skysight-inc/HackerNews huggingface dataset:
The basic idea of rare Earth as an answer to Fermi is that if the frequency of advanced life is around 1 per galaxy per billion years or something like that then we'd likely never meet any aliens.

Intergalactic travel is borderline impossible barring unknown physics or travel very close to the speed of light. Even at speeds like 0.5c (50% the speed of light) the trip would take so long you'd have problems like cosmic rays tearing you apart over such long spans of time, and in the vastness of intergalactic space there's no place to pitch a tent and chill and repair things. 0.5c would get you to the stars but not the galaxies.

Intergalactic flight would require something more like 0.95c to 0.99c. The energy requirements for that are insane and possibly unachievable, and if you hit a dust particle at that speed the yield will be like a thermonuclear bomb. The cosmic microwave background also becomes a beam of hard gamma rays aimed at your head. All kinds of crazy extreme physics things happen.

Lastly, why do it? Galaxies are huge and if you're alone then it's all yours. The only conceivable reason would be to flee some galactic-scale super-catastrophe like your galaxy's central black hole behaving badly and frying everything with gamma rays. Even for that it might be easier to burrow deeply into planetary bodies instead.

Of course one can imagine ultra-far-future scenarios like: what if Andromeda hosts some galactic-scale super civilization by the time it hits the Milky Way which by then also hosts such a thing. That'd be a hoot.
It's also problematic from a secrets management perspective, because a big part of the perceived value of encryption is being able to check secrets into git. But because the encryption is tied to long-term keys, you have to design your security processes with the assumption that those keys will eventually be exposed and need to be "revoked" (ie: the secrets re-encrypted), and the "de-revocation" of those keys is hiding in your git history.
If they can snoop on env vars of a running pod, it can snoop on the process. A k8s secret could be a file in the pod or a env var in the process, but neither are a persistent file distributed to developers
It does not need to be able to rely on having the behavior that causes the bug to be visible. We just need tools that make the bug visible, e.g. the undefined behavior sanitizers. Those tools work extremely well for signed overflow, but not for unsigned, exactly because unsigned wraparound is defined and for this reason many programs use it. So you can not distinguish between intended wraparound and incorrect wraparound.

For this reason, signed overflow is essentially a solved problem, while unsigned wraparound will be the source for many interesting bugs - exactly because it is not UB!
Hi rl1987, how do I get involved in this space?
I just found out about the opposite effect, Grimmification: https://tvtropes.org/pmwiki/pmwiki.php/Main/Grimmification

Apparently many of the fairy tales weren’t originally just for kids, so it made sense that some would have more mature themes. It was adult entertainment.

I think we might worry that broad-appeal media might be too sanitized, even by huge corporations. But that’s always been the case. Niche media is always there to fill in the void. And we’re living in a golden age of media to satisfy every conceivable long-tail interest.
1) Waymo has not "solved" robotaxis as a business. They are not profitable and the vehicles are not truly autonomous (the humans monitoring the vehicles are merely remote. We don't know how many humans are needed per vehicle.)

2) Tesla has zero even remotely monitored, let alone autonomous, miles driven. So no, there is no reason to believe Tesla is close to true robotaxis.
Benchmarking AI Assistants
The Fermi paradox isn't a paradox, it's a strong constraint that models of ET life have to conform to. In particular, models with billions of ET civilizations in the galaxy appear to require strong (and I suggest implausible) assumptions about the unlikelihood of interstellar colonization.

It's also an antidote to baseless presumptions that ETs (or even life of any kind) must be common outside our solar system.
In that argument, Pinker is playing the role of court academic.
Xylitol is not an artificial sweetener, it's a sugar alcohol. Sugar alcohols are generally derived by processing natural ingredients. Xylitol is made by extracting the sugar alcohol from beech wood. Sugar alcohols can cause bloating and diarrhea due to osmotic effects [1] and can have laxative properties for some. I'm a bit sensitive to sugar alcohols myself.

