skysight-inc/HackerNews huggingface dataset:
It makes more sense when you figure it’s projection.

That’s when it gets scary too.
Does onedrive do something similar?

Glad I don't use google drive.
How much value do companies get out of these "enterprise security" companies? I've always thought they were the modern equivalent to commercial virus scanners that come with Windows.
It gives off some strong "faceless worker trapped in a box doing repetitive menial work" vibes. I get the whole 'humans can do so many different things, so make a human-shaped robot to do all those things' idea, hence Boston Dynamics' Atlas, but humans do all those things at a kinda mediocre speed.

Developing general control systems for 6+ axis arms and picking the correct number and size of arms for whatever strength/speed you need seems far more useful. Yeah, you can pick up your one-size-fits-all gimpbot and put him in the cage to put different cells into different boxes, but the hard part IMHO is the control software/training, not the hardware.
> That enabling competition in kernel mode antivirus is the actual problem...

That hasn't been demonstrated. Just because a competitor screws up in a competitive market doesn't mean that it is wrong to have competition. In a competitive market some competitors are expected to fail. It's part of the process.
If imitation is the sincerest form of flattery, I'd have gone with "Xorex" myself.
Hey Sam, any chance you can share how you got started with those consulting contracts?
Use a foreign service like Mega.
This feels somewhat analogous to games like Quake being open-sourced though still needing the user to provide the original game data files.
Ah, that's a shame to hear. FWIW, ChatGPT did also suggest that there was a lot of room for improvement in the MPS backend of PyTorch that would likely make it more efficient on Apple hardware in time.
Interesting. It didn't seem like gpt-4o-mini was priced the same as gpt-4o during our testing. We're relying on OpenAI usage page of course, which doesn't give as much request by request pricing. But we didn't see any huge usage spike after testing all weekend.

For our testing we ran a 1000 page document set, all treated as images. We got to about 25M input / 0.4M output tokens for 1000 pages. Which would be a pretty noticeable difference based on the listed token prices.

gpt-4o-mini => (24M/1M * $0.15) + (0.4M/1M * 0.60) = $4.10

gpt-4o => (24M/1M * $5.00) + (0.4M/1M * 15.00) = $126.00
The studies all say that HRT increases the cancer risk, sometimes significantly. Yes, there are differences in type of HRT, but all of them create a signficantly elevated risk.

https://www.thelancet.com/journals/lancet/article/PIIS0140-6...

https://www.thelancet.com/journals/lancet/article/PIIS0140-6...

Spreading incorrect information about this is bad as HRT is likely to be a difficult choice for a woman. HRT can help alleviate serious menopausal symptoms like depression or mental illness at the cost of an elevated cancer risk. Downplaying the risks is likely to cause a lot of women to make choices that they regret seriously later on.
In this thread, the numbers cited (I didn't verify) are:
- $50B/year revenue
- $70B/3 years in payments to creators

Youtube paying out ~50% of revenue to creators seems almost too good to be true to me. That isn't their only cost, the infrastructure of youtube must be insanely expensive. They're almost certainly taking far less in profit than they are paying to creators.

edit: I read the numbers in the thread wrong, $15B/year in subscriptions not $15B/quarter.
Animate your LLM streaming text
> A mathematical and statistical person would have a lot of fun building prediction models for all the different geysers.

It's so popular that one of the datasets immediately available in base R is the set of waiting times between eruptions for a Yellowstone geyser [1].

[1] https://www.rdocumentation.org/packages/datasets/versions/3....
The way I read it, is that they admitted to what you accused them of - over-reliance on smartphones. What else do you want them to say?
ESA’s 2024 Space Environment Report, which is what the article references: https://www.esa.int/Space_Safety/Space_Debris/ESA_Space_Envi...
You can opt out of airport face scans
Why would openai/anthropic's approach be more safe? Are people able to remove all the guard rails on the llama models?
I'm not a partner, so I don't have an original copy, but the 55% figure is regularly stated by creators online.

https://imgur.com/YjOHAAr

A verge article states this too:
https://www.theverge.com/2024/3/28/24114031/youtube-shorts-p...

