skysight-inc/HackerNews huggingface dataset:
Not sure why you’re downvoted, I think a comparison with prions seems apt and interesting, and bad protein copies that can replicate is essentially an information process. GAN research in recent years showing how you can sabotage a working dog/cat classifier with a one pixel change feels similar to how the tiniest parts of large systems can sometimes undermine the whole completely, albeit with low probability. And finally, since models will bootstrap models that bootstrap models, inevitably there are already subtle issues out there in the wild that may have an incubation period of many years before the downstream effects are completely clear.
What's blind about it? Reading files is nicer than parsing ps output or needing to write native code over a syscall.
> If they want to salvage Alexa, they need to forget shopping and start doubling down on the smart home and assistant experience [...] and I wouldn't mind paying a subscription fee for it

Why do you say that (both parts)? Alexa has done a good job to integrate with lots of other devices. I can control many aspects of my house through Alexa - lights, blinds, AC, sound, etc. I value that, but I don't think I value it enough to ever want to pay a subscription for it. That's as silly as whoever though selling heated seats in your BMW would fly. I made sure that in each home component I chose a solution that works locally (only AC I had to compromise for lack of options).

And with all that value it provides as a hub? My alexa can't be used to buy anything, call anyone, etc. None of that is configured or permitted as much as I can shut it down. I don't personally see the value there.

I for one am curious where Amazon chooses to draw the line. I don't want to pay a subscription to shout out local hub control commands, but they could be draconian to extra value.
I've been using MinGW and MSYS for Windows development since the early 2000's, mainly to keep the build process consistent with Linux. A couple of years ago I gave Visual Studio / MSVC a second chance and have stuck with it ever since.

MSVC generates significantly faster & smaller code, doesn't require additional DLLs in the final build, and the C++ compiler behaves predictably. Critically it also works very well with CMake, so my build process is seamlessly aligned with Linux.

The VS debugger is a major help too - gdb can do the same stuff, and there are UIs for gdb, but debugging through VS is just more productive and convenient. Times change!
Not the point. If users don't like it they can go somewhere else to post.

For practical purposes, reddit can do whatever they want with users post. It's right there in TOS
Dane Maxwell gave the best advice/method I've found for hiring (and managing) devs: https://s3.amazonaws.com/Publicpdf/Hiring_An_A_Player_Develo...

I haven't used it myself, but I consider myself a "good" dev and get to be picky about what projects I work on. This is the kind of job opportunity I would respond to.

Notice Dane's entire approach is centered on what the "good" devs value and are interested in: their fears and desires.

Also Dane approaches specific "top" devs directly (vs blasting out job postings and wading through mediocre applications.)
Jerks label people.

Instead focus on behaviours, I've seen frustrated people raising genuine problems labelled as a jerk.

For example, is the guy who picks up on issues in code reviews the one who is a jerk?
Why would a genetic tendency towards insulin resistance be correlated with a family history of poverty or subsistence farming? Is there any research on that? Which specific genes are involved? Which tests were used to diagnose your insulin resistance?
I believe the entire network is suspended.
Custom font is sensible fwiw. You can have a font with a single glyph implemented and you’ll override just that glyph, falling back to other fonts for the non implemented glyphs. This is why sites often have a list of fonts and not just one in the css. It’s also how other languages are supported. No Thai chars in your font? We just fall back until we hit a font with those glyphs available (might be an os level font rather than a site specified font but that’s fine).

I’d hate to try and hack a “intercept the text and add an image” type of system when the font rendering system has a trivial way to override individual glyphs already.
Suddenly our Self Hosted application became more than just hobby
Gpu.cpp: Portable C++ GPU compute using WebGPU
They should reserve rocky.top

https://phish.net/song/rocky-top
This is part of a feature I'm working on for my service, Port87. Single user domains would work the way labels work in the @port87.com accounts. So all you'd need to do to send from an address like "myaddress@example.com" is create a label called "myaddress".

