skysight-inc/HackerNews huggingface dataset:
> it seems like you're suggesting that vulnerabilities are just left in play until someone malicious comes along and decides to do some real damage

That's how security mostly works in meatspace, yes.

In the specific case of internet connected software the industry has a lot of experience saying that if something is exploitable then someone will come along and exploit, so we don't normally need to see an example of it happening in the real world first. It's sufficient to assume that if you get popular enough, a professional blackhat will find your bugs and exploit them. It's also reasonable to assume that the cost of a fix is low and the cost of change in the field is also low.

Outside that context the threat models are usually unclear and refined through experience. If you notice someone cut through a wire fence to steal some equipment from a cell tower maybe you build a wall around it instead. But if nobody is stealing anything there's no point in pre-emptively trying to guess that it might happen and building lots of walls because that might just be a waste of resources (perhaps there's no market for stolen tower equipment, so protecting it better would be a waste of resources).
> We’re releasing Llama 3.1 405B

Is it possible to run this with ollama?
> Don't become a computer programmer

I got such GOOD advise from my mother 40 years ago, she took me even to place where she worked to show how boring it is. It was pure amber magic in mysterious world of murmuring machines. If I had listened to her, I would have time just for the music, for sure.
This is no match for the AI apologetic.

- AI might have the solution to electricity over-consumption today

- If not today then in the near future

- If not in the near future then before the necessary timescale for climate change reversal

- You have no reason to doubt such long time horizons; just look at the last few years and insert imagination for upcoming years

EDIT: But this would be much worse if Ireland was running on something like coal.
Someone will torrent it soon enough i'm sure.
This is a completely incorrect understanding of tax brackets. If you make $1 more than your 'old' bracket, you only get taxed 32% on that $1.
[dupe]

Some more discussion: https://news.ycombinator.com/item?id=41038586
Well, there is a grain of truth to his words. Over certain income, you are no longer qualified for food stamps, medicaid and section 8, so you are better off earning less.
The point is that merely using Rust would not automatically prevent this problem. Of course you could use Rust and forbid all unwrap(). But then question is why you could not forbid all unchecked dereferences (e.g. ensured with static analysis) in C/C++. The problem with C/C++ is not that this is impossible, it is that this is not done.
That sounds odd. With that much experience you should at least be getting offers in the 200k range easily. Are you cold applying or using referrals? I found these days CVs get screened by software that's very sensitive to keywords, and it's very easy to get auto-rejected.

I documented my process of getting job offers here, you can check it out in case it helps

https://www.teamblind.com/post/My-experience-getting-offers-...
Does Quebec have a massive number of datacentres? They're close the Eastern seaboard and have cheap electricity and relatively cold too.
If we have public capital formation, we don’t necessarily need private capital. Private innovation in weather modelling isn’t outpacing government work by leaps and bounds, for instance.
I'd love that, but from my understanding, group 2 doesn't want to be at the office to attend zoom meetings
While I agree, a company making a post that is a subtle advertisement for their software is probably the least trustworthy source for pretty much any take.
“Commoditise your complement” in action!
rally useful insights
really useful insights
Not really surprising. Thus far, the year has been the warmest on record (NOAA says there's a '100% chance it will rank in the top five' - encouraging!)[1] and that includes the record-shattering 2023. The top ten warmest years, thus far, are just the past ten years, slightly rearranged. The Pudding's tracker shows a sea of red [recent hottest days - admittedly, the default is only calendar days, eg the hottest July 22 ever, the hottest July 21 ever, etc][2]

Even the oil companies have abandoned outright denialism.

[1] https://www.ncei.noaa.gov/access/monitoring/monthly-report/g....

[2] https://pudding.cool/projects/heat-records-map/
> There is also the issue that GPU's are oddly terrible at generating 2D elements

I never knew this and honestly I’m a bit baffled - 2D seems simpler on its face, is it just that GPUs have been made with gaming in mind (typically) and most “hardcore gamers” are playing 3D games?
> The extra value is extracted from the buyers (many of whom are workers elsewhere).

