skysight-inc/HackerNews huggingface dataset:
Microsoft had a known, high consequence, security flaw that they did not acknowledge or fix, they had evidence that indicated it had already been exploited and they knew they had limited to no ability monitor for exploitation. This choice lead directly to the SolarWinds hack that happened in 2019 was discovered in late 2020 and acknowledged by the USG in early 2021.

Many companies make bad choices around security for profit, however that factors I listed above make this extremely egregious.

I would seriously question any use of Microsoft products in any security conscious organization after this reveal. I also hope that anyone negatively effected by the Solar Winds sue Microsoft for knowing about the vulnerability for years without fixing it or disclosing it.
> I'm not sure what is your objection.

I am. It is that it's an Indian company. How dare these brown people do something cutting-edge in science or engineering!
This new DataProtector tool streamlines confidential computing software development. Imagine being able to rent access to your data so you own it but code running in a TEE can access it, securely transferring ownership of data, or offering subscription bundles for your data. With generative AI essentially turning into an echo chamber where it will train on its own content, sourcing human-derived data and content is going to be so important. This might be how an economy of that data/content gets off the ground. https://medium.com/iex-ec/introducing-the-content-creator-de...
mi300x win in some inference workloads, h100 win in training and some others inference workloads ( fp8 inference with tensorRT-llm , rocm is young but is growing fast )

in a single system ( 8x accelerators ) LLMs, mi300x has very competitive inference TCO vs h100 .

also :

AMD Instinct MI300X Offers The Best Price To Performance on GPT-4 According To Microsoft, Red Team On-Track For 100x Perf/Watt By 2027

https://wccftech.com/amd-instinct-mi300x-best-price-performa...
Thanks.

There's also https://github.com/jrh13/hol-light which I think is still maintained (just learned about it in https://www.youtube.com/watch?v=uvMjgKcZDec from this thread: https://news.ycombinator.com/item?id=40619482)
I think it is uncharitable. Depending on who you're dealing with, trying to hide any checkpoint problems might come across as a red flag. Joking about it is a way to show that you're honest while indicating you don't think there's a serious problem now. It's up to the listener to agree or not, but at least you reported the incident.
As a CS instructor, I've been thinking along these lines. Thought experiment: how do you teach your class if students have continuous and instant access to every possible exam and project question and answer?

And it leads to some interesting places. How do you motivate students to do pick up a shovel and do the work that they need to do in order to learn the material? And if they're picking up a shovel and doing the work, what's left to lecture about? We assess the work, motivate the student to fix it? How do we motivate the student who has the entirety of the world's knowledge at their fingertips? They're not skilled enough to do work that AI can't do, and AI has all the answers. And yet they have to do the work in order to learn the thing.

How to motivate the student in such circumstances, in my mind, has to move beyond fear of the exam.

And it forces to question what skills we want the students to have coming out of school.

I'm actually pretty excited about it all. And ChatGPT is a great learning tool when used correctly. (Even with 4o I get it to offer contradictory answers, though, but this is all part of educating the student on how to get the most out of the tool.)

"Leadership is the art of getting someone to do something because they want to do it." --Eisenhower
> For example Ireland has by a long margin the highest GDP/capita in the whole EU

No, Luxembourg does.
This is a direction I've been pushing in partly because I'm using a significantly slower type inference algorithm in my language. I'm hoping with that and focusing on separate compilation I'll be able to keep the fancy inference without sacrificing the UX too much
I thought so too, but then I used OCaml and found myself very productive without explicitly annotating everything compared to Haskell. It gives you the speed of dynamic languages with the correctness of a static language. The LSP should be able to annotate for you.

The cases where I think it is necessary to annotate, I can do so.
Ford ends EV dealership program that required hefty investment to sell EVs
The person who prompts would be responsible. Everything else doesn't really make sense. This is usually the trivial solution for any form of tool we use.
> This is going nowhere

Hard to argue with that.

