skysight-inc/HackerNews huggingface dataset:
My and my neighbours properties are not correctly rendered here... that's almost certainly due to my being in South Africa and the data not being that rich in my area - still a very cool tool though!
"Big Bang" is an evocative name of a theory that matches observation to a high accuracy

The problem with "evocative" names is that they may evoke things that are not in the theory.

For example, the big bang wasn't an explosion in the common sense of the word. The theory also doesn't imply that the big bang was the beginning of the universe.
I was a bit concerned about the cut-over from the old database on Heroku, really wanted to minimise downtime. So they helped me produce a step by step plan, test as much of it as possible, then had an engineer join me on Zoom while I made the switchover. They were even able to accomodate doing it in the early morning in my timezone to minimise the impact. Ended up with maybe 5 mins of downtime which I was very happy with.
Arthur Whitney releases an open-source subset of K with MIT license
Taken directly from the abstract:

>This raises the question of whether the emergence of the ability to produce coherent English text only occurs at larger scales (with hundreds of millions of parameters or more) and complex architectures (with many layers of global attention).

>In this work, we introduce TinyStories, a synthetic dataset of short stories that only contain words that a typical 3 to 4-year-olds usually understand, generated by GPT-3.5 and GPT-4. We show that TinyStories can be used to train and evaluate LMs that are much smaller than the state-of-the-art models (below 10 million total parameters), or have much simpler architectures (with only one transformer block), yet still produce fluent and consistent stories with several paragraphs that are diverse and have almost perfect grammar, and demonstrate reasoning capabilities.

The point of TinyStories isn't to serve as an example of a sophisticated model, but rather to show that the emergent ability of producing coherent language can happen at smaller scales, and from a synthetic data set, no less. TinyStories is essentially the language model equivalent of a young child, and it's producing coherent language -- it's not producing grammatically correct nonsense like the famous "colorless green ideas sleep furiously" phrase from Chomsky.

>but I haven't came across many synthetic datasets that are of high quality

I'm not really sure what your personal experience has to do with the viability of synthetic data; it's already been proven to be a useful resource. For example, Meta directly stated this upon the release of their Llama 3 model:

>We found that previous generations of Llama are good at identifying high-quality data, so we used Llama 2 to help build the text-quality classifiers that are powering Llama 3. We also leveraged synthetic data to train in areas such as coding, reasoning, and long context. For example, we used synthetic data to create longer documents to train on.

https://ai.meta.com/blog/meta-llama-3-meta-ai-responsibility...
Most of the blockbusters of the past decade, in particular "superhero movies", could have been made by AI and we wouldn't know the difference. Arguably the blockbuster industry was always low in creativity, but right now big studios don't even have courage to create truly new IP - making movies a perfect target for recycling content through AI.

Unfortunately, I don't see creative regional works growing as a result... Unless there is a way to channel these straight to the streaming services in some profitable way.
I regularly get spam claiming that a hacker has compromised my device, has been filming me jerking off through my own webcam, and will send screenshots to my friends and family if I don't send them bitcoins. You know, the usual.

Once Recall is out the story will go from laughable to worrying - all they'll have to do is change their text to include instructions to open Recall (the same way old websites would open 'file:///' to show they 'knew' what's on your PC) and regular people will lose their minds (and money).

And then there's the age-old adage "if you can see it you can exfiltrate it" - it didn't work for DRM and it won't work here. Malware will steal this data.
I think author overestimates value of blogging for a company. While also underestimating problem running a corporate blog.

Not every employee wants to run the blog and if there is no one dedicated to it, most likely it will end up corpo-spam.

If you are an unknown company, you should have a good blog. Especially having great engineering content will help hiring. It might make you stand out or find you at all.

If you are established like cloudflare it doesn’t matter as much. I think they get loads of good CV’s anyway.
I would prefer if they get a simple search-in-local-text-files right first. That doesn't even need "AI", just some plain old 1970s-style coding.
The X11 primary selection buffer is an even better variant of that though.
It allows single-shot copy&paste (meaning only one application can grab it) from the password manager to the target application and it tells the password manager the name of the application that grabbed it.

