skysight-inc/HackerNews huggingface dataset:
> it's been necessary to prove it because of politics

This is fascinating to me, how political ideology models the same type of arms race as parasite or bacteria. We're at the point of the game that we deny the opponent's mere existence, as the arms race devolves beyond addressing or refuting their views.

Why work in the logical axis, where "green" solutions can have a carbon impact themselves. Instead, wash them away with loaded language ("second order") and then proffer the conclusion that it must be political if anyone questions you. There absolutely couldn't possibly be another reason, carbon emissions only matter when one side says so, and that's final.
Alright so the claim is that "hackers" are constantly scanning the internet in search for vulnerable systems and a few minutes is enough for the "hackers" to find it and infect it. There are more than 4.3 billion IPv4 addresses, assuming a probe takes like 10 seconds to identity the IP, it would take more than 1000 years to scan all of the internet. Even if you use a distributed botnet it would be like finding a needle in a haystack. Ok let's ignore that and assume they found the XP machine. Typical viruses and Trojans require the user to download and execute an infected file but this assumes unattended infection. Not saying it's impossible, as there are exploits that can open a back door but dedicating so much time and effort to hack an old machine that is not a high profile target seems unlikely.
Which is why this move is a no-brainer. It isn’t legalising. It isn’t even decriminalising. But it’s recognising that a lot of people smoke weed and do fine, which isn’t to say everyone does, but it’s sure of a hell a smaller fraction than people who try smoking crack.
CA/USA.

There are some startups in the health insurance space. What they seem to do is just make it easier to buy/cancel health insurance, all within an app. Some have been quite successful. Some are also trying to bundle in their own health care provision inside the app (like telehealth, virtual mental health, etc), so in a sense getting more people access to care.

It depends on what you think the goal of an app could be. If we can build an app that 1) makes people healthier or 2) actually replaces nurses/doctors/pharmacists, I do think you'll be better off with a better healthcare system.
https://www.reuters.com/business/autos-transportation/tesla-...

> May 8 (Reuters) - U.S. prosecutors are examining whether Tesla (TSLA.O), opens new tab committed securities or wire fraud by misleading investors and consumers about its electric vehicles’ self-driving capabilities, three people familiar with the matter told Reuters.
That is an amazing new evil I had never considered.
[dupe]

https://news.ycombinator.com/item?id=40381777
Seems to be a before picture. There's an "after" picture further down the page. Meta technology maybe because it's not actual train related tech, but meta tech related to trains.
I'd say that lem is an emacs. Emacs is a genus, not a species. Before GNU Emacs (& XEmacs) there were others. And I'd classify lem as another.
Does anyone use Raku? I have never seen a blog post or tweet about it, ever.
A Plea for Sober AI
> don't like when politicians only respond to overwhelming public discontent or desires in an election year

Every year is an election year for someone in your electoral stack.

Imagine a company’s culture if they could only fire, promote or give people bonuses/raises once every four years.
Good point, although it also had a very early Usenet prescence, where I first encountered it being in Australia at the time.

Maybe there's a Straight Dope reply to the question of when Cecil and Co first posted on Usenet?
> Why would anyone not opt-out?

Because you might actually want to have the best possible global models ?
Think of "not opting out" as "helping them build a better product". You are already paying for that product, if there is anything you can do, for free and without any additional time investment on your side that makes their next release better, why not do it ?

You gain a better product for the same price, they get a better product to sell. It might look like they get more than you do in the trade, and that's probably true; but just because they gain more does not mean you lose. A "win less / win more" situation is still a win-win. (It's even a win-win-win if you take into account all the other users of the platform).