(shorts pay 45%, longform 55%)
I think the biggest part of it is just that they were behind but also betting on it.
This allowed them to get a lot of traction, support and be a notable player in the race whilst still retaining some control.
Chances are if someone is going to have a frontrow seat monetizing this it's still them.
It’s annoying. They run interference for actual employees and allow them to not properly staff customer care forums.
We'll see what the new name is when the C&D is delivered.
This. Keep your dumb politics aside and just discuss the code. For anything else, human rights.

On top of this, 90% of these people are spoiled kids who never had to fight about free (as in freedom) systems working, they just created senseless forks (AKA glimpse).

In the 90's and early 00's, no one gave a crap on your ethnics/race/sex/gender or whatever. Over IRC and XMPP not everyone embraced a videoconference or even worse, gave personal info.

Everyone helped each other by putting every difference aside, even from polar political sides. Propietary software, goverment+corporate control, tecnological siloes... these were far worse for the current and real life events than the outdated political fights from the 19th centry full of Romantic historicism on every side, no matter what (Adam Smith, Marx...).
Agreed.

Jurassic Park keeps coming to mind. It must be safe as long as you observe the signs, because it's an institutionalized park, right?

I don't know at what point I, as a first-time visitor to such a park, would start to question whether what I was witnessing was unusual or just part of the show.
Im not sure why that’s a common sentiment but I disagree that unguided exploration in music is not conducive to productive learning. Or maybe you’re just talking specifically about classical piano which I guess sure that makes sense but the piano is way more versatile than that and I encourage anybody to pick up a keyboard and just explore. You’ll be shocked how much you can accomplish and theory is always there to learn later once it becomes relevant to you.
.. caused by 3rd party software trying to reactively counter other malware that regularly finds its way onto enterprise windows hosts.
I feel I'm missing something — wouldn't "consistency" here require that the credits are due to whatever it is that he thinks "woke" is?
I like Joplin. Has the features you've asked for
The first time I visited the Everglades there was a family that had been at Disney for some time and the kids would not believe the many enourmous alligators laying around were real.

On the other hand, my two year old (who had been hitting kids in preschool and getting a lot of "don't hit" messaging, turned and queried, of an alligator on the boardwalk about ten or twenty feet in front of us "No hit the Alligator?"

While my heart and heart rate spiked, I swiftly grabbed him up and agreed, "yes, no hit the alligator!"
Should hurdles be made in a range of sizes to be fair on short competitors?
Alternatively it would be interesting to have a race or series of races where it's anything goes, including drugging. It's already such a cat and mouse game so why not just embrace it.
Linux is open source and is mostly C code. You cannot run C code directly, you have to compile it and produce binaries. But it's the C code, not binary form, where the collaboration happens.

With LLMs, weights are the binary code: it's how you run the model. But to be able to train the model from scratch, or to collaborate on new approaches, you have to operate at a the level of architecture, methods, and training data sets. They are the source code.
> These salaries listed are great salaries, no doubt, but they are not dramatically more than say, a guy running a successful local plumbing business

What about all the guys running unsuccessful local plumbing businesses?
In Australia at least, anyone who is enrolled at or works at a university can use the taxpayer-subsidised "Gadi" HPC which is part of the National Computing Infrastructure (https://nci.org.au/our-systems/hpc-systems). I also do mean anyone, I have an undergraduate student using it right now (for free) to fine-tune several LLMs.

It also says commercial orgs can get access via negotiation, I expect a random member of the public would be able to go that route as well. I expect that there would be some hurdles to cross, it isn't really common for random members of the public to be doing the kinds of research Gadi was created to benefit. I expect it is the same way in this case in Canada. I suppose the argument is if there weren't any gatekeeping at all, you might end up with all kinds of unsuitable stuff on the cluster, e.g. crypto miners and such.