Who could, in turn, work less if burger prices didn't reflect the need to pay investors more than they invested.

> In theory, people have proposed doing away with the profit signal, but the only alternative is trial and error from a political process.

You can always measure by actual consumption.

> By way of analogy, Walmart has a 2% profit margin which is a cost consumers bear

Note Walmart is subsidised by government programs that pay their employees because the wages Walmart pays are considered too low for survival.
I mean, I'm always tinkering with software projects here and there - but much in the same sense that our fathers and grandfathers probably tinkered with stuff in the garage. Fixing up that mower to run better. Rewiring the garage. Putting a new radio into the car.

Except in my case, it's just bits of software I wrote for my personal use.

The only "big" thing I'm working on that's not for myself is a character sheet for an RPG, as a means of teaching myself more about React & front-end in general.
As a new NASA contract makes clear, everyone but SpaceX is struggling to compete
>Can you tell me the difference between building a brand and this guy ?

I think it's about intent. Everyone builds a brand to a degree just by being themselves online, but some people do it with an intent to capitalize on it and it often come through in their work in a way that can be distasteful.
I worked with a guy who went to a public university - not a top 25 public university but in the ballpark. He was hard-working, smart and "got it", but he wasn't at the level of some super-geniuses I met coming out of school. He worked with us (Fortune 100, non-FAANG, non-tech, non-big metro) as a junior SWE for a year and did not get promoted as he desired. He jumped ship for a FAANG-adjacent company after a year working for us, and his TC jumped from <$100k to over $200k. Two years later he was promoted to senior and his TC is now over $300k.

He is smart but not a genius. He kind of knows what is going on though, he "gets it". Probably even more motivated than smart, but not insanely motivated. Motivated enough to learn how to get features done at a brisk pace, take ownership of his team's work, and to study for interviews. Didn't go to a top tier CS program, didn't come out of FAANG or FAANG adjacent, and probably took a detour working for us, but three years later his TC is over $300k. He also had the luck to jump ship before the FAANG layoffs of late 2022.
You can probably recast your problem into a 1D multiple particle collisions problem.

Each interval is represented by a particle of radius half the interval, positioned at the middle of the interval.

Because the radius vary, you can either use adaptive algorithm, or split the interval into multiple small particles.

There is not a lot to gain when doing a single query, but when you are batching queries, you can share the computation and memory accesses. Using radix sort for sorting the integers you get a complexity for iterating over all collisions of O( NbKeys + NbQueries + NbCollisions ).
I sort of accidentally stumbled into it when I joined an (at the time) startup as they were just getting into the market. So I don't know that I have anything specific to offer :)

I don't want to name names for companies in the industry, but you can find them in industry publications like Traffic Technology Today, or often as contributors to the standards documents like NTCIP 1202, ITE ATC 5301, etc.

I will say that there are a number of long-standing (40+ years) companies in the industry that seem to still operate the "legacy" way - slow iterations, very small software team, seemingly not much desire for large change. Basically, a hardware company that also happens to sell software.

There are also newer entrants to the market in the past ~decade or so that operate a lot closer to a modern software company - lots of new features coming out, fast-moving software teams, etc.

(again, all opinions are my own here.)
Data centres consuming electricity isn't the problem. The problem is running those data centres on fossil fuels.

There has been an increased push to run the data centres on green technologies like solar, wind, and nuclear, e.g. [1]. Due to the machines being co-located makes it easier to do this compared to every website being hosted on machines spread over the country, where it is more likely that they will be run by fossil fuels.

[1] https://www.reuters.com/business/energy/rush-data-centers-cr...
Hey guys, I made a what vegetable are you quiz, code, story, art and all :))))

Please feel free to check it out and share with friends!
> “not that many bald heroes - you've got The Rock, Jason Statham, who else?”

