skysight-inc/HackerNews huggingface dataset:
Matt Trifiro, serial entrepreneur and current VP of Marketing at Vapor IO, offers his lessons learned from applying AI tools to marketing tasks. I took away four key choices that Matt made that helped him explore possibilities and add new capabilities he could quickly use.

1. Choose augmentation over "pure automation" (you stay in the loop, but your oversight may shrink to 10-20% of the original scope).

2. Blend research and testing (30% research, 70% testing) to walk slowly along a path that is empirically verified. Take small steps where some land in swamp, others on bedrock.

3. Stretch outside your comfort zone. If you are on the frontier substantial incremental progress can come from small steps into the unknown as much as refining what you have learned.

4. Cultivate deep empathy for customer perspective. Look at the situation from both sides of the table. Don't do things to customers you would not want done to you.
Yes, but Murdoch’s properties reflect his worldview far more explicitly than those do (except for Twitter now).
The deepmind team has a history of being misleading. The great StarCraft 2 strategist bot is still in mind.
Harnessing the Right Kind of Magical Thinking in Startups
Yes, I agree with 'Working software over comprehensive documentation.' It's that 'working' part that sometimes depends on getting the requirements right.
And most applied maths doesn't seem to worry about proofs much. They have techniques that either work pretty well or blow up.
This is perfectly normal. It is a business relationship. Are you doing what is agreed between you and your employee on your contract? Are you honest and a good worker in exchange for a payment? that's ok.
You mean your argument that it is hard to find a vulnerability, despite the fact that commercial systems in Unix kernel lineage have historically been easy to hack and have never once demonstrated high robustness?

You have not even established what level of security you are arguing has been achieved. This is not even moving the goalposts, this is Calvinball.

I contend that a major cloud service, that runs trillions of dollars of commerce is at least as important as a fighter jet. The F-35 demanded a operating system certified according to the SKPP which follows in the heels of the Orange Book Level A1. That demanded a formal specification, formal proofs, and a failed penetration test by the NSA.

Do you contend that KVM has reached such a standard? Or do you argue that such a standard is too high? What standard should be expected? How do you verify such a standard has been achieved? How does that trace to operational security goals?

The operational security goal commerce needs is for the expected value of an attack to be unprofitable. How are you verifying your axiomatic arguments are moving that needle?

Thinking that everything is insecure and all that matters is “better” is not even binary thinking, it is unary thinking. There is no meaningful discussion to be had until you:

1. Establish a measure and level of security that matches operational goals.

2. Demonstrate proposed mechanisms empirically achieve such goals or have a track record of achieving the desired level of quality such that the reputation may provide some coarse substitute for evidence.

Until that point it is: “Dude, trust me. I have been wrong every time before, but I totally got it this time.”
Dont bother. Im never going to be your demographic. I don't want to be profiled by anything for any purpose especially when 1. that profile is then shared publicly 2. I never got consent. I don’t need tailored recommendations and im not going to assess people based on a third party’s black box interpretation that cant possibly have appropriate context.
there's a literal market to clone device data. you don't even have to steal them.

in the 90s Israeli celebright made millions of govt procurement for ...i forgot the acronyms. but basically devices where you plug a phone and it copies all contacts and messages.
Kagi's Quick Answer [1] feature is great IME. The citations are the thing.

1: https://help.kagi.com/kagi/ai/quick-answer.html
They're right though- teeth means enforcement. These DOD recommendations/guidelines aren't worth the paper they're printed on if they aren't don't make into the contracts.
Dunno and I haven't worked with Simulink since 2019. There is this "type replacement" setting such that you can make Coder spit out "uint16_t" instead, but if I remember correctly, there was bugs such that you still needed to have the manual translation header. Like, some module of Simulink didn't follow the setting. God I don't miss working with Mathworks products.

> Agreed. But it needs to stop there.

