skysight-inc/HackerNews huggingface dataset:
> Will that always hold?

It’s hard to be sure about whether anything will always be true, but I intend to not expose environment variables, CLI arguments, or other impurities to RCL.

> What about environment variables? If the language ever needs to handle parameters, this assumption breaks and thus compile time and runtime will be separated.

This is more of an argument about the definition of “input”. In RCL you can import other RCL/json files (as structured data) or any UTF-8 file (as a string). If the evaluation of the program depended on environment variables (or if you could pass input values on the CLI), that would be very annoying for reproducibility. You’d have to specify out of band how to invoke `rcl`, and how to pass the right values. Instead, we can simply write those values to a file and import them. For my definition of “program”, by doing that, they have become part of the program, so we again have a program with no _external_ parameters.

Regardless of whether you call them inputs, the person who sets these values also immediately evaluates the program, so if the combination of parameters causes an error somewhere, the programmer can fix the input or the program. That’s different from a daemon, or program deployed to users, where the programmer does not yet know at development time which values can occur at runtime.

I can think of one case where this does not hold. What if you want to develop a _library_ of RCL code, with functions where you don’t know how they will be called? I don’t think that RCL programs should grow so complex that this is needed, but maybe I am too naive or nearsighted about that, and it will happen anyway. (Sharing schemas may be useful, but they only define types, not functions.) Even in that case, a configuration language is forgiving, because when the program is evaluated there is a programmer running it, even if it is not the person who wrote the function where the error originates.

(What if you build some system that autonomously generates json files and calls an RCL program that imports them, without a human watching? Sure you can do that, but then if it fails at runtime, I think that’s a case of the Baton Roue meme.)

I guess the summary of this is: for some languages, yes the type system should be very strict, and you want to know that when you write a function, it can’t fail at runtime. But for a configuration language, that is not a problem that the type system needs to solve. I wrote more about this in part 1: https://ruudvanasseldonk.com/2024/a-type-system-for-rcl-part....
> Where would the AI get the data necessary to generate correct answers for novel problems or current events?

In a certain sense, it doesn't really need it. I like to think of the Library of Babel as a grounding thought experiment; technically, every truth and lie could have already been written. Auguring the truth from randomness is possible, even if only briefly and randomly. The existence of LLMs and tokenized text do a really good job of turning statistics-soup into readable text.

That's not to say AI will always be correct, or even that it's capable of consistent performance. But if an AI-generated explanation of a particular topic is exemplary beyond all human attempts, I don't think it's fair to down-rank as long as the text is correct.
Not OP but some areas my ham ticket has helped me explore:
- Antenna design
- RF propagation
- bandwidth
- data rate
- environmental effects
- laws and regulations
- encrypted comms
- RF power vs antenna gain
- connector types and quality
- emergency comms

And that's just with my basic tech license.
Or, just don't pass laws that impinge on people's freedom and privacy.

It really is that simple.
I will be fed up of the bullshit.
> Will the future of the internet be entirely dynamically generated AI blogs in response to user queries?

I still enjoy commenting on HN and writing some thoughts on my blog. I'm pretty sure that there are many other people too.

At some point everything that is not cryptographically singed by someone I know and trust needs to be considered AI generated.

Maybe AI-generated content might have better quality than generated by humans. But then it's likely that I'm under the influence of some bigger corporation that just needs some eyeballs.
Minimize the possible advantage by not sending the client other players' positions until absolutely necessary (either the client can see the other player, or there's a movement the client could make that would reveal the other player before receiving the next packet), and eliminate the cheaters you can with server-side behavior analysis and regular less-invasive client-side anticheat.