Samuel L. Jackson (Nick Fury), Patrick Stewart (Picard, X-Men), Bruce Willis (Unbreakable), Tilda Swinton in character as the Ancient One, James Avery (Uncle Phil), David Suchet (detective Poirot), Thing (Fantastic Four), Draxx (Guardians of the Galaxy), Dr Manhattan (Watchmen), Lawrence Fishburne (Morpheus, The Matrix), Vin Diesel (Riddick, Fast and Furious), Kratos (game God of War),

> when the heroic character is bald, it's almost always combined with being jacked and tough

When a heroic character has hair they’re also often jacked and tough; that’s part of the hero type not the hairy type; plenty of characters are haired and wimpy losers.
Informally, a sound type system is one that never lies to you.

Formally, the usual notion of soundness is defined with respect to an evaluation strategy: a term-rewriting rule, and a distinguished set of values. For pure functional programs this is literally just program execution, whereas effects require a more sophisticated notion of equivalence. Either way, we'll refer to it as evaluating the program.

There are two parts:

- Preservation: if a term `a` has type `T` and evaluates to `b`, then `b` has type `T`.

- Progress: A well-typed term can be further evaluated if and only if it is not a value.
Hard disagree. So far every big important model is closed-source. Grok is sort-of the only exception, and it's not even that big compared to the (already old) GPT-4.

I don't see open source being able to compete with the cutting-edge proprietary models. There's just not enough money. GPT-5 will take an estimated $1.2 billion to train. MS and OpenAI are already talking about building a $100 billion training data center.

How can you compete with that if your plan is to give away the training result for free?
TXR Lisp:

$ cat slurp-source.tl
(defun slurp-source (path key)
(let* ((lines (file-get-lines path))
(match (member-if (op contains key) lines))
(tail (rest match))
(indent (find-min-key tail : (op match-regex @1 #/\s*/)))
(dedent (mapcar (op drop indent) tail)))
`@{dedent "\n"}\n`))
$ txr -i slurp-source.tl
1> (put-string (slurp-source "slurp-source.tl" "let*"))
(match (member-if (op contains key) lines))
(tail (rest match))
(indent (find-min-key tail : (op match-regex @1 #/\s*/)))
(dedent (mapcar (op drop indent) tail)))
`@{dedent "\n"}\n`))
t
Thank you, that makes a lot of sense. I should have intuited that, but I couldn’t quite make the connection.
I really appreciate the write up, it gave me a lot to think about as someone who has only ever managed my own DB.
Inside the US, we all were given historical precedents for anonymous speech. While the Declaration of Independence was signed, most of the leaflets arguing for independence were anonymous.

Or, consider Publius as the author of the Federalist papers, a pseudonym for Hamilton, Madison, and John Jay.
eframe_template uses Trunk for their wasm build:

https://github.com/emilk/eframe_template

Demo of an application built with Trunk (this is a profiler for a distributed runtime system):

https://legion.stanford.edu/prof-viewer/?url=https://sapling...
> Simultaneously they try to fight the automation that would lead to a world were humans dont need to work for things to exist

Because they are sure (rightfully so) the owners of said automation will not pay them enough to offset their lost jobs.
If I had to guess (I didn’t downvote) it’s because this article isn’t about the product, so it feels off topic.

That said HN also tends to dislike meta commentary about voting patterns (it’s discouraged in the site guidelines) so you and I may get downvoted too.
We are all 4-dimensional beings on this fine day.
I wouldn’t have thought so either, and then I learned the order in which CSS rules are applied and I’m convinced browsers have some of the most complex rendering engines out there.
Palantir is a government contractor. You don’t investigate your friends
I've got headphones with 1/4" connectors. I like the sets where the cord is detachable, each headphone has a jack, one is 1/4" one is 1/8", and the included cord has 1/4" on one end and 1/8" on the other. Then you can plug into whatever.

I'm not cool enough to have XLR on any of my devices.
Meta's article with more details on the new LLAMA 3.1 https://ai.meta.com/blog/meta-llama-3-1/
Another problem is water consumption. People don't realize it, but these data centers also consume incredible amounts of fresh water.

There are a handful that run off of grey water, and it varies somewhat - but overall the consumption is enormous. It's a big problem for water-starved areas.
The problem with this is that there's little way to get any realistic data here. Of course the number of people polled that say they're a deadbeat will be low.
He's famous, so his view is the one that's most commonly regurgitated, but that doesn't make it the most correct one.

