skysight-inc/HackerNews huggingface dataset:
The lesson is, business people will gladly let safety lapses occur with software because

1) software is complex and they don't understand it, and

2) good software is expensive, and they would rather that money go in their bonuses than into a real testing and verification budget, so they'll get less-than-qualified people to do the job for less money.

Those rules will apply to your non-smartphone device sure as any other device.

Smartphones are a juicy target but they're also fairly hardened for the case of one person's use. It's a scary thought, sure, but there is a dearth of attackers who have exploited security or reliability weaknesses of these devices to injure or kill someone in the wild. Most of those guys are far happier making credit card scanners, social engineering their way into your bank account, or helping Russia evade sanctions by holding your data hostage in exchange for crypto.

Contrast that with some sort of microcontroller-based device that hasn't had 15 years of security research done on it, and definitely won't at any point because the device manufacturer doesn't have the will or ability to make that sort of thing happen.

And then you're going to get into the practicality of that sort of device. People take their smartphones with them everywhere. They will not forget the thing that helps them manage their medical conditions. I'm less likely to remember to put the random weird device in my pocket when I leave the house or keep it charged.

It's a better solution to the problem if you do it right.

Source: 10 years of personal experience in the medical software industry.
[dupe]

Lots more discussion:

https://news.ycombinator.com/item?id=40297027

https://news.ycombinator.com/item?id=40302792
> DAG of other devices

Its well known you can infer the safety of a specification by assessing a small subset of its features. Quod erat demonstrandum. /s

But seriously, this is how backdoors are trivially integrated.
Might be referring to nonconsensual cases, like "dumb high school kids make AI porn of their classmates"
Thanks for the explanation, all more clear now!
I tend to be a bit overweight and also always hot, but I'd instantly get one for motorcycle gear.
It’s probably covered under ‘Medical apps’ and ‘Drug dosage calculators’ under the physical harm section [1], where they defer to the FDA.

[1] https://developer.apple.com/app-store/review/guidelines/#phy...
> Steam works because they are acting nicely toward users. The moment Gabe is out of there, the mess will begin, sadly.

I mostly agree with you, but it's important to differentiate between two different things that Steam is doing:

The first is the nullification of first-sale doctrine, which is what the GP comment was about - you can't re-sell Steam games, and this is OK.

The second is the fact that your entire game library is tied to Steam - beyond merely being unable to re-sell your games, you can lose your games if Steam either goes down or decides to delete them from your library (like Sony and Amazon have done with their respective digital libraries). That is unacceptable, and I fully support legislation to prevent things like that from happening. (e.g. I'm in favor of bills that say that if the servers are shut down for an online game, the developer must provide all the tools for players to host their own servers)

But, my point is that the two concerns are separate. You can believe that people shouldn't be able to re-sell digital content without believing that the digital store owner gets to delete content at will, or that it's ok for you to be unable to access hundreds of dollars of games that you paid for because the DRM servers are down.
I agree with just about everything you say, except maybe the final/concluding sentence, but the parent post asked:

> What's the cheapest hardware setup that can run a 70B model at tolerably interactive rates? (say 10 characters a second)

That is the question I was answering. I have personally seen Llama3 70B, Q4, running via Ollama on a dual 3090 setup, and it runs about as fast as ChatGPT 4 does, and does not use main memory as far as I can tell. Yes, it's a quantized model, but the quality is pretty good, and the OP didn't specify that they must use 8 bit or greater so I figured they were going for cheap, like they said.

Edit: also, some of your figures are off: instantaneous power is measured in watts, not watt-hours or kWh, and if you want to be more efficient you can comfortably drop the max power of 3090s down to about 225W each and not lose much performance with LLM loads, as I mentioned above. Additionally, each 3090 only needs 4 lanes of PCIe 4.0 bandwidth (there are diminishing returns beyond that), so a motherboard with 48 (or even 16) free lanes is completely unnecessary. Again, I'm trying to answer the question of what the cheapest setup would be, not the ideal set up or the one with the most/fastest memory.
This one does heating.
Massively so. You can spawn 1 million tasks waiting for a Task.Delay and threadpool will trivially survive the punishment. Not so much with Python, which has a lot of problems scaling to all cores and also deals with interpreter lock (I assume it is better now and no longer pure GIL style?). The advice for Python seems to be to use multi-processing and even then it is orders of magnitude of difference in CPU time spent per operation. One language compiles to codegen that is not far from what you see out of GCC or Clang, another one is purely interpreted which means significant difference in resource utilization.

