skysight-inc/HackerNews huggingface dataset:
First off, LLMs, ChatGPT, DALL-E, etc... these are all just neat party tricks. Generative AI is nothing special and - along with the other comments - going to be the butt of many jokes in the years to come (and already is: see South Park). Everyone clamoring to get on that bandwagon either doesn't understand it or is attempting to capitalize on (and sell it) to people who don't understand it.

That said, what _powers_ those models: encoders, attention, and transformers, has been a massive leap in AI model generation. This cannot be overstated!

I don't care about AI generating a token or pixel. What I care about is being able to throw very complex data at a model and have it "learn" relationships between them in ways I couldn't see before and then being able to perturb the data to see what how that changes the "meaning" of it.

For example, in biotech (my particular field), training models on the gene expression profiles of healthy vs. diseased tissues and then perturbing expression levels (in silico) to determine if doing so encodes the gene profile as "healthy" is ground-breaking. As data profiles of are added it has the potential to also reveal potential toxicities of gene inhibition (or expression) without ever needing to test it in the lab saving $100s of millions.

The party tricks are neat, and they are what bring in the $$. But it's the building-block use-case getting very little attention where all the benefits are going to be had in the coming years. And they are coming fast!

P.S. My personal prediction is that the next massive leap in AI is going to be a paradigm shift away from how we train and simulate networks. The current framework of more and bigger GPUs to process larger and larger models is unsustainable. Someone, somewhere in the next 5-10 years will revolutionize how this is done and THEN we'll have our true, AI "revolution".
Llama Llama-3-405B?
It's not so much about using energy - everything uses energy! Crypto, for example, uses around 70TWh. Assuming Meta + Google + Amazon use similar amounts of energy, there's a lot more value produced than in crypto mining.

My point is its impossible to evaluate energy usage without considering benefits. For example, heating is one of the world's biggest consumers of energy - what % is due to people not wanting to wear a sweater inside?
It's not a "veiled whistle blow", it's my personal belief.

But yes, I am against woke culture at it's core, vehemently.

In no way does an emoji encourage armed violence.

Are you against violent video games as well?
> As Bitsight continues to investigate the traffic patterns exhibited by CrowdStrike machines across organizations globally, two distinct points emerge as “interesting” from a data perspective. Firstly, on July 16th at around 22:00 there was a huge traffic spike, followed by a clear and significant drop off in egress traffic from organizations to CrowdStrike. Second, there was a significant drop, between 15% and 20%, in the number of unique IPs and organizations connected to CrowdStrike Falcon servers, after the dawn of the 19th.

> While we can not infer what the root cause of the change in traffic patterns on the 16th can be attributed to, it does warrant the foundational question of “Is there any correlation between the observations on the 16th and the outage on the 19th?”. As more details from the event emerge, Bitsight will continue investigating the data.

Interested to know how they're capturing sample data for IPs accessing Crowdstrike Falcon APIs and the corresponding packet data.

EDIT: Not to mention that they're able to distill their dataset to group IPs by their representative organizations. Since they have that info I feel a proper analysis would include actually analyzing which orgs (types, country of origin, etc) started dropping off starting on the 16th. Alas since this seems like just a marketing fluff piece we'll never get anything substantial :(
Ye. Emojis that render differently for different people do not work. It conveys the wrong emotions.

I had this half year when I though my mother was constantly pissed at me becouse she sent these angry devil robots to me. It turned out it was the default emoji font on my phone and all my friends used text based emojis so I didn't notice.