> In any case I'm assuming you don't believe in sports reporters

I'm not much of a spectator sport guy, but sports reporters are easy to trust: for the most part, they aren't reporting anything important enough to care too much about the accuracy, and you can just go to the games and see for yourself if you do.

That doesn't work as easily with say foreign policy reporters, who could tell you it rained skittles in Kiev on Monday, and you just have to take their word unless you want to step into a warzone.
Wright Brothers first airplane flew only 100m or so.
> expands lobbying team to influence regulation

Just out of curiosity, is WSJ just editorializing here by re-stating the obvious, or are there actually any other reasons to "expand (your) lobbying team" than to "influence regulation(s)"?
Again, your answer is to a question that wasn't directed towards you, and it doesn't answer the question.

I'm a Canadian, I read these sources and am well aware of the issues you want to soapbox about.

I'm not interested in hearing about them from you. If I did I would go to /r/canada to hear the exact same stuff.

What I'm far more interested in is seeing where non-Canadians get their news about Canada.
Serverless Framework V.4 actually looks great: https://www.serverless.com/blog/serverless-framework-v4-gene...
But tmux on server survives the laptop sleeping. That's the key value.
then the laws need to change so bad security costs companies money.
The mentions of TOPS above are a brain misfire. ETOPS was altered repeatedly but it was always named ETOPS, at first allowing 90 minutes, then 120 minutes and eventually 180 minutes of assumed single engine range. A modern twin engine jet can go a long way in 180 minutes at design single engine performance.
there a slew of name brand polystyrene foam formboards that remain in place for R value and moisture barrier.

it seems to be the current method and needs no new equipment.
Couldn't you have just not opted-in to using this feature? It requires you entering your creds to work at all.
DevToys became cross-platform and extensible
which of course is not an exactly correct understanding - no American company without holdings in Europe needs to worry about what they do with their websites accessed by European citizens.
And what if we don't?
Imagine a major bridge that was built by a contractor. A internal safety inspector repeatedly warned his supervisors of structural deficiencies that could lead to the collapse of the bridge. Furthermore, in the pass of time two external sources publicly warned about the issue, but the company downplayed the importance.
Finally, the bridge collapses. It becomes evident that the company did nothing about the issue because it didn‘t want to loose contracts selling more flawed bridges.
The public would justifiably go nuts, and there would be legal consequences for everyone involved.

What is different in our industry that companies (and managers) get away with such malice?
You might want to read the actual article.

My understanding is that it was a two-part exploit:

1) The Solarwinds product was hacked to allow backdoor access to organizations' on-prem networks.

2) The hackers then took advantage of the "Golden SAML" vulnerability in Microsoft's Active Directory Federation Service (AD FS) to leapfrog via "seamless SSO" from the on-prem network into the organization's cloud resources hosted by Microsoft.

The article is all about how various Microsoft leaders and staff did not fix #2, because many said it would never be an actual issue exposed to the world.

This is extra damning because Microsoft is selling components at the core of both governments' on-prem and cloud systems, so if they don't take security extra seriously, their systems can present passive vulnerabilities.
The Microsoft bribes scandal broke not too long after I had to take the "hey don't do bribes" training at Microsoft.

That event really drove home for me the fact that all of the trainings, emails, processes, etc. are mostly plausible deniability. There are people who care about security at MS. I know, I've met them, but for the most part all of this exists so that Satya can plausibly say in court or in front of congress, "well we told them to do security better. This is clearly the fault of product teams or individual contributors, not Microsoft policy and incentives."
I find this take interesting. Some software venders, like Autodesk, offer a token based system to charge for actual usage instead of a flat subscription fee.

On a team of 15 people, $150/month is enough to maintain an internal tool? What is your average loaded cost per employee?
I use it the same way because I use it locally 100% of the time. I would probably care about persistence more if I used tmux on remote machines.
> If I can ask the question, I can take the answer.

