skysight-inc/HackerNews huggingface dataset:
Booking.com ignores twofactor, lets everyone email-login without a password
Okay so this is crazy.

I like thousands of others have been receiving daily booking.com confirmation e-mails lately.

This is probably because of a leak they've hid instead of going public with, but that's not the worst part.

I looked up the issue and apparently thousands are getting these e-mails.

But hey, you still need to go through a link from your e-mail to set your new password right?

No!

Apparently their login mechanism lets everyone login as you as long as you click a huge "I verify this is me" button even if they are on the other side of earth, so one fumble with your phone and you grant some random person access to your account, and if these people send you 10 requests a day, yeah you get the point.

But i gets worse.

You can't even login with a password anymore, every time you press login you get the same login e-mail scammers are sending with no ability to discern who sent what.

But wait it gets much worse.

At first i almost deleted my account, but thought hey i'll just setup twofactor and assess the situation.

After enabling twofactor, and seeing a big green "Twofactor verified" badge i tried logging out again then clicked on "sign in" - i wrote my e-mail and to my horror the page displayed "We've sent you an email to let you login", i went to gmail - surely this e-mail would take me to a site that required twofactor authentication?

No twofactor! Not even a password or a querystring. Just the same e-mail scammers are sending 5 times a day and access to all of my information with absolutely no trace of any twofactor.

I urge everyone to either delete their booking.com accounts, e-mail them about this issue or contact some appropriate authority.
Good article. If you want to delve in more have a look at the answers to this Physics SE question: https://physics.stackexchange.com/questions/46237/is-the-wav....

One unfortunate effect of the presenting it as "wave-particle duality" to the laymen audience is that it's as if physicists don't have a good understanding of what's going on and are puzzled by the behavior, whereas QFT is well-established.
> First, LLMs are not AGI.

It's the most generic thing we have right now, right?

> Never will be.

If there is no other breakthrough anytime soon we can engineer AGI-like things around LLMs. I mean LLM trained to use different attachments. Which can be other models and algorithms. Examples will be image recognition models and databases for algorithms. Even now ChatGPT can use Bing search and Python interpreter. First steps done, others will follow. The result will be not a true AGI, but still a very capable system. And there is another factor. Next models can be trained on high quality data generated by current models. Instead of internet random garbage. This should improve their spacial and logical abilities.
Nvidia Passes Microsoft to Become Largest U.S. Company
Try to implement as few of it in the application and offload the rest to keycloak
Sure, and those are not “the same kind of people” with the same motives nor rationale nor basis in knowledge as the people advocating for constraints around social media in the present day.

There are religious bookbanners today and they have very little overlap with the anti-social media crowd.
Translate Datadog Metrics into OTLP
Also, another common usage of transfers/second is with RAM. DDR5 6000MHz RAM is actually 6000MT/s, and the clock actually runs at 3000Hz ("DDR" == "double data rate").
https://montelnews.com/news/e15ef79e-2905-41ca-9124-165d7469...

https://montelnews.com/news/1525872/france-to-miss-2030-inte...

https://www.reuters.com/article/idUSL5N0KW3WE/
Smoothness vs perfect roundness are two different things. The earth is very smooth, even if it's not perfectly round.
Geez yes I meant keep out water but I'm on mobile and not very careful! Yes, if we're talking about Hong Kong or somewhere with extremely high urbanization maybe the calculus is different, but that's a political issue more than a technical one. Every city on earth has land not utilized for living or heavy ag within a very reasonable distance.
Oh wow; last time I was using it there was still a desktop client and web version required Silverlight client in order to work
Heh

I didn't realize people don't have an instinct about fire. I always thought kids touching hot stoves/fire was because their hands touched it before their brains registered 'hot! ouch!'
Why would you think the replication crisis is an artifact of cynicism? Are you perhaps in the denial stage? :-)
Isn't RMS the closest thing we have to an RMS-type figure?
An Evolutionary Perspective on Food and Human Taste
I've been using runs-on on production for last one month and it simply blows github hosted runners out of the water compared to performance and cost savings.
Great job by the Runs on team.
Yes, I simplified.

