skysight-inc/HackerNews huggingface dataset:
Data science is the practice of producing knowledge rather than building/coding. You can make systems that leverage that knowledge in an automated matter, but when you are deciding what to build, it is not a matter of coding. It is a matter for management. In my experience the sort of arguments a PhD can make fall on deaf ears when management lacks the requisite skills. An organization where the PhD in stats, ML, etc. produces the same outcomes as the code camp hero should look at its management structure before doubting the value of experience at depth.
I generally lose track somewhere after P.
I'm confused here. What's an "output context"? My assumption was that the context window was shared across input and (prior) output. You put everything into the model at once, and then at the end the first unused context vector becomes a vector you can decode for a single token of output. With multiple token output meaning you repeatedly inference, decode, sample, append, and repeat until you sample an end token. Is this just a limit of OpenAI APIs or something I'm forgetting?
Wow! I had no idea this existed! My family grew up without computers because we had low income. Anyone know what the books were look? Would love to learn more.
Experts may have a deep understanding etc but it's the imitators that you want to invite to the party.
crates.io does not host compiled artifacts. If packages on crates.io differ from their Git repository it's because of a custom pre-build step of that particular package, so a deterministic compilation toolchain won't help here.
Good luck with the baby and congrats for the book. <3
I don't like "win the lottery" because it implies that the sole reason for the person staying is money; it devalues their loyalty to the team.

Everyone's working for money in reality of course, but to me it doesn't feel team-spirited to call it out.
> I don't believe this is a problem we can "overcome".

Digital signatures can not remedy this problem? When you login to your bank how do you know you are logging into your bank? In the future a recording without signatures will be like a bank login without https is today.
They're pretty dreadful in that they leak heat while charging up during the night, using (still-expensive) off-peak electricity, when you don't really need the heat, then run out of stored heat quickly during the day, failing to do their job. Maybe in a heavily insulated building they would work better - just my personal experience before ripping them out to install gas central heating.
The point is SimCity is no more a simulation than Monopoly is.

The rules of both are explicitly set up to be fun not a simplification of some model.
At present, my startup isn't making money - in fact, it's not even released. As a result, I'm trying to prioritize getting it out of the door while still being affordable for myself enough to bootstrap it.

To do this, I've made, and continue to make tradeoffs. Among many of the tradeoffs I'm currently making that I intend to resolve ASAP is having OpenAI as a single source of failure. I intend to have some of the other hosted solutions as other options for LLM processing. One of the many, many options that will be considered at that time is self-hosting it, as well, as another option.

I've already spent more time than I should perfecting various smaller pieces, increasing reliability, etc. Each time I choose perfection, I lose more time, more runway, more potential market share; and, something I've recently had to learn:

Each time I lock myself in a previous step to get that step perfect, I miss the lessons I'm about to have to learn in the next stage of the process, including new issues I'll run into that increase the next step's complexity above my initial estimates.

Everything is a tradeoff. Choosing to use a commercially available solution with known and relatively set costs while accepting it may slowly change underfoot (while also knowing I have alternatives I can swap to if an emergency comes up that should only take a little bit to transfer to) is one I've made.
Show HN: b2v.xyz – Protection against impersonation attacks
Hi HN, I’m the founder of https://b2v.xyz, a service that protects organizations against impersonation attacks.

The problem I’m trying to solve stems from the following observation: while end-user authentication methods are becoming more advanced as cybersecurity evolves, organizations aren't experiencing the same improvements when we reverse the roles, i.e. when organizations authenticate themselves to their users. This imbalance leaves a gap in secure communications that B2V aims to close.

Bad actors have countless ways to pose as trusted entities — through phishing, smishing, vishing, and more. These catchy terms may sound trendy, but the technology to combat them often lags behind. While some larger companies do offer some customised solutions such as in-app notifications, most approaches are still reactive, such as updating email filters after an attack is detected or requesting takedowns of fake domains long after the damage is done. It's surprising that more proactive measures aren't in place, especially considering the serious consequences of these impersonation attacks.