Although top positions do a lot of "cheating", take a look where most Python entries sit: https://www.techempower.com/benchmarks/#hw=ph&test=fortune&s...

Fastest Python entry starts at 234th place while .NET one is at 16th (and that with still somewhat heavy impl., upper bracket of Fortunes is bottle-necked by DB driver as well which is what top entries win with).
You mean someone awakened their kundalini, wasn't aware of it, and it took years for them to figure it out? Can you describe the symptoms?
I'm really surprised they'd even say the 'p' word. It's truly a massive can of worms. Seems smarter to just nuke it completely and hope someone else tackles that mess.

Incorrectly handled, it could really topple of the open AI empire.
To be honest, apart from the containment systems you mentioned, much of biology basic research doesn't actually need that much sophisticated kit for basic cloning and genetic manipulation.

A lot of the key reagents can just be bought - and BTW it's why code like Screepy exist ( https://edinburgh-genome-foundry.github.io/ ),.

I think the real thing that stops it - it not that you can't make stuff that kills people, but the problem of specificity - ie how do you stop it killing yourself.
Would be cool to see member similarity. Finding like-minded commentors/posters may help discover content that would be of interest.
>intel and Qualcomm refused to add back doors as demanded by US government,

Intel ME ? Qualcomm blobs ?
I guess you're assuming this is about the weight of food they are eating. Why?

What they're actually doing is measuring the isotopes in the carbon of the bodies of the human remains. You don't get any carbon in your body from the water or from the fiber in plants.

So your estimate correction needs to go the other way - the study says that > 80% of carbon in the bodies of early human foragers comes from plants. That means that also > 80% of the caloric intake comes from plants. Or alternatively, it would mean that > 95% of what they ate (by weight) was plants.
Ohh, that's great to hear! I do like ADF, but the Python worker is full of bugs and weird behaviour and tickets stay open for month without progress. I will definitely check that out!
I agree that there is a difference, but a very small difference. Even animals share their prey with those who didn't participate in the hunt.

If the general population started eating hunted meat, vast agricultural areas would be returned to nature, giving a slight offset to that problem.

But jumping back to reality, those people who actually hunt and purchase hunted meat right now are people who care about nature and shepherd it with responsibility. They can safely ignore any hacker that starts yapping about some law written by unnatural people.
ADT feels like an unfortunately acronym-collision with "Abstract data types."
So, I installed it, and my WindowsFirewallControl asked me to add the following to the firewall rules

I don't know what t-rex does (it has a T-Rex as an icon) but I definitely recognize that xmrig.exe is a Monero miner. So the language about "Deploy AI/ML production models" appears to be a bit bullshit (pardon my french).

I know you posted that 5 days ago, but can you please elaborate why I am running a Monero miner under Salad?

Cheers

Below the code from my firewall rules (win10pro)

t-rex.exe Windows Firewall Control C:\programdata\salad\workloads\t-rex-0.26.8\t-rex.exe All Yes Allow Out Any

XMRig miner (xmrig.exe) Windows Firewall Control C:\programdata\salad\workloads\xmrig-cpu-6.21.0\xmrig.exe All Yes Allow Out Any

Salad.Bowl.Service (salad.bowl.service.exe) Windows Firewall Control C:\program files\salad\saladbowl\salad.bowl.service.exe All Yes Allow Out Any

Salad (salad.exe) Windows Firewall Control C:\program files\salad\salad.exe All Yes Allow Out Any

librespeed-cli.exe (librespeed-cli.exe) Windows Firewall Control C:\programdata\salad\workloads\ndm\librespeed-cli.exe All Yes Allow Out Any

Salad (salad.exe) Windows Firewall Control C:\program files\salad\salad.exe All Yes Allow Out Any
Reminds me of these that instead of actually heat or cool you just make you feel warmer or colder.
https://embrlabs.com/
This is amazing, the amount of skill and knowledge involved is very impressive.
Is it a common case? Seems like the vast portion of porn is made by professional actors, isn't it?
Just another piece of critical infrastructure or technology that’s suffering enshittification.