I don't see how that follows at all. Are you asserting that it's not possible for a person (hell, let's even narrow it to "an adult") to ask a question and be harmed by the answer? I promise it is. Or are you asserting something about yourself personally? The product wasn't made for you personally.
"vs" doesn't specify any numerator/denominator relationship, just that two things are being compared.
How does this compare to all of the other "#1 open source CRMs"
Indeed, it's tautological
Speaking for myself (and I guess anyone else dealing with pcie riser hell in on-prem deep learning setups), its nice to see the massive orgs dealing with pretty much the same exact pain points as not-so-massive orgs.
Serverless Framework V.4 looks awesome actually: https://www.youtube.com/watch?v=UQL_PPJUFOU
If Qualcomm wins, ARM will never make sweetheart deals for startups again.
Scrolling.

That's a key feature when you don't reflexively use less and ] isn't a natural keybind for "let me scroll please".
Sure, but those aren't free, either from a carbon standpoint or energy inputs or plastics pollution. A solar module, once made, emits no carbon for decades, and can just sit in a landfill (at worst) or have parts recycled (if possible). Algae doesn't live that long and will require a constant stream of waste processing, meaning (probably) fossil fuel trucks and energy intensive industrial processes.

But the algae might be useful in developing countries without solar cell production or import capabilities, if they can scale it up. Some sand and water and you can generate electricity, without significant industry? That'd be very useful.
> I hope people who break laws to immigrate to America, will continue having the same sympathies towards you, when they become majority, and start dominating over you with their culture.

I don't know how many folks around me broke the law to immigrate to America, but whether or not they broke the law to come here they faced a lot of racism, classism, and suspicion. I've been in the same area for about 20 years, and if I'm not a minority in my neighborhood it's close. It's the immigrants who are kind to me, help me keep my house secure, and trade goods and services with me. They even help me practice my awful Spanish with them. So in my case, yeah it's working out.

> America isnt a country, with limitless resources, and enough food,housing,healthcare to feed everybody, stop treating it like it.

America doesn't have limitless resources, but with 5% of the world's population it uses 25% of the world's resources [1]. To anybody's eyes that's going to look limitless.

I think simple laws of diffusion say that people are going to go where the resources are available. Whether it's politically tenable doesn't matter, this is human nature since we started walking.

[1] https://www.re-sources.org/2020/05/online-lesson-material-wo...
You don't have to subscribe to Netflix or Spotify. If you don't, you're either probably consuming more local media & getting local ad rates up or you weren't watching TV/listening to the radio anyway...
Location: London, UK
Remote: No preference
Willing to relocate: Yes, in UK
Technologies: Typescript, Node, React, Python
Resume: https://khatna.github.io/public/CV_khatanbuuvei.pdf
Email: khatanbuuveibold@gmail.com
LinkedIn: linkedin.com/in/khatnabold

Hello! I'm a London-based software engineer with 3 years of experience working as a backend/data engineer in various different startups, including education, retail trading and digital twins.

I can work across the stack, but prefer working on the backend, and also considering learning more about systems development. I definitely consider myself a quick-learner who can pick up new skills and frameworks rapidly, and I have a solid background in CS/Math/Statistics from my undergrad. For my next role, I want to work in a high-stakes environment where I can learn a lot.
Go back? Have you ever worked on a significant project in either Erlang or Elixir? If so, what issues did you experience?
I plugin a third just fine.
The DMCA is the copyright industry's response to "nobody is liable for results" which was the statu quo before.
You could get yourself some tax cuts or subsidies. It's not only regulation.
Microsoft urges businesses to migrate to Always On VPN
Here are the models - https://huggingface.co/collections/failspy/abliterated-v3-66...
The extent to which aggression differences between sexes is the result of nature or nurture seems to have policy implications. For instance it would change the balance between the effectiveness of re-training versus more physical interventions. If men indeed have a hard-wired tendency toward sexual violence, it gives cultural interventions a lower return on investment and incarceration a relatively higher one.

