skysight-inc/HackerNews huggingface dataset:
Twilio Notice of Security Incident with 3rd Party Carrier
I received this in email:

---

[Alert] Notice of Security Incident With 3rd Party Carrier

You are receiving this email because Twilio has been notified that IdentifyMobile, a downstream carrier of our backup carrier iBasis, inadvertently exposed certain SMS-related data publicly on the internet. We conducted a thorough investigation in partnership with iBasis, and based on our findings, we believe that none of your messages containing personal data were exposed. While we have taken every measure to verify this, we cannot completely rule out the possibility of personal data exposure. Some non-personal data, such as message bodies without login tokens or marketing campaigns that don’t contain personal data, may have been exposed.

Here's what you need to know:

• IdentifyMobile, a downstream carrier used by iBasis (one of Twilio’s backup carriers) to route messages to their final destinations, made an AWS S3 bucket public from May 10-15, 2024. The bucket contained message-related data sent between January 1, 2024, and May 15, 2024.

• Chaos Computing Club (CCC), a known security research group, accessed some data but confirmed they are not holding any data downloaded from the AWS S3 Bucket.

• No Twilio systems were compromised as part of this exposure.

Actions we've taken:

• Started an investigation and escalated the issue to iBasis.

• Stopped traffic to iBasis where possible; iBasis ceased routing with IdentifyMobile.

• Continuing to work with carriers to get more details.

What you can do:

We recommend reviewing the SMS traffic you sent between January 1, 2024, and May 15, 2024, discussing the implications of an exposure with your internal team(s) and deciding if you need to engage with impacted individuals. If you need additional information regarding this incident, we are here to support you throughout this situation.

We apologize for any inconvenience and appreciate your understanding.

Sincerely,

Team Twilio
This false equivalence is literally russian propaganda.
I have been quite anti-HIPPA since realizing how 'privacy' was the excuse to stunt science.

My conspiracy: With massive medical data, ML/AI would have been 'discovered'/built sooner. Limiting the data makes it so only a few people can be specialists under the supervision of medical cartels.
The main problem with it isnt with the fuel. It's not even the small chance of a $1 trillion-to-cleanup Fukushima style cleanup event. It's just horrendously expensive and takes forever to build.

Nonetheless it'll keep getting built where solar/wind/storage would be cheaper and quicker because they've got very slick PR and because the military industrial complex demands a ready supply of nuclear skills and a supply chain.
My point is that you might want to fight fire with eg water.

So you can fight back, but you don't need to necessarily copy your adversaries tactics.
I certainly want to use those features, but know how hard to change existing habits. Have you considered building plugins with your AI features for Jira?
Say goodbye to "junior" engineering roles [audio]
> You really don't have to think hard about why AI which only learns from what we feed it

Sadly I'd say that people are no different.

> it's trained on horrible cesspools of ....

So it's really not the future of AI we should be worrying about...
Source 2 Viewer
Hey, thanks for the question. Are you talking about standard evaluation tools like promptfoo? These evaluation frameworks are often just tools that helps you grade the response of your LLM application. They however do not help you to build an LLM application that makes it easy to test different configurations of your application and evaluate them. That is where we different -- we help you build an application that is made for easily testing different configurations of your application so you can evaluate them much faster.

So the process we see when companies are trying to adopt a evaluation framework is that when they want to try a new configuration, they completely change their code-base, create the code to run an evaluation, and review that result independently and try to compare with other changes they have made sometimes in the past. This usually leads to a very slow process for making new changes and becomes very unorganized.

With us, we help you build your LLM application where it's easy to swap components. From there, when you want to see how your application works with a certain configuration, we have a UI where you can pass in the configuration settings for your application, and run an evaluation. We also save all your previous evaluations so you can easily compare them with each other. As a result, it's very easy and fast to test different configurations of your application and evaluate them with us.
Odd choice to move the discussion from a submission of the official website to one about a blog by an (afaict) unrelated pundit.
This is my point exactly, but even passable art takes some time to create. I’m not excited for the very-soon-to-arrive tide of VNs, deckbuilders, and JRPGs made with effectively 0 time or effort.
Cool, but the reality is that if a Switch game looks good, its because the developers put in the effort to deal with the low performance GPU.