I think it shouldn't be too hard to hack in a dialog to password managers to confirm if the destination is correct before replying to the data request.
But even without that one at least notices that a malicious/wrong application grabbed the password.
Good luck finding anything that is actually 100% new with everything that has been produced already, AI or not.
The Gentlemen Hackers interview: The Grugq [video]
Yep. I installed XP64 on a high-end 2008 Thinkpad last year, and it was great fun. I wrote it up here:

https://www.theregister.com/2023/07/24/dangerous_pleasures_w...

A key watchword is to not let any MS code access the Internet. Don't use MS email, chat, media players, etc. Use more modern 3rd party ones and you're much much safer.

It's more or less necessary to use IE to get it set up, but you can install IE 8.0.6001 offline before you start updating it, which also saves about half an hour.
Linux is better but you shouldn't compare it on aesthetics. The AI nightmare will be more fun, beautiful and easy to use!

Linux will always lose against others when it comes to liking how it is. UX, UI, "it just works" windows and macs win.

You should never ever expect someone to prefer it on only aesthetic or usability grounds. You will never like it.

But this is NOT why you should choose Linux. Linux is for Freedom, customisability and privacy.

With enough investment of time you can get something you will like but you need to choose and use it first. With enough investment and customisation it's possible to get it to be superior in usability but you need to choose it and use it and live with it. You will like it but only if you choose it over liking "better" alternatives for non superficial reasons.

(Note: For some non technical people Linux may be able to be simpler and better UX aesthetics and to use if configured properly)
Because it needs to be decrypted at some point?
Excellent acronym/name for these dust obscured galaxies. :)
You would have to replace the whole graph everytime. Probably works if it updates once per minute. But more than that it might be time to look at some small js plot library to update the graph.
> In your example the first dimension returns a pointer to a row, then the next is the offset into that row so your lookup needs to be grid[y][x]

Correct, it should be [y][x] indeed. I would have spotted that had I bothered to.

> Also you seem to be bounds checking for 0s, but to do that in the first dimension you need null pointers to pad your row selection and a second set of 0s at the end of your rows.

Not sure which is the first dimension but for an array of 10 if(arr[100]) returns false. Anything behind the && is ignored.

Looking at this again the really funny part is that it doesn't work if num = 0 since if(arr[100]) returns false if there is a zero at position 100.

> It's interesting that both you and the person you replied to used arrays of arrays which is the very first mistake everyone makes...

I copy that part from their solution but probably would have myself. I've been found out not being a graphics programmer. The experiment was a success.

Of course I've made all these mistakes to test if anyone was paying attention. (I always say that)
As podcast:

Apple Podcast: https://podcasts.apple.com/fi/podcast/the-gentlemen-hackers-...

https://www.withsecure.com/fi/whats-new/podcasts/herrasmiesh...
It is a summary, not an insane reduction. Summaries can have sane usefulness.

I didn't find it clickbaity at all.
JWTs has been both overhyped and overused, by myself as well. But after working with JWT authentication for so long, it felt very strange to go back to sessions stored in a database. Suddenly every service we have needs a db connection setup to go verify the sessions. No more stateless and authenticated services. But I still agree JWTs have been overused. One of the things I have used it for that I found the most useful is probably just storing some smaller pieces of signed state during parts of a data transfer, like just bridging between two systems or in-and-out of a browser without needing to setup a database.
>many existing motherboards did not have enough power delivery capability to support the planned 6 and 8 core part

Coffee lake's 8700k had 6 core not 8, the refresh lake-s did feature 8 cores. The release TDP of 8700k was the same as 6700k - 95W, of course it consumed more at peak, and when overclocked.

