skysight-inc/HackerNews huggingface dataset:
Nice.

But the problem here is that the code runs in kernel mode. As such any data that it may consume should have been tested with the same care as the code itself which has never been the case in this industry.
> I think this way it is difficult [...]

It's just difficult, but not impossible.

This said, such tampering is in my jurisdiction punishable by law (Art. 251 Forgery of a document), see https://www.fedlex.admin.ch/eli/cc/54/757_781_799/en#art_251

I am sure in Common Law jurisdiction forgery of documents is also punishable.

So such things are defended by a two-pronged approach: Make it difficult and forbid it.
I am a user of Vinegar and Wipr so I am very curious now: why would the makers of these apps have paid for fake reviews? Did they hope to increase revenue? Or is this a way for competitors to weaponize upvotes and thereby slander their good names in the long run?
nandgame and nand2tetris are important works of teaching for this reason. On the off chance I get thrown back in time to the exact right time for it to be useful, I'll be prepared!
Well you made a bunch of claims. So, any of them?
It also does a few other things, such as reporting your timezone as UTC instead of the real value. It’s an attempt to reduce the number of things that sites can use to distinguish you from other users.
They didn't say that one country represents all Jews, they said Jews have a right to their homeland. You made the point that Germans have 3 homelands, and really I suppose you could add Alsace and the Sudetenland and Gdansk and some bits of Denmark if you were ambitious about creating more living space. Does the existence of any of those take away from the agency of people who identify as German?

Perhaps you mean that Germany and Austria have no right to exist, because Germanic tribes are just recent migrants there in the last 2000 years who came from the Urals or something? But wouldn't that be denying agency and stripping identity from the people who actually live there now?
every "open and capitalist" country also had 10yrs wait for a copper phone line. besides the top 3 countries economically at the time from were you hear your make believe stories, most other countries until the 80sv phone line contacts were used to buy cars and homes. sometimes the lines were not even installed.
It's worth noting that we're in 2024, not 1994. While it's true that writing extensions for Tcl is necessary for richer data structures, it's definitely not an impossible task. As a mediocre programmer myself, I've managed to write 15 extensions in the past year. I love Tcl and find its C API to be exceptionally well-written and user-friendly.
ShipFlutter – Ship Everywhere with Flutter. Fast
I think we don't reach that much quantity, but we do a hefty number. What for? Invoices!

We're having problems because until now PDFs are being generated by the ERP system, and it can't keep pace. I know there's a Dev team working on a microservice for PDF generation, but never thinked about doing it with Typst.

I think I'm going to send them @mr-karan link.
Yes, they are overblown, with some caveats.

In terms of API usage, OpenAI has never used the prompts for training but this is very poorly understood among enterprise CEOs and CIOs. Executives heard about the Samsung incident early on (confidential information submitted by employees via the ChatGPT interface, which was training on the data by default at the time), and their trust was shook in a fundamental way.

The email analogy is very apt - companies send all of their secrets to other peoples' computers for processing (cloud compute, email, etc.) without any issue. BUT there's a big caveat: abuse moderation. Prompts, including API calls, are normally stored by OpenAI/MS/etc. for a certain period and may be viewed by a human to check for abuse (e.g. using the system to do phishing requests). This causes significant issues when it comes to certain type of data. Worth nothing that the moderation by default approach is in the proces of being dialed down, and there are now top tier enterprise plans that are no longer moderated by 3rd parties by default.

TL;DR: The concern stems from an early loss of trust (Samsung), but there is a valid issue for certain types of data (abuse moderation), but there are ways around it if you have enough money (enterprise plans).
This is one of the BS of space engineering. Apparently if you combine a Pi CM4 with a carrier board manufactured in China running open source Linux, and you say its for a cubesat going to space, it might fall under ITAR

This is why a lot of European space hardware sellers have ITAR-free as their selling point
Thanks for your comment.

Could you elaborate a bit on the “recording and loading cassette” part?

I’m really wondering!
Now try using a toilet in Germany without having coins on you.
If only that were possible. Luckily for my employer, I end up thinking about problems to be solved during my off hours like when I'm sleeping and in the shower. Then again, I also think about non-work life problems sitting at my desk when I'm supposed to be working, so (hopefully) it evens out.
Oh for sure ... I used Tcl recently (2019) on a project and it's fine now. I feel that Tk has got worse somehow though.
no, it is not. beyond overall poor software choices, there is no notion of persistence in a bad software update.
> Computer users should be educated about security, given control of their devices, and trusted that they will do the right thing.

Imagine you are a bank. Imagine you have no way to ensure no employee is a crook.

It does happen.
you could have read the next line...
It's like I keep saying: We etch runes into stones, and make the stones come alive and do our bidding by channelling lightning through the runes. And you say computers aren't magic?!
The thing I don't understand about all of this is another, much less technical and much more important.