I don't have the custom domains feature ready yet, but once I launch it, it sounds like it would fit your needs.
As the article pointed out, GitHub already publicly documented this vulnerability.

My employer doesn't pay out for known security issues, especially if we have mitigating controls.

A lot of people spam us with vulnerability reports from security tools we already use. At least half of them turn out to be false positives we are already aware of. In my opinion, running a bug bounty program at all is a net negative for us. We aren't large enough to get the attention of anyone competent.
Cloudstrike customers voluntarily agreed to allow Cloudstrike to push kernel drivers. What should Microsoft have done to prevent this?
> If you believe this, you don't understand how LLMs work.

Nor do they understand how intelligence works.

Humans don't read text a letter at a time. We're capable of deconstructing words into individual letters, but based on the evidence that's essentially a separate "algorithm".

Multi-model systems could certainly be designed to do that, but just like the human brain, it's unlikely to ever make sense for a text comprehension and generation model to work at the level of individual letters.
CrowdStrike Timeline Mystery
Sometimes I wonder if all the security features GitHub slathers on top of `git` lull people into a false sense of security when fundamentally they're working in a fully distributed version control system with no centralized authority. If your key is leaked the solution is to invalidate the key not just synthetically alter your version of history to pretend it never happened.
And unscheduled updates and reboots is the IT department failing to do their job. Last Windows shop I worked at, every single update and system restart was scheduled days if not weeks in advance and the systems mostly only went down unexpectedly when hardware was failing, which is pretty OS-agnostic.

Of course, if you just have a few fly-by-night Windows systems that aren't centrally managed, you're going to have issues.
For the first two, git is based on content addressable storage, so it makes sense that anything that is ever public will never disappear.

I can sympathize with someone who gets bit by it, as it might not have occurred to them, but it’s part of the model.

The third strikes me as counter-intuitive and hard to reason about.

P.S. If you publish your keys or access tokens for well known services to GitHub and you are prominent enough, they will be found and exploited in minutes. The idea that deleting the repository is a security measure is not really worth taking seriously.
The vast majority of the debris is from China and Russia irresponsibly disposing of waste and testing weapons but I see no mention of them in the article. The only cause is a thinly veiled reference to SpaceX. Controlled satellites in LEO, whether you like it or not, are not orbital debris. It's a classic hit piece.
For what it's worth energy and electricity consumption are not the same. Fuel (for autos, planes, heating oil, etc.) would be included in energy consumption but not electrical.

I'm having trouble finding reliable data quickly, but looks like 35% of energy consumption in the world is electrical.

It's still an increasing fraction as you say, but it seems like a doubling or quadrupling of energy used for AI would probably have much less of an impact than the share of the population using ice-cars changing a few percentage points.
Money talks and if you don't like money they can just throw you out of a window or label you a terrorist so you never had any real power. Once they flex you've got nothing.
Can someone with a background in contract negotiation, vendor onboarding, and business continuity risk management share their expertise? We'd love to hear about typical vendor contract provisions that protect customers in situations like this.

If damages can be demonstrated, what are the chances of airlines successfully claiming compensation? Or, in practice, do such cases usually result in significant discounts during the next contract renewal rather than actual damages paid out?
It might for you. That would be a myopic view of the world and of dehumanization by nearly any widely accepted definition.
This is so strange to me. Weren't they pretty gung-ho about GDPR?
This article doesn't quite land for me.
It could perhaps use an introductory paragraph explaining who it's for / what the goal is.
For example, are we trying to build cross-platform software, with a single build system?

> If you want to develop C or C++ on Windows, your options get more complicated.