Any close-up of view a switch game looks a bit 'yikes'. I'm still a bit unforgiving of Gorons looking worse than in N64 era.
I get 2 of those per day now due to my LinkedIn profile.

One issue I see is that it’s much harder to employ an LLM defensively (for filtering) than offensively.

Welp.
Biologists often have a lens for the world that I deeply admire. This one was a very éloquent intetviewee. They were very humanizing as well as empathetic and analytical in their discussion of Treadwell. They were also pragmatic about what it all means in context for the bears and the world. What a person.
There is no need to do more than park the might of the NATO military along the borders and watch the Russian army die in Ukraine. The war in Ukraine is waged in Excel and it is an equation with the expected outcome of destroying their military, equipment and personnel. Dead men won't have children, so the more of them die there the weaker Russia will be in the decades to come.
This is due to confusion about the terminology "Shaken Baby Syndrome".
On the one hand, it's a violent gesture causing neurological damage in babies.
On the other hand, it's a medical hypothesis according to which, as you say, "every baby with head trauma/brain swelling/subdural hematomas must have been the result of frustrated parents/caregivers who shook the baby".

The existence of the gesture and its nefarious nature are not under question. The medical hypothesis is.

Norman Guthkelch, who first hypothesized a causal link between shaking and this particular set of medical findings, later recommended to move away from this term and to use "retino-dural hemorrhage of infancy" instead. This latter term refers to this set of findings without presuming we already know what caused it.

Of course, as you say too, we should absolutely continue "warning new parents about the dangers of taking their frustrations out on an incessantly screaming/crying kid".
Show HN: I made a Chrome Extension with SvelteJS to quickly verify IMEI numbers
Hello Hackers,

I built a Chrome Extension to streamline IMEI number verification for used phone buyers and refurbishers.

Key features:

- Quick access through a side panel
- Eliminates the need to switch between tabs
- Saves time during bulk verifications

As someone who's dealt with the hassle of checking multiple IMEIs, I created this to make the process smoother. It's especially useful for shoppers verifying used phones before purchase as well as professionals handling multiple devices daily.

Tech stack: I used the Plasmo extension framework together with Svelte and DaisyUI for the styling.

I'd love your feedback on usability and any feature suggestions!

Cheers, Guillaume.
We provide complete flexibility on how you call your LLM model. So if you have your on-prem LLM behind an API, you would just write the standard code to call your API from within our framework.
Nbdkit-torrent-plugin – serve a BitTorrent file or magnet link or boot over NBD
Gemma-2-27B-it llamafile
As someone who lives in a city with 1.5 million people... growing up I felt pretty underwhelmed by our downtown and you can indeed pass through it in a few blocks. The first time I went to Tokyo I felt like I was in a real city. But then again, it's one of the largest cities on earth, so of course it feels like a real city. Though cities like mine are far more common.
Leonhard Euler's Letters to a German Princess
Yes, we understand how the Russian society works. Or, rather, how it does not work.
I think you just gave my life purpose. It will be my magnum opus.

Actually that’s already been completed, and will be released to hackernews in the coming days
I would much prefer to run single threaded in the browser than be cajoled into installing another fucking app.
Note that C + Cx + ... would have also worked. So why the 1? Just simplicity?
Japan's mean time to build nuclear is under 5 years, I believe.
Optimizing Large-Scale OpenStreetMap Data with SQLite
" I find it interesting how we're ignorant of our own propaganda activities in other countries. For example, in the UK we have a dedicated army unit [1] that: "

No Western countries has attack and annexed a country within idk 60 years?
> Their router only works with their DECT telephone [...]