But that still wouldn’t explain why the webpage isn’t available in New Zealand.
Might "explanations" have a (perhaps private, or semi-private) epistemic value attribute? That could certainly change the game up.
Several submissions for this so far:

https://hn.algolia.com/?dateRange=last24h&page=0&prefix=true...
I've never been sure what to make of that paper. It was published by Microsoft shortly after Microsoft's big deal with OpenAI and reads a lot like a marketing piece to me. Many of the observations didn't reproduce the same way once ChatGPT4 in public hands too. If nothing else, I'd prefer it come from a party who hadn't just signed a $13 billion dollar deal with OpenAI a few weeks prior with a view to using their products to sell more new products/features... It's somewhat self-serving for Microsoft to argue ChatGPT4 is super-awesome/sparks of AGI etc, regardless of validity of claims.
Those are not baseline power thusly can be very very sporadic (night-time, calm weather).

National security mandates a functional level of baseline power capacity and current green energy diminishes that national security.

So it behoves the power utilities to deploy even more green-energy battery-based storages ... just to shore up the national security.
Lemme guess you're a manager.
I've Stopped Using Box Plots. Should You?
I think it's system prompt dependent. I asked LLaMa-2-70B iQ2s which was set up with a system prompt telling it to be logical and detail oriented.

First try:

I think there is a logical inconsistency in the text. If Joe drove Sue to university, then she was dropped off at the university, which means she would not be available to drink tea with him at his home afterwards. The sequence of events seems to be out of order.

Second try:

I notice that there's a small issue with the sequence of events. It seems unlikely that Joe drove home again after dropping Sue off at university, only to then drink tea with her in the kitchen. If Joe drove Sue to university, it implies she got out of the car at the university, not that he drove back home with her.

A more logical sequence of events would be:

Joe drove Sue to university. Afterwards, he drove home and drank a cup of tea by himself in the kitchen.

Or, if you want to keep the scenario where Joe drinks tea with Sue:

Joe drove Sue to university. They went back home together, and then they drank a cup of tea together in the kitchen.
I've used it. It's been blowing my mind.
We use Copilot. I review that daily. Everything else is joint where it can be. I check in on any spending that's more than a certain amount but that's only to make sure it's not CC theft etc. We're on the same page for most spending so we don't talk about it explicitly except in terms of stuff over $10k.
Why am I being flagged for comments that should not be flagged at all?
moxie and Telegram's discussion about Telegram's unorthodox security choices: https://news.ycombinator.com/item?id=6915741
The original story doesn't pass the smell test, but it's fun and hard to disprove.

Sled Driver is a great book for anyone looking for something to read. Physical copies sell for the hundreds of dollars, but there is a PDF floating on the high seas.
It sounded to me like you were the one suggesting we let users "medicate themselves" regarding their data.
It's been a while, but I quit the aerospace industry in 1992 for a lower paying Unix (SunOS) job. Aerospace was hidebound, people refused to do anything new. Not because the new methods were risky, but rather because in 1965 they'd sworn to the Air Force they'd done the best job possible. Anything new put lie to that.

The security requirements were also anxiety inducing to me.

I've missed some me things, but mostly it's been nothing but up since then.
A huge percentage of America. In most more rural regions, this is the only kind of coffee shop you will find.
Another good example is the memory in your computer. DDR is much lower latency, and GDDR is much higher bandwidth.
> Okay, but '[[1,2,3] [4,5,6]] .+ 4` does work! Looks like Julia distinguishes between a two-dimensional array and an array of arrays

Ah, yes, Julia distinguishes between multidimensional arrays, and arrays of arrays.

The thing you wrote is actually syntax sugar for “horizontal concatenation” (hcat), I.e. when one writes `[A B]` that makes a flat matrix. So what you wrote is actually just (mildly confusing) syntax sugar for the matrix

[1 4
2 5
3 6]

which is an array of scalars in julia, not an array of arrays. If you had written `[[1,2,3], [4,5,6]] .+ 4` you’d have an array of arrays, and hence an error.

