skysight-inc/HackerNews huggingface dataset:
> using a Yubico HSM for key storage, but providing middleware & admin controls

> a compelling value proposition

I completely agree; I'd originally drawn up a design for an offline root CA, then an box with a separate server for an intermediate CA with HSM for intermediate keys, a second, dedicated Secure NTP server (possibly hardware based) so that certificate expiration times could be kept short.

While all that is easy enough to prototype, the complexity of hardware distribution is better left to a later point in the roadmap.
What is your experience with how Google operates internally?

The finally seen from Thelma and Loise, that is how Google ends.
Anyone who says this is just and fair is morally bankrupt. It's insane that pointing out the unfairness of this will get you cancelled.
I remember back in the day some guy was selling the strobe light devices that emergency vehicles use on some nefarious site and it came with a warning that its a felony to even possess one of these and you should only use it for "research" purposes wink wink.

The funny part of his ad was him saying its still dangerous AF to just switch a light to green so quickly, it has the very real potential to cause accidents which back in the early aughts when this was online, I could totally believe him.

You don't need a light to change to green in all directions, using this and then thinking you're good to go and you blow through the intersection while someone is trying to beat a yellow light in the opposite direction could be disastrous.
I just got Llama 3.1 GGUFs working on my Mac laptop with a new plugin for my LLM CLI tool: https://llm.datasette.io/

Here's information on the new plugin: https://simonwillison.net/2024/Jul/23/llm-gguf/

Once you've installed LLM ("brew install llm" or "pipx install llm" or "pip install llm") you can try the new plugin like this:

llm install llm-gguf
llm gguf download-model \
https://huggingface.co/lmstudio-community/Meta-Llama-3.1-8B-Instruct-GGUF/resolve/main/Meta-Llama-3.1-8B-Instruct-Q4_K_M.gguf \
--alias llama-3.1-8b-instruct --alias l31i

llm -m l31i "five great names for a pet lemur"

This is using the GGUF version of Llama 3.1 8B Instruct from here: https://huggingface.co/lmstudio-community/Meta-Llama-3.1-8B-...
> Conversely, holding the belief that stock prices are crucial to our betterment, wouldn't that imply that we would be better off if stock prices were higher due to more wealthy people owning stock and fewer non-wealthy people owning stocks? At face value that doesn't sound right, so I must be getting something wrong.

The driving factor there isn't who owns it, but how rapidly it's being sold. The exact same situation would occur if the stock was already owned by everyone equally, and they were all forced to sell due to a wealth tax on everyone - the price would crater.
I believe these were separately trained not distilled. Though the 405B was used for synth data for the other two
It's a book ad. He never answers his own question, just pitches his book.

"This is one of the central questions underpinning this newsletter and my book."
When I did analysis for a living years ago, we used a subset of Unified Modeling Language (UML) and delivered the result as a Word document containing both the use cases and a class model. That format seems a bit heavy to me now, but the basic idea is still valid.

Coincidentally, the guy who taught me this process just published a book about it, which he now calls "Agile with Blueprints": https://www.agilewithblueprints.com/

You can find a sample deliverable on GitHub here: https://github.com/AgileWithBlueprints/eRecipeBoxSampleApp/b...

Caveat: It's hard to convey the value of this approach because it shines most on complex systems that are hard to wrap your head around, and it feels like overkill when used on the kind of small project that one might want to start with. That said, I learned a lot of valuable lessons from it.
To add to this:

- There aren't compelling new models to sell to existing customers. If you bought (not leased) a Tesla, there isn't much reason why you might want to upgrade. How long as the current Model S design been around? Even though there is an updated Model 3, it's really hard to tell from the exterior design. The changes were subtle.

- The interiors are still less "fancy" than other cars in their peer group. And with more cars in that premium EV peer group, interior design is important.

- The constant price changes really messed with resale values. When Tesla is about to have a bad quarter, they drop prices substantially. This in effect makes all current used Teslas less valuable. This drops their resale value, which in turn (a) makes current owners angry, and (b) makes it so that current owners have less money on a trade-in to buy a new car.