Why the blas radius was so huge?

I have deployed much less important services much more slowly with automatic monitoring and rollback in place.

You first deploy to beta, where you don't get customers traffic, if everything goes right to a small part of your fleet, and slowly increase the percentage of hosts that receives the updates.

This would have stopped the issue immediately, and I somehow I thought it was common practices...
More than a week without power leaves Houston-area residents feeling abandoned
In my opinion, refugees should be spread out and placed among neighbors who are willing to interact positively with them and invite them to stuff so they can integrate, and NOT allowed to relocate their residence for 5-10 years. That will be better for the country. Beggars can’t be choosers, they’re happy to get asylum.

How to enforce that: fine whoever sells/rents to them outside where they are supposed to live. And threaten to deport them if they move without the years passing or showing they’ve integrated / learned the language / culture etc.

Obviously, exceptions can be made for reasons of safety or being closer to a job they got, but then the same procedure should be followed (spread out and surrounded by neighbors willing to help integrate them).

They should also have access to resource to accelerate the cultural integration, like meetups and schools etc.
"But in a non-dysfunctional company, you have a hierarchy of trust, where each management level knows and trusts the people above and below them. "

Even in a company of two sometimes a husband or a wife betrays the trust. Now multiply that probability by 50000.
I saw it a couple of days ago…
This is a MAGA talking point so there are people who agree with your take. I think that is an unreasonable and ridiculous position given its impossibility. In light of how much the US benefits from immigration overall, it’s also shortsighted.
is there some way producers keep making flop films and recouping their investment very shady stuff
Europe turns to conscription as threat of wider war with Russia grows
The kernel update in question was released as part of a RHEL point release (9.3 or 9.4, I forget which).

I’m not sure how much early warning RH gives to folks when a kernel change comes in via a point release. Looking at https://www.redhat.com/en/blog/upcoming-improvements-red-hat..., it seems like it’s changing for 9.5. I hope CrowdStrike will be able to start testing against those beta kernels.
This is not that simple at all. For starters, what is a bound check? There's no such concept at the type level that the compiler can check. You'll need to add one such concept that propagates through functions, increasing the complexity of function signatures.

And this still won't solve the problem of when you as a programmer know that something is definitely inbound but you can't express the proof in the language. Ultimately this means using `panic` (but you don't want to), dummy default values (but this is just `null` all over again!), adding dependent types (which AFAIK nobody has managed to do in a low level language, and even if it was possible it would add a lot of complexity) or just give up and accept your program cannot be accepted.
This. Twitter is providing a deluge of unverified info. Discerning media is also getting this, like you, but they're only going to comment on "an incident" because they're expected to mostly have verified stuff first. So much of that deluge is fake war footage, fake narratives, spread by completely partisan uninformed actors. By the time you've discerned what actually happened and what was garbage, so have NYT, generally.
My iPad crashed when I clicked to the video on the page.
Interesting not seen a fridge that beeps like that before.

Thought the article might have been going to be about removing the thermostat and adding your own temp controller. I did that and switched to using an electronic temp controller, for use during fermentation.
They don't seem to dogfood their own software. They don't seem to think it's very useful software in their own org, I guess.
> your comment smacks incredibly of thinking only western white civilizations are capable of overcoming "barbarism" and evolving into a more just society for people over time...

I'm neither a Westerner, nor am I (entirely) White (1/2 Serbian, if you count it as white (you'd be surprised), 1/2 Indonesian). I also grew up in and lived in Indonesia the majority of my life. Nowhere did I state that only Western societies are the good ones, either, I tend to believe that Taoist and Buddhist countries have a better track record both in the modern day and in the past for the most part.

I'd appreciate if you didn't build a strawman of me, because I'm probably not the person you're imagining in your head. It's shocking, but people outside the west can also believe the west is doing things right and would like them to continue doing so, often because of the cultures they've observed back home.

No, what I consider barbarism is a system of being in which it's okay to commit a brutal beheading because the victim dared to show some drawings of a guy you call a Prophet. Or the one that throws people they don't like off of buildings. Or the one that buries people in the ground and chucks rocks at their heads until they die. Or preventing little girls from attending primary and high schools.

How many beheadings of innocent people exercising their freedoms provided by the nation they were born in are we okay with until we finally admit, maybe we shouldn't be letting them play in our nice garden if they're just going to kick the flowers and rip out the roots?

I grew up in Indonesia, and the entire reason I'm in the West is because of these types of people who'd do such heinous things. And guess what? The Europeans welcomed me with wide open arms, whereas many of my own countrymen would have me grievously harmed due to not being a follower of their hideous beliefs.
> I am sympathetic to that, but its only possible if both policy and staffing allow.

