marshall Islands and controlled two bank accounts in Switzerland. Those offshore accounts, plus unexplained cash infusions to their Czech banks and a series of in-cash payments, appeared to have been the real source of income.

...

> In 2009 the Šapošnikovs purchased a sprawling villa on the picturesque Aegean peninsula of Halkidiki, Greece. The price, as recorded in the notarial deed of purchase obtained by The Insider, was 275,292 euros, or $300,000 at the time. Elena would later tell investigators that she had funded the investment “with money from my parents” – a tall order for the septuagenarian couple living in Kyiv on pensions of under $300 per month.
What value do you see in doing this? I think that in this cases we know how to teach people how to code so they can improve. In my experience mentoring Data Scientists and Data Science students I always felt like there's much bigger blockers to value than the technical skills itself.
I absolutely loved the whole series. I have never been as disappointed at a screen adaptation as I was at the netflix show. I couldn't get past episode 2. Terrible.
I don't actually care what 2020 was like because it isn't germane. No new legislation was passed meaningfully altering copyright law during that timeframe so this is absolutely a case of fuck around and find out, regardless of the optics.
Dokku author here:

The "scheduler" term here _is_ a bit weird, but I couldn't figure a better term when I was abstracting the concept.

And yeah, the idea here is that the underlying scheduling system shouldn't matter too much to the user of Dokku, but rather that you get the same experience regardless of the scheduling system. That means that as a user, `dokku enter` (for entering a running container) should be the same if its on Docker Local, Kubernetes, or Nomad. Similarly, Dokku should abstract what it means to deploy a workload onto a system - for Kubernetes, we use Helm charts, but the user doesn't need to know about how helm charts work or anything like that.

We've traditionally focused on getting that single-server experience to a high quality, but now that the base is more or less complete, we can start looking at other integrations that help our users scale.
Awesome, maybe some negative effect over it, how often does it refresh?
Very troubling. In my opinion social media in general is like smoking. It's a generally negative thing that's addictive... but also pleasurable. Adults should be allowed to made decisions on what they do to themselves, but children should be protected. At the same time, society should make an effort to ensure everyone knows the risks.
There is regeneration that happens to burn the soot from the filter, which increases fuel consumption a little bit, but I will still take a BMW M340d xDrive station wagon over a BMW X3 M40i any day.

Except I can't get the diesel here. Nor can I get a station wagon here.
A far better advice would be to:

Unless you're read to fully analyze all the code and look for problems in the whole code, instead of just the install script, don't be an eager early adopter of every project you see posted somewhere, wait for it to have some social validation, give it sometime so smarter people with more time than us had their time looking for vulnerabilities in the whole code, not only on the script. Or if you really want to check it, use an isolated VM first.
I genuinely don't understand why they're not making any serious attempt to clean it up (also how Nintendo hasn't gone after them, they cease and desist their own paying fans!). Maybe moderation would cost more than the storage/bandwidth so they can leave cleaning it for when legal issues happen.
The "emergency library" is at least understandable as a special case.
YouTube clearly quickly became the world's biggest nanny. I don't think there's any way to undo that one anyways so I'm interested to see what will be the long term impacts of that in the future.
But... it's not customary around here to pull people up for typos. At least, I avoid it unless it's funny.
I found this mesmerizing. Particularly fun is to scrub forward and backward through the video to clarify where exactly you're looking. (I found it worked better on the embedded video in the article than the yt one, not sure why)
Just beware of too old hardware that may end up costing more than expected because of their power draw. A NAS usually stays up 24/7 and power saving and reliability become important. I would also avoid anything with a fan, particularly if they expect it to be running constantly.
A mini PC with enough internal space to host a long m.2 SATA adapter (0) can become a quite compact solution; many used low performance Celeron based systems considered obsolete for desktop stuff would be more than enough for that task.

0: https://www.ebay.com/itm/256268302567

(no relation with the seller, just found searching "6xsata m.2" and removing those with lower feedback ratings). There are also 5xsata similar cards.
We as a society very urgently need to ban the practice of "selling" licenses, but in the meantime we as individuals can and should practice civil disobedience.
What's next, do you have to remove the donation request from VIM's startpage to be satisfied?