This is a weird thing to say.
If you want to build software for Windows -- especially so in C or C++! -- your choice is simplified.
The best way to build software for Windows is to use Windows tooling.
MSVC is excellent at compiling standard portable C and C++ code to a native windows executable.
If you write portable code, it will compile with any of the major compiler suites, for any of the platforms they (fully) support.
> here if anywhere

:-D

We can play a lot of games with "what is a symbol", but compactness pervades many of the models that we use to describe reality. The crux of the argument is not necessarily that the symbols themselves are compact as sets, but that the *space of possible descriptions* is compact. In the article, the space of descriptions is (compact) subsets of a (compact) two-dimensional space, which (delightfully) is compact in the appropriate topology.

In your example, the symbols themselves could instead be modeled as a function f:[0,1]^2 -> [0,1] which are "upper semicontinuous", which when appropriately topologized is seen to be compact; in particular, every infinite sequence must have a subsequence that converges to another upper semicontinuous function.

Much of the fun here comes from the Tychonoff theorem, which says that arbitrary products of compact spaces is compact. Since the *measurement space* is compact, the topology of the domain is not as important, as long as the product topology on the function space is the appropriate one. (Mystically, it almost always is.)
They need to do exact same thing with .xyz TLD. It's gotten so bad that I had to block .xyz on our router.
In this case a guy asked an LLM. So dumb.

https://news.ycombinator.com/item?id=41054756
Can you do similar trickery to ensure `mount` doesn't list your bind mount?
Cygwin is currently the bane of my existence.

I'm working on software, that was originally written in CORAL and running on mainframes and then translated to C to run on UNIX.

Company policy is, that all programs have to run on Windows, so nowadays we work with Cygwin
Don't get me wrong, it works, but there a thousand annoying things, bugs an inconveniences.

I'm currently spearheading an effort to migrate to wsl2 (and docker). The developer experience is vastly better on wsl.
> Stop assuming all platforms are Linux

We've gotten to the point where outside of some consumer-facing niches like gaming, or industries with vendor locked-in tooling, it's largely true that it's all Linux
> The reason the original CEO was replaced by a guy and another guy and finally Musk is because the cost of Roadster parts was higher than the price of Roadster.

Interesting, I had not heard about that aspect.

That ability to see and remove unnecessary costs matches what Musk managed with SpaceX, so I can believe he also has that skillset; but more recently with Tesla (and continuously with Twitter) it's felt like he saw the costs and rejected the idea that any of those things might have value.

This would still make him the wrong person going forward, but for different reasons.

One way in which I think he would continue to bring value to Tesla, is that he can be an excellent showman (which goes with selling smoke and mirrors until the reality catches up), and this makes Tesla models far more iconic than many other more forgettable modern cars. For example, although everything about the Cybertruck screams "unsafe" to me, it also looks cool and nobody's going to confuse it for a different brand of truck.
> not have automated tests for their config files

They very likely have automated tests. However, what if bug only triggers 90% of the time and you hit the lucky 10% during automated tests? Of course you can run tests 100 times but... is this a common practice? Moreover, we have both code and anecdotal evidences that the bug may indeed happen randomly. Tavis Ormandy posted a rough analysis of the crash context: https://x.com/taviso/status/1814762302337654829. It looks like the crash is caused by first checking if an uninitialized pointer is NULL, and if not, dereferencing it. If the uninitialized leftover data just happened to be zero, no crash happens.

And anecdotally, we saw people reporting that repeatedly rebooting their machines for 15+ times fixed the problem for them - because eventually you got lucky and in a boot it didn't happen and CrowdStrike managed to update itself to not crash.

> not have gradual/staggered rollouts for their deployments

No idea. Maybe their poor reliability guy got overrided by another team, like "how dare you delaying our important definition update? we're racing with threat actors!". I hope they learned their lesson.
And here I am following a WFPB diet with high carbs and reversing my A1C + some other markers.