I've had no issues pairing a DECT phone from a different vendor with a FRITZ!Box, so that's not true.
Nice. Played a bit and liked it. TBF was a bit confused with what I had to come up with as a prompt. I believe having an example as a input field placeholder would help ;)
LinkedIn sent a cease and desist to an AI auto reply tool
You can't transport electricity that far, though.
The sad thing is, that AI email campaign - while touted as a success - was actually a failure.

Although he got more click-throughs to the top of his funnel, none of them are going to pass through to a conversion because once you reach his site, you realize that he's deceived you.

That he doesn't even realize this is concerning...
Barrier of entry to financial services? Wasn't for me!
Debian can pin packages to certain versions by their numbers (see dpkg(1), '--set-selections') and it does verify package integrity. I can't think of any way to pin a package to a hash like with Bazel or Nix, but the expectation is that packages are not changed after publication in dpkg repositories - and for Debian itself, that expectation is a strictly-followed rule.

Therefore I would trust package pinning to work, but it's not quite as straightforward for the end-user as unique package hashes as identifiers.
https://www.wisp.blog/blog/how-i-use-ai-agents-to-send-1000-...

>"I knew that if recipients detected even a whiff of a generic, mass-produced message, they'd tune out immediately."

Then don't brag about it on your blog! Sheez.

(Ok, so technically he's not bragging about it on his blog, because it's probably just an LLM bragging about it on his blog for him, but that's the point!)
Ask HN: What's the modern equivalent of netbooks?
Hello there!

I would like to get some cheap and extremely-portable notebook, like those 10" netbooks in late 2000s.

What's the current equivalent of such kind of devices ?

Of course I'd like to run GNU/Linux on it.
Don't hold your breath for that, steps have been taken that should prevent it in future. puttin' ain't the smartest currently, but he still has some chops form his KGB career and is paranoid beyond wildest imagination.

Anybody who posed any sort of real threat has been murdered either by throwing out of some high windows or just whole family with kids slaughtered for show.

People in the west don't grok how downtrodden russian population is, for centuries, cca continuously. Thats why democracy didn't work there, people let wolves do whatever they wanted since nobody understood that you actually have to stand up to them, so we are where we are. Military comes from the same population, just worse characters.

There ain't no easy solution that we would like. They are not rational now and I don't think they will be till puttin' dies, and who knows what other clown will take the helm. They don't keep sharpest most rational folks at top levels, and next guy won't be somebody from lower ranks.
It’s the $250 sponsor tier. You can add your own for that price.

People need to get paid somehow.
Got rejected with 13 level of experience in C++. What is the reason if you are still hiring?
These are the only two graphs you need to understand that your assumption is based on >10y old data:

https://www.powerengineeringint.com/wp-content/uploads/2023/...
https://upload.wikimedia.org/wikipedia/commons/7/7c/3-Learni...

By the decade is gone that any new nuclear project has been commissioned and built, the rest of the world is running on solar + battery storage at a tenth of the price.
Possibly. But this appears to be for SMS-based 2 factor, so you'll need your phone nearby.
How can someone tell, in an audio recording of a man being eaten by a bear, that at one specific point, you are hearing his arm being separated from his body? I'd like to think that he narrated it while it was happening. But imma call BS on this one.
Uploading a a photo/file to a server does not a product make yet you referenced Dropbox and Instagram and that’s what they started out as.

The UX of the AI applications is the moat and the infrastructure providers behind those applications is pretty much always OpenAI and Anthropic at the moment because running your own open source LLMs (which are inferior out of the box) at scale is not cheap or easy to do it right - same reason most companies use cloud. Agree that once you hit super scale then you can run your own infrastructure but there are thousand of companies who won’t get that far and still need an LLM.
I've experienced this too. Any new service that requires more than a credit card number has to go through the legal department to review the contract and that means it goes to the bottom of the pile of similar requests and probably won't even get a look for months.
> Dead men won't have children, so the more of them die there the weaker Russia will be in the decades to come.