Heh. Ye ... about that.
If the tools are the same as the ones AlphaProof gets (i.e. a lean compiler) then no one would use them.
True, but how would the US feel about a country throwing around the possibility of cutting them off of global supplies and even blocking their shipping routes? Do you think US citizens would feel good towards such a country? Not to mention that of course the US have been waging a commercial war with China already for several years.
Email servers also put a high spam score on new domains, from what I've witnessed.
Mamba, SSMs and S4s Explained in 16 Minutes [video]
Secure Boot itself is fine, the problem is shipping ANY keys by default. I use Secure Boot myself with my own signed keys on my laptop and its nice knowning it can only run what I allow it to run (password protected UEFI ensures only EFI binaries or kernels I signed get booted and that ensure it mounts my encrypted partitions).

The problem is when these other keys are pre-shipped they invalidate the entire "ensures only [...] kernels I signed" part. And just removing the pre-shipped keys can cause other problems: https://github.com/Foxboron/sbctl/wiki/FAQ#option-rom
https://project-haystack.org/ is what immediately came to mind when I read "haystack".
I use UberEats in Japan and usually tip.
The vast majority of the payments are either education or payment for services rendered, like the article mentions.

At a high level, companies actually think their products have value to patients and want doctors to know about what it can do. It is virtually impossible to decouple knowledge sharing from influence. The point of knowledge sharing is to impact choice and behavior.

On the services front, If I want to hire a doctor to fly across the country and do Brian surgery on a pig or cadaver, I expect to have to pay them. Similarly, if they are running a clinical trial, I expect to fly them to the surgical training and feed them, and pay for their time.

>purely the influence of the money/benefits and perhaps their hope to get more of the same from you later.

Direct kickbacks for prescriptions are a thing of the past. It is pretty hard to come up with a situation where future benefits is conditional on the behavior. Like, I suppose you wouldn't invite a doctor that doesnt use your product to give feedback on it or be part of a clinical trial, but that is a niche feedback to worry about.

Lastly, articles like are very misleading when it comes to the details. In their reference for $2B in payments [1], includes things like Royalties.

>The greatest proportion (27.3%) of value was from royalty or license payments (≈$484 million of $1.8 billion) followed by service fees (26.6%), such as faculty lectures ($472 million of $1.8 billion).

If they are claiming paying royalty or license payments for inventions (like developing a hip implant) are a kickback, it frames the whole argument as rhetoric.

https://www.ncbi.nlm.nih.gov/pmc/articles/PMC5470350/
Is it unfair? It seems reasonable that someone might prioritize - and subsidize - a long-term relationship with a repeat customer, over someone who's just passing through.

> Astounding such behaviour exists in modern times

Go shopping in a Moroccan medina some time and you may really have your mind blown - "such behavior" is the whole point there; every sale is a negotiation, no fixed prices for anything. Cultures vary!
AI (Double) Agents: What to do when your LLM can't be trusted
The lawyer is getting paid whether you file something or not. They're employees of the company. I think they care less about their cost to their employer and more about wasting their time on petty stuff (when they could be doing important stuff).

It's a difference that doesn't change the outcome for the sort of thing you're responding to here, but certainly a difference that matters in other circumstances.

For example, Disney will gladly spend far more fighting someone selling counterfeit Disney shirts out of the boot of his car than any profits from sales they'd lose to that counterfeiter. But if they don't fight him, they lose their trademark.
Whole thing is very creepy and weird, and no one involved will like or benefit from it. BUT. Can anyone explain what on earth "standardise its employees’ smiles" actually means? Are we talking quantity of teeth visible, mouth dilation, duration, accompanying sound etc?
Yes. Increasing from 0 to 1 on a 0-100 scale. Then it may go back down to 0 again.

This is how enforcement works in a world where people are giving up their enforcement.

It's almost like the world is connected... and people doing things easier in other countries cascades on.

>There are absolutely no "drug free" environments in the world, absolutely none so your statement is impossible to assert in reality.

Wrong. There are several. It's okay if you want to be wrong.

