skysight-inc/HackerNews huggingface dataset:
It's hard enough to report issues to OpenAI. Not surprising that information coming out of the company is equally constrained.

Right now my ChatGPT4 history is full of chats I didn't create, on subjects ranging from corporate governance to Roblox scripting to somebody's math homework. It will be only a matter of time before this bug causes them to leak sensitive personal data. I spent 10 minutes looking for a way to report it, but they have successfully insulated themselves from any contact with their (paying) customers.

Pretty annoying, and not something you expect from a supposedly security-savvy company... although that expectation is certainly changing.
https://www.wsj.com/business/energy-oil/tech-industry-wants-...
I didn’t bring up infinite machines, the other guy did.

Human beings have access to the same amount of storage and processing power as AIs, because we get to use computers too.
Well, isn't the same true for tech?
You were very much not the norm. Also, cable internet wasn't even released to the public until 1996. The only residential "broadband" options at that time were DSL and ISDN, which were both expensive and had very limited proliferation. Only 10 million people had cable internet in 2002.
AI Companions Reduce Loneliness
Microsoft essentially says 'don't install Word server-side' [0]. The 3rd party you've linked to would be a more appropriate route.

You can automate in other ways, such as interacting with COM via a scripting language or development language client-side. That is supported. If you're dead-set on a web-based application, then yeah, go 3rd party.

[0] https://support.microsoft.com/en-us/topic/considerations-for...
Well this article is a bit shit.

In that past India, China, Mali were massive economies and those didn't happen overnight. They took millenia and the weather stayed warm throughout that time.

As always it is often technology which creates wealth and whoever has the "current" tech usually shoots up for a few centuries and then the cycle repeats itself.
> Ya I hope people are not putting any sensitive information when using Chat GPT.

The ship has sailed, OpenAI wants you to put everything in their system. It makes them more valuable. They know there is no repercussions because their base will blindly advocate for them regardless under the guise of “the best llm”.
I'm in the middle of making a site where people can pay me 10¢ via Solana, which is to say micropayments are now possible. Then I just need to convince 10 million people to do that.
McDs customers mostly know what they want: _cheap_ burgers, fries, and sodas. If one wanted healthy food, they'd go elsewhere. In the area I live in, very few want a salad from McDs, they instead go to sweetgreen, tender greens, moonbowls or any # of salad specialty shops around here. If one wants a good juicy burger, they go elsewhere also. L.A. is not short on great burger and salad joints.

For many people, McDs will never be equated with healthy food no matter what they try. That ship sailed a long time ago.
It's funny because when I am looking for real fast food in the city I go a Chopt or Sweetgreens or a Chipotle, not a McDonalds where the line takes forever.
Serious question: What gave you the impression the company is security savvy?
Several different comments in this sub-thread call this a "mistake".

Machines don't make mistakes.

If a crane collapses, it didn't make a mistake.

If a robot car drives into oncoming traffic, it's not a mistake, it's an engineering failure, a bad design.

This wasn't a fuckup in a prototype, this was a life-critical fuckup 15-20 years into the project which is still confined to a small number of well-mapped cities with good weather.

So my point stands, major fuckups decades into a project when conditions are fairly close to ideal are not acceptable and are indicative of a failed project.

As an aside, it's also not the case that "better than human" is all that matters. The kind of fuckup also matters because people vote, and votes change regulations. If people don't like it, it won't be legal. Driving into oncoming traffic in broad daylight with 20 years of engineering progress is not something people are going to say "oh okay well sometimes my grandma does that too" to.

You guys are wearing rose-tinted glasses.
Sounds like they got access to email and Slack; that’s the gateway to a lot of other things. Fact is, OpenAI was booming at the time of this hack and they had every incentive to play down the severity internally. The hackers may not have gotten access to the “systems housing key technologies”, ie no SSH access to the production VMs (although I’m not sure I would trust that OpenAI’s auditing of such access was foolproof) but that doesn’t mean they couldn’t have done a lot of other damage, gathered all sorts of source code and secrets, or put a backdoor in somewhere. All in all, given the claims they are making and the level of trust they demand from their customers, they ought to have been far more open at the time.
Staying on topic is a rhetorical manipulation tactic.
I've been considering that board, but a read of the forums suggest it has lots of issues.