Look I don't think this kind of comment adds any value to this discussion. There's a linked paper here and it's useful to discuss it. But humans all eat food, and if we start chiming into every nutrition article with random anecdotes about what we eat, then the purpose of keeping HN a high quality site goes away. The science is hard enough to get straight, adding random anecdotes lowers whatever signal we have.

[1]: https://www.ynhh.org/services/nutrition/sugar-alcohol.aspx
Ah! I didn’t realize that. My new hot take is that sounds like a terrible idea and is effectively giving full control of the user’s browser to the polyfill site.
In my experience, HM Sayls are easy to find secondhand. However, you'll probably need to dismantle the chair to add grease to the mechanisms.
But...they are a company, their goal isn't to make breakthroughs. Their goal is (eventually?) to make a profit. They'll simply use the technology and breakthroughs that allow them to get there faster. That's not cheating.. that's business
High capacity is a descriptor of a gun in terms of what magazines it can accept. Prior to the 1980s, pistols were generally single stack low capacity like the 1911, 7 rounds or so, now they’re double stack and around 20 is common. This is extremely relevant to all kinds of gun violence because the vast majority of shots in real gunfights are misses. Revolvers were also much more popular than pistols prior to the late eighties or so when the Glock and competitors came out.

The AW ban that limited these to 10 rounds expired in 2004 and people have bought a lot of these guns in the last 20 years.
It is UB in ISO C23 (6.5.4.2/4). I'm pretty sure there's equivalent verbiage in ISO C++.
Hi charles,

rq was shared with me yesterday and just wanted to say it's very impressive, I had heard of OPA/Gatekeeper and have looked into Rego before for policy assertions w/ terraform but I was not aware the language was so expressive until I saw rq. Also the amount of codecs rq supports and quality of them is really great.

It is really neat seeing a lot tools solve a similar problem in such unique ways (especially the case with rq) and has been a lot of fun reading your experiences here. Thanks for sharing your experiences and expertise with the de-serializing/serializing content - It is really cathartic to hear you mention the challenges you solved with xml and csv. I really like how you solved for CSV output/input and the conditions on the input data you chose for evaluating it makes a lot of sense and is really comprehensive, it bothered me too since the content would either need to be a matrix or a slice of maps but seeing as jq has string formatting that can convert things to csv and @tsv - I was at a bit of a standstill of how to approach.

Thanks so much for the bread crumbs I look forward to reading this in more detail over the week/weekend :)
> This kind of assumes liquidity... A lot of wealth is tied up in stocks and physical assets. Imagine having to orchestrate selling 2% of everything you own every year.

So, you'd need some liquid assets, or to time any lockup to make them available when needed. So maybe you make a slightly less than optimal return on 2% of your wealth > $1B. A tragedy.

> And why over a billion, why not put it at over a million, or ten?

Every limit is arguably arbitrary. The tax codes and laws in general are full of limits that had to be set at some point - misdemeanor vs felony theft, etc.

> You could seize the full assets of every US Billionaire and it wouldn't cover a single year of the federal budget or dent the debt

So if it's less than some arbitrary limit you've just set, there's no point in doing it at all?

> There's no way to tax out of this hole... spending cuts need to happen, and restructuring as well.

Nah https://www.nytimes.com/2023/05/19/opinion/government-debt-p... (https://archive.is/uqYiY)

> Taxes should focus on points of exchange.

Yes, increase taxes on the poor for basic necessities rather than taxing people with far more money than they productively use because... ???
In all cases where you can use SRI, there's a better mitigation: Just host a copy of the file yourself.
> So here once again you're saying there are not statistically better outcomes, but do you have a source?

he asserted the null hypothesis. as a random nobody on the sidelines, I expect you to provide the evidence here.
That is not in fact well-established at all, though as someone who came up through vuln research I expect we have similar takes on the public policy of vuln and exploit disclosure.
With the way groceries are usually packed (with smashables like bread and milk on top), that sounds like a good way to accidentally make French toast.
I'm pretty close to writing a small Playwright script that will do exactly this
Waymo is posiionting itself as a premium product. Defending that brand precludes letting the cars go to shit.
Show HN: Phase – Open-Source Secrets and Environment Variables Manager
1:1 remote human monitoring would not scale from a unit economics perspective, and even if they did that, the remote operators can't drive the car, only offer small feedbacks. So the car is really driving itself.