Ultimately even games with kernel anticheat have cheating issues; at some point you have to accept that you cannot stop 100.0% of cheaters. The solution to someone making an aimbot using a physically separate device (reading monitor output, giving mouse input) cannot be to require keys to the player's house.
I believe the astral devs plan to eventually merge rye into their “uv” tool, so this may end up being a self-correcting problem
Making Structured Generation Faster Than Unstructured
Vennells knew prosecution of post office operators was wrong, inquiry told
As the old (and not very PC) joke goes. You can cure cancer, end hunger and solve global warning, but you only have to get caught having sex with one goat and you will always be remembered as the goat fucker.
Well, there's the problem. Truth be told though, the way keyword-based SEO took off I don't really think it's any better with humans behind the wheel.
I'm so tired of this "won't someone think of the children" argument. What exactly do you propose that isn't wildly invasive and over-complicated?
>>And if you consider the abuse that is rife within the pornography industry, then really it is better to not increase demand for this material anyway.

The abuse within Hollywood is legendary at this point, hope you never go to cinema to see any films, better not to increase demand for this stuff /s
You can’t run a 30 year old driver in Windows, nor a 10 year old in all likelihood.

Microsoft prioritizes userspace compatibility, but their driver models have changed (relatively) frequently.
Agreed, this is just an acceleration of an already fast process.
Samsung Exynos 1380 is huge downgrade and cam offers no improvement.
Nit, but surely hit detection happens on the server? Shooting wildly should always register a hit, regardless of what the client knows.
My experience is that AI tends to surface original content on the web that, in search engines, remains hidden and inaccessible behind a wall of SEOd, monetized, low-value middlemen. The AI I've been using (Perplexity) thumbnails the content and provides a link if I want the source.

The web will be different, and I don't count SEO out yet, but... maybe we'll like AI as a middleman better than what's on the web now.
Yeah, our imaging devices were working fine, but with Epic down, you lose most of your communication between departments and your sole way of sharing radiology images and interpretations.
I don't know who these people are who can't even do basic arithmetic.

> an estimated annual revenue of $1,550 for 50,000 monthly page views.

> This is approximately ~$0.00022 earned per page view.

No, this is $0.002583 earned per page view, a ~12x difference. Looks like the author divided by 12 twice.
> Now the fascist gov has closed all internet

I agree that Sheikh Hasina is extremely authoritarian and corrupt dictator but imo JeI are the actual fascists, and the BNP has absolutely been enabling them.

That said, I agree with you that Hasina's authoritarianism needs to end.

Ideally all these old fossils (Hasina, Zia, Rahman, etc) need to be purged and the actual youth (who are the majority of Bangladesh) get a chance to have their voice in power.

It's a handful of elite 70 year olds who have been running a country where the median age is 25 and are ruining it due to their own personal drama from the 70s and 80s.
interesting. I think I remember reading that fruit producing companies use ethylene gas to artificially ripen some types of fruit. but I did not know that it can also happen naturally.

good to know. I guess that explains why the traditional Indian method works.

>If you trap that ethylene oxide by putting the fruit or veges in a closed plastic bag, they will ripen even faster.

but why would you want to do that? trap that, I mean? i would have thought you would want to use a fan to blow away the naturally occurring ethylene gas, so that it does not cause the fruit to ripen fast / further.
As Customers Struggled, Utility CEOs' Pay Spiked Last Year
Didn’t know we needed such expensive talent to run a “regulated” monopoly which in most cases have not innovated much at all over the last several decades.
Haven't used Windows for close to 15 years, but I read the file is (or rather supposed to be) a NT kernel driver.

Are those drivers signed? Who can sign them? Only Microsoft?

If it's true the file contained nothing but zeros that seems to be also kernel vulnerability. Even if signing were not mandatory, shouldn't the kernel check for some structure, symbol tables or the the like before proceeding?
> So the snapshot of the web as it was in 2023 will be the last time we had original content, as soon we will have stop producing new content and just recycling existing content.

I’ve seen this take before and I genuinely don’t understand it. Plenty of people create content online for the simple reason they enjoy doing it.