If you don't make meaningful pull requests and repeatedly spam a repository with non-improvements then you should be ignored. You dug this pit for yourself by not creating helpful PRs.
Because people like the results of copyright, IE access to large amounts of resources including books, music, movies, and software that would not exist if there were not protections to ensure that the creators received compensation for their works.
That does assume that I'm more likely to be the victim than the perpetrator though.

I've seen various studies (and unreferenced claims) about the idea that we regularly break multiple laws every day without realizing it. Allowing law enforcement more access to various parts of my life requires that I trust they won't come after me for something that is technically illegal but currently rarely enforced.

There is also the risk that what is legal today is not tomorrow. That's no small risk given the potential outcomes depending on who is in power later on.

I hope I don't come off argumentative here, that's not my goal but text alone is pretty limiting sometimes. I get your point and it is a good one, I just personally am more concerned with the risks of what could be used against me than having an authority protect me.

I'm also a bit biased here. I live in an unincorporated area and, unless some real shit is going down, if I call the police they may show up tomorrow.
Fascinating. Do you think it's possible that we can map these out in the next 50 years?
Yet somehow they keep adding value (so far).
AutoGen's Teachable Agents
How much data does the IA store? If only storage were cheaper, I'd be way more of a digital hoarder.
i watched a basketball coach literally pass over my child twice in a basketball-skills display for the parents, as he is mildly autistic and was not lining up with the other kids (not at lot of kids, about 15 kids) cleanly enough for the coach to notice him. He had practiced every move, he was able to do every skill. We had to yell at the coach "HEY YOU FORGOT <our son>!" when it was time for him to demonstrate dribbling in a curved line, pass back and then shoot for the basket; the coach apologized "Oh I forgot!" and our son did the display PERFECTLY, then literally 5 minutes later when all the kids lined up to shoot for a full height basket, HE SKIPPED OVER HIM AGAIN - we didnt have the nerve to yell out again that our child was passed over, they had moved onto a new exercise by then. My child came over to us and curled up into a ball on the floor for the rest of the display as all the parents around us ignored us. The coach DID NOT NOTICE or care. Because our child is mildly autistic and does not display the usual "sporting attitude", he was literally ignored by his coach in front of our faces, and as he continued to not look very "sporting", this grown adult coach simply could not see that our child even existed even as we were RIGHT THERE (nor did any parents). I had many similar experiences 45 years ago. A lot has changed in sports but dumb coaches who can only see what they want to see have apparently not, and this most CERTAINLY has an enormous impression on neurodivergent kids as to how athletic they're going to be.

so no I'm not projecting. Kids who don't "look/act right" are ignored and discarded by sports and in my direct experience as a parent this has hardly changed at all.
There is an XKCD that covers this topic:

https://xkcd.com/1601/
I wouldn’t be surprised if the numbers are similar in the rest of Europe and North America. Even national deviations, the numbers are high.
This seems to generate disgust in me, but it isn't much better than sitting in front of the television for hours which older generations normalised to be honest. I feel like the early internet was a little more intellectual than tiktok but essentially television returned just in a more purified dopamine releasing form. Perhaps the sense of disgust is due to comparison of what could have been?
Respectfully, with as flippant as employers can be with employees lives, a "good" parenting situation can become a bad situation in a matter of months. And that doesn't even cover scenarios where someone can become an only parent.

Ideally, it's a place our social safety nets would be better, but they're pretty bad when it comes to helping children right now in the US.
Creating this using Open Source LLMs would be like saying you tried A5 Wagyu by going to Burger King, respectfully.

I think benchmarks are severely overselling what open source models are capable of compared to closed source models.
SoCal Edison isn't any better.

When I left CA my off-peak cost was more expensive per kWh than my on-peak cost here in Phoenix. And that on-peak is for 3 hours per day.
There are certainly types of data that are already prohibited for export and dissemination. In this case, I would argue no new law is needed, the existing laws cover the export or dissemination of dual use technologies. If the LLM becomes dual-use/export-restricted/etc because it was trained on export-restricted/sensitive/etc data, it is already illegal to disseminate it. Enforce the existing law, rather than use taxpayer money to ban and police private LLM training because this might happen.
Gold can be a crazy irrational form of money, but how is that different from USD or other (crypto)currencies? Everything is on the table in this moment of geopolitical uncertainty.
Sounds good to me. I don't see why anyone else should feel they have the rights to content just to train crappy chat bots. Real people with real families and real mortgages created that content.
They’re also doing stock buybacks and dividends. Ads print money but they’ve basically thrown their hands up and admitted they don’t know how to invest that money into anything else. Google is at cruising altitude now, so cost cutting makes sense I guess.
No, mining is proceeding according to the plan to end in 2035. You might confuse it with the protests surrounding Lützerat, where the existing mining activities encroached (as planned) the village.