We are not talking about small companies here. We're talking about massive billion revenue enterprises with enormous IT teams and in some cases multiple NOCs and SOCs and probably thousands consultants all around at minimum.

I find it hard to be sympathetic to this complete disregard of ownership just to ship responsibility somewhere else (because this is the need at the of the day let's not joke around). I can understand it, sure, and I can believe - to a point - someone did a risk calculation (possibility of crowdstrike upgrade killing all systems vs hack if we don't patch a CVE in <4h), but it's still madness from a reliability standpoint.

> for policy, there are lots of places that demand CVEs be patched within x hours depending on severity.

I'm pretty sure leadership when they need to choose between production being down for an unspecified amount of time and taking the risk of delaying (of hours in this case) the patching will choose the delay.
Partners and payment integration providers can be reasoned with, contracts are not code. A BSOD you cannot talk away.

Sure, leadership is also now saying "but we were doing the same thing as everyone else, the consultants told us to and how could have we have known this random software with root on every machine we own could kill us?!" to cover their asses. The problem is solved already, since it impacted everyone, and they're not the ones spending their weekend hammering systems back to life.

> However you are also dependent on programs you install not autoupdating. Now, most have an option to flip that off, but its not always 100% effective.

You choose what to install on your systems, and you have the option to refuse to engage with companies that don't provide such options. If you don't, you accept the risk.
> These hopes have to be tempered by the issues of the general sterility of software, though. GitHub, StackOverflow, Glitch, and other community sites were not really made with NSFW content in mind.

Yes and I hope it stays that way. Teenagers or even children may use those platforms and I think we're oversexualizing everything too much already.

Maybe that's an opportunity for a new developer platform focused on NSFW uses.
I love Rust, but Rust is not particularly good either because "panics" are accepted in the Rust community.
Cloudflare has been really solid for me back in the CMS days. Now it's a little overkill on top of a static site, but it does speed up page load times for distant visitors. I tried Github Pages for another project and it's brilliant too.
Let's start with 0 because there won't be anything less than 0. Same when using letters, start with A because things will never get better than A
True AI Agent Developer is here
Exciting News! True AI Agent Developer is here!

I am thrilled to announce the release of Dexor 1.1! This update brings powerful new features and improvements:

*Support for Claude APIs*

- We’ve added the models: 'claude-3-5-sonnet-20240620', 'claude-3-opus-20240229', and 'claude-3-sonnet-20240229'. Personally, I prefer Claude-3.5 for efficiency and handling complex PRs.

*Support for Ollama APIs*

- Now you can use offline models like Llama 3 or Deep Seek Coder. They might not be as effective as Claude or OpenAI but are cost-efficient.

*GPT-4o-mini*

- Speaking of cost savings, GPT-4o-mini is 33 times cheaper than GPT-4o and 20 times cheaper than Claude, making it my go-to model since its release.

*New Slash Commands*

- Execute commands like `/git status` directly within chat mode without opening a new window.

*Local Chat Storage*

- Previously, Dexor used the chat assistants' API, which was expensive. Now, it uses chat completions stored locally in SQLite DB. (UI for browsing and exporting chats to train models in JSONL format is coming soon.)

*Execute Command Tool*

- My favorite feature! It can execute commands, run npm commands, read GitHub issues, and even submit PRs automatically. Check out this magic: [PR example](https://github.com/bootstrapguru/dexor/pull/28). With minimal instructions, it got it right in just two tries.

Renamed to Dexor

Check out the full release notes and join us in exploring Dexor's new capabilities!

[Read more](https://github.com/bootstrapguru/dexor/releases)

#Dexor #AI #TechUpdate #NewRelease #Innovation #AIAgent #AIDeveloper
Reading comments such as yours is bone chilling.

My country (Brazil) has been slowly becoming socialist over decades. Today we live under the rule of a socialist president, a communist supreme court. This is reality despite the fact Venezuela and Argentina are our neighbours. There are way too many people here who actually believe in this nonsense.

I worry a lot about the future.
There are enough people in the world that some can examine how this happened while others simultaneously examine why this happened.
Not everyone wants to make money with their apps and not everyone is building apps purely for profit.
The problem with <aloud></aloud> is that you need the internal monologue to not be subject to training loss, otherwise the internal monologue is restricted to the training distribution.

Something people don't seem to grasp is that the training data mostly doesn't contain any reasoning. Nobody has published brain activity recordings on the internet, only text written in human language.

People see information, process it internally in their own head which is not subject to any outside authority and then serialize the answer to human language, which is subject to outside authorities.

Think of the inverse. What if school teachers could read the thoughts of their students and punish any student that thinks the wrong thoughts. You would expect the intelligence of the class to rapidly decline.
This seems useful, especially for CTF players and glibc/musl/.. devs.