The support would still depend on the motherboard manufacturers adding the CPU support (along w/ the microcode) to their BIOS. Many high-end boards, e.g asrock z170 extreme6/7, would have supported 8700k.

The situation is no different today that many (most) boards do not top support top end processors anyways, due to poor VRMs, even when the socket is the same. (or if they support the CPUs are effectively power throttled)
There's boring and there's boring. Personally I think Java EE / beans and SOAP is really boring, but I would never, ever choose it.
I agree, particularly with regard to FB (which is the only social media I use regularly). Most reshared stuff is junk

However, most things FB promotes (i.e. suggests, or that just shows up in my feed for no reason) are the same, and they are all there for the same reason. To increase engagement.
Working out as a projection of force assumes its usefulness at impressing force.
focusatwill.com and a set of headphones has helped me a lot.
There's a lot of fearmongering around keeping updated, and "connecting Windows XP to the internet is a bad idea" is one of them.

What makes this truly devious is that there's a kernel of truth to it: Connecting Windows XP to the internet will indeed give you a bad day.

That's not what happens most of the time now, though: Most computers, Windows XP or otherwise, are going to be connected to a LAN behind a gateway/router and a firewall sitting between the LAN and the internet. Windows XP is therefore isolated from most of the threats that are indeed very real.

Windows XP itself also has a firewall built-in, though the OOTB settings won't provide adequate protection.

The moral of this is, the best lies are those with hints of truth sprinkled in.
For some reason whenever somebody suggests that NAT might have security benefits, there is usually some hysterical screeching about how that isn't true. Often seen in IPv6 discussions.
I use Excalidraw for sketching with a similar outcome.
How is this different from GET arguments in the URL? I mean is this relates only to URL fragment, because javascript can parse URL parameters as well and any spam site can abuse it even with rewrite in the path part in the URL.
There is always high moral ground to criticize russia.
suing sounds very extreme, but as someone who has worked on a similar service, unofficial clients are actually pretty annoying to deal with. They often end up using ancient APIs, dodgy secrets handling, we don't know what trackers they use, they do not follow our policies for usage that our official clients do. But they create a secondary community and some actually work surprisingly well for what they try to do.
Can you still see all instances with their IDs on a shared cluster when you connect?
Home batteries are a terrible idea. As a municipality -- or a neighbour -- you don't want 30 houses with 35 different batteries, installed by some nephew who's handy with DIY-stuff.

To just timeshift from daylight to evening/night/morning, you'd need batteries in the 25-35kWh range, 40-50kWh if airco on in the night, another 80kWh if you're driving electric and typically away from home during the day, charge at night. That is a lot of energy to pack, even at the low end. Imagine if everyone finds the cheapest set on AliExpress and DIYs it themselves, and then looks for a new model once current installation no longer matches their needs (capacity loss or use increase)... this must be a fire brigade worst nightmare.

Due to generation being more localised, we also need some form of much more local redistribution and/or storage. But not the nightmare that is one or more poorly installed and poorly maintained batteries of dubious origin per house.
Also I recently learned that different people see different comments on the same Instagram post and they to me is something I’d never thought of about echo chambers. Like you could send someone an Instagram post and assuming Instagram has their history they might see different comments than you
Duplicate? This was already posted 12 hours ago, though not the same link.

All the discussion seems to be here:

"Recall: Stealing everything you've ever typed or viewed on your own Windows PC" 171 comments https://news.ycombinator.com/item?id=40540703
When talking to LLMs their responses are always a bit off. The best way I can describe it, it’s like they are speaking a specific dialect but you know they are using expressions that wouldn’t be used in that dialect. Or, it’s like they are way over their head in the specific matter and reiterate things they really don’t understand. Like there’s no substance in what they are saying.

And if they do this for a simple or a matter that you know of, how can you trust their answers in a matter if you can’t evaluate their answer?

It doesn’t get better when they are totally mixing things up but say it with certainty, instead of just saying that they don’t know or admit that they have gaps in what they know. They don’t just get it wrong like humans do, it’s just weirdly wrong. Humans usually get it consistently wrong. Perhaps it’s about what they are not saying.