A real pistol and a water pistol send totally different vibes...
Sideline Sinology by Peter Hessler
This has generally always been true for credit cards; it's also the genesis of the "we don't take Discover" joke above. Better for consumers == merchants have more hassles.
That's 2 days if you physically lose your card. Otherwise you have 60 days after you receive your statement. If you know where your wallet it, and you review statements once per month, you're fine. I still use a credit card instead, though, because I'd rather the lost money be the bank's problem to resolve.
Yes I put those in quotes because that's how Prenuvo sells their product to the public. If fullbody scans truly improve survival then they wouldn't need kim kardashian to sell their product.
yeah that's my gut feeling. Also, no one at these enterprises are to blame they can all point fingers at CloudStrike and abuse their account reps. That way they don't have to put in the work to actually switch vendors while appearing like they're "on it". I bet they all get pretty nice discounts on renewal like you said but that will be it.
2nd rec for I've Been Thinking this week! gotta check it out
Microsoft: It's the EUs fault!

Also Microsoft: It's a feature!
https://archive.is/HunUq
Testing in the Cloud: Enabling Fedora's openQA for flexible cloud deployment
Replayability Roadmap
I wouldn’t call Figma a prototype tool. It’s pretty bad at prototyping sophisticated interactions.

They are canvas based clickable mock-ups with fancy transitions and a few more things.

But it can’t generate / export to HTML which comes in handy when you need to use it offline.
Just don't listen to anecdata, and use objective metrics instead: https://chat.lmsys.org/?leaderboard
The most recent Unicode standard (https://www.unicode.org/charts/PDF/U1F300.pdf) still names it "PISTOL", although the official locale data designates "water pistol" as the short name in English and most other languages.
In this case I wasn't reacting to this specific paper so much as to the widespread idea (at least that I've observed among AI skeptics) that "model collapse" is a huge problem.
You misspelled screenshots in the title of your website.
Yes indeed, humanity has little influence on climate, but it is a profitable industry, therefore people willfully turn a blind eye, or are even misinformed and therefore ignorant. It is naive to assume politically sensitive topics like climate change can be openly discussed here, as a downvote will result.
You answered your own question in the comment? If you require two instances to memorize it that means you needed unit conversion twice in cooking
> I assert that there is no good evidence that it is true

And what evidence could you provide (say, a description of your methodology, hours of search, resources searched, notes you've taken along the way, etc) can you offer to support your "is no good (how convenient) evidence"?

> It’s a limiting perspective because you stay stuck in the mode of bickering among yourselves about who has seen the light and who hasn’t.

That may seem to be the case, but maybe ~no one has seen the light (perhaps due to a culturally infused unwillingness to try)?

> Instead of the more useful perspective...

You have no way of knowing the utility of either approach. Realizing this (including how to realize it) is highly useful.

> then it won’t take much to convince them (X years of brainwashing does not take X years to undo).

I agree with this, except for the "won’t take much to convince them", as it could be mistaken to mean that finding the method also won't take much. But I will always upvote optimism!
I doubt that it is even possible. I was pointing out that in that scenario, the last thing to be worried about is an eruption.
A “delete” means it should be gone forever from the service it was removed from.

“Private” means it should only be available to specific involved parties only.

If you implement any other behavior to these concepts you are implementing anti patterns.

We need to be precise and consistent in the wording of the functions we are providing in order to ensure we easily can understand what is going on, without having to interpret documentation to be able to fully understand what is going on.
Well Linux needs Docker containers to make deployment and dependency handling manageable, so I’m not too sure which one is the hotter mess.
Took them way too long to figure out visibility is needed to close the loop on map data. That said I just do not understand what is in it that prevents it from working on Firefox.
> There's way too much to do with media break points

As someone who has been handwriting HTML/CSS for literally 25-years, I'm still shocked dealing with media break points isn't easier.

It easily snowballs into you having 3 different CSS (phone/tablet/desktop).