For instance there has recently been a lot of controversy around the claim by J.K. Rowling that studies show that transgender males have the same rates of sexual predation as other males. Understanding of the balance of biological versus social influence informs that debate.

To improve our selves we must know our selves.
Does it work if they intersect in a single (non vertex?) point? It seems like this would require exact equality testing of floats, which is impossible. So I assume in practice you allow for some margin.
I felt XHTML had fairly limited adoption on the web and in many cases web page authors seem to have preferred the »render tag soup« approach that in most cases did the intended thing than having to deal with XML namespaces, proper nesting and escaping, etc. Even though in most cases HTML nowadays seems to be authored as if it was XML with every element painstakingly closed and often even making elements that need no closing self-closing.
I thought we were limiting it to English-speaking areas...
If you are interested in self education, especially science, I recommend diving full force into horticulture and philosophy. Both subjects are deep and yet immediately accessibility by both reading and interacting with the world around you.

For horticulture I recommend using phone apps with your camera to explore the open areas around you and reading about the plants you discover. This will get you started so that you know what to look for and then in a local library you will know what more specific books to request by research topic.

For philosophy I recommend starting with the classics. Most of this is public domain and online. Examples: Aristotle, Plato, Mills, Descartes, Kant, Adam Smith. Then I recommend moving onto modern philosophy, such as philosophy of language, religion, and ethics. You could even find compilation books of philosophy by subject which then provide a single starting point of excellent research sources plus bibliography at the back that directly references more things to read about.

Start reading. Then once you have gotten through some of this material you will become better aware of other subjects and materials to research and how to find them.
the market and the selling price also includes sales strategies, penetrating a sector dominated by a strong player with somewhat "smart" sales strategies
*1

and with a growing but certainly less mature product ( expecially software ), it requires suitable pricing and allocation strategies

1. https://www.techspot.com/news/102056-nvidia-allegedly-punish...
The analogy falls flat because LLMs aren’t locks, they’re talking encyclopedias. The company that made the encyclopedia decided to delete entries about sex, violence, or anything else that might seem politically unpopular to a technocrat fringe in Silicon Valley.

The people who made these encyclopedias want to shove it down your throat, force it into every device you own, use it to make decisions about credit, banking, social status, and more. They want to use them in schools to educate children. And they want to use the government to make it illegal to create an alternative, and they’re not trying to hide it.

Blaming the user is the most astounding form of gaslighting I’ve ever heard, outside of some crazy religious institutions that use the same tactics.
valuable immigrants are going to take my jerb and not flip my hamburger, pick the crops or mow my lawn.
It is realistic to retrofit, and it's done regularly:

https://www.aviationconsumer.com/safety/brs-parachute-retrof...
The $100T AI Token Revolution by Jensen Huang
I've been experimenting with basic (free, COTS) AIs to generate requirements and then code based on those requirements, typically python or php.

The results have been dismal. Fine-tuning prompts is a good exercise for requirements gathering, complete with the tedium that we all love. Sadly none of the AIs that I used were capable of remembering the current requirements with any degree of confidence. ChatGPT4 does a pretty good job until it forgets everything randomly. Both it and CoPilot failed to remember simple instructions like "Please don't send the updated requirements until I ask for them." I assume so that I can waste tokens?

For code creation, both AIs consistently failed to include features that were in the requirements and in pseudo code that they provided and that I approved.

I did enjoy the change of pace of prompt engineering. It's fun while it's happening and while the AI behaves. But it gets very old very quickly saying things like:

Me: We just added <some requirement>, but I don't see it in the most recent version of the requirements.

It: Sorry Dave, you're right. Here's the latest requirements:

<Requirements still without the one in question.>

Hallucinations abound, not just adding things at random, but forgetting things, sometimes with a great deal of resistance to incorporating the forgotten thing.