Of course, if you value the privacy of these data a lot, and if you believe that by allowing them to train on them it is actually going to risk exposing private info, the story changes. But then you have an option to say stop. It's up to you to measure how much you value "getting a better product" vs "estimated risk of exposing some information considered private". Some will err on one side, some on the other.
The picture in the ID is not a photo of Sherry Livingston (says Chris, who knows Sherry)
Exactly. I am a "Data Scientist" for whatever that label is worth. But what I actually do is domain specific to outdoor air quality. These tools help automate the boring stuff - if chatGPT made programming obsolete for me tomorrow I wouldn't lose my job, I would just be able to spend my time doing something more useful. But somehow I doubt it will.
My city is filled with horrible graffitis. Some types of ugly signatures, even on historical buildings. It takes only a few weeks after walls are cleaned up to see new graffitis reappearing. It's really sad.
The history disagrees with this assessment.
So figuring out and reasoning through that mess is pretty much the specific thing that LLMs are good at, I'd recommend actually trying the newer models if you're still operating on the assumption that these are at GPT 3 level. Random (probably cherry picked) twitter thread but it seems to be doing fine for the type of stuff that makes up 99% of spreadsheet use as far back as april 2023: https://twitter.com/emollick/status/1652170706312896512

That real world example also doesn't seem representative of the bulk of real world use of spreadsheets. Even in the announcement they're focusing on simple pivot tables and creating presentations. I don't see any reason why this wouldn't be able to handle asking questions on a data dump from quickbooks or the like. I get the feeling that you might be operating in a very unusual context, like in tech or finance, where you might even have professional data analysts who are hired to work with data. That's probably the biggest market revenue wise for this stuff but in terms of the number of users, spreadsheets are used EVERYWHERE
we also have more affordable hardware now, so we don't have to be as efficient with software anymore. We got fat and lazy hehe you can pick up a server with some ungodly amount of ram, used, put it in your garage to run everything you need and then some for under 500.
I believe they gave it to everyone to try to drive sales of the upgrade.
Foobar2000?
Modifying someone else's property, or public property, without consent.
> That probably speaks more to the overall culture of the company

Yep. Fun fact, my last workplace had a fairly nontoxic Slack... but there was a whole second Slack dedicated to bitching and shitposting where the bosses weren't invited. Humans gonna human.
To my knowledge, the imprecision of the CFAA is sufficient to prosecute them.
I liked this youtube video that covers the same topic[1]. The US focusing entirely on this strategy to increase fire safety seems obviously stupid to me. As people say in other comments here - Europe and other countries require better fire suppression measures and materials instead of particular egress options. An obvious improvement would be to allow builders to use any combination of these approaches to achieve a minimal level of safety.

[1] https://www.youtube.com/watch?v=iRdwXQb7CfM
If you look at the employee #8 badge it has an issue date of 3/17/77. So how is employee #10's 3/10/77? There's lots of holes.
This should be opt in
That’s all nice and sounds good in theory, but practically speaking, drones are always ahead. Assuming the laser is indeed effective, the drone was detected too, and the accuracy is spot on, good luck taking down a swarm that’s piloted by AI, all at the fraction of the cost compared to that defense system in place.
I would agree, except the seller seems to have made a new forgery of their receipt on the fly in response to Cabel's inquiry, which leads me to believe they probably made the original forgery as well.
> they should be going to a legal authority

I'd really hope legal authorities have better things to do than act as arbitrators of provenance of niche-interest historic artifacts. Without being the person who "won" the auction, I doubt you'd even get your foot in the door.
Aren't all tools, essentially, just one API call away from "leaking data"?
no one wants to consume AI generated content, everyone wants to make it. There will have to be something made, either a law or some kind of reverse engineering mechanism to figure out the AI generated content. Otherwise we're gonna be over saturated with information (we already might be). Just think about how many coaches there are in this day and age, with so much information available for free. It's because there is too much information and you can't possibly digest it all. Starting in a new field, where you have 0 experience or have someone to ask for advice is probably the hardest. even harder than it was when I was in school some 20 years ago
When we send our notice, we are going to be sending a notice that we want none of our data used for any ML training from Slack or anyone else.
I don't think so. Perl is still used at many companies but Raku is basically dead.