I wish there was something akin to 'light-dark' (where you can specific a different value conditional on the environment) but would be trigger based on window size.

e.g.

font-size: window-size(1.2em, 1em, 0.8em)

Which would translate to, if the browser window is small (phone), use 1.2em ... if browser window is large (desktop), use 0.8em

https://developer.mozilla.org/en-US/docs/Web/CSS/color_value...
Everyone signed their terms of use: https://www.crowdstrike.com/software-terms-of-use/

Section 6.1:

THERE IS NO WARRANTY THAT THE SOFTWARE OR ANY OTHER CROWDSTRIKE OFFERINGS WILL BE ERROR FREE, OR THAT THEY WILL OPERATE WITHOUT INTERRUPTION OR WILL FULFILL ANY OF SOFTWARE USER’S PARTICULAR PURPOSES OR NEEDS. THE SOFTWARE AND ALL OTHER CROWDSTRIKE OFFERINGS ARE NOT FAULT-TOLERANT AND ARE NOT DESIGNED OR INTENDED FOR USE IN ANY HAZARDOUS ENVIRONMENT REQUIRING FAIL-SAFE PERFORMANCE OR OPERATION. NEITHER THE SOFTWARE OR ANY OTHER CROWDSTRIKE OFFERINGS ARE FOR USE IN THE OPERATION OF AIRCRAFT NAVIGATION, NUCLEAR FACILITIES, COMMUNICATION SYSTEMS, WEAPONS SYSTEMS, DIRECT OR INDIRECT LIFE-SUPPORT SYSTEMS, AIR TRAFFIC CONTROL, OR ANY APPLICATION OR INSTALLATION WHERE FAILURE COULD RESULT IN DEATH, SEVERE PHYSICAL INJURY, OR PROPERTY DAMAGE. SOFTWARE USER AGREES THAT IT IS SOFTWARE USER’S RESPONSIBILITY TO ENSURE SAFE USE OF SOFTWARE AND ANY OTHER CROWDSTRIKE OFFERING IN SUCH APPLICATIONS AND INSTALLATIONS.
On the positive side this takes care of all those companies forking open source software and not contributing back
> It's already very difficult to avail banking if you don't carry a smartphone.

I think it depends. I never use my smartphone for banking purposes and it doesn't make anything difficult for me at all. But I'm in the US and I know there are other nations where this isn't at all true.
How many "r"s are in [496, 675, 15717]?
Tldr; woman plays "catch me if you can" while having an active infectious tuberculosis diagnosis. After a car crash and ER visit, she was convinced of the importance of treatment. She consented to treatment and is now released and healthy.
Yes. Try making a death threat with a water gun
And here we go with the toxic false dichotomy that you have to "spend a ton of time taking care of others' people feelings" to just . . . not be a jerk. It takes literally no time at all to just not be a jerk.
Sharing PyLLMs [1] reasoning benchmark results for some of the recent models. Surprised by nemo (speed/quality) and mistral large is actually pretty good (but painfully slow).

AnthropicProvider('claude-3-haiku-20240307') Median Latency: 1.61 | Aggregated speed: 122.50 | Accuracy: 44.44%

MistralProvider('open-mistral-nemo') Median Latency: 1.37 | Aggregated speed: 100.37 | Accuracy: 51.85%

OpenAIProvider('gpt-4o-mini') Median Latency: 2.13 | Aggregated speed: 67.59 | Accuracy: 59.26%

MistralProvider('mistral-large-latest') Median Latency: 10.18 | Aggregated speed: 18.64 | Accuracy: 62.96%

AnthropicProvider('claude-3-5-sonnet-20240620') Median Latency: 3.61 | Aggregated speed: 59.70 | Accuracy: 62.96%

OpenAIProvider('gpt-4o') Median Latency: 3.25 | Aggregated speed: 53.75 | Accuracy: 74.07% |

[1] https://github.com/kagisearch/pyllms
TL;DR: Strange, our deep packet inspector traffic data shows a drop in traffic from July 16th-18th!

It's incredibly creepy that they A) are collecting this much data from customers B) are comfy drilling into it by IP/organization and C) have enough spare time to do so for a marketing blog post.