In my mind, the company is still learning how to be a car company. They've shown that they can make cars (pretty high quality). But they haven't really shown that they can sell multiple cars to a customer.
> could you just hotwire the lights themselves and bypass the controller?

Assume you're a bank robber... place a bug (e.g. a raspi with an lte dongle) in a cabinet somewhere, now you control all traffic lights in the city. Then when you do the heist, progressively turn each intersection you pass all-sides green, and dumbass drivers will do the rest and prevent the police from catching up with you.

At least here in Germany, IIRC there used to be a mandate for a "detect conflicting greens" hardware interlock - pretty simple, wire the green light powers to AND gates, and if they trigger, shut down the cabinet hard. Same for a red light burning out - measure the current on each red light power line, if it drops below a threshold, shut down everything else to avoid a driver not seeing any light and t-boning someone who legitimately has green.

But a system without such a hardware interlock will just happily do what is asked of it.
haha yeah i was chuckling at that too
Yeah, go w/ htmx + vanillajs (or possibly alpine.js or https://github.com/gnat/surreal) would be a reasonable option for many government projects. You can audit the htmx codebase and it is dependency free (same w/ alpine & surreal) and self-host everything, go compiles to a single binary for deployment.
Slightly off-topic and maybe against the typical viewpoint of the site, but if they spent this much money on bike lanes, e-bikes and public transport, self driving cars (and all cars) would get much better.
They open sourced Gear VR. The are a stark contrast to other players in terms of how they have built everything on open standards (OpenXR, WebXR, etc), and they have just opened their platform by allowing third parties to build and customise it to make their own commercial offerings. Not open source, but a quite a contrast to every other player in that industry so far.
Technological Revolutions and Financial Capital (2003)
First off, beautiful looking website. Nice job on the branding.

The question I find my self asking is "what type of person is using this?" "who do I want to connect with?" "why would I want to connect with them?"

You have a bunch of corporate logos, but I don't know what you are implying with them. That people who work there are using Overlap? Why are they using it?

I was happy to find "success stories" in your footer, but clicking on that lets me tell you about my success.

I need/want to hear from your users that they are having success. I want them to tell me why I need overlap.

The more I think about it, the more I am wondering why this is better than LinkedIn, where everyone already is. Sure, I get spam, but that's easy to filter, and I am there filtering it.

I feel like overlap is going to be giving me more spam, and now it's in my inbox, which is precious to me. Why is overlap going to earn a place in my inbox?

I've never understood the Bumble Bizz (which I think failed), but LinkedIn has been quite successful for me.

A matching system for an accelerator seems very different than a more generalized site, which it seems you've built here.

Let me be clear, I'm not saying what you've built isn't valuable, but distribution is the key to getting something off the ground, and a two-sided marketplace, which is what you have, needs a good distribution strategy.

Have you thought about focusing just on the accelerators, incubators to grow overlap, so that when people like me are hearing about it for the first time, I'm not wondering why I would use it, but rather, I know, person X,Y,Z met there, or it was successful in this way. Etc etc.
There's no actual information about the browser, but given a quick scan shows that it pulls in PyQt I assume its just a wrapper around a qtwebview?

[edit: looked at the actual sources and yes it is just a qtwebview]
Thanks appreciate it!!

I'll explain for you what my comment means. Operating income is a measure we use to see how profitable a company is at its core business after you subtract the costs of running that business.

Yes the credits are a small portion of Tesla's income but after account for the costs of building cars what's' left is the operating income. Those credits are about half o that income, without them the operating income( a measure of if the core business works) would be cut in half.

That is a significant measure.
There's also trams, and the bike infrastructure - 9 out of 12 month I use virtually only scooters / bikes to travel around. And that is from Saska Kępa travelling to Mokotów/Żoliborz/Wola/Ochota.
> But the main reason I'm leaving is because people here are assholes... If I could have one wish it would be for Putin to nuke Warsaw.