Bureaucratic capture ensures that any technology produced in a regulated environment requires a large organization to produce it, ensuring the extension of the bureaucracy into that organization as well and killing off any contribution from people who care. Institutionalized apathy is slowly destroying our world.
That is the solution to moral dilemmas? Require the (small) victim to provide sufficient evidence to beat the (big power) abuser.

I mean, the idealistic founding fathers might have thought this is how the world will work, but look at reality: Where do you see little guys actually suing the big guys? The damage needs to be so tremendous that you can afford a lawyer to spend years on it.

So anything less than 10 million dollars goes to the big power. The law says "No damages were done". Morally, damages were done to the masses and this billionaire got richer.

Its an organization issue. The damages were done and EVERYONE knows.
> when Java 8 added a lot of (well-needed) new syntax, it felt like that was an ideal opportunity to add ADTs and pattern matching

Well at least Java does now (as of Java 21) have pattern matching (including nested record destructuring) and sealed classes, which let you have decent sum types.

The one issue is that everything is nullable, but that's a wider Java issue.
There's actually quite a collection of heated clothing, which is much easier to make. Milwaukee, Dewalt (and probably all the big power tool makers) make heated jackets and vests.
Chaperones exist - however many proteins will quite happily fold in isolation without any external help.
No but that what I mean, I have nowhere near billions and I’d be prepared to pay much more money to avoid going to jail than I’d be prepared to spend in jail (time wise) to keep all my money.

Therefore, I’d think losing money hurts less than spending time in jail no matter how much or how little money you have.
That is better, I agree. I'd take a lean set of dependencies any day, but it becomes increasingly more difficult the more velocity the project gets.

Suddenly less and less is considered core and it's easier than ever to 'outsource' to external libs to save time. Or is it rather that the project gets more velocity because of that?

> We just pretend we have a bit of control but in reality nobody knows what code is executed really and this is sad.

True, this is also slowly starting to be the case with other languages.
With Python it can be so bad that even attempting to 'build' and run the same project a year later may well fail.
Much to what I'm used to with JavaScript projects by now.
To add to this - if you get buried in an avalanche you likely go hypoxic. Many people pulled out sometimes in the moment react negatively to be saved as they are pulled out of a euphoric state even though they are literally getting saved from death.
Looks like they used their actual apple email as an (optional) recovery method in Proton Mail.
https://i.imgur.com/S7ugEXC.mp4
I am genuinely curious about how effective these are. If I'm sweating all over my body, will putting this on my upper back help the rest of the body to cool down? Sony must have done their research so what is the principal behind this approach?
Didn't they have an outage where they lost a lot of data for many companies a while back, or at least took months to get back?
Civic Honesty Around the Globe (2019) [pdf]
It’s really profitable to. I know a Greek fella that transports goats in bulk and has said it’s very profitable due to not many ships fitted to do it well.
What's nice about the "libyear" concept is that it exposes the cost of indiscriminately pulling in 3rd party libraries.

For example, I recently went through a project to bring 3rd party dependencies up-to-date. I noticed that we were using a very old mathematics and statistics library.

On closer inspection, we were only using one function from the library to calculate the mode of a list of numbers. Looking at the library's source code, it was about 50 lines.

Now, a decent programmer can recreate such a function in 1-3 hours, including a unit test. This is what we did instead of including the dependency.

A naive programmer might think that sucking in the 3rd party library "saves" 1-3 hours, but that's not the case: Every few years someone will audit the libraries we're using as part of a security audit, or a legal audit to make sure that we're in compliance with open-source libraries. The stats library will incur a 1-2 hour cost in each audit.