Possibly another way for a true random person to get access would be to get some kind of 0-hour academic affiliation via someone willing to back you up, or one could enrol in a random AI course or something and then talk to the lecturer in charge.

In reality, the (also taxpayer-subsidised) university pays some fee for access, but it doesn't come from any of our budgets.
This is generally good advice, but the sophistication over the years of some of the fake Sandisk stuff as one example has meant at times even seemingly sound storefronts have become polluted with fakes.

I imagine all sorts of random commingling type activities have happened in Amazon warehouses over the years, there is so many avenues for convincing fake crap to accidentally get sold in mainstream sales channels.
Great news then, it does! There are a number of templates maintained by the Typst team themselves [0] that are available under the templates section of the web app or via a simple command if you're using the CLI.

[0] - https://github.com/typst/templates/tree/main
It’s unclear imho if it would be an antitrust behaviour. Many regions have security exceptions as long as it’s a core feature. It also wouldn’t prevent competitors working at a higher level either.
> The result would be "playing it safe," and prosecutors would only seek the easy cases, leaving the bulk of crime to happen without repercussions.

I think this describes the current state of affairs, although it might become more extreme if liability increases.
I think this was my reading of the phrasing, but wasnt sure if I was missing something.
My engagement with this community is a generous use of my free time

I think this attitude is a major problem. You wrote something public and here you have lots of attention and engagement and you think you're being "generous" by replying to people. If you don't want people to read it, take it down. If you don't want to engage with people on hacker news, just ignore the whole thing. Calling comments "despicable" with no explanation is not a great reaction to people giving your article the attention you wanted in the first place.
You were previously using OCSP stapling for your server cert. The CRLs containing your server cert have nothing to do with your server. The server config you have found is for nginx to verify client certs.
I'd be shocked if some regulation or massive fallout didn't happen from this.

But at the same time, its most likely multiple failures that compounded to reach this. How cloudstrike handles this will be showing. On one hand you can understand that cybersecurity is a fast paced enviorment and sometimes that means rapidly tweaking and updating your signature methodology and constantly creating new methods to identify threats. But on the other hand if those updated filters and identification techniques generate false positives you lose trust. Like someone said on YouTube its surprising they don't do slow rollout, but then when you consider how important some clients are.....I'd bet clients don't want to be stuck as an A/B tester when the new configs could be stopping potential threats.

I'm newer to the security industry so please give me feedback on what my thought process is here, and any comments related to how you protect critical infrastructure in a rapidly changing threat environment.
The dot-com bubble? Which ballooned in the late 90s, then burst, with investment not returning to 1999 levels for about a decade (also thanks to the 2008 financial crisis).

Their point is that we've been stuck in 1999 for 15 years, and not the decade before that.

Disagree all you want, but “it's been 25 years since 1999, you fail at math” makes no sense as a rebuttal.
IDP-initiated flows are less secure, as they cannot prevent unsolicited logins. Last time I checked Google went as far as to block this flow in their Firebase Auth product.

https://www.identityserver.com/articles/the-dangers-of-saml-...
This is an actual prototype! https://news.engin.umich.edu/2023/10/tumor-destroying-soundw...
I thought this was hyperbole, but nope. Literally posted by the guy.
If you allow e-assist, at that point wouldn’t you just have motorbikes?
I feel sorry for the poor bastards that had to go to Tokyo. As I understand it, clapping the other super fit athletes is a great part of the experience of competing (father was an athletics coach).
The next paragraph deserves to be quoted also:

> California Atty. Gen.Kamala D. Harris, whose office maintains that evidence still points to Larsen’s guilt, accuses him and his attorneys of filing a petition seeking his release more than six years after he was legally required to do so. Prosecutors question whether the judges had the authority to hear Larsen’s petition for release.
Even if they don't sue, do you really want to deal with people getting confused and thinking you mean one of the many pre-existing OCR tools that Xerox produces? A search for "Zerox OCR" will lead to Xerox products, for example. Not worth the headache.

https://duckduckgo.com/?q=Zerox+OCR
So on the earnings call, that just completed...Musk just invented a new word play.
Now FSD is currently on "Supervised Self Driving" and they will be transitioning to...."Unsupervised Self Driving".