Given that Furthark chose to have multidimensional arrays being semantically arrays-of-arrays, I see why it’s important for you to automatically descend recursively through multiple levels.

I still think it’s maybe a bit of a footgun that users cant choose at the call-site if their function is broadcasted or not though (that’s the really nice thing about julia’s dot-broadcasting for me anyways).
Was it private equity?

(Yes, it was private equity)
given the explosion in popularity of vaping and nicotine pouches (like Zyn) since this article was written, I think we now know this is false. Tons of people have become addicted to pure nicotine without ever touching tobacco.
It’s a pretty fuzzy barrier anyway. Like the original Skylake i9 desktop chips were basically just Xeons, right? It isn’t like there’s anything magic in a Xeon, it’s just a bunch of cores, why not pop one in a laptop… just don’t hurt your back carrying the power brick.
but does this have to work in an enclosed area without any other illumination, i.e. in a cave?
Scientists develop a new computer language to model organismal traits
You (Yes, You) Are Trapped in an Audience (2021)
If NATO ever has any intention of deterrence through detonating a nuke, it will be done in exactly the way it's been specifically planned and openly explained: France has a specific nuclear policy, one of the only ones, that allows them to use nukes before an adversary does. They have a specific nuclear missile fired by plane that will be used as essentially a giant warning shot.

Nobody would fire a warning shot using an ICBM, because if things are hot enough to require a warning shot, that leaves a whole lot of interpretation up to your adversary who is quite likely to respond with their own ICBMs, before finding out yours were loaded with conventional munitions to make a point.

There are however, shorter range ballistic missiles, Russia has a lot of them (the US mostly gave up mid range ballistic missiles in a nuclear treaty) and has even launched a few with concrete "nuclear warhead simulation masses" at Ukraine.
> It started by accident, with the original llama weights being leaked by two separate employees.

This is not true. Meta Fair has been built on openness from day 1. We published many papers and open-source d many repositories to reproduce the work
The value of the parameter was chosen by I picked it.
Does it really make it that much more difficult?

If these were laypeople that would then give up, sure.

But I'm surprised that it's even worth malware authors' time to put in these checks. I can't imagine there's even a single case of where it stopped malware researchers in the end. What, so it takes the researchers a few hours or a couple of days longer? Why would malware authors even bother?

(What I can understand is malware that will spread through as many types of systems as possible, but only "activate" the bad behavior on a specific type of system. But that's totally different -- a whitelist related to its intended purpose, not a blacklist to avoid security researchers.)
Show HN: Surfkit, the Kubernetes of AI Agents
Hey HN!

Here's Surfkit, a decomposed toolkit for building and sharing AI agents.

Born out of frustration from our inability to use agents to automate many basic tasks that lack an API. We decided to lean into multimodality and automate the keyboard and mouse on an Ubuntu VM.

In our journey, we realized we needed a lot of tooling to build these agents rapidly, which lead us to creating a sort of "Kubernetes of Agents" which allows builders to easily run agents locally or in the cloud, and share them with the community.

Hope you all like it!
In the context of recent events and controversies, it seems difficult to ascribe good will to the posting of this.

Not that this derogatory usage would have looked good a few years ago. The roots of the word seem to be here -

https://en.wiktionary.org/wiki/philistine

https://en.wikipedia.org/wiki/Philistines

- so, basically a "Greek immigrant group from the Aegean that settled in Canaan circa 1175 BC [...] they gradually assimilated elements of the indigenous Levantine Semitic societies while preserving their own unique culture. In 604 BC, the Philistine polity, after having already been subjugated for centuries by the Neo-Assyrian Empire (911–605 BC), was finally destroyed by King Nebuchadnezzar II."