They don’t do it for the traffic. They don’t do it for the money. Why should they stop now? Is not like AI is taking away anything from them.
Fair enough, I just ask for things that I can easily verify because I am already familiar with the domain. I just find I get to the answer faster.
Like the privacy invading practice of requiring drug stores to check IDs before selling Playboys?

I'm sorry, Playboy is way tamer than Pornhub. There's no reason PH should have less strict access requirements. There's no 'right' to access porn anonymously. For goodness' sake, most states monitor your alcohol consumption by tying purchases to your ID!
Corn Hub:
"The Internet is for Corn."
I love bluetooth headphones for listening to video or even talking, but it has too much latency for realtime music performance (e.g. music making apps, or using your phone as a MIDI instrument with a controller). Having the wired headphone jack without the latency that (any) wireless protocol necessarily introduces is a huge deadlbreaking feature and I never see people defending bluetooth headsets mention it.
Yea, everyone is dunking on OP here. But they essentially said that crowdstrike's customers were all vulnerable to something like this. And we saw a similar thing play out only a few years ago with SolarWinds. It's not surprising that this happened. Ofc with making money the timing is the crucial part which is hard to predict.
I feel like Americans in general are becoming more isolationist. Historically, that's been America's bend anyway. It always took being attacked or being sold on threats by career politicians to get involved in the world. And that's a privileged and great place to be!

Personally, I'm against it. It's hard to cosign letting the Taliban redo gender apartheid in Afghanistan and banning education for girls and all the rest. But, if Americans are determined to live in a "nuclear-armed Switzerland", interventionism won't work anyway since it needs political will to succeed (see Afghanistan)... sooo I guess I'm an begrudging isolationist too now.
The amount of abuse within tech companies is immense. Should we shut down the tech industry?
Continuously shorting IT stocks overnight and buying back at market open
Crowdstrike – Statement on Falcon Content Update for Windows Hosts
How many years has this Crowdstrike code been running without issues? You have put your finger on it: Fuzzing should have been part of a test plan. Even TDD isn't a bastard test engineer writing tests that probe edge cases. Even observing that your unit tests have good code coverage isn't a substitute for fuzzing. There is even a counter-argument that something that been reliable in the field should not be fixed for reasons like failing a test case never seen in real deployments, so why go making trouble.
No it is theft, also I think it's like this because the state needs criminals to justify its standing army and policing powers. If it's this hard to do well, kneecapping someone only makes it more likely they will betray society instead of rejoining it. No criminals means no need for police or SWAT or overreaching crime fighting powers or overbearing surveillance. The State is a higher order organism which needs criminals to justify itself.
Show HN: Owner Draw Pay Stub – generate owner draw earning statements in seconds
If you’re like me, you have a business where you get paid with owner draws. I found that there aren’t many options for showing proper earning statements for owner draws. So, I built a tool that generates owner draw pay stubs in 60 seconds! How does this help you?

- Create unlimited owner draw pay stubs.
- Have all of your historical earning statements in a centralized dashboard.
- View these earning statements from anywhere for funding needs, financing transactions, and more.
- Enjoy peace of mind knowing your earning statements are at your fingertips.
- BONUS - you could even have your team generate these for you!

Previously, this wasn't a platform and only allowed users to generate one pay stub at a time, with no history. Now, it's a SaaS platform.
This is a weird take. The paren comment said that, the Internet will not be the same with LLM generated slop.
You're differentiating between LLM generated content and LLM + human combination.

Both will happen, with dire effects to the internet as a whole.
Crowdstrike is on every machine in the hospital because hospitals and medical centers became a big target for ransomware a few years ago. This forced medical centers to get insured against loss of business and getting their data back. The insurance companies that insure companies against ransomware insist on putting host based security systems onto every machine or they won't cover losses. So Crowdstrike (or one of their competitors) has to run on every machine.
That's fair! Honestly, it's kind of cool to see how many different kinds of packages are available for Apache.