I might try it anyway but I'm not sure what their long term support would be like compared to Pi if I do get it to work.
> I just can not fathom the level of greed I saw hiding behind people’s eyes at Google as they try to build empires.

That’s very well written. Poetic even.

> I’m in Silicon Valley to learn about and work with computers.

The industry used to be more like that. Never entirely, of course - Microsoft made a bunch of people millionaires in the 80s and 90s, turned some heads. A few others did too.

Even in the early 2000s almost none of the MBA types were going to the Bay Area after graduating.

But things changed. It basically had to. There were too many companies making too much money - and making their employees too wealthy - for people to ignore it. Zero interest rates added fuel to the fire and everyone who could jumped on it. Late stage capitalism, everyone gotta get theirs. And here we are.
I find [1] a good reference. A con is the examples are in matlab, but it's clear enough between the text and matlab code to write your own implementation.

Also [2] is a decent book for overall dsp concepts.

[1] DAFX - Digital Audio Effects (Second Edition) Edited by Udo Zölzer
https://dafx.de/DAFX_Book_Page_2nd_edition/index.html

[2] Understanding Digital Signal Processing, Richard Lyons
Huh? I just went to OpenAI.com and there is a little "Security" link in the bottom pile that points to https://openai.com/security-and-privacy/ .

Under "Reporting security issues" it points you to a bug bounty page: https://bugcrowd.com/openai with a bunch of explanations.

I'm guessing if you also just send an email to security@openai.com it'll go to someone. Using Bugcrowd just seems like a nice way to also run a bug bounty as part of their normal intake.
Who has claimed OpenAI is security-savvy?
I saw that.

I can't be arsed to create an account on a third party 'bug bounty' site, or to waste time guessing email addresses, or to download a security.txt file I've never heard of. Sorry. Their loss, not mine. If they make it hard for me to help them, they can't be too surprised when I give up trying.
A number of these critiques seem like problems with the work culture rather than code reviews. Yes, nitpicking, cargo culting, gatekeeping, and favoritism are problems, but are they problems with _code reviews_ specifically?

Some of the others are actually desirable features of code reviews in my experience. Yes, we don't want needless explanations or the code reviews only going to a small number of people, but my experience is that code reviews are a good mechanism for encouraging authors to write self-explanatory code and for sharing expertise around the team.

This list just doesn't jibe with my experiences.
This is what I’m saying. “Between 2 and 10” is useless guidance.
I’ve gotten the impression from several practicing archaeologists that the biggest reason they haven’t unified a bunch of the Homo species is that no one can quite agree on how to do it and there’s so much inertia in the field. Between ample evidence of interbreeding, the growing evidence that our genetic differences weren’t that significant compared to modern variability in the human gene pool, and a reevaluation of morphological differences it’s getting harder and harder to justify keeping them separate.
Just to be clear, that's 100 pounds of quartz with a little gold in it, yes?
It is not absurd, it is frightening, because when you look closely at the details of how the systems currently function it shows they are not functioning.

The rule of law is meant as a safeguard for non-violent conflict resolution. It requires 4 components. Accessibility and independent judiciary are two of the most important.

It currently costs an average person's yearly (unspent for necessity/food) salary to bring a case before a superior court to conclusion excluding some niches. That's roughly $50,000, and that was in 2020 dollars. Wages have been suppressed to create a cost wall that excludes those who don't make enough money. There are also other aspects such as forced arbitration, and front of line blocking (i.e. being unable to show standing until an agreement is nullified for discovery, when information that would show standing would be available once done).

You are mistaken. This isn't how democracy works. It is historically the early stages of totalitarianism, and those type of governments resort to menticide which is well documented (but largely not taught outside certain niches).