Steve's point of view is one point of view, in a story that involved ~10 people. When you hear the story from each person's point of view and union them, the subtly-incorrect aspects of his perspective become pretty glaring.
The VLAN part is important.

"LAN" doesn't imply the same use of VLAN trunking or flat network architecture.

Traffic infra being on a VLAN behind the firewall implies a lot of trust in the traffic infra physical plant. You can harden against layer 2 vulnerabilities, but they're a whole 'nother can of worms and possible failure point.

It also implies the possibility of VLAN trunking being used inappropriately.

All the CCIEs I've learned from and trusted were very suspicious about extending the size and scope of LANs offsite through VLANs.
> I'm going to do so very slightly because I'm not shifting the expected value by very much

You're massively increasing uncertainty.

> the same would happen in the future. And the trade-off I get for this is that society gets the benefit

Why would you expect it would ever happen again? What you want is an unrealized capital gains tax. Not to nuke our semiconductor industry.
This is the most recent iteration of a national platform. They have tons of GPUs (and CPUs, and flash storage) hooked up as a Kubernetes cluster, available for teaching and research.

https://nationalresearchplatform.org/
Show HN: I built an AI stylist for us developers because we need help
Hey everyone,

The title really says it all. Since graduating college, I’ve been living in tech company t-shirts and shorts. Maybe it’s part of reaching my mid-20s, but I’ve been feeling more and more like I want to dress better and feel like I look put together when I go out.

The problem is that I don’t really have the time / taste to do it well. I went down a rabbit hole of googling style guides and looking at instagram / pinterest for inspiration. After a lot of reading, I still didn’t have a good eye for color or styles that suit me, and I’m too busy to keep up with whatever the latest trends are.

I made Disto so that anyone looking to improve their style can do so quickly. It uses LLMs (amongst other tools) to identify what types of clothes and colors look best on you, and puts together stylish outfits for you that you can click to buy. So you don’t have to wonder how to put together an outfit that matches, or where to buy the items - the LLM does that for you.

If you’re interested, you can give it a try at style.distoai.com .

I would really appreciate any and all feedback. Feel free to comment here or email me at masha@distoai.com.

Thank you!

- Masha
A server (nginx / httpd) might very well make outbound HTTPS calls and want to verify the origin's certificate to the fullest extent possible. This is known as a reverse proxy. However, many -- certainly not all -- reverse proxy configurations use origin servers that reside on the same exact network, and therefore don't need TLS connections (or use them with `SSLProxyVerify none` for e.g. self-signed certs to simplify things [0]), but I digress.

[0] https://httpd.apache.org/docs/current/mod/mod_ssl.html#sslpr...
> It would be better that the government removes IP on such technology for public use, like drugs got generics.

20-25 year old drugs are a lot more useful than 20-25 year old GPUs, and the manufacturing supply chain is not a bottleneck.

There's no generics for the latest and greatest drugs, and a fancy gene therapy might run a lot more than $40k.
Have your panic handler call an extern "C" function that doesn't exist, and the linker will complain if there's any calls to that function that weren't optimized out. Alternately, you can look for the symbol in the output elf file and fail if it's there, which is a bit more graceful as panicking binaries can still be produced during development.
a big chunk of that is probably the fact that you don't need to pay someone who is trying to make a profit by running inference off-premises.
My experience:

I'm interested in how Linux Audio works. The first half of the article covers other topics. It could be a separate article. An article focused on Linux Audio could say "For audio basics, click this link to my article on Audio Basics."

Even for beginners, that's useful because even beginners just want to get sound out of their speakers and anatomy and physics lessons are in the way. It's ok to start with ALSA. There's no need to boil the ocean.
A few rough ideas for bitsets:

- To find runs of 15+ 1s you can find bytes with the value 255 using SIMD eq

- For windows of width N you could AND the bitmap with itself shifted by N to find spots where there's an opening at index i AND index i+N, then check that those openings are actually contiguous

- You can use count-trailing-zeros (generally very fast on modern CPUs) to quickly find the positions of set bits. For more than 1 searched bit in a word, you can do x = x & (x-1) to unset the last bit and find the next one. This would require you search for 1's and keep the bitmap reversed. You can of course skip any words that are fully 0.