To give you an idea the conference is expected to have 100 attendees.
Thinking Tokens for Language Modeling
Then for bonus points everybody uses it to go to ad-supported websites where they complain about their lack of privacy.
Chameleon: Mixed-Modal Early-Fusion Foundation Models
Was this remotely exploitable with the firewall on (the default setting) and no user activity? Would love to learn more if you have any details or links - thank you.
A few of extra considerations picked up over many years of hard lessons:

1. Rate limits don't really protect against backend capacity issues, especially if they are statically configured. Consider rate limits to be "policy" limits, meaning the policy of usage will be enforced, rather than protection against overuse of limited backend resources.

2. If the goal is to protect against bad traffic, consider additional steps besides simple rate limits. It may make sense to perform some sort of traffic prioritization based on authentication status, user/session priority, customer priority, etc. This comes in handy if you have a bad actor!

3. Be prepared for what to communicate or what action(s) to perform if and when the rate limits are hit, particularly from valuable customers or internal teams. Rate limits that will be lifted when someone complains might as well be advisory-only and not actually return a 429.

4. If you need to protect against concertina effects (all fixed windows, or many sliding windows expiring at the same time), add a deterministic offset to each user/session window so that no large group of rate limits can expire at the same time.

Hope that helps someone!
> And I say that the history of CVEs empirically shows that any important software with an attack surface must ensure memory safety, because no heuristic approaches can be relied upon.

That no heuristic approaches can be relied upon to eliminate all memory safety violations -- something that is obviously true -- does not mean that eliminating all memory safety is always worth it. If it is the cause of 80% of security attacks, reducing it by 90% will make it a rather small cause compared to others, which means that any further reduction is a diminishing return.

> Except you can measure the effectiveness of memory safety in preventing vulnerabilities in domains with an exposed attack surface. .. and your only "escape hatch" is a supposition that a heuristic approach that "eliminates 95% of memory safety violations" probably doesn't leave anything serious behind. Sorry, 40+ years of CVEs does not make this claim reassuring.

Sorry, this doesn't make any logical sense to me. If X is important because it is a cause of a high number of bugs then reducing the number of bugs caused by X necessarily reduces its remaining importance. You cannot at once claim that something is important because it's the cause of many bugs and then claim that what's important isn't reducing the number of bugs. The number of bugs can't be both relevant and irrelevant.

> Anyway, I feel we're just circling here.

Yep.
It's easy to blame AI (and yes, AI images spammers are a problem on every platform). But DeviantArt was in a decline way before Stable Diffusion became a thing.

It was mostly social media, really.
GPT refers to the specific family of models developed at OpenAI.
> Identifying a substring is valid in every human language I know of, as long as the substring itself is semantically meaningful

Doesn't work with ZWJ emoji, for example, the "job" emojis are made by combining a "person" emoji and another emoji related to the job. For example the emoji for a male pilot is encoded as man+ZWJ+plane. It means the "plane" emoji (a meaningful substring) will be found in the "pilot" emoji even though it is a different thing.

I don't know if the same thing happens in natural languages. Some languages use ZWJ, or combining diacritics, but I don't know how acceptable, for instance, looking for "e" and finding "é" would be.
"Will not" allows the existence of a bridge but it's not on your route and you say you're not going to go over it. "Cannot" is the absence of a bridge or the ability to cross it.
I am Canadian so haven’t followed this decision, but I 100% support banning municipal governments from funding pet projects with fees on developers. It’s a major component of any project’s cost structure and absolutely flows through to the end buyer or renter. Landlords aren’t just absorbing these costs because the demand for housing exceeds the supply so house buyers/renters are price takers and ultimately shoulder the tax/fee.
> And that typed text is way, way cleaner than any typewriter I’ve seen.

Pedantic point: electric typewriters (which have existed since the 1960s) do type in a way that looks exactly like this.

