skysight-inc/HackerNews huggingface dataset:
> A `pub` symbol is accessible outside the current crate;

This is not universally true; it's more that pub makes it accessible to the enclosing scope. Wrapping in an extra "mod" so that this works in one file:

mod foo {
mod bar {
pub fn baz() {

}
}

pub fn foo() {
bar::baz();
}
}

fn main() {
// this is okay, because foo can call baz
foo::foo();

// this is not okay, because bar is private, and so even though baz is marked pub, its parent module isn't
foo::bar::baz();

}
that's the thing though: security teams composed of grizzled talent absolutely benefit from going to conferences. they bring back what they've learned and leverage their new connections to bring more value to the company. so now you've got this industry-wide norm that the security guys are kind of out of pocket and spend a bunch of time at conferences, but they know their shit and protect the infra so it's all good. if it worked at the last X companies $CISO worked for so they're going to be hesitant to drop the hammer on the netsec team networking.
Image of the Solar Eclipse Wins the 2024 Astronomy Photographer of the Year
I am Microsoft hater. I cannot stand Windows and only use Linux.

PowerShell blows bash out of the water. I love it.
There are no shortage of Feds who evangelize the NSA who don't actually work for the NSA.

Of particular frustration to me are lawyers who cannot conceive of any issue with the NSA's practices because they've filled put paperwork and repeatedly handwave away concerns due to many a lawyer's lack of comprehension of how surveillance technology works.

Doesn't help the NSA representatives dismiss concerns to lawyers by repeatedly saying what they do is so complicated to understand at a high level followed by explanations that wholly ignore root of any controversy surrounding them.
Is this really a criticism? Because this has been the case forever with all security and SIEM tools. It’s one of the reasons why the SIEM is the most locked down pieces of software in the business.

Realistically, secrets alone shouldn’t allow an attacker access - they should need access to infrastructure or a certificates in machines as well. But unfortunately that’s not the case for many SaaS vendors.
“In effect, archeology is a licensed occupation, but then so is cutting hair in most US states.”

This doesn't strengthen the argument.
I’d you’re suggesting marriage rates are down because of porn I’m going to throw a [citation needed] on there.
What were the two facebook repos? I can't find any reference to them.
'Space is my happy place,' says stranded astronaut
> VSCode advocate

talk about cheering for the overdog, sheesh
Pivoting to internet didn't work great for Bill Gates. Nobody really used MSN other than for chat and possibly hotmail, the browser wars were lost, and the bulk of the revenue was done on Windows at the time Nardella took the helm. However Microsoft was big enough to afford a failure.
Do people really expect anything different? There is a ton of cross-pollination in Silicon Valley. Keeping these innovations completely under wraps would be akin to a massive conspiracy. A peacetime Manhattan Project where everyone has a smartphone, a Twitter presence, and sleeps in their own bed.

Frankly I am even skeptical of US-China separation at the moment. If Chinese scientists at e.g. Huawei somehow came up with the secret sauce to AGI tomorrow, no research group is so far behind that they couldn’t catch up pretty quickly. We saw this with ChatGPT/Claude/Gemini before, none of which are light years ahead of another. Of course this could change in the future.

This is actually among the best case scenarios for research. It means that a preemptive strike on data centers is still off the table for now. (Sorry Eleazar)
I absolutely love this, not just because of the safety aspect but because of how expressive it seems to be.
But they're still doing those questionable things right now. They and the FBI openly fought to preserve the legal right to continue doing these constitutionally dubious actions!
Deregulation destroys another 500 union jobs. Not the typical playbook but they'll take it I'm sure.
Well folks appreciate different things and to different degrees. Some are born with natural talents and others work hard for it. Regardless, folks generally get at least some respect for doing the work to produce things others appreciate. Stigmatizing OF work seems unfair when so much praise is heaped on creators and workers of all other kinds.
https://en.wikipedia.org/wiki/Fuel_economy_in_aircraft

Modern airliners approach 100mpg per seat.