Germany kept 4 coal plants online in 2022 and 2023 that should have been shut down.
This seems like a very easy one to point out that they may be getting the cause and effect backward.
> I just feel that it is very tragic if a person cannot choose his own nationality and destiny. The really miserable people, such as North Koreans and many Chinese, if you are willing to help them, you should say no to the visa system and let the national borders cease to exist.

I think you would enjoy reading the Terra Ignota series[1].

[1]: https://www.adapalmer.com/series/terra-ignota/
Practically, does this just mean keeping your backup hard drive inside of a faraday cage?
Most people don’t like to think about it, but eating cheese is just one step removed from eating meat in terms of animal cruelty. Many calves have to die in order to keep the milk cows lactating.
You’re assuming that space was compressed into a single point at the Big Bang. However, this is not implied by the Big Bang or cosmology. All we can truly infer is that the universe was very hot and dense and that spacetime experienced rapid expansion. We do not know the size, extent, or shape of space at that time, and we don’t even know how much matter and energy were present. We only have a notion of the density.
Locally running LLMs in Apr 2024 are no where close to GPT-4 in terms of coding capabilities.
I didn't read the paper. For anyone who did: How would that work exactly? It looks like the general problem is that an IoT device can use SLAAC and its MAC to generate an address like `prefix1::87:65:43:21`. Then the household's prefix can change and the IoT device can create a new address with the same local portion, like `prefix2::87:65:43:21`. Then an attacker could see that `prefix1` and `prefix2` are very likely to have been used by the same person.

How would an attacker get that information? If the IoT device is janky and malicious it could ping a bunch of malicious websites and wait for me to access them, I suppose. What would that give an attacker? It's not clear to me how that'd be worse than, say, the current IPv4 situation. And if the device is compromised and no firewall is blocking its outbound Internet access, there are other things I'd be more worried about.

If Amazon or Google make the device, then it could just report that back directly to them whenever its Alexa or Google Home bridge reports back. Their logs would show that "bridge 0x1234 connected from `prefix1::` yesterday, and `prefix2::` today, and it's owned by user kstrauser". I don't think anything in this paper could make it less private than that, surely?
I really think "trivial" is massive hyperbole here. Like most people commenting here, I have deep struggles with my own mind, I relate extremely strongly to all the things people are saying here about this.

But things like negotiating across a power imbalance, finding and switching managers, teams, groups, switching jobs entirely... these are not trivial things! These are also extremely stressful things for which I don't think the word "trivial" gets anywhere near being an appropriate word choice.
Ugreen NAS - currently on kickstarter for this summer - but it's a reputable company.

https://nas.ugreen.com/pages/ugreen-nas-storage-preheat

Their hardware is dramatically better at the price points then the alternatives - even if they do have some comprimises.
I don't think the personal responsibility of someone with a developing mind is any match for 10-20 years of extensive AB testing.
It occasionally produces art: https://www.youtube.com/watch?v=k1BneeJTDcU

EDIT: Mr. Burnham is vintage 1990, so he's a bit too old to have been weaned onto it
The key connection here is that David Link's emulation running "Love Letters" was an exhibit at the dOCUMENTA exhibition in 2012 and the Mark I thus entered the art world.

> David Link’s eponymous installation LoveLetters was first shown at dOCUMENTA(13), 2012. In it, the artist and computer archeologist Link romantically resurrects the earliest electronic, programmable and universal calculating machine worldwide: the Manchester University Computer or MUC. In 1953 and out of nowhere, it started to produce strange and touching love letters, addressed to anonymous people, or perhaps machines. The present version Love Letters – core is also based on the original source code by Christopher Strachey, a friend and colleague of Alan M. Turing, from 1951, and accompanied by two photographic prints of love letters on vintage CR tubes in the first on-screen font ever.

(Gallery Gabriele Senn, https://galeriesenn.at/love-letters/)
Vouched for it. Interesting investigative report.
Most of these scripts have been doing that for years.