(In fact, note that the text on the real employee ID card, shown later in the article, doesn't look any less clean! It's just set in a different, narrower font.)

The smudginess of mechanical typewriters comes from 1. them striking (and especially, releasing) at the same speed you're depressing the key, and 2. having many of the keys necessarily approach the ribbon from an angle.

The keys being swung weakly by your fingers, also has the additional implication that the ink ribbons used in mechanical typewriters have to be soft and squishy (so: made of cloth), and use thin inks. These properties ensure a transfer from even a low-velocity impact. But the trade-off is that cloth ink ribbons transfer only a rough outline of what's struck; and thin inks are high-bleed inks.

An electric typewriter, playing out a pre-buffered line with a crisp, predictable report, using linear actuators and a rotating-ball type-head to bang a tape ribbon loaded with high-viscosity ink onto the page, can create text indistinguishable from books/newspapers of the same period, or from modern laser-printer reproductions of the same font faces. They're essentially character-at-a-time letterpresses!

(Also, ignoring electric typewriters for a sec: inks bleed more on thin, cheap paper. But this is [a forgery of] an employee ID card — where, for durability, a nice heavyweight paper or cardstock would have been used. You're always going to get a better-looking result inking such paper.)
Foobar2K still has an active low key community, it has plugins and a framework that allows tech users to add features and share them, but the main release has the approach I prefer - good display capabilities for media library meta data with flexible layout options .. and it's on the user to populate that meta data with third party tools (or plugins).

Primarily it's just a player, potentially it's a lot.
Sorry, I used the term incorrectly. I'm not suggesting that graffiti increases crime, only that the presence of graffiti encourages more graffiti.

I live in Japan which is usually free of litter, put a few empty beer cans on the floor and come back 24 hours after and you will have a trash pile. I don't need a paper to tell me that.
This happens too often for it to just not be on purpose.
Road noise is almost never mitigated. Low speed limits could mitigate some of it, but many people drive faster than the speed limits.
Barra says GM will go 'where the talent is' to make software-driven cars
https://archive.ph/Lv9s3
Bend: High-level language that runs on GPUs
> If they’re asking for zoning changes, there should be room for negotiation on nearby improvements.

The problem is that in many areas (of Canada at least), zoning bylaws are horribly outdated and inconsistent with municipal priorities. But municipalities don’t have an incentive to change them because if they allow things to be done “as of right” with modern zoning, they can’t shake down developers to fund their pet projects. So everything is a negotiation, which again adds uncertainty and cost.

Governments need to get out of the way and let developers build, or accept that they are the source of the housing scarcity.
Did you miss the part where Chris Espinosa said "That’s not Sherry Livingston"?

Chris also has a follow-up post not shown in Cabel's blog where he says there aren't any photos of Sherry online: https://mastodon.social/@Cdespinosa/112391173495267599
I always figured this would be the correct name for a tool designed to erase unwanted objects out of photos (whether using classic techniques or AI, whatever).
It was online for 3 seconds before getting a 404 request for /.git/config
> Saying we should stop having multiple paths of egress because more fire-resistant buildings save more lives is like saying we should stop having air bags because seat belts save more lives.

And completely ignores the housing shortage that's troubling almost everywhere in America.
As a Michigander it’s a little disheartening to see many of the companies we have outsource software jobs to other states. Industrial manufacturing jobs are becoming less prevalent and I don’t feel like we’ve developed a strong tech economy in the state.
Dried Plasma for Major Trauma: Past, Present, and Future
This is why I like to use LLMs to write the code to manipulate my data, draw my graphs, etc. That way I end up with the data/graph/etc artifact, but I also have the code that created it tucked away safely in my repo. So I can tweak and improve that code over time, either on my own or with the help of AI.

