skysight-inc/HackerNews huggingface dataset:
> As LLMs like GPT-4 intertwine with human communication, aligning them with human values becomes paramount.

Oh. And what are these universal "human values?"

> our study contributes to the nascent field of machine psychology.

It's a little hard to accept that you're doing "prompt engineering" and "machine psychology" at the same time. This paper has a stratospheric view of the field that isn't warranted at this time.
200 million and young vs 60 million people and old.
Yeah this seems like a "water is wet" type situation.
Right. They specifically laid out a scenario where the data is locally accessible.

So code that proves the data is locally accessible doesn't contradict them.
He is reporting on April and first week of May.
Best Tech Jobs by Salary Growth in 2024
was about to post url myself lol. good thing i switched to linux yesterday
application logic needs to live with application code in source control. I've not seen a solution that leverages the database the way you suggest and achieves that. It leads to people yeeting things into production and hoping they work because half the logic is not in front of them
The police state is interested in maintaining the power structure in the police state. As long as petty or even organized crime does not upset the balance of power, the authorities couldn’t care less - crime against Americans is no danger to them. Just as the Russian government has no interest in cracking down on its blackhat population, as long as they target non-Russian orgs.
I tried to contrast to `expect` in a couple of my other responses, but yeah this is my sense too after looking briefly at `expect` - that ht always transparently sets up a terminal for you under the hood and you interact with that so you can always grab a screenshot of any terminal UI.

I don’t think `expect` is targeted at this use case (though I am only learning about `expect` right now so could be wrong)
No. The point is the correlation is poor between the two sets AND there's equally quantifiable things with higher correlation.

If I genuinely wanted a job again all I'd do is go to one of those drilling game websites for a few nights and then say whatever the interviewer is looking for.

Any test I can fail one day and pass 3 days later that is ostensibly supposed to assess whether I have skills that take 15 years to master is total bullshit.
Take a look at Switzerland's medical system for how nationalized health insurance can work well. When the insurance system isn't privatized, it isn't for profit. This drives prices down to become affordable, even without insurance.
Not from the article, but from the comments below it.

> My phone was stolen while I was going through TSA security at JFK and the TSA guy must have been in on it because he wouldn't let me get it even though we were able to locate it using my husbands phone. When we used the find me app later we saw it was somewhere in Queens so definitely wasn't stolen by someone else flying that day.

I had never heard of that happening before. Great, another thing to be anxious about at the airport. TSA does not pay very well, so I can understand the impulse.
I'm not trying to be mean, it just struck me as kind of a funny position.

"If you want to understand the transition between a fundamental theory and its effective description in some limiting regime, you need to be able to describe a system in the limiting regime using the fundamental theory"

Like, that's well and good, but in general we just can't do that without hand-waving, period. This is true all over the place (biology/physics, psychology/neuroscience/physics). It's sort of true, but not in a useful way.
Caloric restriction has zero
So, what's the right procedure here? Is the dichotomy in the post true?

a) remove from account and help the recycle crooks, or
b) risk them crack it having your data

Aren't there crack wares at this point in the wild?
It's a lot slower to write a large file to a ram based /tmp and let it swap out, vs writing that file to disk directly.

If they want to do this they need to modify tmpfs to do a better job of shifting data to disk when full, instead of letting swap handle it.
Could you elaborate on what you mean? How is society structured (and by whom?) to make families miserable if they have a kid?
Transparent telemetry is not spying. I'll agree that the ads are annoying but they're about as unobtrusive as you can make them. This is not the catastrophe you believe it to be, and even if it were, the big scary evil worse-than-Google Mozilla allows forks and Librewolf exists.
This is really sad, MixesDB is one of the best products I use on an almost daily basis.
> white lies and Pascal Wagers

What white lies?

Same deal with a huge number of other heath issue, you can tell basically anyone to exercise more and it’s good advice. Not for Olympic athletes, but from a public health perspective “get up a move” is a perfectly reasonable message.

> at what?

Keeping people healthy. The idea that the only possible benefit is saving your life is moving the goalposts on health policy.

You specifically would benefit from getting an annual flue vaccination. Your doctor’s recommendation that it’s not something to stress about is likely correct, but it doesn’t somehow mean getting it would be a net negative for you personally.

Skipping it isn’t a big deal for you, so if you’re stuck with some irrational fear then no big deal. But would you benefit? Yes.
Getting sleepy, getting a headache, performing worse physically and mentally. Might be more stuff if you look into it, but to me this is the obvious stuff that matters and already justifies frequently opening windows.
> The link to the study is broken

Correct link appears to be https://journals.plos.org/mentalhealth/article?id=10.1371/jo...
That is the problem. He should have contacted them like he did the second time. When he went into their shop, it all depended on that particular employee, and you can't blame that person for not recognizing the issue.
If it's wiped then there's no data for them to get?
Misconception: police solve crimes.