Also, for god's sake, you're a company, you're supposed to look professional. If you're going to use AI art for your blog at least don't be lazy: load up Photopea and either fix the broken text or magic wand it out. It'll take you 5 minutes.
It's a valid concern that you've raised about the potential increase in ChatGPT-generated comments on HN. Here are some thoughts and potential solutions:

1. *Heuristic Identification*:
- *Account Age and Karma*: As you mentioned, new accounts with low or negative karma could be a red flag. Filtering out comments from these accounts might help, although it might also block new, genuine users.
- *Comment Content*: Look for patterns in the comments, such as generic or overly formal language, repetition, and lack of personal experience or detailed technical knowledge.
- *Engagement Metrics*: Check the engagement these comments receive. Comments that are ignored or downvoted could be another indicator.

2. *Training a Classifier*:
- *Data Collection*: You'd need a dataset of known AI-generated comments and genuine comments. This could be challenging but necessary for creating an effective classifier.
- *Features*: Potential features for the classifier could include linguistic cues, metadata (account age, karma), and engagement metrics (upvotes, downvotes, replies).
- *Community Involvement*: Encourage the community to flag suspected AI-generated comments. This could provide more data for training and improve the classifier's accuracy.

3. *Manual Moderation*:
- While manual moderation might not be scalable, especially if the volume increases, it is still crucial for edge cases where automated methods might fail.
- Moderators could focus on verifying flagged comments rather than monitoring all comments, making the process more efficient.

4. *Community Guidelines*:
- Clear guidelines about AI-generated content could help. Encourage transparency if users are experimenting with AI-generated comments and provide a proper context.

5. *Technical Solutions*:
- *CAPTCHA*: Implementing CAPTCHAs during account creation or before posting could deter automated systems from flooding the site.
- *Rate Limiting*: Limiting the number of posts or comments a new account can make in a short period could reduce the impact of spam accounts.

By combining these approaches, HN can better manage the influx of AI-generated content and maintain the quality of discussions.
The model communicates in a language, but our letters are not necessary for such and in fact not part of the english language. You could write english using per word pictographs and it would still be the same english&the same information/message. It's like asking you if there is a '5' in 256 but you read binary.
> with YMMV caveat to go along with it

Isn't it suspicious to offer YMMV caveats in a situation that is obviously dripping with caveats?
In response to the end of the article "it’s important to note that some of these issues exist on other version control system products." I actually have experience helping someone with an issue on BitBucket with PII data that you can't rotate.

Once we eliminated the references in the tree and all forks (they were all private thankfully), we reached out to BitBucket support, and they were able to garbage collect those commits, and purge them to the point where even knowing the git hashes they were not locatable directly.
even better you can actually commit to other forks if they creates pull request to you.

(there is checkbox allowing that when you are opening PR that I bet almost noone noticed)

I reported that years ago and all they changed it that they extended documentation about this "feature"

my main issue was that you cannot easily revoke this access because target repo can always reopen PR and regain write access.

but they basically "stated works as intended"
The article states that this “vulnerability” might exist in other scm systems as well
Amazon is surely working on an LLM competitor integrated into their ecosystem. Even using Llama 3.1 would suffice.
I'd suggest using Perplexity.
'...diabetes healthcare in the UK is effectively non-existent past diagnosis.'

I was referred to a dedicated team with a specialist nurse who checks in with me regularly. Maybe I am fortunate not to live in a big city where most NHS facilities seem to have descended into third world standards?
Or as part of an Apple deal that comes with other stuff you may want. The music subscriptions are all pretty much the same unless you have very niche requirements.
(Un)related: In the late 1990s, as a student I had no internet, only limited access to email at uni and used it to request film data from IMDb’s email service, saved it to a 5.25” floppy disk and examined it at home.
Name and Password are probably going to wrap the String type. Admin and Normal don't have data associated with them. They are just flags (or tags, depending on the terminology you are used to.)

So when we write

User = (Name x Password x Normal) + (Name x Password x Admin)

we know that Normal and Admin distinguish two otherwise identical cases. So with a bit of substitution we can write

User = Normal + Admin
Normal = (Name x Password)
Admin = (Name x Password)

True + False is isomorphic to Normal + Admin, but if you aren't used to working in a language with algebraic data types you might not be used to thinking in this way.