>I prefer to live in a society where death penalties do not exist, even less for the cases of substance use/abuse.

Irrelevant. I don't care about your personal stance on death penalties. Has nothing to do with what I wrote.
lol, not true. You get -4 points at the max. I downvote many stupid comments a day and the hordes just keep coming. Look at all the so-called "researchers" complaining about "open weights" in all the AI threads for exhibit A.
Communists also happen to be the sole reason why Polish people still exist, because a certain Austrian painter was going to eradicate them all after he was done with the Jews.
With such efforts I think it is time for people start deleting their accounts, not because they want/need to hide anything, but some people may want to stay semi-anonymous by using aliases and data mining everything and correlating it with other sources (e.g. LinkedIn) may help identify them and cause trouble (e.g. someone wrote something about their workplace without naming it, but hey, it is "John Doe that works in MegaCorp".
that's out of date for at least 6yrs. most Linux distro already support many ways to generate your own keys and automatically sign your kernels and modules. and bioses have ways to enter "user mode" so you can upload your PK etc.

but still, since the attack for this to be worth is out of this world rare... very few orgs bother to even document it in the main guides because it gives zero protection and infinite support load
I've definitely been using it for more than a month now. My kid loves using it as an impromptu space knowledge pop quiz game with a simple system prompt.

Maybe it's released to paid users only? The only thing missing from the original announcement is voice interrupting the ongoing response (well and the Scarlett Johansson voice)
Yeah, there’s a balance here. There are common nets like SDA, SCL, GND, VCC that make sense to have as global nets. And then there’s actual circuits where it makes more sense (for understandability) to not do it like that.

Here’s an example that I think takes it too far: https://cdn.sparkfun.com/datasheets/Dev/LilyPad/LilyPad-MP3-...

- The audio jack (line level) could have just sat to the right of the codec and been directly connected to it to make it clear that it’s just a direct output

- the speaker amplifier could be directly connected to the audio jack as well. I spent a lot of time looking around to figure out where it actually connects to; I figured it would have its input connected to the MP3 codec and didn’t realize that it would be connected through the micro switches inside the headphone jack (which makes sense now that I see it)

- the SD card slot could either be connected directly to the codec or could have better names on the nets. When I see MOSI, MISO, and SCK I assume that they’re connected to the main MCU. Even more confusing, there’s an SD-CS that is connected to the MCU but not the rest of the SPI pins

Overall I’d probably give this one a B. It’s by no means the most egregious I’ve seen but it also obscures the signal flow pretty badly.

Other things I would probably consider doing:

- better clustering of pins on the MCU by function. The switch inputs and LED outputs that connect to the rotary encoder are all over the place. Most tools allow you to move the pins on microcontrollers around at will

- the FTDI block could move onto the first page. The DTR pin could use a bit of explanation that it’s tied to the reset circuit. Not their fault in this one but the naming inconsistency between
FTDI-RXI and TRIG4/TXO is confusing until you figure out that the pin is meant to be either a GPIO or a UART pin. The name doesn’t make it clear that it goes to the FTDI chip because it’s inconsistent with the rest of the FTDI-xxx names but that’s because most ECAD programs handle net names poorly anyway

Edit: one more thing that really bugs me about this schematic: the Vbatt net leaving J1. It’s labelled but not with any kind of flag or loose/unterminated line that would indicate that it’s connected to the net leaving U2. And further with that, the fact that VIN on U2 comes only from the FTDI connector on the second page (I think…)
So my expertise in apple, google and tesla is not so unique?
that's why they put up disclaimers saying that it is beta and does not work on mobile.

> Support for additional languages, browsers, and platforms will be expanded over time.
Right. The ends to things are subjective. What's your point? When is a house completed?
they did it "simpler", i.e. academic work has to be "perfect" in a way a product does not. so (from my perspective), they punted the entire concept of making what I would refer to as a "layer aware linux distribution" and just created layers "on demand" (via RUN syntax of dockerfiles).