When asked when the first actual Robo Taxi voyage will occur, answered that will depend on when they will achieve "Unsupervised Self Driving"...His new word for FSD.

In other words,the Robo Taxi previously announced and postponed for September, does not exist as a viable product...
> Why is this so hard in Haskell?

The challenge is composition. Adding Timestamped to something in a static, type-checked way, but not modifying the source code of that something.

> It doesn't have interface polymorphism?

This is besides the point, but its interface polymorphism is static, not dynamic. If you have a List which is IMappable, and you do some IMappable operations on it, in most OOP languages you get back an IMappable, but in Haskell you get back List.
But the comment you replied to was about the g-y difference at the end of the word, not the d-t at the start.
Every cyclist has a powermeter and the power is recorded. Why not require them to upload the power file directly after the race? Since they all ride the same course, you can correlate power output with speed (taking riders height and weight into ac ount) to spot outliers. I know there's drafting, differently aerodynamic bike setups and other factors to consider, but in principle I guess a sudden 20 watt external power gain could be detected that way.
As a fun example of "depends on the container format", one trick people used to use for sharing files on image boards (4chan and the like) was to concatenate a rar file and jpg file. I don't remember which order it was, but one of the two used a header (read start to end), and the other used a "footer" (read end to start), so you could use it either way depending on what you opened it as.

I still have a handful of files which are books in PDF format in a RAR file, and simultaneously the book's cover as a jpg.
It was bad, then Microsoft bought it and it became even worse.
They were bare (no plastic) Slot1 not socket 370 iirc?

I don’t remember whether it was the base or the multiplier or both that you tweaked, but there was a bunch of Celeron 450s that would run at 900 typically with standard voltage and decent cooling.

IIRC they may have been pIII-900s or 800s that got binned down due to bad cache.

Or, maybe im remembering wrong and they were 266s clocked to 450, and people were slapping them into dual slot boards to get “900”? That kinda feels like maybe it was that? It was a long time ago, man, idk.

At any rate, every one we bought from MA labs in COI CA for a couple of months clocked up with no problems. We must have shipped a couple hundred of those golden celerons before they dried up.
No. There is a thing called a "conflict monitor." It uses a hard wired control board. This board has solderable links on it. When you connect a link you're describing two phases which CANNOT be green at the same time. You then slide the board into the monitor.

If the monitor sees that current for the green lights on two opposing phases are green at the same time, or any of several other fault conditions, it will trip, then "throw the intersection into flash" as a roadway protection mechanism. At this point none of the controllers or other logic is capable of controlling the intersection and it stays in flash until someone comes and manually resets it.

Here's an example of what one of those cards looks like. Wonderfully old school and absolutely nothing active about it.

https://i.ebayimg.com/images/g/9roAAOSwKOFfh3gM/s-l1600.jpg
You are pretty wrong. EU law is tricky on AI very specifically in this use case (because it's a massive model), but that's not affecting anybody else.

Other than that, and GDPR (which is generally now regarded as a good thing), I'm not sure what requirements you've got in mind.
Endpoint is an incredibly crowded market, difficult to break into unless you really have a solid USP.
> All the future projects are basically smoke and mirrors.

So were electric vehicles when he took over as CEO. In fact, that's why he ended up taking over as CEO — Tesla needed someone who could sell smoke and mirrors for long enough to do a "fake it 'til you make it" run with the entire brand, as they needed to have the cars to justify the chargers and the chargers to justify the cars.