Here's an example where I recently used aider and GPT-4o to plot a graph.

https://aider.chat/2024/05/13/models-over-time.html

The graph itself is kind of interesting. It shows how LLM code editing skill has been changing over time as new models have been released by OpenAI, Anthropic and others.
Estimated 350m animals killed by cars every year in US alone
ERCOT is generating 28.6% from wind in 2023. It is getting so high, that for the late night hours, demand is so tiny that some 5-10% of the wind energy goes nowhere -- a phenomenon called 'curtailment. The occurs because the baseload nuclear and the combined heat and power thermal generators are already operating at minimal levels, and supply way outpaces demand (usu. early in the wee hours of the morning).
EIA indicates that this curtailment will likely increase. For now, its about as much as a typical nuclear power plant generates.

https://comptroller.texas.gov/economy/economic-data/energy/2....
Europe is also where Grenfell Towers happened.
Was not limited to just the bosses who were not invited. If you weren’t in the cool club you also did not get an invite.

A very inclusive company on paper that was very exclusionary behind the scenes.
NatWest Bank may not be hashing customer passwords
Unless something has changed in recent macOS versions, by default:

1. Thunderbolt Bridge exists and is enabled.

2. All active (enabled, connected) interfaces get link-local IPv6 addresses.

3. All active interfaces without static or DHCP-assigned IPv4 addresses get link-local IPv4 addresses.

3. Multicast DNS (Bonjour) is enabled.

So basic networking should be automatic, though no file sharing services are enabled by default.
How Do Apple's Sentences Compare to Hemingway's?
> But the idea of encapsulation in an object is there in the most popular modern languages.

Encapsulation is not specific to OOP at all. C is not OOP and yet it has encapsulation just fine.

> If the concept of calling `my_list.is_empty()` instead of `is_empty(my_list)` is "OOP", then I think it is actually still very much in fashion and for good reasons.

You're absolutely right, it's fashion.

> And that's the new "trend": dropping class inheritance, "Composition over inheritance".

New trend, huh? You realise that that saying came out 30 years ago? It took that long for the brainwashed OOP masses to even acknowledge that inheritance is bad.
Graffiti on trains in Berlin is very quickly removed.
WD Releases New 6TB 2.5-Inch External Hard Drives – First Upgrade in Seven Years
yeah i absolutely agree that even classifiers can leak, and the autocorrect thing sounds like i was wrong about generative (it sounds like an n-gram setup?)... although they also say they don't train LLMs (what is an n-gram? still an LM, not large... i guess?)
Put a personal VPS (no domain) online today. Took like 10 seconds for the first ssh login attempts to start. It's toxic out there. I put everything behind wireguard these days.
That sounds surprisingly human
Ruby VCR: Record test HTTP interactions and replay them
If you want wife acceptance factor put opnsense on stand alone hardware and religiously backup the config. Sucks losing network when your virtual machine host needs rebooting
Yeah, these objections are always obviously made in pure bad faith. But it's still worth taking the time to refute them, because not doing so just gives them ammunition.
> For example the telephone system and the Internet are both fundamentally grounded on software developed using a waterfall methodology

Is this true? I can’t speak for telco, but I thought the internet in particular was developed incrementally with a lot of experimentation. I mean, yes, the experimentation resulted in RFPs and STDs. But I thought these generally came after the software was working. And as someone who has implemented a few RFPs, I would not say my approach was remotely waterfall.

Indeed my perhaps incorrect version of events is that the waterfall approach is represented by the big loser in telco, the ISO OSI.
1. Web apps - Ruby on Rails hands down, every time. with SQL lite works pretty good on smaller projects. this is if you're working on a project yourself or have a very small team. If you're doing full stack and if you're doing turbo/stimulus it's a bit harder to hire people that have all of that. In my experience, easiest to hire full stack devs are with node/react stack. Coincidentally that's the group of people with largest knowledge gap in the either stack, people tend to specialize in one

Not sure about 2 and 3, not my cuppa tea