Truth: police protect their employers.
None of those are automatic. Any API you write still has to remember to put in LIMIT clauses, to avoid OFFSET. And then you have to actually write the API rather than have it generated for you.

There are no free lunches, especially with regard to security and sanity checks.
Or it would, if it worked.
I've had cases where /tmp was full, usually by some runaway program that didn't clean up properly. The first indicator is usually that Bash auto-complete fails, followed by no one being able to SSH into the machine. I suppose mounting /tmp in RAM means this will happen more often (as RAM is usually smaller than hard drive space), but I don't see this becoming a giant issue.

Now, auto-cleaning /var/tmp... that's going to cause SO MUCH data loss across people I know. I see a parallel with keeping files in your Desktop: yes, that's not what it's there for and ideally you'd store things properly, but you don't go around deleting people's documents just because you don't like it!

Time to start sending warning E-Mails, I guess.
Even if they did not explicitly implement rate limiting, an online attack is going to take enormously longer to execute. Querying an online service is going to add say 100msec roundtrip on top of the actual password hashing time.

I thought guidelines were that passwords should take 500msec to calculate. So, call it 600 msec per submitted password. Many servers will melt before being able to respond to any serious brute forcing attempt.
This would break a bunch of little things in annoying ways. Like I have shell script tools that store shell scrollback logs in .cache, and I want that past reboot.
Excepting a General Resolution or a Policy violation, every accredited Debian Developer can do whatever the heck they feel like in their own packages.

This can pose problems. Boccasi steamrollered, but relatively politely.
Honestly. This is a pretty good advertisement for Apple.

I appreciate the effort that they've put into making my device less valuable to thiefs.
One of the reasons...

Back when the Internet became aware of typing injuries (RSI), folk wisdom was that one of the causes was the multiple simultaneous key presses, because of how people often contorted their hands to do it.

I made various changes, and now, decades later, I can type all day and night, without discomfort (much to the chagrin of HN).

(Kudos to people who limit yourself to one modifier at a time, and who use the alternate hand for it. It's still more repetitive motion, but at least you're not going against the folk wisdom about contorting hands.)
Really great controls. All the mouse interactions are very intuitive. Keyboard slightly less so, but they work well once they're understood.
> Who will build all the power-plants so that EVs become feasible there? Especially if we assume the richer parts of Africa (ex: Egypt and South Africa) moving with Britain like they tend to do.

https://electrek.co/2024/06/03/global-pledge-triple-renewabl...

https://www.iea.org/reports/cop28-tripling-renewable-capacit...
I personally think "user retention" is a harmless sounding euphemism for induced addiction.
AI's Power Needs Mean Small Nukes Can't Fail, DOE Official Says
Well, you can if there is a mental connection to the immune system. E.g. attitudes toward life and toward disease seems to affect outcomes in cancer patients. And placebos can affect that.
HTML, CSS, JavaScript, REST APIs are usually stored in a repository like the application code. Much easier to manage. I understand that the database is usually hosted separately but in most cases they are tightly coupled so should be managed together.
Truth be told... my game is $100 buy-in... and yes, I fill in the rest with $5s.
HPE Reports Strong Sales on Boost from AI Server Business
The comment you link is two hours newer than mine. I also didn't say it's only that type of comment. But when I commented, there were several comments that were just completely off base or bordering on nonsensical due to not understanding the subject. This is a toxic phenomenon that we don't really address, and I thought was interesting to highlight and also share a positive message to those afflicted by the malady of insecurity. You can choose to read in whatever you want, but that was (pretty obviously) my intent.
It is the normal latch to flop migration. Nothing new. /s
Contexts and Components Method in CSS (2017)
It’s an open ended problem and someone could nerd out on the maths while another could define a card class, a suit class, and use a factory pattern (oh brother…SMH but probably wouldn’t categorically rule someone out for it, just talk some more).

At the end of the day the question is: “could this person do the job and could they work with others in the process?”
Real innovation vs. Silicon Valley nonsense
There are, but they aren't cheap. For a recent iPhone, expect to pay a seven digits price.
And even worse, that's bcrypt with 32 iterations - a work factor of 5. Every Bcrypt implementation I've seen has a default work factor of 10 (1024 rounds), and people often use higher values that that.