About the same as four people in the average American car (25mpg at four people is 100mpg per seat). Compared to say, your average truck driver (like, 10? 15?), it's absolutely spectacular.

A good European train can technically do 400-500mpg per seat, so 4-5x, but load factors tend to be much lower, I believe around 80-85% for planes vs 40-50% for intercity trains.

Given that then, in the real world conventional trains are about 2-3x more efficient than planes. High speed trains lose a significant amount of that advantage - can't beat physics (air resistance).

At the end of the day, long distance travel is simply expensive however you cut the cookie. There's nothing particularly special about air travel.
The way I understand it now, they attach an invite to an email that you don't even read, but it shows up on your calendar. Is it too much effort to open the attachment yourself? Normally you think twice about opening an attachment from someone you don't know.
I came across this post while searching for something else.

This behavior is to mitigate the risk of abuse, plain and simple. Apple does not want ephemeral iCloud addresses sending out malicious content.

Yes, you can still theoretically do this with a regular iCloud email. However, it is rate-limited by the sign up process, which requires the threat actor to burn another email address or phone number (and a device ID, probably).

Use something like SimpleLogin instead. Even still, I find Hide My Email useful for Apple Pay, where I only receive transactional emails anyway.
I did exactly this earlier last week

the drive size divided by 4MB, so dd with bs=4M and fixed count

(with oflag=direct you don't even need to drop caches)
The Chinese government has been pushing propaganda to increase birth rates yet the birth rate keeps declining. If you look at Chinese social media you'll see that modern Chinese young people are making fun of the government propaganda.

Social credit system is not likely to work for as long as the opportunity costs of having kids outweighs whatever punishments the government hands out for not having kids. And in a modern market economy the opportunity cost of having a child is huge indeed.

Cultural change is hard. It is very hard. If it was easy, the USSR would have succeeded in creating the New Soviet Man instead of generations of super cynical people.
I don’t know the ins and outs (pun intended) of Onlyfans but it certainly seems considerably less toxic than a lot of pornography producers, based on past stories I’ve read. If your numbers are correct a 20% take is orders of magnitude better than previous arrangements.
But why only forced on MacOS?

I think some configurability would be great. I would like to provide an allow list or the ability to redact. Or exclude specific host groups.

We all have different levels of acceptable risk
Hmm.. or "$x per month of backlog" along with each month of new content. So basic tier of $x/mo gets to see content from the previous ~30 days. But if they stay subscribed, they get to see the upcoming month .. and the month from before they subscribed. Hang out another month, get the next month as it happens and the month 2 steps before subscription for a total of 5. That way staying subscribed slowly opens both past and future in lockstep. Pay for the $2x pro plan? Be getting 2 or 3 months of past content with each new month of future content that elapses.
Yes, those are the main things I would also probably not remember in 6 months, and tend to write down in a readme.
"willingly".

Just like you willingly walk to your car and willingly drive to work and willingly do your job.

Sure - you have the option of doing none of those things. No one is forcing you to do it.

But you won't make a meaningful living in society if you don't.
This is so nice, thank you very much for creating this! <3
So, downvoters here are OK with academic results and early resume building disproportionately affecting life trajectory, yet early displays of poor character aren't relevant in holding someone to account in the same way?

This is not a made up quote though I didn't transcribe it exactly, it was an actual message he sent during the early days of building Facebook when asked how he obtained so much personal contact information from Harvard students, so entirely relevant to this context.

https://www.theatlantic.com/magazine/archive/2024/03/faceboo...
No, the fashion so far has been to put a network under all that.
You know the cheesy ending in a dumb TV show where they play a song and the plot gets resolved? They should have had one where the evil guy is going to use his laptop to do something sinister and then they play "Rhythm Nation."
100%. Unfortunately, not all can separate the art from the artist.
Knight Capitol:

"$10 million a minute.

That’s about how much the trading problem that set off turmoil on the stock market on Wednesday morning is already costing the trading firm.