Would I always be able to tell it’s not a human I talk with, probably not. But chances are that I will know, the longer I talk to them.
Your take away in the "ok is harmful" article is incorrect. There is nothing wrong with "ok" - your problem is with shadowing variables. The better organized code couldn't use shadowing. Your example of moving the ok-checks to the end makes as much sense as moving all your err checks to the bottom. If you overwrite a shadow variable before using the value, of course that's bad.

The real takeaway should be that one must always be careful with shadow variables and generally use them as immediately as possible.
The Iliad is much more approachable with a background in ancient history. Whereas I feel only a background in Ulysses really helps with Ulysses.
I wonder what kinda data they will get cause most people who code and do heavy stuff I think are on mac/Linux so I wonder how good the data they gather be you know? Mostly moms and dads using their computers wrong this is what I imagine my head is the data they gather, like maybe 50-60% of it lol and heavy users with good data are nowhere to be found
Just to expand on this, commonName is not at all required in certificates and is basically deprecated/legacy

Letsencrypt does not require you to set it, just subject alternate names, which can be up to 255 characters, but some providers require it for no reason
Behind a NAT you're safe even with Win9x. Idk about XP-latest, but you don't want to connect a fresh pre-SP installation right to the uplink cable. I wouldn't do that with any version of windows, even from the "windows server" line.
if they are chromium based and google pulls the v2 out of chromium, then it would be up to the forks to maintain v2 being re-added and security updates being applied and maintained ny their teams

a better question is why does one _need_ chrome; or to use strictly one browser for that matter? bookmarks are literally a text list of urls (many alterneratives to sharing these between browsers/devices); history features (to my useage needs the history features have lacked since the browser was invented). shared sessions, like resuming a video between devices - can be done via logging into many sites. saved passwords? dont save passwords in the browser- - many alternatives exist.

try not to limit yourself in the tools which are available, there are many and they are not hard to learn

tried LibreWolf yet?

edit: some sentense restructering
No I haven't - it looks interesting thanks for sharing.

I did once think whether a client could abstract over IMAP to build to build a WhatsApp-like UI/UX so clearly other people have thought the same.

Although I will confess I'm no longer really looking for a new chat experience...

How is the latency is for Delta Chat?
or you can submit to Putin and Xi and see if they grant you your four-day work week
> The dissemination of shit people have made up while also lying and saying it's the truth does seem to present a problem.

The problem is that what you think of as "made up shit" and "lying" can be manipulated without you knowing.

For example, Covid lab leak theory was deliberately made to look like fake news by some guys who would lose money if it were true: https://web.archive.org/web/20210709212358id_/https://www.bm...

There is no need to be a conspiracist to simply understand that with 100% likelihood at any time there is something true that you think is fake news, no matter which side you are on.
Late comment: have a look at https://news.ycombinator.com/item?id=40543990

What may be a moot point for me is not a moot point for millions of users. This feature seems to be enabled by default and needs poking into settings to disable.

Microsoft have proven time and again, by their acts and omissions, that they can't be trusted.

Relevant quote from the source: "During testing this with an off the shelf infostealer, I used Microsoft Defender for Endpoint — which detected the off the shelve infostealer — but by the time the automated remediation kicked in (which took over ten minutes) my Recall data was already long gone [ie. exfiltrated to a bad actor's device]."
Imagine using windows in 2024
What autoconf got right
When has windows ever been a safe or secure OS environment? Seems to me, many an exploit has been installed by the user while trying to get device drivers working
>That makes it harder to find new accounts to follow though.

That would be the benefit.
I had only one problem, all certificates were outdated, so all https resources didn't work (like 99% of web). I had to download certificate updates to flash drive on another PC to install them, then all worked fine, I used outdated Firefox but it still good.
> live in the countryside, or have not been to Japan for 10+ years.