Good god that escalated quickly.
I mean you can try another doctor. I am surprised that you have to pay more than 10 euro per month though.
This is trivally disprovable. Everyone has countless encrypted files on gdrive. What do you think a keepass db is for example?
I think I’m far from alone from in preferring car-free urban living if the cost of housing were even close and if the schools were as good (they are in a few places! But the cost of housing…)

I don’t like cars and sprawl. That’s not why I “choose” them.
Not really, otherwise services that host user-generated content, like youtube, wouldn't exist.

What a hosting service needs to provide is a way for the user to flag content + provide an "acceptable" response time.

Another approach, a more proactive approach, is for the content owners to share the digital "finger print" of the IP (movies, music, etc.) with the hosting service, so that the hosting service can scan uploaded files and compare them.
I'm really trying to find some deals on machines that can natively run Windows 11 since 10 is going to stop being supported next year. I've seen machines on Amazon/Walmart that claim to have 11 installed, but they're machines from 2013 that have 11 sideloaded in (for lack of a better term).

Since Windows 11's system requirements are so high, it's really difficult to find good prices on parts/machines that have UEFI & TPM.

https://www.microsoft.com/en-us/windows/windows-11-specifica...
What age and how much terminal familiarity did you start playing?
> Apple did

Apple did not have to sign a settlement with the EU, which Microsoft did in 2009.

The terms of the settlement state:

"Microsoft shall make available to interested undertakings Interoperability Information that enables non-Microsoft server Software Products to interoperate with Windows Server Operating System on an equal footing with other Microsoft Server Software Products." [0]

"Microsoft shall ensure on an ongoing basis and in a Timely Manner that the APIs in the Windows Client PC Operating System and the Windows Server Operating System that are called on by Microsoft Security Software Products are documented and available for use by third-party security software products that run on the Windows Client PC Operating System and/or the Windows Server Operating System. These APIs will be documented on the Microsoft Developer Network, unless open publication would create security risks. In such circumstances, Microsoft will provide third-party security vendors with access to such APIs pursuant to a royalty-free license and on fair, reasonable and non-discriminatory terms." [0]

This means that by offering Microsoft Defender for Endpoint, Microsoft needs to give similar access to the underlying kernel to competing vendors like CRWD and S1.

> At the very least, it means there are safer ways to load third-party code in the kernel without allowing them to crash your entire system by mistake

An eBPF or a similar technology wouldn't necessarily enhance stability when probing kernel-land from user-land, as any interaction with a kernel can cause kernel panics.

Plenty of endpoint vendors have had issues with PTrace (MacOS), kprobes (Linux), eBPF (Linux, K8s), etc.

The reality is that $))&#( happens, and a lot of comments on HN about this bug are really dumb.

[0] - https://news.microsoft.com/download/archived/presskits/eu-ms...
You mean the things currently escaping the gravity of the Earth?
Ha... It's not that they can't do it now, it's just Google fear the uproar the woke brigade will inevitable make about how dare Google classify poor black neighborhoods as unsafe. But yeah I agree with you, that feature would be damn helpful, especially for someone like my wife driving home at night.
"They" spend a totally insane amount on roads. This year's Caltrans budget is $25 billion. They are planning to waste it all on widening roads that don't need it.
The current Model Y in production is known to have significantly better suspension than Model Ys produced 2020-2022. If you have an older Model Y, you can upgrade the suspension (cost about $2k with installation).
Are they foolish otherwise?

They’re making 50,000+ rides per week already, with a very limited rollout.

They only have to match the cost and convenience of Uber in order to utterly dominate the market.

Once they fully solve self driving, which they inch ever closer towards doing, they can focus on cost reductions. Given that they don’t have to pay drivers, the potential profit margin is incredible.

They will be fully uncontested soon. The only possible competition is Tesla, which has very impressive models, but is still far away from deploying actual robotaxis.

I wish I could invest.
A representative sample then? Please tell me where I went wrong -- I mean this sincerely.
It's especially annoying when the interviewer keeps forgetting the last word.