How B2V tackles this problem:

- Mutual authentication: During critical communications, an organization can initiate an authentication session and share it with a user via a unique URL. When the user opens it, the organization provides a one-time password that the user can verify. These single-use ephemeral sessions also protect against man-in-the-middle attacks, ensuring that the person you're communicating with is truly who they claim to be. This could also be described as *conversational authentication*.

- Digital signatures: Prove the authenticity and integrity of information linked to your organization with public-key cryptography. This is especially useful for verifying that text or links posted on platforms/media outside of your control — such as job boards, paper invoices, forums, or messages — truly come from a trusted entity. For example here's the signature of this post's URL: https://b2v.xyz/b2v_/XHEbx8NdqjTF50?s=https://news.ycombinator.com/item?id=40699265

- Verified online identities: Organizations can link their online identities, similarly to the way Keybase does it. For instance, here's the proof of ownership of this HN account: https://b2v.xyz/b2v_/NMiMMr9KWov6oE?s=hn:b2v

- Privacy by design: this system respects your privacy by never tracking or storing plaintext identifying information, only digests and signatures.

- For deeper integrations, an API is also available.

Could this be useful for machine-to-human or machine-to-machine communications, such as chatbots or multi-agent LLMs?

Any feedback would be greatly appreciated, especially about my assumptions! Feel free to check out the docs (https://docs.b2v.xyz) and ask me anything.

Thanks!
I love fs.blog, a relevant one for this is the chauffeur test from https://fs.blog/two-types-of-knowledge/
If I know I don't perform well under pressure
should i start a company? Pretty much this is the question. I can add all the history and experiences, but seems unnecessary (still a throwaway account as I might say something identifiable in the comments.)

I have been pondering over starting something of my own, but bit reluctant. I had a chat with my therapist and we came to conclude this. Therapist, of course, says its not a limitation, and I can definitely be a founder. But hey, she is not a founder herself, nor has much experience or exposure to other founders.

Maybe I will get 10% or 20% better at performing well under pressure, but for sure this won't my specialty.

WDYT?
Yes, because asan only makes sense in the context of specific (kinds of) implementations.
Is it just me or is there an influx of Raspberry Pi alternatives trending lately ever since the IPO?
Do you have a source for crates.io building artefacts? I have a couple of crates on it and never saw any sign it tried to compile them, even when they were broken.
I’d suggest to just post it rather than overthinking the submission. There’s no “being annoying”, if people do not think it’s interesting they don’t upvote.

If you’re a young maker a few sentences on your motivation to build the thing, who you are, etc. will make it more interesting.

Also, you can start the discussion with 1-2 questions in your post, to maximize the value of input from the HN community.
I always read the main use case had nothing to do with security, but was to reduce log spam.
A lot of people here haven't integrated GPT into a customer facing production system, and it shows

gpt-4, gpt-4-turbo, and gpt-4o are not the same models. They are mostly close enough when you have a human in the loop, and loose constraints. But if you are building systems off of the (already fragile) prompt based output, you will have to go through a very manual process of tuning your prompts to get the same/similar output out of the new model. It will break in weird ways that makes you feel like you are trying to nail Jello to a tree

There are software tools/services that help with this, and a ton more that merely promise to, but most of the tooling around LLMs these days gives the illusion of a reliable tool rather than results of one. It's the early days of the gold rush still, and every one wants to be seen as one of the first
This isn't unique for OpenAI models. A lot of the open source ones has similar limitations.
Party maybe, your company hard no.
Hi Chaim! I really enjoyed working with you on Spore. What have you been up to in the intervening years besides writing this book?
Show HN: Searchable Kubernetes CSI provider listing
Drawback is of course way worse drivetrain efficiency, but for a all weather bike it seems awesome
I don't see FUD anywhere in my post. Did you accidentally reply to the wrong person?