In Haskell you'd write something like

data User = Normal Admin Password | Admin Name Password

You could equally write

data User = True Admin Password | False Name Password

because True and False are just tags, distinct from their use in the boolean type. This would just really confusing to other programmers.
My experience is that you should never code and design at the same time for non-trivial products.

When I'm doing design work, there is a product spec already defined but it almost always changes once initial designs are completed and people have a better understanding of how it would work in practice.

If you were to code and design at the same time you would inevitably writing some logic as well and this often turns into wasted effort.
Lawsuit: T-Mobile must pay for breaking lifetime price guarantee
: dev3; cat longnow.c
#include <stdio.h>

int
main()
{
long then = 0;
long long now = 0;
long long long time = 0;
printf("then was %ld, now is %lld, time is %llld\n", then, now, time);
return 0;
}
: dev3; gcc longnow.c
longnow.c: In function ‘main’:
longnow.c:8:13: error: ‘long long long’ is too long for GCC
8 | long long long time = 0;
| ^~~~
I would be interested to know what the distribution of release times for these "channel files" is like. Dropping them at 8pm Eastern time is in line with some companies' idea of well-timed system maintenance windows, whereas others prefer to do things during the workday so that if they need all hands on deck, they can get them more easily.

The latter works better with organizations that release often and have reasonable surety that their updates are not going to cause disruption -- it becomes a normal part of the day, most commonly it causes no noticeable disruption at all, and thus it makes sense to not have to have eng / ops working late hours for the release. This surety can come from different ways, but the one I've seen is having a very methodical rollout with at least a smoke-test (affecting a very small subset of "production", not internal or lab machines, so in CRWD's case it would be customers' machines), and then rolling out to a random %age of machines starting with 1%, and depending on your level of confidence, some schedule that gets you to 100% before the end of business for your easternmost co-workers.

Some additional things to gain confidence can include a 1% rollout to a set of machines that is picked to ideally provide exposure to every type of machine in the fleet, and 100% rollout to customers who have agreed to be at the cutting edge (how you get them to accept that risk is an exercise for the reader, but maybe cut them a deal like 30% off their license).

The reason I'm curious about the distribution of channel file drops, for the case of Crowdstrike, is that if it's an atypically-timed release, that could indicate that it's a response to whatever caused the dip in traffic on the 16th mentioned in the Bitsight article.

Edit: From what I understand, Crowdstrike does have at least some segmentation of releases for the kernel extension, but it appears the configuration file / channel file updates seem to be "Oh well, fire ze missiles".
I don't know if these are supposed to be leading questions, or questions combined with assuming an answer to make a point, but tl;dr code export is good.
Anyone steeped in the industry deeply enough to be shopping for a fab saw straight through the "overclocking to appear competitive" strategy from day one and knew this was a likely result. Intel's desperate marketing didn't help them (much) then, but the flip side is it didn't hurt them (much) now.
I wouldn't say it renders the camera "(mostly) useless." I have brief experience developing software to work with a facial-recognition camera that was specifically marketed as being able to recognize people wearing masks (this was in the middle of Covid). Indeed, it had no problem recognizing me with a high confidence level. If anything, wearing the mask is (mostly) useless in protecting your identity.
We have google fi and I bought my wife a new phone. She's one of those people that often forgets passwords, so to activate the new phone was like a 2 day wait since she wasn't able to authenticate from the old phone or computer and didn't have her password for the new phone. Luckily gmail support did reset it, because google-fi has no real support.

Having a backup device should help, but you may still end up locked out for a day or two if the initial verification fails. I don't remember why it failed for my wife, typically they just send a number or a prompt to the other device that you have to enter into the new device.

IIRC they also have secret keys you can print out ahead of time that you can use to recover your gmail. Presumably you'd put them in a safety deposit box or store in another secure location.