Furthermore, every 1-4 years we'll need to update the library, because changes in the programming language, runtime, OS, ect, mean we'll need at minimum a recompile or similar tweak to take advantage of some new language feature or constraint. The 3rd party dependency could add 1-4 hours to such a project.

Thus, because libyear shows an increasing cost associated with the library, it's easier to explain why it's better to spend 1-3 hours writing a simple function (and unit test) than to bring in a 3rd party library to do the same thing.
keyboard -> platform you choose -> customer segment you aim at -> problem you try to solve

keyboard shortcuts will be way more essential for db saas rather than a payment/training saas for labor workers
But Pascal's variant records (1970-11) had very ugly design errors in comparison with the unions of Algol 68 (1968-12), which made them either useless or annoying for most applicatons.

Niklaus Wirth is well known as a critic of Algol 68 (before the design of Algol 68 was finalized), but in the case of his variant records he has completely failed to create something competitive.
Yep, people that eventually buy a Modula-2 ADT book, when hunting old stuff, are in for a surprise. :)
They're not going to touch that one.
I think you're greatly overestimating the problem. The only action a user can take in the app is to give a bolus. This is a relatively (1-2 years?) new feature that I believe necessitated FDA approval. Everything else is surfacing information (blood sugar levels and notifications) to the end user.

Edit to add: Utilizing a telephone is a significant quality of life upgrade from my (and many other) end-user experience. I'm guessing you are not Type 1 Diabetic (apologies if I am incorrect) in which case you have no idea the number of times in a day that one checks their blood sugar, boluses, etc. Frankly, it's exhausting. Being able to dial in a bolus or view my blood sugars from my phone, versus pulling out my insulin pump, has a significant impact and provides significant benefit.
UUIDs were invented for distributed computing. But distributed computing in the original true sense of the term, not in the current sense of getting horizontal scalability for what is in the end one big application.
Given where Algol 68 ended up, I would say Wirth was quite right.
The “substantially equivalent” approval loophole is a textbook example of regulatory capture:

- approvals for version N + 1 are basically skipped, as is safety testing

- manufacturers get a liability shield

- for many classes of devices, ladder pulling implies that no one will ever get another v1 approved. (The current rules for that are impossible to meet, but the incumbent company is grandfathered in under the old rules).
Why blame the devs when management is who make the environment?

Or is your point that only lower quality devs have jobs at those places?
Why does it need to be “responsible”? I feel these words are intentionally misleading about what they are - morality codes based on a small number of people’s opinions.

I can’t read the linked article (paywall) but others on the same topic say that OpenAI would like to explore supporting whatever is not illegal, but that deepfakes are out of the question. Are deepfakes illegal and should they really be? Deepfakes are no different from what goes on in people’s heads. Should the law really restrict that expression? I can see restricting passing off deepfakes as real to embarrass someone, but we already have laws for things like defamation. And if it isn’t illegal but just expression, should OpenAI support it?
That's what I said - on Linux the syscall API is stable while on all other OSes you have to go through libc to talk to the kernel.
New Pop-Up Walk, Reading Digitally in 2024
There are tons of stories of people being forced doing acts they did not sign for, and plenty of unsavory or illegal practices in the industry. Is all porn unethical? No, of course not, but there is still enough that you have a very serious chance of stumbling upon "not-ethically sourced" porn on a regular basis.
If a difference of an hour that's been there your entire life is noticeable, we should be able to observe that as a discontinuity of quality of life at time zone boundaries.
Yeah xmacros (the style of macro use) are pretty fancy. "Classically" they are used for creating and accessing type safe generics or for reducing boilerplate for hardware register and interrupt definitions.

They are kind of cursed but at their core they are actually incredibly simple and a reliable tool for reducing cognitive complexity and boilerplate in C based projects.
that's a nice idea
Please no just let it drift
> In September we encountered a show stopper bug. The vendor product stored every customer transaction as a json record in a giant json document. So as test data accumulated, performance of the product got slower and slower.