Robert Lifton, and John Meerloo both are experts and wrote books if you care to actually do your own research.
"Goodyear's new prototype tires are made of soybeans — and they could majorly improve your gas mileage:
Tire manufacturer Goodyear has made a pledge to create a tire made from 100% sustainable materials by 2030."
https://www.thecooldown.com/green-tech/goodyear-sustainable-...
> OpenAI's systems, where the company keeps its training data, algorithms, results, and customer data, were not compromised

Article just rambles about some unnamed uninformed AI-phobes being concerned about US national security in relation to China because of some unknown OpenAI internal information that might have leaked.
Not OP but probably all their marketing bs about AI safety and how they're saving the world by not destroying it (th-thanks ...).

They can't even do basic auth properly so ...
Peel P50: The Smallest (street legal) Car
I'm not talking about birth rates. I'm talking about anxiety over children playing outside.
In his case, he ended up with no ants. But I'm not sure it works the same for all species!
OpenAI seems to have, unfortunately, outsourced the triaging of bug bounty reports to people who don't seem to understand security well enough to recognize issues. As an example, I've been trying to get OpenAI to fix the fact that "eval()" is used incorrectly in one of their Cookbooks in a place where the correct function would be "json.loads()".

https://cookbook.openai.com/examples/how_to_call_functions_w...

https://news.ycombinator.com/item?id=40474451#40474452

The bug bounty report was closed with a message saying:

Upon reviewing your report and consulting with the OpenAI team, we have determined that this feature is operating as intended. This means it does not constitute a valid sandbox escape. The Code Interpreter environment is securely sandboxed to support code writing and execution, including shell operations. Any code execution within this environment falls outside the scope of our program ... As you have not demonstrated a valid sandbox escape or RCE, we're closing this submission as Not Applicable.

This shows a fundamental misunderstanding of basic coding, as the eval() I pointed them to is completely unrelated to the Code Interpreter environment. So, the report is incorrectly considered "Not Applicable", without any real further ways to try to get them to fix it. I tried contacting the Cookbook authors directly, but never heard back.
I guessed that but also AI safety doesn’t seem like a security promise to me so I thought I’d clarify.
This dude’s DIY projects, specifically his solar and wind turbine projects, have been massively inspiring to me! I lost the URLs for a bit, stoked to have this back in my life. Thank you!
nah, 30 years after writing my first line of code I still get excited over my projects.
Also, "can follow simple commands"?!?

Maybe the dog barks in Greek but begs in Turkish?
> We should be able to fix this within the next few days, thank you!

It's fixed now, should work in non-linux environments.
> It’s completely normal to not disclose a breach if there’s no proof or great likelihood that customers were implicated.

A bit more complicated than that for public companies. But OpenAI is private, so yeah, they most likely don't have to. It's still an interesting scoop for a journalist, though.
Read Hacker News on Kindle (2022)
A lot of people seem to misunderstand the purpose of tests in school.

When a test for a calculus class asks you to find a particular integral or a test for a music theory class gives you a melody and asks you to add two more voices to produce a three voice fugue following the voice leading and counterpoint rules that would be used by typical Baroque composers the professor is not asking because the calculus professor actually wants to know value of the integral or the music theory professor actually needs to have a fugue written around that melody.

They are asking because they were supposed to have taught you how to evaluate such integrals or apply the rules of Baroque fugue composition, respectively, and they want you to demonstrate that you have learned that.

Doing this requires that you solve the problem, not that you get some tool to do it.

Yes, after school you will use such tools to do most such problems that come up but that's completely irrelevant because at work you are not being asked to solve those problems to demonstrate you know how to solve those problems manually. You are being asked to solve them because you actually need the solution.
It's good to see that we are safely protected from the other side of the political aisle.
What I really want to know is why all three worker units float. What caused that design? Was it a result of having to balance spider mines? A happy accident? A conscious design from the start? If so why? This keeps me up at night.
Key generation time (for either type of UUID) is negligible compared to insert times. On the order of fractions of a microsecond for key generation as opposed to several milliseconds for inserts.
Why not just use a regular laptop for this? There’s a ton of low level sound processing libraries for every OS.
> it's quite hard to converse with someone who can only say "no".