From an academic perspective, its "terrible", so much duplicate layers out in the world, from a practical perspective of delivering a product, it makes a lot of sense.

It's also simpler from the fact that I was trying to make it work for both what I call "persistent" containers (ala pets in the terminology) that could be upgraded in place and "ephemeral" containers (ala cattle) when in practice the work to enable upgrading in place (replacing layers on demand) to upgrade "persistent" containers I'm not sure is that useful (its technologically interesting, but that's different than useful).

My argument for this was that this actually improves runtime upgrading of systems. With dpkg/rpm, if you upgrade libc, your systems is actually temporarily in a state where it can't run any applications (in the delta of time when the old libc .so is deleted and the new one is created in its place, or completely overwrites it), any program that attempts to run in that (very) short period time, will fail (due to libc not really existing). By having a mechanism where layers could be swapped in essentially an atomic manner, no delete / overwrite of files occurs and therefore there is zero time when programs won't run.

In practice, the fact that a real world product came out with a very similar design/implementation makes me feel validated (i.e. a lot of phd work is one offs, never to see the light of day after the papers for it are published).
The Hidden Gulag – Exposing NK's Prison Camps (2003)[pdf]
> The current state of play is incredibly bad

Then browsers should provide less data for fingerprinting, not more. Every new feature that provides data for fingerprinting, should be behind a permission. Then any old features allowing fingerprinting (like reading canvas content or getting GPU name) should be gradually put behind permissions.

What Google does, is it just provides more options for fingerprinting under excuse that someday in future (maybe, just believe us) it will help to improve privacy.

> shady organizations can and do buy things like location data

Why it is not forbidden by law?

> The ability to strip individual identities from those datasets and make the level of targeting aligned with something very course grained like interests

You can show ads matching page content or user's request and it will be in most cases relevant. You don't even need cookies for this. You don't need to know someone's interests. If a person is watching a GPU review, add a link to the store selling this GPU with a discount. If a person types "buy 3090" in Google, put a link to the store in the search results.

Also reality is, in many cases advertisers want to advertise some product nobody really needs. Often ads have a click-through rates below 0.1% or even less. This means that there is no need in such ads in the first place. Instead of trying to sell it maybe you should make something that people will want to buy at a reasonable price.
Yes, this beta explicitly is not yet running on Firefox or on mobile browsers
not to mention be safer than everyone using Intel or Microsoft free for all keys.
One data point:

I checked my profile earlier and there was none, though my HN profile has scads of info. That's why I was curious.

Totally fair to say "Word limit!" or something, but it means your reply doesn't seem to jibe with my observation.
A bodybuilder has a better chance of winning a powerlifting competition than the other way around.
Malaysia isn't a victim. Malaysia consented and chose to run Windows. They got what they asked for.
Parking outside the city at P+R Westraven and then taking a tram to the client took 20 minutes, going directly to the client by car was 10 minutes. So I would just drive there directly, as it was faster and much more convenient than having to switch from car to tram and then walking 10 minutes for the final leg.

If Utrecht would invest in better public transit that would lower the amount of cars significantly, I assume. If the P+R was a better option I would for sure have taken it.
Jini. I remember reading an article (in print) in Wired about that. With Bill Joy with I guess "genie shoes" on the cover.
And that first hit in JAMA Open is a fabulous paper. Ten or mire yearly MRI scans for 650 subjects.
Lots of bars have "happy hour all day" except during peak hours, like 7-9. I submit that they don't actually have a happy hour, but instead a sad hour. Waiting for somebody to propose legislation to require that they market it this way.
> Don't get me wrong, search has become extremely problematic, ... but how much effort does it take really?

Many days or weeks infact

The provided examples don't illustrate the problem properly. Let's say you're new to a problem domain but don't know it's a highly specialized domain. So you don't know the keywords to search but have a vague sense of what needs to be accomplished.

If the new tool can make sense of your vague problem and point you in right direction, it would be great.