My point was essentially, that if he thinks wayland is this bad, the poster should help improve it to their liking, instead of ranting - it's pretty widely adopted now, and just like systemd, little more than a few minor holdouts are going to be left a few years down the line.

Now, keep in mind, I'm not claiming that wayland is good or bad - just, that complaining is unproductive and improving helps much more.
i wouldn't call it "quite disgusting" considering how there are not more transmission of illness than other nations even in the densest parts of the country. people wear masks when they are ill and restrooms in food establishments typically have soap.

air dryers like dyson in western countries are breeding grounds for germs and pathogens anyway
Occasionally for routine small counting.

What I did find interesting is that I've used it more for Japanese especially when I'm
in Japan. I've been very slowly learning Japanese and of course counting in Japanese. So if I'm ordering food someplace I try to either count (yen) change or figure out the amount of an item I'm ordering.
Isn’t that FOMO?
For an embedded computer you basically need to go bare metal with Circle or something similar.

But then I'd wonder what you're building because there are powerful microcontrollers you can buy for $15/1 that will handle anything with basic networking and sensors. I know some musical synthesizers are made with rPi4 and I'm befuddled that they're not the most powerful synths ever made.

I think they oddest one out is the Arduino line, which is generally underpowered and expensive compared to just having a drawer of esp32s sitting around.
I have seen a I2C implementation on the RP2040 that works with native support.

https://github.com/Nicolai-Electronics/rp2040-i2c-interface
It renders the questions useless against experienced candidates, but not against naive or ignorant ones. So it still has value to employers.

The best remedy to stop such things is a statutory ‘bounty’ for such activity - like the $2500 penalty for California employers for attempting to scare employees with unenforceable non-competes.
I think you’re implying that imitators are more interesting or fun, but I disagree. I’m in a field that became very popular and lucrative. It has far more imitators than experts. Some of them are interesting and fun, but a lot are shallow snake-oil salesmen. Namedropping and self-promotion abounds.
That is quite explicitly not what I wrote. You might want to re-read my comment.

My point not only stands, but is reinforced by your comments.

If software is eventually compromised, it was not secure. I have yet to see any software that does not eventually get compromised when it gets enough exposure.

That those compromises can get fixed after the fact doesn’t change that.

And ignoring the explicit cases where your examples were disproven doesn’t help your case either.
That's not a very kind interpretation of the parent comment - a bit reductionist, don't you think?

I personally don't believe it's possible to "give out" kindness, compassion, friendship solely from an utilitarian position. It would either be fake, and people feel the difference and the desired effect does not follow, or your utilitarian position is a front, in order to justify being kind to unkind people around you judging you.
It's the number of tokens the model can output in one pass. There's subtle differences between running it multiple times to get a bigger output and running it once to get a bigger output. These are things that only really show up when you integrate these models into production code.
All reactors do that.

Breeder reactors operating on spent fuel can only utilize the U238 that wasn’t discarded in the initial enrichment process.

That’s what happened to the vast majority of U238 in natural uranium used to make fuel. Roughly speaking to make 100kg of 5% enriched uranium fuel you need to throw away 1,000kg of U238 + ~3kg of U235 as 1,003 kg of depleted uranium.
just like corona, which survived for a five years of effect. Bacteria's impact are for two years, virus impact are for five years.

Then what impacts for ten years?
Because early-2000s Linux was made by techies and geeks for techies and geeks. Windows and Mac succeeded because they had a GUI for nontechnical users and didn't require an inordinate amount of futzing in the terminal to use.

Even discounting Android, Linux is much better nowadays, but in the early 21st Century, it was temperamental and finicky enough to install and use that it scared away nontechnical users.
The lava is waiting for me to trace down a quote in japanese, which in particular is in kanji — at least I've found the correct page in the scan, now I just need to figure out which aperiodic crystals correspond to the english translation, and then hope I may find some antecedents...