I can see you haven't been divorced yet.
They’ve already managed to get half of the US and a large part of Europe on board. I’d say they’re extremely successful.
video is in the BBC link: https://www.bbc.com/news/articles/czdd9x0ww4do
* How about showing kids the intrinsic beauty that can be found in parts of it?

* Or the way you can make endless fun puzzles you can solve on a rainy day?
Just a side note, most quotes I got from companies installing solar panels on my roof ranged between $3/kWh to $4/kWh.
I always wondered how it is possible that MSCDEX is not an actual driver but mere TSR and now I know: CDs look like network shares to DOS. I suspect that there is some reasoning behind this “design” (different filename conventions on ISO-9660?), but it stills seems like one giant kludge.
Previous announcement and discussion: https://news.ycombinator.com/item?id=32637996

Thought I'd share again since I needed it, found it and thought it was a perfectly simple and efficient tool. I liked that I could download the ePub directly instead of figuring out how to allow KTool to send files to my Kindle when I could do it easily myself.
Citation needed. And I know what you are talking about, the Rajneeshpuram, Oregon (fka the Big Muddy) incidents. Ma Sheela, one of his inner circle, who went rogue (envy, power grab) was said to be the instigator, by some people.

If you call his following a cult, you had better first call the current Repugn(ant)icans / Resucknicans who asskiss draft-dodger Frump a cult, and who have done much more damage to the world, not just to the you-ess.

jeepers creepers!

or

creepers freakers!
The mechanism of Gecko adhesion has been known for more than 20 years

https://academic.oup.com/icb/article/42/6/1081/698253

https://www.nature.com/articles/35015073

https://college.lclark.edu/live/profiles/13-kellar-autumn
> > One is the shifting sigils, accessing @x with $x[3] instead of the logical @x[3]

> $x[3] is perfectly logical when you think of the sigil as typing the value and not the variable.

Unfortunately, that doesn't match the intuition of most programmers. It's more natural to think of the scalar variable as having the full name "$x" and the list variable having the full name "@x", since IIRC both can exist at the same time. Having "$x[3]" access the "@x" variable, when a "$x" variable already exists in the same place at the same time, is just plain confusing. Add to that the very similar looking "$x->[3]" syntax, which accesses the "$x" variable and not the "@x" variable (unless you made "$x" a reference to "@x"), and it becomes even less obvious.
Not sure the kind of processing you need to do on the video stream, but have you considered giving `ffmpeg` a try if you just need plain pass-thru from video input to output? `ffmpeg` might be built with support for the Mali libraries you mention for the OS you are using. If you are able to run `weston`, `ffmpeg` should be able to output directly to the DRM card thru the use of SDL2 (assuming it was built with it).

If the HDMI-USB capture card that outputs `mjpeg` exposes a `/dev/video` node, then it might be as simple as running:

`SDL_VIDEODRIVER=kmsdrm ffmpeg -f video4linux2 -input_format mjpeg -i /dev/video0 -f opengl "hdmi output"`

An alternative could be if you can get a Raspberry Pi 3 or even 2, and can get a distro where `omxplayer` can still be installed. You can then use `omxplayer` to display your mjpeg stream on the output of your choice, just make sure the `kms/fkms` dtoverlay is not loaded because `omxplayer` works directly with DispmanX/GPU (BTW, not compatible with Pi 4 and above and much less 5), which contains a hardware `mjpeg` decoder, so for the most part, bytes are sent directly to the GPU.

Hope some of this info can be of help.
Most stories end that way because that is the only logical thing to do. Trying to fight an organisation with a terrible culture is a sisyphean task that consumes time and energy that could be spent making stuff.

Some organisations (like the one I'm working for) seem to be run like a dystopian daycare. Stay in your box, be "respectful", don't complain about your terrible manager, don't complain about the hoops you have to jump through to get even the most simple or meagre of resources. The internal communications are heavily monitored and that has a chilling effect on cross-team collaboration.

They have even weaponised their "culture" in a way that coddles the offending teams in the structure and still direct blame for missing deadlines at the victims rather than the perps.