- In general, bitmaps let you use a bunch of bit hacks like in https://graphics.stanford.edu/~seander/bithacks.html
I guess I'm missing why you would model these interfaces as nested, when obviously nesting has the ordering issue.
They triggered a bug in ebpf implementation. Quite impressive actually
oh, and I'm aware that it might be engaging for some, but they either fall into the category that better learns to organize and administer themselves now rather than later or into the category that will always need a social worker, who will the find the bureaucracy easy as well and the organization is paid by his employer
Mass stabbings then
The article states that it already happened, but didn't quite make the "cut" that you'd expect.

>>> A documentary released in 2023, called Cocaine Sharks attempted to establish whether sharks in the Gulf of Mexico were consuming the hundreds of packages of cocaine lost or dumped every year by drug smugglers.
My first "real" experience with Linux was with Wubi (Ubuntu packaged as a Windows program). I think it was based on Ubuntu version 6 or 8.

I also tried to update it, when the graphical shell displayed a message saying that update is available. Of course, it bricked the system.

I've switched from Ubuntu to Mint to Debian to Fedora to Arch to Manjaro for personal use and had to support a much wider variety of distributions professionally. My experience so far has been that upgrades inevitably damage the system. Most don't survive even a single upgrade. Arch-like systems survive several major package upgrades, but also start falling apart with time. Every few years enough problems accumulate that merit either a complete overhaul or just starting from scratch.

With this lesson learned, I don't try to work with backups for my own systems. When the inevitable happens, I try to push forward to the next iteration, and if some things to be lost, then so be it. To complement this, I try to make the personal data as small and as simple to replicate and to modify moving forward as possible. I.e. I would rule against using filesystem snapshots in favor of storing the file contents. I wouldn't use symbolic links (in that kind of data) because they can either break or not be supported in the archive tool. I wouldn't rely on file ownership or permissions (god forbid ACLs!) Try to remove as much of a "formatting" information as possible... so I end up with either text files or images.

This is not to discourage someone from building automated systems that can preserve much richer assembly of data. And for some data my approach would simply be impossible due to requirements. But, on a personal level... I think it's less of a software problem and more of a strategy about how not to accumulate data that's easy to lose.
Thanks! This sounds very similar to the experiment I tried with sieve-tree (https://github.com/Ralith/sieve-tree/) which can store children directly on a node until it reaches some threshold. I had some problems with the nearest query as you mentioned, because children are in arbitrary order and you might have to search multiple tree levels to find the nearest.
I don't think that hideous things, like eugenics or Nazi racism, happen because of a lack of understanding. They happen because people have their heads up their butts with megalomaniac ideas about the world and their place in it. The "Master Race" was not a misunderstanding, it was some people wanting to be better than everyone else and making up, out of whole cloth -and no empirical evidence at all- that they were. There certainly wasn't universal consensus about it btw, just between Nazis.

I agree that there are dangers in trusting consensus as a mechanism for advancement of knowledge, and I see your point about risking losing focus on the border. But I think it is also very important to have a common body of knowledge that we can all agree on. Take flying again: nobody disputes the fact that planes are flying (again, nobody who isn't just being contrary). We can work out the gray areas in time and they don't necessarily make progress impossible. E.g. maybe we can't agree on whether hovercrafts fly, but we can still make them and use them.

So there is a limiting effect, like I point out in my other comment, but it is not a hard lock on progress. And I think that avoiding endless philosophical discussions is a big advantage.

If there is a better heuristic then I'm happy to embrace it btw. But, is there?
He was having a meowt of body experience.
Does it store the HTML/CSS for creating the buttons so you can easily repurpose them (which would be quite useful), or are they stored as images (which would be fun but less useful)? If the latter, how difficult are they to extract from the page that shows them all?