What I really want to know is if you have experience with

With us, you'll get great benefits, like

People love that we have
> [...] the precarious state that VR is currently in, where Meta is more or less propping up the entire consumer market with their willingness to burn billions of dollars on Reality Lab every quarter,

They don't quite seem so happy to do that for much longer.

https://www.businessinsider.com/mark-zuckerberg-cuts-spendin...
Thankfully she got the money back after 6 months. Only after CNBC got involved. The second set of scammers are the banks that don't want to help anyone when something goes wrong.
Ruby/rails is full of shortsighted crap like this.

I feel stuck, our whole backend is legacy rails and I can’t escape.
Not really. There are different levels of situational awareness. One doesn't have to be on high alert. Just being alert enough that you hear a pallet jack coming down the cross aisle is more alert than half the people seem to be.
there are single points of failure that will continue existing in our digital space. Rust is definitely memory safe, the issue here comes to failed process and bad practices. https://medium.com/@confusedcyberwarrior/our-fragile-digital...
This is the Emperor's new clothes.
After it stopped and no additional material was being expelled, they do go back to look. Not recommended, but how often are big eruptions followed by even bigger eruptions?

Are you saying they should've run away from the park for the entire rest of the day or trip?

See @Saurik's sibling comment: https://news.ycombinator.com/item?id=41051381
As for people - just like any large city, it depends on which bubble you're in.
"The Market Can Remain Irrational Longer Than You Can Remain Solvent" is as true as it ever was.

I do not hold Tesla stock (directly, don't have a desire to audit my mutual funds that closely).
they dropped the price because of the llama release
In GP's proposed scheme, the sponsor gets punished whether or not it knew or assisted
Anecdotally, quality of the routing seems to be going down. I checked for a 10 minute walk in London and it suggested a 9 min route to take a bus for 3 min and walk 6 min, the secondary route was my intended 10 min walk. Obviously I wasn't going to pay to save a minute of travel time.

Also while driving, it could be confirmation bias but I find myself ignoring odd turns when I know I can keep going straight and turn later based on familiarity, the funny thing is I became familiar with these routes because of gmaps while I started driving years ago (this is with no traffic)
If you're fortunate enough to have the older BGW210 you can bypass it without specialized hardware by having your router proxy the authentication requests.

https://pyther.net/2020/05/03/bypass-att-gateway-openwrt.htm...
She isn't trading, her husband's financial advisor is trading and it's being reported as hers. (He's also losing their money on it and is just doing it to look busy.)

It's like how employees of a company donating to political campaigns gets reported as if the company itself did it.
All of my business comes from Linkedin. I get inbound leads from content I post to Substack. I then promote it with a pithy summary on Linkedin. I don't encounter any of the stuff in this article. I typically get 5-30K views of my posts and have 38K followers.
I was in the first cohort of the LinkedIn Creator Accelerator program which was held the three months before I launched my SaaS. The secret to hacking the algorithm is no secret. Post original content four times a week. Because my SaaS is a data platform on cybersecurity and 95% of my followers are in cybersecurity I get tremendous engagement.
I remember all the hacking community deriding Twitter when it launched. Back then the cool kids were on Digg. Now they are on Twitter deriding LinkedIn where they cannot pose as something they are not.
Or maybe too accustomed to human company.
Alexa gone Lisa ...
25% of youtube views are music, so add the revenue of Spotify to these, and it adds up
“We can’t have trains because it unfair to subsidize… oh wait!!”
>they're just reselling you AWS Bedrock

Meta announced they have 25 providers ready on day 1, so no it's not all AWS.
If I remember correctly, even today, city-center Warsaw has lower population density than before the war.
That's not helpful, because it's far from being true. The US mining sector, which includes oil and gas, is less than 2% of the US economy.

https://www.statista.com/statistics/248004/percentage-added-...
yes ... I remember when online dating was absolutely cringe / weird thing to do. Ten years later and it's the primary way a whole generation seeks a partner.