Sadly it seems this is Putin's goal as well. What we are seeing is looking more and more like a mass genocide of Russia's undesirables by means of Forever War, with any further territorial gains as a nice bonus. And with all forms of dissent ground into the dust, and a global market more than happy to keep buying his oil, he can continue at this pace indefinitely.
That's one opinion. the number off people who get value out of ChatGPT is known only to them, but anecdotally it's pretty high. a lot of people I know are actively using it on a daily basis and paying them $20/month.
> It doesn't just not create value

Value is a subjective concept. One could argue that its value is that arbitrary quantities of it cannot be created by dictat.

> - to be able to allow exchanging value, it fundamentally requires ever increasing waste, as the waste is what gives its mathematical guarantees.

One could argue that it takes a lot worse to maintain any currency such as USD as a currency. Full force of government law enforcement will be unleashed on you if you decide to have your own currency. There is a lot of "wastage" that goes to safeguard currency creation and storage and to prevent counterfeiting.

I do not hold BTC. Nor do I trade it. But to discuss as if other currencies have no cost is not rational.
Self-plug, but I wrote an open-source NVDEC driver for the Tegra X1, working on both the Switch OS and NVidia's Linux distro (L4T): https://github.com/averne/FFmpeg.

It currently integrates all the low-level bits into FFmpeg directly, though I am looking at moving those to a separate library. Eventually, I hope to support desktop cards as well with minimal code changes.
Debugging in Ruby with Debug
I get -no exaggeration- several hundred spams a day. I have an OG email address that was grabbed by spammers, since the days of Network Solutions (so it’s been awhile).

I maintain Inbox Zero, much of the time, and seldom have more than three or four emails in my client at any time.

I get there by being absolutely brutal about tossing emails.

I probably toss a couple of legit ones, from time to time, but I do have rules set up for the companies and people I need to hear from.

The thing that will be annoying, is when AI can mimic these. Right now, that stuff is generally fairly clumsy, but some of the handcrafted phishing emails that I get, are fairly impressive. I expect them to improve.

A lot of folks are gonna get cheated.

I do think that some of these Chinese gangs are going to create AI “pig butchering” operations, so it will likely reduce their need to traffic slaves.
I got 50 Followers on ProductHunt in 5 Minutes using AI
The "Reconsider Travel" badge has nothing to do with the nature of the large majority of people in a country. They can be as warm and welcoming as they want. But it's about the risk of terrorism, kidnapping and theft.
Sadly, "A few bad apples..."
Not inherent nature, just economics and politics.

Wind always blows somewhere, the sun always shines somewhere.

Making a global power grid is something which I don't expect anyone will do in the next 15 years, but if anyone does I'd be least surprised if it's China on a belt-and-road type project.

Batteries are necessary for electric vehicles, and I do expect >50% of land motor vehicles in use worldwide to be electric within 15 years of today; that scale is sufficient to invalidate concerns about intermittent renewable generation in most (but not all) places even without a global grid.
The red background of Ella's messages initially made me think that it's a system error, not Ella's response, and overall red doesn't seem to me the best colour to help calm down
It’s about externalities.

The private companies aren’t paying for the damage they are causing. It’s ultimately borne by the public.

Very similar to a factory that poisons a river if there’s no disincentive not to.

Better would be if we could factor in the cost to the environment into their revenue. This would better align incentives.
I tried Meld for 3-way merges and while it seemed ok I prefer P4Merge. It's free, but not open source. If I'm using Jetbrains tools though, I'll always use the built in merge tool as it's the most intuitive to use in my experience.
AI will also allow for better spam filters
Edinburgh, where I have lived/worked for 40 years and has a population of just over 500K has all of those and more: major arts festivals, good train and growing tram networks, good airport links, very walkable and certainly "feels" more like a city than a lot of much larger cities.