The Knight Capital Group announced on Thursday that it lost $440 million when it sold all the stocks it accidentally bought Wednesday morning because a computer glitch. "

Glitch. Oh...

https://en.wikipedia.org/wiki/Therac-25
Competition is important for maintaining a healthy marketplace. Any behavior that makes it harder for others to compete, reducing the amount of competition, is therefore bad. That's what anticompetitive means.

I don't think protecting trade secrets is sabotaging the competition though.
> Mediocrity can be a sign of excellence

Before I clicked I was kind of hoping for a different message: The "mediocrity" of businesslike workmanship as opposed an an "impressive" appearance rising from permitting crises to arise in order to fix them, or effort spent towards self-promotion.
If growth is zero then you literally end up with a zero sum game where each person can only grow his pie by taking from someone else.
Edwin from OpenAI here. 1) The linked tweet shows behavior through ChatGPT, not the OpenAI API, so you won't be charged for any tokens. 2) For the overall flow and email notification, we're taking a second look here.
Ask HN: How Are People Designing Apps in the Age of AI?
In the age of AI, I’m curious to know how people are designing apps, especially if they’re solo founders or small teams. Are there tools out there that can help design app workflows from end to end? What does the process look like for solopreneurs who are juggling both development and design?

Specifically, with frameworks like TailwindUI, TailwindCSS, and ShadCN being mature and widely available, why does designing quickly and efficiently still feel like a challenge? Is there a gap between the tooling available and the ability to build great UX fast?

Also, how do people handle UX variants when designing and iterating on their apps? Do tools exist that simplify managing and testing different versions of the UI?

Would love to hear about how people are approaching app design, especially in small or one-person teams, and whether there are tools or processes that bridge this gap effectively.
At least one of the incidents involved Debian machines, so I don't understand how Red Hat's change would be related.
Bash also has a built-in to validate parameters; it’s called test, and is usually called with [], or [[]] for some bash-specifics.

Re: non-standard tools, if you’re referring to timeout, that’s part of GNU coreutils. It’s pretty standard for Linux. BSDs also have it from what I can tell, so it’s probably a Mac-ism. In any case, you could just pipe through sleep to achieve the same thing.

> …inputs and outputs are strongly typed objects

And herein is the difference. *nix-land has everything as a file. It’s the universal communication standard, and it’s extremely unlikely to change. I have zero desire to navigate a DB as though it were a mount point, and I’m unsure why you would ever want to. Surely SQL Server has a CLI tool like MySQL and Postgres.
HA!

"Any sufficiently complicated C or Fortran program contains an ad hoc, informally-specified, bug-ridden, slow implementation of half of Common Lisp."

HA HA!
NextNav's Callous Land-Grab to Privatize 900 MHz
If OnlyFans is really paying 80% of gross to creators, it seems that any kind of "regular professional status" would be worse for them, at least for the top 10%.
The wildfires are devastating and like nothing I've seem before. Yet if deforestation is solely to blame then why countries with much less forest coverage have less of a problem? Brazil forest coverage: 60%, EU: 39%, US: 33%.

Every time I read such news I have a feeling I'm being fed a lazy political narrative rather than the complex truth. WaPo certainly benefits from the views from the "climate doom" crowd at the expense of their mental health and there will be no improvement because the crowd is ignorant and powerless.
What? The article says this thing does 2005 GFOPs, aka 2 TFLOPS, which is decent, but we have had CPUs that could do more than this for a long time now. My Zen2 12 core does about 3 TFLOPs, and a modern 16 core Zen5 can do 8-10 TFLOPS(I'm unsure what clock speed it can maintain with all cores engaged). And that is generally purpose SIMD not specialized matrix stuff(less generally useful).

Apple CPU's kinda suck at vector ops, but they aren't that bad, this thing is only mildly better. I would guess power savings is a big part of why they use this SVE streaming matrix mode.
I maintain OneJS which provides tailwind support for Unity (the game engine). Whenever I need to show people some code examples in Discord, I always use TW instead of, say, raw css, emotion, etc. This is because TW makes it possible to have everything in one file. And the utility classes are so short, it just make more sense to use them to save screen estate.
That's what all gpts are. This one is just allowed to start the answer a bit later not from the first word it generated. Unlike previous versions it was trained for that.
Considering "follow-up" wording, it might have been added later, and might not really be true — but the important thing is that there is a correction now.