(but to first order I'm just embarrassed because I quickly needed a weak rhyme for "Swabian" and lava not only quickly came to mind but was much easier to motivate than the tempting but difficult enjambment of "Bhabha / And benzedrine")
It would also expose information about their deal volume which they’d rather not disclose probably, unless they have no choice. Impacts to stock price and the like.

Could also cause a crash in the industry, which they’d rather not start.
Seems odd to exclude PHEVs.

Most rides are under 50 miles, which means emission-free rides on most occasions. They don't hound chargers and need smaller batteries. Win-win if you ask me.
I saved his memoir from the landfill
Never published early accounting of what life for the average guy was like in early 19 century America. Few in his class had the education to inform us of this period in American history.
Cool!

Possibly off topic, but: what did you work on for Spore? Was it around the time of the now (in?)famous E3 demo in ~2006, or closer to the final release? The final game seemed to differ significantly from what many of us were hoping for, and I never really heard much of a story of what happened in between.
No. Newer models have 128K of input tokens, but only 4096 output tokens.
PPS is getting more common. Quite a few phones need PPS for fastest charging so seeing more chargers that support it. It is still cheaper to buy official charger but barely. And there are multi-port chargers where might be able to support multiple Pi5.
Because open source models aren't as good as GPT-4.
Please see above linked discussions and ignore this submission.

Thanks gnabgib!
A lot of that size increase was, somewhat ironically, due to safety standards. Body thickness seems to be much higher today than 30-40 years ago in my experience. Cars look big from the outside but feel cramped inside these days.
I agree. They're also so much larger than our design! If getting a switch ever interests you, please let us know at byran@mrx.ee. No pressure of course!
100% disagree, often I meet bullshitters and I think, well this is a person I would never invite to anything.
Because the Bantu languages (most prominently: Swahili) and Japanese have similar sound systems. Finnish is also oddly similar-sounding, or Hawaiian. None of them are actually related.

It's because the syllable is restricted in the number of possible forms, in a similar way. (And they all have approximately five vowels. And a pitch accent.) In Hawaiian, nothing but consonant + vowel syllables are possible. Swahili and Japanese allow an optional final n sound. Finnish is a little more flexible, and syllables can end with an n, r, l or t. No consonant clusters, in any of the languages. No syllables ending with consonants outside the restricted set (if any), in any of the languages.

This results in a lot of syllables of the form: i, a, ne, na, ka, ta, po, to... "Pokatokaino". I just made that up and it's probably not a Swahili, Finnish, Hawaiian, or Japanese word -- but it could be.

This basic pattern (consonant + vowel + maybe limited option for final consonant) is very common; it's the most common arrangement among the worlds languages. Far more common than languages like English which allow monstrosities like "strengths" (which is 6 consonants and one vowel).
Maybe we shouldn't be selling products built on such a shaky foundation? Like Health Insurance products for example.

[2]: https://insurtechdigital.com/articles/chatgpt-the-risks-and-...

--- please disregard [1] it was a terrible initial source I pulled of Google

[1]: https://medium.com/artivatic/use-of-chatgpt-4-in-health-insu...
People bought them because the advertising promoted them. They were advertised them because it let the manufacturers meet a lower emissions standard and pay a lower cost to manufacture the vehicle. It's not a conspiracy, it's not individual choice, it's just economics and marketing.
The slumlord could just increase rent a bit, for example (where would other options for housing come from for the current renters?).