For the love of god, how could they not have thought of using a database?
You have compiled all that I have thought/experienced sometime in my life of the problems of phone-center communication in a single comment
The testing to show "substantial equivalence" are not generally trivial. The "original" device needs to show safety, and effectiveness versus clinical endpoints. The follow up devices need to show safety and effectiveness versus appropriate measurements. Some degree of safety testing and/or analysis is generally always required for medical devices, regardless of if its a PMA or 510k.

For the specific case of blood glucose monitors, the 510k submission will require testing to show that your monitor is safe, and provides "at least as good" blood glucose monitoring compared to predicate devices. This allows the device manufacturer to avoid having to prove that blood glucose monitoring will improve clinical outcomes for patients with diabetes. Testing to show performance typically requires some degree of real world (ie, with real operators and patients) testing.

There are certainly be some cases where this gets abused, but overall I think it's a logical system.
The metadata about the linked document (https://www.ietf.org/archive/id/draft-peabody-dispatch-new-u...) is at https://datatracker.ietf.org/doc/draft-peabody-dispatch-new-... which shows that this is indeed a very old draft.

The linked document is version 01 of the draft, that draft went up to version 04 before being replaced by draft-ietf-uuidrev-rfc4122bis (https://datatracker.ietf.org/doc/draft-ietf-uuidrev-rfc4122b...), which then went up to version 14 before finally being approved as RFC 9562.
Free divers experience the same hypoxia and hypercapnia effects. Doesn't seem to be a problem.
This reads like 99% of the other Wikipedia debates I've seen.
Absolutely agree. I intentionally parked this while learning rust because I can’t tell where to even start. So will take single thread as far as I can before wading into this
Signal's Katherine Maher Problem
This is a bit of a wild jump. OP hasn't even explained their grievance with the software.
Tell them what? that we've grown so fat and stupid on the abundance the earth provides that we can't properly manage it and will probably cause millions undue suffering because we don't want to reduce our meat consumption to less than 250lbs per year despite it being easily possible?
This feels like you’re intentionally misinterpreting what I’m saying and what the court and the judge said. There’s a risk of harm to the protection. But again that’s always true in war, it’s incredibly naive and disingenuous to claim that this means there is a genocide happening.

Bringing a random YouTube video of someone who was 7 years old when he experienced the war doesn’t do anything for your argument except show that you’re arguing in bad faith. It’s totally irrelevant. Additionally we have many more holocaust survivors who were older saying the exact opposite, so the fact that you have one who decided to capitalize on his nazi experience for his 15 minutes of fame doesn’t really help you.

And finally I’ll add: research Kapos, his word likely means even less. (Kinda like the other famous holocaust survivor who is funding a lot of the college campus protests)
> one of the few who either rise to the top in your field or to create value in the world

"rising to the top" is pure ego-inflation

"create value in the world" -- you'd better make sure that you're creating value for the world in something that's important and meaningful to you, not just "create value for shareholders" (who don't give a f about you) which is what "creating value" means 90% of the time if you're in industry
During an evaluation I found a bug in their library. I went to their Slack, posted about it, and they gave a workaround in 15 minutes, created an issue in 30, and had a bugfix PR ready the next day. Pretty impressed with their team.

Excited to get to use it at some point.
> Conventions

> MiB = Megabytes (2^20 bytes)

> Gb = Gigabits (2^27 bytes, or 128MiB)

> GiB = Gibibytes (2^30 bytes)

Shouldn't MiB be Mebibytes then?
> The lesson is, business people will gladly let safety lapses occur with software because

I'm going to stop you right there and refer you back to the 4lb hammer. If you are being pushed around to build violently shitty stuff you are part of the problem.
smart devs who like to iterate fast and build awesome software will leave rapidly when bogged down with paperwork and compulsory training courses.

And you end up left with only mediocre devs who just want to take the salary and be home by 5pm because they care far more about their family/hobbies/life more than the quality of the app they're building at work.