I lived in a suburb city near Nagoya from end of 2022 to beginning of 2024. It's not Tokyo, but definitely not an "inaka" either. We got our Aeon Malls and even a Porsche dealer lol.
> Because Linux userspace libraries aren't designed to handle long term binary compatibility.

The kernel however, is. So how about static linking (almost) all the things?
Might be. After the post talks about Western food. So at least in Europe I don't see the surge. (I suspect the post mix up Western and American diet)
> Our team, ISE (Industry Solutions Engineering), works side-by-side with customers to help them tackle their toughest technical problems both in the cloud and on the edge.

The blog could really do with a subtitle or about page explaining this.
This all boils down to, I like my apples and don't want anyone to say otherwise.
Here it's more the other way around. CERN needs a data analysis framework, so CERN develops, maintains and publishes it for other users.

That being said, I don't know whether it's actually a good idea for someone external to actually use it. My experience may be a little outdated, but it's quite clunky and dated. The big advantage of using it for CERN or particle physics stuff is that it's basically a standard, so it's easy to collaborate internally.
It's an app server. It can run your asgi or wsgi app.
Routers cyber security best practices
They also sell $19 lightning and USB-C EarPods, which were/are exactly the same price as the mini-jack EarPods. Or if you want to use different headphones, a $10 lightning/USB-C to jack adapter. They must be getting rich of those $19 headphones :p.

People in tech circles also lambasted Apple for removing DVD drives and a lot of other things. Yet a lot of non-tech people prefer Bluetooth ANC buds or headphones.

Also, if they were so intent on killing the jack for money, why do they still have it on MacBooks and even upgraded it with an amplifier that supports high-impedance headphones?

Better waterproofing and re-using the space sound like perfectly valid reasons.
https://unit.nginx.org/howto/docker/#apps-in-a-containerized...

> We’ve mapped the source config/ to /docker-entrypoint.d/ in the container; the official image uploads any .json files found there into Unit’s config section if the state is empty.
Ukraine Launches Queen Hornet Supersized FPV Bomber Drone
Not really. If they’re expensive, in France the health system might decide to not pay for it. Or pay for it in very restricted cases.

You wouldn’t know about it though, your doctors would just tell you that they are out of therapeutic options and to gather with your loved ones, unaware of the fact that your cancer is actually treatable.

Source: Am French, happened to a very good friend of mine 5years ago. They ended up surviving after a gofundme paid for a US treatment, administered in a private hospital in Barcelona. They made it and are doing well now, thanks to the “evil US private capitalist health system”
Can confirm from personal experience. It has been years, but Deevad was a joy to work with. He will discover your niche project, test your betas, give feedback after trying to work around the quirks and spending time actually using it. He will contribute when possible and promote your software if it gets the job done. I'm glad he keeps doing this over all the years and projects.
GET arguments are not redirected to the spam site because when the url redirection site has received the GET argument, the GET argument would generally be discarded/disregarded before redirecting the user to the spam site.
Lets say a human work is 1% new, 99% derrivative. AI work is 100% derrivative.
The screenshots make this feel entirely fabricated or entirely marketing motivated.

If it's somehow real, omitting the hudsonrock message would be good sense.

I have mentally black listed this company.
My experience too, but I live in the inaka.
I’m not holding my breath. Things won’t change until there’s a price to pay for corruption.

https://en.wikipedia.org/wiki/Laurie_Smith
I've been using Debian since it existed. still happy
has anyone figured out why caddy is substantially slower (thoughput, not latency) than nginx at reverse proxying? i've switched it around for my seafile and it's a night and day difference.
This idea that you should "escape your bubble" on the internet being better than not is confusing to me. If someone enjoys a personalized experience that's what they should have. Or are you telling someone who only reads fiction horror books that they need to escape their echo chamber and read other stuff because under your definition they are not eclectic enough in the media they consume?
Those yachts won't get bought themselves.