My philosophy is that many diets work, you just can not have a cocktail. Our body is not a hybrid car. It takes time to switch/

Choose what you can live with - high carb, low carb, keto - and stay focused.
I noticed that too. If I had to guess, and I don't, I'd say they changed just to be in line with everyone else. Although I wish they would have gone back to the ray gun as a sort of "told you so".
There is a 'gravity hole' in the Indian Ocean, scientists now know why (2023)
Very inclusive of the Martian audience.
Lot of places take Amex now. I see most POS taking it. There are some holdouts who only take Visa, Mastercard but pretty much everywhere in my small town take Amex without any comments.
Faster exact match queries on molecules in DuckDB inspired by Umbra-style string
Delta's revenue is only $58.05 billion in 20213. I'm not sure how a day or two of canceled flights is going to be anywhere near $5.4B.
You can sue your provider and still continue to use that provider. Look at the Apple vs Samsung lawsuits as an example
Just browsing around right now, I already found these [0] [1] [2], the format is identical to those I've been seeing. This one [0] even seems somewhat successful at blending into a discussion, even getting a human to reply once.

I found about 5 of such accounts just today, often several per a new thread. A lot of them operate in eastern time now. At some hours, every third front page post has a few of these. It's surreal to see the dead internet hypothesis come true in real-time.

[0] https://news.ycombinator.com/threads?id=oslis

[1] https://news.ycombinator.com/threads?id=pljldos

[2] https://news.ycombinator.com/user?id=whjkh
It feels like “just” is doing a lot of work.

Do you mean by dynamically changing the strength of the lens, or something more like Apple’s Vision Pro?
Claude needs to fix their text input box. It tries to be so advanced that code in backticks gets reformatted, and when you copy it, the formatting is lost (even the backticks).
I'd be happy ordering with a voice assistant if it's at least as good as I am at deciding good alternatives. Imagine I want to, say, purchase garbage bags, because I am out. It's not exactly a complicated product, and yet I might care about whether it has any smell reduction agents, whether the bag is tough enough, the size, and possible alternatives that are either a bit better, or quite a bit cheaper. Either the agent understands my preferences, or I am not going to trust it.

And as we look at Amazon's webpage, we first have straight out ads, then a few items it hopes I might buy that are typically related to what other people buy, and maybe a mention of what I bought before, but no understanding of why I bought that one. It's not a very easy task, and one where it's easy to lose trust
Not going to happen. Truth is almost all creators, even small ones like individuals -- like copyright (with the exception for patent trolls). Only consumers don't like copyrights.
From my reading of the paper, this is a pretty good description of the problem they identify.
The two problems I see with this story are

1) These types of products cause incidents all the time, this was just a very high impact one that happened to affect everybody all at once.

2) Their product is very good compared to the competitors.

All products in this space are black boxes, but CS is one of the least black-boxy, the alerts it produces are decent, the tooling is comes with is especially good (from an operator perspective), and the reporting it produces is exactly the sort of thing decision makers in big enterprise love to see.

I doubt there’s going to be much churn from this, definitely not an existential amount. As much as I personally can’t stand the organisation, I think they absorbed most of the bad press on behalf of all the service providers they took offline.
Regardless of anything else, in this well-known quote Zhukov isn't describing a human wave attack.

He furthermore explains how the casualties of ignoring infantry mines are in the end about the same. Remember minefields were not really used as area denial but for delaying operations. An offensive operation that gets successfully delayed results in much greater casualties later on, as the enemy has more time to prepare or retreat in an orderly fashion. Which is the whole point of using minefields!

But in any case, as Zhukov explained, the casualties of ignoring mines vs taking the time to disable them would have been about the same. So no real difference in lives.

The context of Zhukov's quote also matters. Unlike the case with the Western Allies, the war between the USSR and Nazi Germany was existential. Had the USSR lost, there was no surrender or retreat possible. There was no "going back home" or being "under new management": Nazi Germany had their Generalplan Ost, most of the Soviet officers would have been executed and more importantly 80% of the Slavic population of Eastern Europe would have been executed as well. When facing this kind of outcome, the tradeoffs that must be made are different.