The safety story is an interesting one. Companies like Cruise and Waymo are not forthcoming with their incident data. They share infrequently and through spreadsheets that do not capture every incident. It's pretty ass, and I'd be wary of trusting their self-reported data. I imagine their insurance companies have slightly better data than the gov't, but even then maybe not.
I am generally open to this idea, but this particular way of defining what bundles are allowed or not seems incredibly weak. Take Adobe's Creative Cloud. There is almost no one in the world who uses all of the tools in it. There are dozens of alternatives made by other companies that only cover a single component software. Adobe is the market leader with virtually all of the component pieces of software. Why is the US not targeting Adobe with antitrust for bundling together tools for typesetters, marketers, video editors, animators, etc, etc?
> and it just worked

Just to add... that is unlike the CDN thing, that will send developers into Stack Overflow looking how to set-up CORS.
It would show up / compete with their current media efforts, it could potentially still owe residuals of some kind, and deleting it means they can take a tax credit for “lost” revenue.
oh neat, so t, f, y, n, on, of, 1, 0
Its not like what wiki leaks did is new. The pentagon papers were published 50 years ago. The us government should be held to high standards and we need a press to do that. At some level however in a world of competing states if an organization is only interested in undermining one state it makes it less trust worthy in my eyes. I think Assange views the US as an evil actor and that informs what he thinks is worthy of coverage. Its why he could call Afghans who worked with the US as collaborators as in his eyes working with the US makes you evil. I think that world view is insane and naive.

However as I said there is real utility to publishing information which shouldn't be kept from the public. Which is why I think Assange is a hard case.
> 2x3 metre cell, isolated 23 hours a day

Why, though? I didn't even think that was a thing in Britain, at least if you're not some very high risk criminal convicted of violent crimes, which I don't think he is? Regardless of what one think about what Assange did that just seems extremely unnecessarily cruel unless he was a threat to guards or other prisoners...
> In 2023, Trump Media brought in just $4.1 million in revenue. That means Wall Street is assigning an astronomical price-to-sales ratio of more than 1,400 based on trailing revenue.

> By comparison, Wall Street values social media leader Meta Platforms, the owner of Facebook and Instagram, at just nine times trailing revenue.

Many in the MAGA crowd are not buying DJT as an investment, but rather as a show of support, per their comments on Twitter
as a Alphabet and Tesla shareholder, this is what is important.

The rate of innovation at Tesla > Waymo

The cost of building Tesla FSD = 1/100 * cost of building Waymo FSD

The cost of delivering Tesla FSD = 1/10 * cost of delivering Waymo FSD

Tesla has economies of scale. Waymo has all the details figured out. Waymo can never get to the scale of Tesla (it can never buy 5 Million FSD cars, while Tesla is delivering them every 2 years)

Mathematically, Tesla has an upper hand over Waymo and it'll play out as that.

Larry, Sergei are extremely poor capital allocators. Musk is brilliant (despite him being a narcisstic a*hole).

Larry/Sergei left Waymo at a limbo state because they don't think in terms of economics, just coolness.

Waymo is successful enough to not kill it, but also not a cash-flow positive to scale it up

Edit : Tch, Tch expected HN anti-Musk hate showing up in downvotes.
I’ve moved to a place with it and if they’re remote workers, I could see it. It’s really bad for remote work, in the sense that it simply discourages effective chat communication patterns for teams (yes, Teams is bad for teams). I could absolutely see that getting bad enough that someone would leave, largely because the tools the company selected were wrecking communication and making everything miserable.
I hear your concern.