Using the name of an ethnic group as a derogatory slur, after they've been wiped out by the (arguably) most powerful empire of their historical age, strikes me as a fairly despicable behavior.
This is quite a common policy in safety critical industries. I consulted at a large oil company a few years ago and they had a similar attitude in their head offices.
- [Superconducting nanowire] "Photon Detectors Rewrite the Rules of Quantum Computing" https://news.ycombinator.com/item?id=39537329 ; functionalized carbon nanotubes work as single photon sources

- From "High-sensitivity terahertz detection by 2D plasmons in transistors" https://news.ycombinator.com/item?id=38800406 .. "Electrons turn piece of wire into laser-like light source" (2023) https://news.ycombinator.com/item?id=33490730 :

> "Coherent Surface Plasmon Polariton Amplification via Free Electron Pumping" (2023) https://doi.org/10.21203/rs.3.rs-1572967/v1 ; Surface plasmons and photolithography and imaging electrons within dielectrics, emitter but probably not yet with graphene or other carbon?
Is there a decent tutorial or book on getting over the hill? I can do some basic stuff in it but it's just not catching like other languages do.
Cool! I will try this out as a layer in my live ambient set later today.
That's the thing - apple stocks raised due to AI features but it is basically a speculation - if it does not move sales of iPhones, the stock will go down.

I think MSFT is the best positioned long term - especially when they start producing their own chips - as they have the right moat to vendor lock in. Add to that the fact that AWS missed the AI boat completely and their could gain market share from AWS too.
Who are these “thousands” of other people you are referring to? Is this a Reddit/Twitter/Lemmy thread?
I don't, because it doesn't. If the bulk of the community distrusted us, that would be by far the dominant issue on HN. That's how internet dynamics work.

The reason I post such long explanations when a case like this comes up is not because I think it will satisfy the disgruntled, chronically distrustful fraction of users (though that would be nice!) but because I know that explaining everything that happened, and why, is enough to reassure the bulk of the community.

(I wrote a bit more about this here if anyone cares: https://news.ycombinator.com/item?id=40720410)
Does this work without “Clever Hans” prompting it with the implication that there is something to notice?
Or Opensuse Tumbleweed. Kinda like Arch but without the blood
A LLM cannot meaningfully “explain its thinking”. When prompted to do so, it will generate an explanation-looking text — but that has nothing to do with the actual way the original answer was generated.

If you ask it to explain how a LLM could possibly catch an inconsistency, then it might give you some good insights (or hallucinate something entertaining).
Cool, but it really does just sound like a bunch of random noises. I think it'd be more interesting if the balls were regular polygons instead of actual circles, since the reflections would be more predictable.
I also am in Utah. I swear there is something going on in this state. I have been on unemployment for 3 months. I've put out like 400 applications and had 1 interview that hasn't called back. I've had the idea to start building some really simple saas shit for small companies, but I haven't put fingers to keyboard yet anyway...
I was directly replying to the parent's question of whether there were any uses of SGX that were not anti-consumer. Signal's use of it, is very much in line with my thinking of what constitutes pro-consumer.

I agree though, we're all getting slightly off topic
1998 Honda Civic. Somewhere over 350k miles, the odometer is broken.

I bought it for $1200 in 2011 and just never stopped daily driving it. Granted, I love doing the maintenance myself, and I easily have a few thousand dollars in tools for it lying around. Gets about 35mpg too.

I know my situation doesn't fit yours at all re: safety features and comfort. But I'm an advocate for any car that's paid off.
Massachusetts officials dealing with statewide 911 system outage
Ask HN: How do u host your SaaS technically, and what % of revenue doesit take?
Hello all,
I am doing research on how you host your SaaS, including what hosting and third-party services you use.
How much percentage of your revenue does it take? No need to publish your revenue, just a high-level percentage of your earnings.
I am very confused about what to use for hosting a web app. I know it all depends on various factors, but I would love to hear tips and tricks and also receive resources I can read and learn from.
Thanks!
Having the same problem. It's really annoying, and they don't seem interested in solving it.
Just to add another sample from another LLM, here is the response from Llama-3-Instruct-8B. I had to specifically ask it identify any possible inconsistency, otherwise it just thought it was a lovely short story.