A bit off topic, but I rather enjoyed the idea behind mod_auth_openidc, which ships an OpenID Connect Relying Party implementation, so some of the auth can be offloaded to Apache in combination with something like Keycloak and things in the protected services can be kept a bit simpler (e.g. just reading the headers provided by the module): https://github.com/OpenIDC/mod_auth_openidc Now, whether that's a good idea, that's debatable, but there are also plenty of other implementations of Relying Party out there as well: https://openid.net/developers/certified-openid-connect-imple...

I am also on the fence about using mod_security with Apache, because I know for a fact that Cloudflare would be a better option for that, but at the same time self-hosting is nice and I don't have anything too precious on those servers that a sub-optimal WAF would cause me that many headaches. I guess it's cool that I can, even down to decent rulesets: https://owasp.org/www-project-modsecurity-core-rule-set/ though the OWASP Coraza project also seems nice: https://coraza.io/
btw i said ethylene gas but you said ethylene oxide. need to google if they are the same or not.

a few minutes later:

I just checked it. they are different.

https://en.m.wikipedia.org/wiki/Ethylene
This wasn't a binary patch though, it was a configuration change that was fed to every device. Which raises a LOT of questions about how this could have happened and why it wasn't caught sooner.
I'm trying for an internal transfer and looking at external option. There aren't a lot of positions right now.

I've already talked to an employment lawyer and they said I have a good case. He said he couldn't understand why they aren't providing the accommodations because they are common and reasonable, and that they don't even seem to be engaging in the interactive process. He said it sounds like I'm being targeted. This seems to fit since my direct manager said this is being pushed by my department head for some unknown reason.
You say even (emphasis mine). Is this not industry standard?
In the context of the GP where they were actively treating a heart attack, the act of restarting the computer (let alone it never come back) in of itself seems like an issue.
Baa baa baaa baaaaaa.
If you want to live in a dystopia, you're free to live somewhere else.
Again, that wasn’t what I was arguing, but ok.
Well, here in the Land of the Free it might be illegal for me to tolerate discrimination against them based on shared ancestry. So my only option is to show my outspoken appreciation for such a talented group of nationally-localized individuals that specialize in exporting surveillance software. Great job!
This analysis implicitly holds supply constant. But supply isn't constant, it will balloon. So the price per impression will tank.

So, on the margin, this will drive human created content out since it is now less profitable to do it by hand than it was before.
The UK House of Lords has a quota of 92 hereditary peers, descendants of Norman conquerors.
> Like it’s insane to me that this size and criticality of a company doesn’t have a staging or even a development test server that tests all of the possible target images that they claim to support.

Who is saying they don't have that? Who is saying it didn't pass all of that?

You're making tons of assumptions here.
Best not to respond to trolls.
Mandatory age verification for porn sites is dystopian now?

I'm guessing you're some sort of pornography addict, if it means that much to you that you whip out this level of hyperbole.
> Crowdstrike broke Red Hat and Debian earlier this year.

For Crowdstrike customers foolish enough to be Crowdstrike customers, yes. The nature of the software pipelines for Red Hat and Debian are very friendly to continuous integration and testing in a way that Windows can not be, at least not without Microsoft sharing source code, which to be fair Crowdstrke is one of the companies they may actually do that with.

Nonetheless, other vendors can choose to do proper cicd with Red Hat and Debian without asking Microsoft.
https://geizhals.at/?cat=umtsover

Even more filters...
I don’t understand this post at all. Could you clarify what you mean by “option for”?
"It needs to be online."

No, it doesn't.

Some have chosen - for reasons of efficiency and scale and cost - to place it online.

However, this is a trade-off for fragility.

It's not insane to make this trade-off ...

... but it is insane to not realize one is making it.
I hate to be that person, but things have moved to automatic updates because security was even shittier when the user was expected to do it.