To be fair, I didn't say anything about storm energy, I made a comment about energetic weather. In the sense that the weather is "more". Hotter hots, colder colds and so on. So more energetic in the "less placid" sense.

And sure, lots of US folks are happy to deny climate change because it suits them. The majority of climate deniers are not doing it because they disbelieve the science, they deny it because their life-style would need to change if they accepted it was real.

In other words they rationalise backwards - start with the outcome they desire (I'm not to blame, I don't need to change) and then find a path to that outcome.

Or to put it another way, you cannot rationally argue a person out of a place they didn't rationally get into.

Which goes back to my original point. I don't think most (rich nations) people want to change, and so we're well past the point of no return. The earth will be a different place for my children and grandchildren. The time for convincing people that this is a problem has come and gone.
You keep the key wherever you want to keep the key, just don't commit it and don't distribute it. Put it in on a YubiKey for your devs, upload it out-of-band securely to prod.

Whether it's a symmetric key or an asymmetric key, you have the same problem. Someone overriding your secrets is definitely not high on the list of concerns, and if they're committed to git then they can never be truly overwritten.
OT ... I worked with Simson briefly ages ago. Smart dude. This book happened later and I've never seen it before. Small world I guess.
Indeed. Though it is still inspiring that there are people like Assange who are willing to face personal hardship in the name of democratic values such as press freedom and government accountability / transparency.

None of the US leaders whose crimes were exposed by Assange have faced any consequences whatsoever, and many of them remain influential, lauded figures in American society.
They could even murder him.
> “Well, they're informants," Assange replied. "So, if they get killed, they've got it coming to them. They deserve it."

Did he say that? It's a secondary witness from someone who hate him. You need to double check sources.
We'd all be arrested in Germany then as we all have computers with compilers installed on them.
Alphabet is far ahead of Tesla in the category of "deploying a taxi network". No one can dispute that. They also use a different technology. What I don't know today is how fast can Waymo scale to more cities. I assume if Tesla cracks the "taxi network nut" they can scale faster and will catch up to Alphabet.
At the time, child sacrifice was apparently common, enough that if a country was in trouble, the populace would demand the king sacrifice his kid to save the country (even shown in scripture … see 2 kings 3:27 though later in time). This was a very _public_ display that this God does not want that.

In short, it wasn’t really a test of either one, it was a public declaration that child sacrifice is bad.
(I work at Etched.) You need something as complex as CUDA only to support general-purpose programmability; Sohu is built for one thing and one thing only: transformers. So while we certainly need a software stack to harness the chip, it’s much easier to do so, and even easier then to adapt existing LLM serving tools (vLLM, etc.) to use this stack.
yeah that's nuts, I would never use a random site for that, but in general people's opinion on CDN use is dated. Tons of people still think that cached resources are shared between domains for example.
It’s all about costs of production
A VFX team was used, but it took them probably 5% of the billable hours for this result.
Plus, added “marketing points” for making a press release with the AI buzzword
This article was fantastic, thank you.
Man, I have bounced around between music players and have more or less settled for Youtube Music. The desktop Chrome applet-player-thing is somewhat decent as well.

All of them have some sort of bonkers UX choice somewhere that you have to put up with and unless you go back to buying all of your music and taking it offline, you just pick your poison.
"Implementation-defined" means that there's something consistent that happens for a given implementation that can be documented for it. What consistent behavior would you expect to see from a typical implementation on use-after-free or writing past the end of an array? Can you give an example of how that would be documented?
Scientists Find First Evidence That Butterflies Crossed an Ocean
If you mean actual taxis in San Francisco, it's not a drop in the bucket. There are 1,800 taxis and compared to 300 Waymos, and the latter have a much higher duty cycle. It's true that the number of Uber/Lyft is a lot higher, something like 40k drivers (who work a widely varying number of hours per week).