So that 99 years is a massive underestimate for any actually secure password storage.
It sounds like you replaced learning with trusting some code the internet gave you. Which sure, chatgpt is much better at, but this kind of tech is only a threat if your value is pasting in code you found on the internet. Most serious employers pay for your ability to learn.
I think more code in the database could work but then the database should have better programming languages. The current SQL dialects are terrible for writing regular code.
Thank you. And I would even say that settings aren't really even in different places, they're all either on the Settings page or on the element in question. New tab settings are on the new tab page, and you disable the pocket button by right clicking the pocket button. Not exactly rocket science, especially compared to Windows.
Leela.ai was founded to work on problems like that.
What should I be doing to make a password that can't be cracked regardless of the hashing algorithm?
I think I read somewhere ("The Music of the Primes" maybe?) that the Riemann Hypothesis says that all zeroes of the Zeta function are on a line in the complex plane, and that although it is unproved, it has been proved all the zeroes are within a narrow strip centred on the line and you can make the strip as arbitrarily narrow as you like. I often wonder if I misunderstood somehow because it seems to me if it is really as I just restated it, well the Riemann Hypothesis is obviously true, that proof is "good enough" for engineering purposes anyway.
Source? You may be thinking of Windows.
Neovim decision to use Lua is paying off
The discussions about swap in the LWN comments are interesting. I wasn't aware that at the "swap should be 2x RAM" tip was actually a hard requirement at one point (allegedly around Linux 2.4). I also wasn't aware that common recommendation was to run with swap again.

I have some systems (usually VMs) where RAM is much bigger than the root disk. For example, 500+ GiB of RAM and only 100 GiB of disk. I have other VMs where the disk is orders of magnitude slower than the RAM (e.g. EBS on AWS EC2).

I wonder what I should be doing for swap and vm.swappiness. Usually I just run with either no swap or a tiny 4 GiB swap file on /.
> ...watch constantly for motorcycles behind them...

True, but one should be scanning one's mirrors all the time anyway. Please tell me you scan your mirrors and pay attention to your surroundings all the time when you drive.
If it's just to prove those two words wrong, then this repo seems extremely overblown. "It works like every other program in the world" isn't very exploity.

Also I don't think many people even saw or noticed that particular claim. They just saw the part about it saving everything you do to your computer and were rightfully worried.
GDP per capita is less than 1/3.
how did the thieves get the phone number of the author, then? is it on the lock screen when the phone is wiped, in order to facilitate its return?
Excess deaths were noticed long before the vaccines were available, which largely rules out the vaccines as the smoking gun the headline suggests. (Paywalled.)

Excess deaths could have come from stress, isolation, poor eating habits, limited exercise, or—hear me out here—undiagnosed Covid-related complications.
Once again, AI industry employees warn the tech could lead to 'human extinction'
Russian government is the blackhat population.
I suppose if we look at the world strictly in terms of a "classic" hash, I believe the answer is yes. However, "modern" password hashes are designed to be memory and CPU intensive. Scrypt hashes, for example, are designed to "waste" cycles and memory to bolster security. The size of the underlying password can remain static while the requirements imposed by scrypt can change.

Granted, I'm sure many sites are still using bad hash-based algorithms like md5 without salt today. But modern applications are often built with the goal of slowing down even offline attacks with salting, memory consumption, and CPU cycle consumption. The goal isn't just slow, but costly.
Nah. XDG base directory was supposed to solve a ton of things 18 years ago, except none of them are hard-hitting user problems most folks really care about most of the time unless you are really anal about hidden folders in your home directory polluting things up (most people aren't), so it fails with partial support from apathy from some package devs on Linux to implement it.

Honestly, we should probably abandon the hope that we will ever get full universal adoption. It stinks even worse with the half-adoption state we are in now, with some apps writing to those directories and other apps not. If it wasn't for arch Linux folks trying to drive apps to adopt it more, I don't think it would be. Hell, default Debian/Ubuntu still doesn't set XDG_* directory ENVs by default (some flavors do), and some apps ignore the prescribed "if not set, use this default" nonsense in the spec and do what they have always done because it doesn't break compatibility for users.

Part of the spec stinks, too, like the spit between cache/config/data config where the spec has no written rules specified on when anything is expected to be cleaned up and when or what can or should be backed up by the user.

Let's move to containerizing most apps, putting everything in little jails so we don't have to deal with where they want to write to. They can have their own consistent and expected behaviors on their own island. Snapcraft, flatpack, or any of a bunch of other solutions are already available to solve this problem. Don't have to worry about what some app left behind or wrote to your system when it's all contained.
> early on, it plays tricks with your mind — what if I’m really as clueless as they say?

> What stings far more is when you get no reaction whatsoever

Wow, even someone like lcamtuf can feel like this sometimes. This guy is the author of super-awesome stuff like "The Tangled Web" book, the "Guerrilla guide to CNC" and the "american fuzzy lop" software. Definitely, his work is the kind of content that makes the internet 1000 times better!
Where ever you fall on feelings about vaccination, here is a great place for us to collect a lot of data and do some solid science. It should be funded and researched, and all of it (data too) made public.
I understand but what I’m trying to tell you is that ChatGPT basically prints money and people are still thinking along your line of thinking.