Also, once you do get to code, don't expect to fine tune it. If you see a bug or oversight in AI-provided code and point it out, it won't correct the code. Instead it appears to re-generate it from scratch. Will there be new, unasked for features? Could be. What about the correction -- is it fixed? Maybe. And maybe in a completely new way.

I have found some success with CoPilot and basic research. In essence it's a smarter search engine. So prompts like this can result in useful leads:

I've got some data that has <a description of some feature in the data>.

Questions:

What is the correct term for <some feature>?

What python library would you suggest to help me analyze <the feature>?

It's quite possible that my prompt-fu is simply weak and ignorant. And using COTS free-ish AIs I'm getting what I pay for. But I would say that as far as using an AI as an all-purpose junior goes, we're not there yet.
FCC, Navy Expand Commercial Access to 3.5 GHz Band
Sure.

It is still substantially more effective and easier than trying to look at literally every individual thing we do and guilt people into doing different things.

It's just not going to work, people will use AI anyway.
It sounds like you’re getting mad at someone for reading Malcolm Gladwell or Freakanomics. It might be NYT bestseller middlebrow pop science that you find facile and contemptuous but a lot of people do not. And the author doesn’t even indicate how Oster informed his parenting. Seems overly dismissive of the article.
Great work! I'm particularly excited about the ability to write trait bounds in associated type positions. This feels like a natural extension of the existing capabilities. Enhancements like this make the language even more enjoyable to use.
A better answer: natural language is the programming language everyone knows.
> Randomness, it seems, is just computation we cannot predict.

Well, there's also Bell's inequality which shows that some things can't be predetermined, by any possible local (not faster than light) process.
A better article complaining about the iPad design: https://news.ycombinator.com/item?id=40349347
Android system deals with so many more different architectures of hardware though
> “If you’re faced with the tradeoff between security and another priority, your answer is clear: Do security,”

corporate morality is a Potemkin village. It's all about the profit and appeasing the shareholder, baby!

is anybody honestly surprised at this point? The abbreviation of "M$" is well deserved despite small OSS contributions and attempts to PR their way out of previous history (ie, United States v. Microsoft Corp. [2001])
Yes, like Hulu (not sure if they still do).

I think doing this would be a positive thing for some consumers. It’s a good blank space to reflect on whether our time spent watching the video is actually worth it.

I’ve done my best to move away from real-time YT viewing and instead download set channels into Plex for on-demand viewing. This somewhat helps binging, as it is not infinite and does not suggest the next video via algorithm. This method wouldn’t affect my viewing to any meaningful degree.
Sometimes it sounds great but there are moments I think I'm listening to a harp and not somebody's voice.
I had someone like this for my advisor. Everybody knew they did terrible science and most of it was made up but they just kept getting away with it for reasons I'll never understand.

Far from being looked down on they were promoted over and over again and praised for their high output regardless of how pointless and meaningless the actual papers were.
Apple already has the API for it, they use it all the time themselves. They just lock out a lot of the features for third party developers.
Tesla autopilot is not supposed to be unmonitored, so any accidents under its control are entirely the fault of the driver. If a driver disengaged 0.1s before impact, they were derelict in their driving.
$273M Series A for Championing Graphene in Chip Connectivity
This funding of Black Semiconductor caught my attention because of Aachen (one of my favorite cities) and because it's a major recent development not directly focused on Generative AI.

Black Semiconductor is focusing on leveraging graphene for chip-to-chip connectivity, moving away from traditional electronic connections towards photon-based interconnects.

There was a similar news around graphene but for graphene-based chips by folks at Georgia Tech. https://spectrum.ieee.org/graphene-semiconductor#:~:text=Res....

Black Semiconductor, however, is pushing towards commercial scalability and integration into existing semiconductor manufacturing processes. I can imagine its impact on complex data processing tasks like streaming where latency will be reduced through innovations on a foundational hardware level.
Why support a country when it’s invaded by its neighbor for no reason? To prevent that from being a more common occurrence.