There is no fighting this. My small team are all aggressively looking for new jobs which is a shame because they are a tight crew with great skills who have now been beaten down as far as they will go. A great loss to the organisation when we walk too, all that institutional knowledge gone.
While there was a ban, it wasn't an all-encompassing ban on everything Japanese. To give you a video game example, both NES and SNES were licensed to Hyundai and released as Comboy (컴보이) and Super Comboy (슈퍼컴보이). This came with the expected large releases, as you can see in Korean adverts of the time, literally singing about Super Mario, Bubble Bobble, Megaman III, Ninja Turtles, Doctor Mario, Dragon Quest, Zelda, etc.[0][1]

Manga and anime were available as well, as long as they were translated and adapted to local references accordingly. Dragon Ball was available by 1989 officially[2] and Crayon Shin-chan by 1995[3]. Music and regular films were the most impacted since Japanese language could not be kept in media.

Reading through the Wikipedia article for it[4], it's quite incomplete as it makes it sound like all things Japanese were banned in Korea. At least for games, anime, and manga, by mid-90s, quite a lot were available officially. While a bit biased (a whole separate issue about Namuwiki[5]), here's a perspective on the history of it if you can read Korean (or want to read through a translator)[6]

[0] https://www.youtube.com/watch?v=a_C6azkQ7Mw
[1] https://www.youtube.com/watch?v=xzBHMmDBKuE
[2] https://namu.wiki/w/%EB%93%9C%EB%9E%98%EA%B3%A4%EB%B3%BC#s-1...
[3] https://namu.wiki/w/%ED%81%AC%EB%A0%88%EC%9A%A9%20%EC%8B%A0%...
[4] https://en.wikipedia.org/wiki/Japanese_influence_on_Korean_c...
[5] https://en.wikipedia.org/wiki/Namuwiki
[6] https://namu.wiki/w/%EC%9D%BC%EB%B3%B8%20%EB%8C%80%EC%A4%91%...
Sony ending production of recordable Blu-ray discs, citing lack of demand
I've used it as a reference or to gain a different perspective on something I'm familiar with - but it's generally way too terse to learn from

Ex: https://ccrma.stanford.edu/~jos/mdft/Bessel_Functions.html
With business partners like these, who needs competitors?
It’s not like you have to pick. Both are facile to pick up over a weekend. :)
Thanks for the feedback.

I don't think client side manipulation is an option as the result needs to be made available directly via a web-based SaaS.

The licensing issue seems thorny. If this were as easy to set up and use as the comment I quoted suggested, we would need to get some validation that any end user performing "exports" had their own valid license to Word at the time of export.

I'm not sure what the secret sauce is in the third party libraries is that can't be done at a much more limited scope by manipulating the docx directly.

The most complex thing seems to be the determination of page numbers associated with various headings and the ability to refresh this on the fly.
Yeah it’s even embarrassing for Microsoft, having to lure people into using edge. That may be the raison d’être of these inline web search results.

It’s a crappy feature anyway, I never use it. It doesn’t get in my way so it’s not a big deal to me. In any case if that’s all there is to this ad thing, the drama around it is surprising to me.
That cave location looks like such a prime piece of real-estate for a Paleolithic hunter group.
When influencers code.
I love how famous American propaganda is simply overlooked when people are whining about "Russian propaganda", the evidence of which is usually a cleverly written story (which is also propaganda).

The irony, naivete, and logical inconsistency of this planet and Westerners in particular is mind boggling.
The blog doesn't explain how to take advantage of isolated modules without using JSR, or how JSR transforms published packages.

How would a project configure node and typescript to use a npm module that has exported .ts files?
The problem stated by the article is that consistent incentives inevitably results in employees “gaming” of the system.

I suspect but cannot prove that inconsistent metrics and incentives do actually work.

In other words, measure and reward different things each month! Latency this month, resource efficiency the next month, customer satisfaction the next, and so on…

Anyone attempting to cynically game the incentives will lose out on average, but people that naively do a good job overall will tend to be rewarded. Maybe not every month, but most months.
The virtual demands from within the industry for vast energy and water resources to deploy AI, while demonstrating lamentable efficiency and limited utility are imho going to result in a massive backlash sooner rather than later.
The comparison still makes no sense. What would be an external aid for a computer?