> The inconsistency is that Joe drives Sue to university, which suggests it's morning or early afternoon. But then he drives "home again", implying that he was already at his own home before taking Sue to university. This seems unlikely and creates a paradox! What do you think is going on here?
Looks good, good luck!
Tracking is one of the features I use all the time on WeTransfer. When do you think you'll add that?
Is "procedural units" a commonly used term? I couldn't find any info in a quick search. I'd love to hear more about the concept
Yes indeed. A person who does not care about others at all, is called a sociopath.

But what to do, if the society itself is sick?

Well, either find a balance of blocking out the bad parts and accepting only the good, or find a better society ...

(To become a immigrant somewhere else)
The vast majority of Starlink satellites experience fairly significant atmospheric drag with their current surface area to volume ratio. Blow them up and you get more drag so they deorbit much faster.

Blocking access to space that’s about specific orbits not something like an ICBM or deep space probe which only needs a tiny window to be useful. Imagine the risk of collision is 10% per day, that’s going to quickly kill any satellite, but if you only need 10 minute window you’re down to 0.07%.

Communication would be basically impossible to block. 1g of matter per square mile isn’t going to achieve much of anything, but multiplying even that trivial amount by 200 million square miles of surface area = 200,000 tons or about 500 ISS’s.
If you make it a task prompt instead of a lateral thinking task you get a different “world model” or in my view you are just biasing the output to use a different structure.

```

Can you summarize joe’s schedule for my journal?

Joe drove Sue to university. Afterwards he drove home again
and drank a tea with her in the kitchen.

Sure! Here is a summary of Joe's schedule for your journal:

---

\*Joe's Schedule:\*

- Drove Sue to university
- Returned home
- Drank tea with Sue in the kitchen

——-

```
This is interesting. It seems like sidestepping a problem which needs to be attacked head-on: the amount of solar we need to build is more than what can be built in invisible areas isn't it? Perhaps this helps to get things going for now but can we actually build enough in areas with no visibility from residential?
related: https://news.ycombinator.com/item?id=40597278
This, extremely counter-intuitively, doesn't actually change anything at all in terms of population change. All it does is cause some brief noise as you hit the 'equilibrium point.' It's easiest to explain this with an example. Let's take it to a ridiculous extreme and say people live to 200 years old, yet otherwise maintain the same general fertility trends of having about 20 years of peak fertility. And to keep things simple, we'll assume a fertility rate of 1, which means the total population would halve every generation. We'll also assume everybody has all their children at age 20, and then dies at age 200.

So start at the bottom. And say we have exactly 2 twenty year olds. Since there are 2 twenty year olds there must be 4 forty year olds, 8 sixty year olds, and so on. This generalizes to there being a total of (2^n) people of age (20*n). So there are 512 people of age 180. The entire population is 512 + 256 + 128 + ... 1 = 1023. So what happens when this 180 year old generation dies? Your population declines by half. What happens twenty years later when the 256 population group dies? Your population decreases by half. So each generation, you start seeing an exponential halving of your population.

So how long people live doesn't actually matter. All it does is add some noise/delay as you shift from an equilibrium between fertility rates. And once that equilibrium is reached, your population will shift by a factor of fertility_rate/2 every breeding generation (~20) years. This holds true whether people live for 40 years, or 40,000. So with a fertility rate of e.g. 1 your population will exponentially decline by 50% every 20 years, until you go extinct or start having babies.
Talking about sentence structure in the conventional sense may not be meaningful here, since what could be described as reasoning in LLM's happens in a more abstract space. If we're looking to understand why a small change makes a big difference, it's pretty intuitive to consider that the second instance of "her" is modified by "mother" due to attention, and ends up being a wildly different vector.

Regardless, it's reasonable to assume that certain aspects of the prompt or input structure will prime the model to be more scrutinizing. I'd be surprised to see it point out a logical inconsistency like this if it was just part of a broader context and it wasn't asked "what it thinks" or to "be logical"