Don't know if this is actually a $600B sized problem.
Math and Art of Smooth-Rollers in Solidworks
I'd happily trade those three shows for the hyperpolarization.
because it is an early beta?
6 months ago I predicted Algebra would be next after geometry. Nice to see that was right. I thought number theory would come before combinatorics, but this seems to have solved one of those. Excited to dig into how it was done

https://news.ycombinator.com/item?id=39037512
It wouldn't happen in my company, but the Serbian law would also protect the employee enough that you'd need written proof about the behaviour, and the HR and legal team would have to review it to ensure we are not getting in trouble if we ever get sued for wrongful termination.

But even in the US part of the company, it should be hard for it to play out, but probably a lot easier: while most people, including other directors, seem to be good human beings, we are all stretched extremely thin and I am sure someone could easily get something to slip past us.

TBH, I am always surprised how do people get into situations like this and what are the types of people that do this? Like what do they gain from it? How far it takes them? I know I am naive and I have seen my fair of shit over ~20 years in the industry, but it still boggles my mind.

On the other side of it, I am sure one person — they under-performed but thought extremely high about themselves and got frustrated when I disagreed — would have claimed they were being mobbed by me (even after attempting to get improvements from them for 6+ months). So since you are not in your close-friend's shoes, do take note that they might not be sharing the full story and they are certainly not 100% objective either.

But for anyone having these sorts of disagreements with me, I advise reaching out to an HR or my superior directly with specific instances of problems they have concerns about or feel I am misrepresenting. For my part, I keep records of chats, emails and 1-1s to establish "facts" that drive any decisions I make, especially when it comes to life-affecting decisions like these.
Chicken wings advertised as 'boneless' can have bones – Ohio Supreme Court
I run pinecast.com. If there was a leaderboard for hn users serving XML, I'd almost certainly be in the top five.

I don't disagree with your post. But: RSS downloads are at an all time low, and that's a bad thing.

They're at an all time low because Spotify and Apple both fetch feeds from centralized servers. 1000 subscribers no longer means 24000ish daily feed fetches, it means 48. With keep alive or H2, these services simply don't reconnect. The number of IPs that hit me from Apple, for instance, is probably only double digits.

Since Apple and Spotify both sit between me and the listeners, they eliminate the privacy that listeners would otherwise enjoy. It also forces podcasters to go to them to find out how many people are subscribed, which means lots of big databases instead of one database that I host for my customers.

Centralization of feed checking carries huge risks, in my opinion, especially as both Apple and Spotify make moves to also become the hosting providers.
This consumer (me) values security highly enough that he would prefer for the firmware update to render the machine unbootable (as long as it remains possible to render the machine bootable again by re-installing software).
neither the knative controller nor the underlying kubernetes scales down to zero.
A strong economy helps certainly but a JG eliminates involuntary unemployment, provides a basic income, ensures price stability and sets the minimum work standard the private sector must exceed in order to hire.

If you’re waving a magic wand anyway why not choose the best policy?
The AI took a day on one of the problems so it must have generated and discarded a lot of proofs that didn't work. How could it choose which one to submit as the answer, except the objective fact of the proof passing in Lean.
Even the app doesn't support cycling directions in many cities, such as the capital of New Zealand.
I am confused as to why it's more undiscoverable than, say, some LLM.

> The problem is the space of possible commands is waaaaay bigger than the space of commands you can manually handle, which means if you just randomly try stuff 95% of the time it won't work. Users learn that very quickly and end up sticking to the few commands they know work.

This is not strictly true. Context free grammars can be written to handle (finite) sentences of arbitrary length! if you have a rule like "play me <song>" and then <song> can be "a song that lasts longer than X" or "a song by <artist>" (then you have <artist> be "<some name>" or "some German singer" or whatever....). You can just keep on going.
I also think NixOS is more targeted towards developers. It’s one thing to learn the syntax, APIs, and abstractions of Nix/NixOS. It’s another to stack all of that on top of learning programming in general.