But this is all a tangent, because what Zhukov describes is not a human wave attack. A human wave attack is infantry charging in waves, without cover or any tactics, and getting mowed down by dug in enemy infantry, without care about casualties and without any thought for tactics. This is definitely NOT what the Soviets did; in fact commanders who wasted the lives of their soldiers in this way were reprimanded, punished or removed from their posts (with some exceptions, of course, but exceptions also happened with the Western Allies).
Not defending GH here (their position is indefensible imo) but, as the article notes, they document these behaviors clearly and publicly:

https://docs.github.com/en/pull-requests/collaborating-with-...

I don't think they're being underhanded exactly... they're just making a terrible decision. Quoting from the article:

> The average user views the separation of private and public repositories as a security boundary, and understandably believes that any data located in a private repository cannot be accessed by public users. Unfortunately, as we documented above, that is not always true. Whatsmore, the act of deletion implies the destruction of data. As we saw above, deleting a repository or fork does not mean your commit data is actually deleted.
I agree its a necessary but not sufficient condition. I think phrase 'sucking up' seems to have triggered people. I should've said 'building trust and camaraderie' with my superiors, aka being one of the 'bros' in their inner circle .
I mean a fair bit of content on Reddit and Twitter is machine generated now, right? And content on Reddit and Twitter is being used to train new models, right?
We'll be working on that in the coming days. Thought the data at this point was a good start.
It would not even be that hard to fix it; private forks should always just be automatically copied on first write. You might lose your little link to the original repo, but that's not as bad as unintentionally exposing all your future content.
I run a service called Port87 that supports using the dash (-) for this purpose. I'm working on adding custom domain support.

I know what you mean about sites that don't accept it. Microsoft even has the gall to call it an "invalid address" when you use a plus.
When I was a kid, I remember my parents used to try to pay for everything with their Discover card and would only use their Visa as a fallback. I was too young to understand the differences between credit cards at the time, but I remembered my parents always asking "do you take Discover?" everywhere we went. I never realized this wasn't just something only my parents did until I saw the Futurama joke about this years later: https://www.youtube.com/watch?v=2-nSwKOVZyk

Fry: Do you take Visa?
Cashier: Visa hasn't existed for 500 years
Fry: American Express?
Cashier: 600 years
Fry: Discover?
Cashier: Sorry, we don't take Discover
Twitter has had custom images for emoji for years, the set was/is called Twemoji. This allowed them to have consistent rendering across platforms.
The problem is systemic. People believe that the pursuit of monetary and financial profits by corporations will lead to the creation of benevolent artificial intelligence. I personally think this is essentially a religion because it is obvious that the pursuit of profits can not actually create anything benevolent, let alone intelligence.
There's a bunch here (as I look right now) in the noobcomments section of HN.

https://news.ycombinator.com/noobcomments

One example from this page: https://news.ycombinator.com/item?id=41060732
My thoughts exactly. For all the hand wringing they did about cutting costs, their focus is on redesigning emojis? It's obvious to me that Elon doesn't actually care about making the service better and solving real problems (like boosting revenue or fixing problems that impact users).
I know that F# and VB technically exist, but C# already covers 99% of what people think of when they say .NET
All previous comments on HN about the incident... I've seen absolutely no one praising the thing as a security solution but a lot of people posting that it's bought to pass audits.
Great to see this change. The decision to get rid of the gun emoji was itself an act of political activism, highlighting the left leaning bias in many of these organizations - or at least the power given to the voices that pushed for those changes. It was a naked way to influence the culture around guns, and make them less visible. But it also killed funny uses of the actual pistol emoji. For the record, the underlying Unicode name is “PISTOL” - not squirt gun or ray gun or whatever.

I also think that as harmless as a change from a pistol to ray gun might seem, it is a signal of how far these companies will go to push one particular ideology onto everyone - its employees, customers, etc. These large tech platforms are too powerful and influential to be allowed that kind of deep and far-reaching influence on our politics and culture, and they should behave neutrally as much as possible.