I can't even imagine how much worse ransomware would be if, for example, Windows and browsers weren't updating themselves.
Cake: a Rust framework for distributed inference of large models like LLama3
Helicopters also glide, it’s called auto rotation. Helicopters can also land in much more confined spaces than airplanes, even with an auto rotation. As we helicopter pilots like to say, if an airplane engine quits, you just know you’re going to die for a long time unless you’re near an airport. All I need in a helicopter is a small area to set it down in.
Source: I fly helicopters
>>Like the privacy invading practice of requiring drug stores to check IDs before selling Playboys?

Wait, is that a thing in the US? Really?

>> For goodness' sake, most states monitor your alcohol consumption by tying purchases to your ID!

Again, that's a thing in the states? Wow, land of the free indeed.
My understanding is that every site other than pornhub is just ignoring the law and either hoping the state doesnt come after them or just operating offshore where the state has no jurisdiction.
> Frequent updates, in the old days, meant that a vendor had poor QA. I think that's probably still the case most of the time today, too.

The internet has normalized poor QA. The bosses don't give a shit about QA anymore because it's so cheap to just push out a patch.

I mean just look at old video game magazines that talked about the software development process: the developers would test the hell out of a game, then test the hell out of it again, because once it was burned onto a $100 cart (in 2024 dollars) it wasn't ever going to change.

Now games can remain buggy and unstable for months or even years after "release."
I could see your comment. Another option: voting bots.
Yeah... the comment above reads like someone who has read a lot of books on CI deployment, but has zero experience in a real world environment actually doing it. Quick to throw stones with absolutely no understanding of any of the nuances involved.
Crowdstrike is not able to break my customers' Linux endpoints. My customers hired my company, not Crowdstrike.
You can think of encoder/decoder models as specifically addressing the translation problem. They are also known as sequence-to-sequence models.

Take the task of translation. A translator needs to keep in mind the original text and the translation so far in order to predict the next translated token. The original text is encoded, and the translation so far is passed into the decoder to generate the next translated token. The next token is appended to the translation and the process repeats autoregressively.

Decoder-only models use just the decoder architecture of encoder/decoders. They are prompted and generate completions autoregressively.

Encoder-only models use just the encoder architecture which you can think of similarly to embedding. A task here is, producing vectors where vector distance is related to the semantic similarity of the input documents. This can be useful for retrieval tasks among other things.

You can of course translate using just the decoder, by constructing a "please translate this from A to B, <original text>" prompt and generating tokens just using the decoder. I'll leave it to people with more expertise than I do describe the pros and cons of these.
Thanks, nice page.

> A vouched submission/comment has its rank restored (and potentially improved as the vouch can counteract the effects of flags).

It seems a single vouch isn't enough to counteract the software on a 1-minute old dead submission.
The incentives will be largely gone when SEO-savvy AI bots will produce 10K articles in the time it takes you to write one, so your article will be mostly unfindable in search engines.

Human generated content will be outpaced by AI generated content by a large margin, so even though there'll still be human content, it'll be meaningless on aggregate.
The point is that CrowdStrike is only useful for compliance, not for security.
Oh, they have one job for sure. Selling compliance. All else isn't their job, including actual security.

Antiviruses are security cosplay that works by using a combination of bug-riddled custom kernel drivers and unsandboxed C++ parsers running with the highest level of privileges to tamper with every bit of data it can get its hands on. They violate every security common sense. They also won't even hesitate to disable or delay rollouts of actual security mechanisms built into browsers and OSes if it gets in the way.

The software industry needs to call out this scam and put them out of business sooner than later. This has been the case for at least a decade or two and it's sad that nothing has changed.

https://ia801200.us.archive.org/1/items/SyScanArchiveInfocon...
https://robert.ocallahan.org/2017/01/disable-your-antivirus-...
Yep, it's easy. Just flip the "off" switch on the privilege structure that a huge chunk of the people who operate your society benefit from (and expect their children to benefit from). What could possibly go wrong?
You should be asking how to get through, not what competitor is better. You totally sound like a marketing rep now.