This doesn't mean he's still the right man for the job once the dull nature of reality becomes more obvious, when EVs become boring and mundane, which is exactly what's happening in that market.
As a reference: https://youtube.com/watch?v=DOW_kPzY_JY

(I honestly think they have uploaded at least 90% of the show by now on Youtube)
Could you share what numbers you are looking at?
CommentBeauty
More accurate warheads also means smaller warheads. The goal of the warhead is to take out the intended target. If you can't do that with precision, you brute force it raw power. As they say: "There's only 'close' with horseshoes, hand grenades, and nuclear weapons".

But even that's not true. The hardened targets are designed to be hardened against the capability of the potential attacker, that whole arms race thing.

We dropped vast tonnage of dumb bombs in WWII simply because we had to contend with a) getting the bombers through in the first place, and b) ensuring the designated target was effectively damaged.

Replace a fleet of B-17s with a B-2 and some precision munitions, and you get a net win of effectiveness.

Same with nuclear weapons. When you can miss by a country mile, you need a warhead sized so that it doesn't really matter. Better precision in guidance and fuzing is a "good" thing.

The dark side, smaller weapons, potentially, are "more usable" with "fewer side affects" (which is also a "good" and "bad" thing).
Active debris removal (harpoon satellites, magnet arms, whatever) are not a solution to this problem and are a huge waste of money. These missions answer the question "could one dock with debris and deorbit it?" To which the answer is "obviously yes, but at enormous cost" and you don't need to spend 50M euros to prove it.

The answer is exactly what governments and industry have been doing for at least two decades now. Tracking of in-orbit objects, coordinated conjunction response, and rules that require either manual or drag-induced reentry cleanup at the end of a mission. Active maneuverable satellites in orbit (like Starlink) aren't a fundamental problem. The number of objects has gone up significantly, but the big actors are coordinating and following good practices.
I honestly can't tell which part you think wasn't normal. Other people have kind of poked back at what you are saying, but I feel without really questioning which part of this you don't like, as it kind of sounds as if you are just saying "don't hang around near geysers... and, thereby, don't go to visit Yellowstone".

If you saw this same video but without the black color, would you have run? Because that would feel a bit silly to me: these kinds of explosions are happening all around you the entire time you are there. Some are even larger than this one, and you don't just stay as they happen: you sit on a bench and wait for an hour or two hoping to see it while you are there, and there are giant clocks trying to estimate when the next eruption will be.

Now like, what if the color were grey and there was mud? Some of the geysers have mud. Most of these are not a concern. What was a concern here was the black color... but as someone who has spent a bunch of time filming these geysers I found the black color so confusing that it really took me a moment to go "oh shit those are rocks". I could easily see myself having that pause we see from the other people before they all start running.

But, again: I don't feel like you are saying "these people should know rocks are dangerous" or "this was obviously different and you should be informed and on your toes ready to run"... you seem to be saying that, if you were standing somewhere and the ground suddenly exploded that you'd of course run; and, maybe that would be the absolute safest thing you could do, but then... why are you even there in the first place, if not to see an explosion of superheated steam?

Also, remember that the entire region seriously smells like sulfur and other strange gases... this is an area of terrain that people have long ago artistically (maybe even mythologically) described as the doorway to hell, between the smells, the color, the explosions, and the regions of trees that are either scorched, petrified, or merely poisoned. It honestly does make sense to question why people visit such an area in the first place, but once you decide to be there... well, it seems strange to question why you don't see everyone panicking about the explosion.
Why do we need the property that X is compact? Say we define X (the square) to exclude the boundary: X = (0,1)x(0,1). This is no longer a compact set, but it seems silly for the proof to now fail.

Is boundedness sufficient?
"People aren't in the mindset that there could be danger (even if they should be)."

This could be said of life generally. It seems like very few people even have a minimal level of situational awareness while walking to the mailbox or walking through a store.