Employers, employment, all that is changing.

There will be experts with AI and then there will be the rest. It’s not going to equalize anything it’s going to make it worse!

when you got something like that for free the whole entire dynamics of work change. ChatGPT prints money by replacing the most valuable labor programmers do and that’s search Google. If you feel like searching the web to piece together solutions has not been part of your job, perhaps you think you’ve memorized everything or you’ve got a nice bookshelf around. It totally takes skill to be good at Google search and write code.

People put too much value on themselves and their own talents. They’re going to hold onto it as tight as they can. Those people are going to get affected because they’re going to resist the change and change is coming.
> To train a NN you need a training set of data, that data follows a certain order or pattern that represents the model that the person has

I have been repeatedly assured by people who manage to sound authoritative about NN's and ML here on HN that, despite my instincts to the contrary, this claim is no longer true. I continue to doubt it, but there you have it.

Your claims about language are quite interesting, and quite controversial.
This is 11 years old but relevant: https://www.youtube.com/watch?v=aLxsLbl16IM
If my ~/.cache was on tmpfs, I would need to download tens of gigabytes of stuff every day. I wouldn't be able to work. There are lots of huge files stored in there, mostly required by Python packages for Stable Diffusion and other ML stuff that insists on downloading huge model files and putting them into ~/.cache.

Edit: du -hc ~/.cache says it's 25G.
This comments section is very oddly filled with people who don't actually understand the subject matter but want to sound smart, and then accomplish the opposite.

Just this one?
Very OT, but I don't know where else to turn to because the Reddit community has been of no help.

I used i3 and I absolutely love the way it feels. However I would like to configure it in a way that I can press a button and every app turns into dark mode. My main apps (Firefox, vscode) have an option to say "use system theme" i.e. if the os is dark, theme this app dark. Great! The problem is I don't know how to set the system theme. And every time I've asked around, I see people respond with GTK, QT and what not. I don't have those, I have i3.

Help?
> > cracking down on obvious crime

As inconvenient as it is for the author and those in their similar situation this sort of petty crime is about on the same level as bustinng a massage parlor.

And honestly it woul hold the same low priority everywhere not just in China
You understand the impulse to steal because a job doesn't pay well? I don't. I would understand the impulse to go back to school to develop a marketable skill, but not to use the force of the state to steal from people.

Edit:
Would you still find this behavior understandable if the TSA agent directly stole from passengers as their bags were scanned? What if the passenger in question ignored the collaborating-TSA-agent and moved to confront the thief; would you understand their behavior if they arrested the iPhone owner, you know, since they're underpaid.
Would you accept the same behavior from a local NYPD beat cop? They aren't paid well when they first join the force, can they steal from random people too?
this happened to me once in the mexico city airport ~2010. my broken macbook went missing in check baggage then a guy that was working at the airport messaged me on facebook 8 months later asking for the password. lol!
> What if you need 64 GB of RAM?

You're out of luck.
FWIW, I've been doing it for many years, and not noticed any problems.

If something is supposed to persist past reboot, I wouldn't put it in `.cache`. Though I don't know offhand what the official documented behavior of `.cache` is, and I can't immediately find that documentation (maybe some open desktop cabal thing?).
It happens often. Here's a new one with a video https://www.cbsnews.com/amp/miami/news/tsa-agents-accused-of...
> Thus showing your argument is based on nonsense.

My argument is that there is a lot more than just cars in the world. Even if Americans may not understand the concept. It's easy to say "replace oil with electricity, look, I have this one example where it works well". Then try to scale that one example, and then start looking at the rest. Again... planes and merchant boats for instance.
Interesting! Do you have any resources or tips on how startups / small companies can keep the ISO 27001 process lightweight?
On a first scan, it seems that the amount of mandatory processed and documents is quite high...
Aren't these all also symptoms of viral infection?
Don't fix it just because it's technical debt
In my experience and opinion, you may have experienced certain problems yourself or may be a related problem to something else or may have seen others struggling with a problem that you really hate. This is when you have an opportunity to solve it. You cannot just guess or validate by asking others.
Maybe that's the US thing? In my country I'm not aware of any subsidies towards oil companies, on the contrary, more than a half of retail gas price is taxes.
The main thing people who haven't read it need to know is, it's not a difficult read. A great book that's worth reading, but I'm not sure why the reviewer took the approach she did.
Under Lula, Brazil have a government again.
It's necessary to mandate oversight for internet usage by under-25s (the age when brain development stops) at the federal level. Enough is enough!
> there is no room for a motorcycle.

90+ percent of roads have more than sufficient room. That's why it requires no new infrastructure. When lanes are too tight for conditions, motorcycles simply act like cars.
https://archive.is/zr9jq