At a 90, the slumlord option is still much better than the decent option (100% return on investment in the former, less than 20% in the latter). An LVT would just further highly extractive land use - that might not be by existing landowners but not sure why that would matter much.
OK I understand the RPi must have very good press, but nitpicking every part of a message just to find something to attack isn't constructive. Linux preinstalled means that Linux works out of the box, that is, you don't even have to search around for Linux compatibility with any of the peripherals inside that mini PC. Of course I would never ever trust anything preinstalled, neither Linux nor Windows, just as I got rid of stock Android on my recently bought Pixel 7 in favor of GrapheneOS like 2 hours after unboxing it. I only meant about compatibility, certainly I wasn't suggesting that anyone runs unknown software from China.
I disagree. For instance, let’s say I’m an auto manufacturer and I need some parts made. If I don’t get those parts, I have to stall my assembly line and lose a lot of money. If I find someone who can supply the parts in a short time frame, then I will definitely fear missing out by declining the sellers offer. If I capitulate and the seller delivers reliably, then I am going to gladly return for their services because they can ensure my business stays running.
Who says it’s defeatist? It’s realism. You might as well say noting mild steel only has a 60-80kpsi yield strength ‘defeatist’.

That attitude allows practical risk management and effective engineering. Pretending software can be secure or mild steel has infinite yield strength cannot.

There is no lock that can’t be picked either, which is why no one leaves millions in cash protected just by a lock without guards and a surveillance system. And why they insure large amounts of cash.

At this point it should be pretty obvious - don’t put important secrets on computers without a way to expire/revoke them. If it’s a secret that can’t be expired/revoked, think long and hard about if you need it on a computer - and if you do, use a SCIF.

Monitor any connected computer systems for compromise. Use encryption extensively, preferably with hardware protection, because software is insecure, etc.

Same with controlling dangerous equipment - don’t rely on pure software or someone will get killed. Use hardware interlocks. Use multiple systems with cross checking. Don’t connect it to the internet. Etc.

This is all industry best practice for decades now.
Fast-food industry fake numbers claim California's minimum wage law cost jobs
In my career I've at times been a leading expert on, as is the way of these things, a couple niche technologies. I'm speaking from that perspective.

While certainly there are those who struggle to connect with layman audiences, especially in academia, a complete inability to communicate the challenges and successes of a technology, technique, or theory to laymen is a huge demerit against a claim of expertise.

There's a huge difference between walking through technical and theoretical mechanical specifics, and being able to communicate about a subject at different levels of abstraction. The greatest experts can often walk with a laymen right down to and rub against the jargon-filled specifics in a way that leaves no doubt they're able to step over that line without problem.

This is important because we don't perform ideation, architecture, or structural problem solving in the terms of white papers and technical specifications. If an expert does not have an abstract internal narrative with which to navigate the mechanics of the subject, they are likely not an expert at all.
> I think a lot of people don't realize that there was a decent size, but small market for SBCs for low-volume embedded work (including hobbyists) before Raspberry Pi. You could get a lot of different kinds of boards with good Linux support and a not terrible price.

And you still can! The big innovation from Raspberry Pi was making it all feel very accessible through the documentation, community, and various utilities to configure things via menus instead of by editing files.

The Raspberry Pi was rarely the best board, but it was the easiest to recommend to beginners because you could point them to volumes of documentation and community threads.
10% not being engaged does equal 90% quiet quitting. Seems like clickbait.
Desperately Miss These Nostalgic Discontinued Foods
A diamond layer in Mercury's deep interior
This is an oversimplification.

In substantial parts of the US, the geography and climate recommend an AWD with high ground clearance. Most modern SUVs are not built on truck frames and have fuel efficiency similar to sedans. Decades ago this market was originally met either by modifying a 4WD truck to make it passenger friendly (e.g. "true SUV" like the Ford Bronco) or a handful of low-cost Japanese cars, notably Subaru. There was a vast market gap between these two options.

Most modern SUVs don't resemble either but instead split the difference. They are essentially sedans modified to support AWD and high ground clearance. The 2WD versions are essentially a minivan without the sliding doors. A "true" SUV has 4WD and a frame built more like a truck but these are relatively rare in the SUV market.

There are still no electric cars that address the old Subaru market, so in the US we will be stuck with SUVs for quite some time.
I’m not convinced anyone described monopoly as fun