It will seem incredibly weird today to have an imaginary friend that you treat as a genuine relationship but I genuinely expect this will happen and become a commonplace thing within the next two decades.
You fundamentally misunderstand the bottleneck of large LLMs. It is not really possible to make gains that way.

A 405B LLM has 405 billion parameters. If you run it at full "prescision", each parameter takes up 2 bytes, which means you need 810GB of memory. If it does not fit in RAM or GPU memory it will swap to disc and be unusably slow.

You can run the model at reduced prescision to save memory, called quantisation, but this will degrade the quality of the response. The exact amount of degradation depends on the task, the specific model and its size. Larger models seem to suffer slightly less. 1 byte per parameter is pretty much as good as full precision. 4 bits per parameter is still good quality, 3 bits is noticeably worse and 2 bits is often bad to unusable.

With 128GB of RAM, zero overhead and a 405B model, you would have to quantize to about 2.5 bits, which would noticeably degrade the response quality.

There is also model pruning, which removes parameters completely, but this is much more experimental than quantisation, also degrades response quality, and I have not seen it used that widely.
I want to see the unholy abominations that would come out of a billionaire match-up between Bezos, Musk, and Gates all sponsoring a competitor. Just a heap of unnatural flesh, vaguely in the shape of a human, pumped full of every possible performance-enhancing drug to be the best possible athlete.

Actually, my entire premise for this is actually based on F1 racing, and how they operate. Every team literally has no rules, other than: Do not kill or injure anyone. Nearly anything else outside of that very broad limit would be allowed. I just think it would end up being very interesting and funny.
it's all about those clicks baby
No they weren't; profits are what's left over. If profits were 0.5B your argument wouldn't make any sense. You're just taking arbitrary numbers and comparing them to trick people.

If that's what you want, here you go - https://imgur.com/a/dWrGKuN
Even if everything was released how you described, what good would that really do for an individual without access to heaps of compute? Functionally there seems to be no difference between open weights and open compute because nobody could train a facsimile model. Furthermore, all frontier models are inscrutable due to their construction. It’s wild to me seeing people complain semantics when meta dropped their model for cheap. Now I’m not saying we should suck the zuck for this act of charity, but you have to imagine that other frontier models are not thrilled that meta has invalidated their compute moats with the release of llama. Whether we like it or not, we’re on this AI rollercoaster and I’m glad that it’s not just oligopolists dictating the direction forward. I’m happy to see meta take this direction, knowing that the alternatives are much worse.
Nevertheless, what I said still happened. It's part of the reason they have lots of apparently unnecessary crossing guards in places like crosswalks and parking garage exits.
I can believe people discussed the option to relocate, but I think the forces of population movement back to the ruins really forced their hands. Not that the government couldn't have forcibly relocated them, there was plenty of precedent for that in recent times: The willingness to do it would be absent.

In any event, The USSR needed Poland to succeed as a buttress protecting the Russian state. Unlike Germany it was not partitioned, it was integral and complete as a country, it had voting rights in the UN, and it had a complicit puppet government. If that government wanted to reconstruct Warsaw and the Russians held out for Łódź It would create tensions which weren't needed. Realpolitk intruded.

Is there any record in post-roman history of a city subject to destruction which wasn't rebuilt?

I am told that in order to re-create Warsaw, other towns were also denuted of stone carvings. In effect, so that Warsaw could exist again, other towns lost parts of their heritage. You can of course see some of the reobar and plaster overlay on brick and blockworks of the less well restored places, or from 70 years of erosion. It's substantively a modern city with a dress on.

The continuing legal fights over land ownership speak to how strongly people feel about their patch of land. Fighting human nature is a King-canute move.
And insensitivity. That's why we put one person on guard so everyone
else can go 'shields-down'. Dangerous situation requires an assigned
responsible person whose job is to be heads-up for that time and
empowered to raise alarms, order people back etc. I guess if this is
some kind of "nature spectacle theme park" you need someone
permanently around who is an expert on the situation and knows when to
call it.