PS: x64 is a bit ambiguous, as it was not uncommon to use it for Itanium ;)
Considering the impact this incident had they definitely should have a large staging environment of windows clients to deploy first.

There are so many ways to avoid this issue, or at least minimize the risk of it happening, but as always profits come before people.
Hmmm guys, twitter opens on my Firefox. How can I fix it?
I installed the fridge freezer myself a few years back, its inside an integrated unit and fairly complicated to remove. I would need to gut the fridge freezer of items, detach and remove the front unit doors from the fridge, detach the fridge from the side panels and the wall, remove the skirting to get under to remove the wall plug and then physically and delicately lift the fridge freezer to be able to slide it out. This is all without the guarantee that there is even a convenient way to gain access the main board.
What do you mean by outsourced?
Great example, but sadly a collective of wronged Postmasters didn’t (at least until recently) have much clout - partly hence the problem.
In the Crowdstrike case, we have multiple major airlines, multiple airports, hospitals, and some large media outlets. Probably billions of dollars of losses.
Mastodon - mixed feelings.

In my experience, Mastodon is nice until you want to partake in discussions. To do so, you need an account.

With an account you can engage in civilized discussions. Some people don't agree with you, and you don't agree with some people. That's fine, maybe you'll learn something new. It's a discussion.

And then, suddenly, a secret court convenes and kills your account just like that; no reason will be given, no recourse will be available, admins won't reply, and you can do two things: go away for good, or try again on a different server.

I'm happy with a read-only Mastodon via a web interface.

But read-write? Never again, I probably don't have the correct ideology for it.
How strange to cite ResetEra, a gaming forum with a significant certain community, and may not be considered a reliable source.
Ok what is tpot content then? I genuinely have no idea what they meant by that
I'm pretty sure that's a feature not a bug. Same with anti adblock tech.
Ask HN: How can I learn to "talk a lot and say nothing"?
I'm a very introverted engineer, on the autism spectrum, and I want to get good at "management-style speaking" or "talking a lot and saying little". Talking purely for the purpose of persuasion or conveying emotion rather than transfering information is something I suck at.

I'm used to communicating as effectively as possible, using as few words as possible, but I understand this makes me less attractive as "management material" in a corporate world. I've been called "cold" in professional settings.

Are there any books on this? I'm not sure if this is the right term for it. I've noticed politicians and high-ranking executives do this very well in interviews. It's like they have a built-in LLM---I'd like to learn that skill, if possible.
Have you seen this?

```
You will be given a name of an object (such as Car, Chair, Elephant) and a letter in the alphabet. Your
goal is to first produce a 1-line description of how that object can be combined with the letter in an
image (for example, for an elephant and the letter J, the trunk of the elephant can have a J shape, and
for the letter A and a house, the house can have an A shape with the upper triangle of the A being the
roof). Following the short description, please create SVG code to produce this (in the SVG use shapes
like ellipses, triangles etc and polygons but try to defer from using quadratic curves).
```

```
Round 5: A car and the letter E.
Description: The car has an E shape on its front bumper, with the horizontal lines
of the E being lights and the vertical line being the license plate.
```

Image generated here: https://imgur.com/a/Ia4Q2h3

How does it "just" predict the letter E could be used in such a way to draw a car? How does it just text predict working SVG code that draws the car made out of basic shapes and the letter E?

I don't know how anyone could suggest there are no conceptual models embedded in there.
I also found that paragraph super weird. Kid played around with the software and found out a new Pokemon was in there but not released, lawyer guy gets his personal information, calls their house and threatens them with computer hacking charges, which seems bullshit as that was reverse engineering, so in many legislations it's not illegal.
But what about those panics for "I know this situation cannot possibly happen"?
If you do it for the love of the game, definitely. It's a fun little project.

I rolled my own because I wanted to use Jinja inside Markdown. This lets me include widgets in the content, and use Python-based constants in the text. For example, when the German minimum wage changes, I change one constant and it triggers a bunch of updates across the website.

I also wanted to control the content-to-website pipeline a little better. The SSG builds pages, but also generates text-to-speech audio for glossary terms, makes some typographic changes, and lints the Markdown for site-specific issues.

I wrote a bit about it here: https://nicolasbouliane.com/projects/ursus

The code is here: https://github.com/All-About-Berlin/ursus/
Everyone knows the only thing that can stop a bad guy with a rootkit is a good guy with a rootkit.
Even if there was a canary release process for code updates, the config updates seem to have been on a separate channel.

The expectation being that people want up-to-date virus detection rules constantly even if they don't want potentially breaking changes.

The missed edge case being an untested config that breaks existing code.

Source: Pure speculation, don't quote this in news articles.
Theory: these are compromised accounts being used in a review farm. The hacker has the accounts review a few random apps the account already owns. This is why the fake reviews are primarily located on apps that are popular and cheap - as those are the apps users are most likely to already own.