Yes, the 100M miles scale is very important, because that's about how many miles humans drive until they cause a death.
The only selling point of FSD (Supervised) is that it (can) work "everywhere." This is because it only relies on navigation information and what the car can see.

Waymo and similar companies all use HD Mapping. Ignoring the specifics, it can be thought of as a centimeter-level perfect reconstruction of the environment, including additional metadata such as slopes, exact lane positions, road markings, barriers, traffic signs, and much more.

HD Mapping is great when it's accurate and available. But it requires a ton of data and constant updating, or the car will get "lost," and realistically will never be implemented in general, at best in certain cities.

Reliance on HD Mapping gets you to "robotaxis" quicker and easier, but it doesn't and likely cannot scale.

It remains to be seen if Tesla can generalize FSD enough to reach the same level as HD Mapping everywhere. Still, they have shown that the current limiting factor is not what the car sees or knows but what it does with that information. It is unclear how or why HD mapping would help them at that point.
We implemented the exact same method for config encryption a year ago or so, using pub/private key auth and the same `encrypted:` prefixes for encrypted config values.

This is a great tradeoff: easy way to share configuration, easy way to edit non-encrypted config values, reasonable security for the private values.

Doesn't solve key rotation of course, but for small teams this is a great solution.
> Except that they have remote humans monitoring every vehicle so the whole thing is an illusion

I think this argues the opposite of what you think it does.

Monitoring != driving and if you had humans pesudo driving, the experience would be insanely bad cuz the human would be interjecting way too much.
https://archive.ph/QOYIL
I live in the Amish country. AMA
The question is: do people doing manual work are on average happier that people writing software? At least, in country, the sure don't look like they are.
Except there were plenty of libertarians in bank crisis. There just weren't any in powerful position in governments. There is a reason actual libertarians don't end up in those positions.

A tiny amount of people who claim to have some libertarian conservative leanings maybe changed their minds, but overwhelmingly those were just politicians who talked libertarianism to get some gun fans to vote for them.
No Success Among Excess – The Banal of Discovery
> vehicles that can operate without any help doesn't exist. You'll be waiting for a long time if that's your expectation

Eh, I'd say we're a decade out from an L5 vehicle. It'll officially be L4, on road only. But that matches a good fraction of American drivers' capabilities.
Chat apps are hard, this doesn't strike me as a proof of bad quality as many competitors had such bugs.

And Telegram has been so far the most reliable, feature full and easy to use chat app I have had to use.
I've seen people reference CDNs for internal sites. I hate that because it is not only a security risk but it also means we depend on the CDN being reachable for the internal site to work.

It's especially annoying because the projects I've seen it on were using NPM anyway so they could have easily pulled the dependency in through there. Hell, even without NPM it's not hard to serve these JS libraries internally since they tend to get packed into one file (+ maybe a CSS file).
Happy to discuss a proposal to add asymmetric key support to the project in the GitHub issue tracker. Although I'm not sure how the security changes with an asymmetric key, as either way the worst case scenario is the same?

Note that you don't have to leave the key "lying around" as you can secure it the same way you would an asymmetric key. And it certainly beats leaving the plaintext secrets themselves lying around in a .env file or similar.

EDIT:

I see you were saying "dev machine" exposes "prod secrets" but that's not the case. The protocol is designed so you would have secrets.json and secrets.prod.json, encrypted with different keys and (necessarily) managed separately but with the same tools and api. Dev machines being compromised compromises dev keys, not prod keys.

Read the last section in the README on GitHub for more on the dev/prod split.
> Larry/Sergei left Waymo at a limbo state because they don't think in terms of economics, just coolness.

Larry/Sergei didn't create the Cybertruck
i wonder if it's a function of a consistent cleaning schedule. Many uber drivers seem to wait far to long between interior cleans.
International scheme to tax billionaires' wealth technically feasible
Tesla doesn't even have a single autonomous vehicle yet...

They have driving assist that people still measure in 'number of times I had to grab the wheel'.