“This is a city of shifting light, of changing skies, of sudden vistas. A city so beautiful it breaks the heart again and again.”
A Post-doc at a prestigious research institute will probably be earning around £40,000, almost certainly in a HCOL area where rent for a 1 bed flat is £1,500+ a month. The fee is a legitimate financial concern for them.
Any sort of static analysis/linting tools will occasionally make bad/unhelpful/stupid suggestions, some moreso than others. At any place where I've had to use such tools, I've always had the ability to either tweak the settings, or have a conversation with the people who decide them and make appropriate changes. In this case, it sounds like bad culture and/or bad colleagues are driving this person to despair, and not Sonar as per se.
> They found that large animals began vanishing shortly after humans arrived in new regions, with extinction rates highest where humans were most novel.

> The study reveals that at least 161 species of mammals were driven to extinction during this period, based on the remains found so far. The largest animals were hit the hardest — land-dwelling herbivores weighing over a ton, known as megaherbivores.

> Interestingly, regions where humans had a longer evolutionary history with large animals saw less severe extinction events. In Africa and parts of Asia, where hominins had been present for millions of years, fewer megafauna species went extinct compared to the Americas and Australia. This suggests animals in Africa and Asia may have developed behaviors to avoid human predators over time. The researchers found evidence of human hunting prowess in the archaeological record.

> The researchers conclude that human hunting and ecosystem modification were likely the primary drivers of late Quaternary megafauna extinctions.

[The quoted bits above are not continuous in the article.]

Other than the "animals in Africa and Asia may have developed behaviors to avoid human predators" comment, the article seems oblivious to ways in which routine, natural megafauna behaviors could provoke violent reactions from small groups of primitive humans.

Vs. if they'd talked to a few old park rangers, about (say) human campers in areas with grizzly bears or elephants and tiny African villages... Or read some of the more-famous stories about human/animal interactions in British India. (Say, https://en.wikipedia.org/wiki/The_Jungle_Book ) Or...

Once the humans have good spears - even with heat-hardened wood tips - they will be Bad News for any megafauna which instinctively play the "I'm Far Bigger" card, to muscle in on human resources or settlements. It doesn't matter whether the humans see megafauna as prey. One deep puncture wound, and it's probably Game Over for Mr. Big.
> Do you not also think the West understands how Russian society works and how it can be broken?

Authoritarian societies and dictatorships are much harder to influence, let alone break, because they're glued together by fear and the media in them aren't reporting freely. The West also has barely any influence on North Korea. Russia is also well-guarded against foreign influencing campaigns. There is no equivalence between Western countries and dictatorships in that respect.
A less controversial example than nazis (sigh) might be requiring basic hygiene.

If you don't exclude people who don't exhibit basic hygiene (e.g. smelling like literal shit), then a whole lot of casuals will be driven away. If you do exclude them, you exclude them.

Now, you might say, "what exactly is the difference between nazis and some people who smell like actual shit? you just swapped some words out", but, you see,
Show HN: Apple Engineer Reinvents the Dishwasher
Apple Engineer Shayan Arman and Chris Peratrovich (Relativity Space: https://www.linkedin.com/in/chris-peratrovich-a818114b/) reinvent the dishwasher.
Yes, CPython moved to Discourse and then censored the mailing lists, which are now defunct. Discourse offers superior tracking and censoring abilities, so only those who have the right opinions and work for the right corporations can be heard.

The fact that there is little real progress can be suppressed.
Not really. It is possible for execs to get jail time provided that they rob from big companies, AND the execs' company is NOT big.

In case of Boing, execs were absolutely NOT negligent. I'm sure they knew what they were doing, just like dieselgate.
Replying to my own comment - it's trivially possible to replace `api_base` in settings.yaml. The only problem is that Ollama doesn't support OpenAI style embedding endpoint yet. But looking through PRs to Ollama, this is very close to being merged.
All steps before actual embedding work fine with e.g. Llama3-8B.
> horrendously expensive

How did France manage to power their country with it, then?
Do the sorts of diseases ML is being used to detect have a flat incidence profile over age? Even if they do, negating other diagnoses that are age dependent would still mean ML models would acquire a measure of patient age, say.