So it's good a commenter here posted about it, because this might have led to the clarification being put in in the first place.
I'm very glad I didn't go to work for Boeing in the early eighties when I had a job offer without even an interview out of school. I had to actually ask to get flown out to Seattle to meet with some folks.

I'm not sure where I'd put my bets these days. Blockchain ended up pretty much a bust even outside of the crypto-scammers. Quantum feels like it's receding and I know folks that have exited from day to day involvement. Not sure what's past Kubernetes/containers/etc. and many folks seem to get annoyed if I press too hard on the question. Of course, there are always new innovations but unclear to me what's game-changing which may imply compensation that's very ordinary engineering/professional levels as was the case outside outside of SW in some locations for the past couple of decades. Which people with visions of $500K comp pages for ICs may find disappointing.
This has always been the entire problem with climate change action. We don't accept any reduction in our quality of life whatsoever for the purpose of saving our habitat. Too many of us always expecting someone else to make the change. Those that should be role models undermine their own message and thus many people around the world don't take their science seriously because they don't seem to take it seriously themselves.

Since governments are paid extensively by all the CO2 producers who have made it all about personal choice rather than government intervening in industry to fix their direct production of CO2. The outcome of this crisis are now a foregone conclusion, 1.5C is done and onwards to 2C. We are now choosing what type of dystopia we want and the one we are choosing still tracks towards 6C and its a bad choice.
The Legend of Holy Sword: An Immersive Experience for Concentration Enhancement
I’m reminded of the thesis of “Parasite”: that niceness is a privilege those on the breadline cannot afford.
I didn't know that and I think it's a shame in hindsight that they decided to diverge in that clunky way.

I would like to defend the movie in one important regard. It felt like a Ballard movie. Grey, concrete, very British and very 70s but also dreamlike and somewhat surreal.

I can't think of another movie that achieved that.
What would be a supernatural reason then? Is there some context in archeology that is labeled as supernatural that's different from ritualistic context? And what other things lie in the range between those two?
First off, Flahavans are from Waterford and this find was in Westmeath.

Second, if you want the actual best porridge get yourself some Kilbeggan (which are actually from Westmeath, funnily enough).
.. or gen the LLM content and have a human swipe away the rule-breaking content.
.. and if you don't then whoever you farm out to will.
As boring as it is that's probably the case.

There is a weird intensity to the way they're hiding these chain of thought outputs though. I mean, to date I've not seen anything but carefully curated examples of it, and even those are rare (or rather there's only 1 that I'm aware of).

So we're at the stage where:

- You're paying for those intermediate tokens

- According to OpenAI they provide invaluable insight in how the model performs

- You're not going to be able to see them (ever?).

- Those thoughts can (apparently) not be constrained for 'compliance' (which could be anything from preventing harm to avoiding blatant racism to protecting OpenAI's bottom line)

- This is all based on hearsay from the people who did see those outputs and then hid it from everyone else.

You've got to be at least curious at this point, surely?
This will do wonders for the Frontier's employee morale. I wonder if this means they go back to calling the FTTH product FiOS?
Step 1 is a crazy vulnerability on its own. How did Apple not consider this?

> The attacker can exploit this to conduct a successful directory traversal attack by setting an arbitrary path to a file in the ATTACH section with: “FILENAME=../../../PoC.txt”.
After I wrote, I remembered that was probably the term I was looking for though I couldn't put my finger on the source.
Not hard drive related AFAIK, but I used to work in a media lab with about 30 mac desktops of around the powermac g4 vintage.

We noticed that the macs were rebooting unexpectedly when certain people were in the room. After a bit of observation we worked out that the call button on our walkie talkies could trigger a reboot from a couple of feet away, which turned out to be an awesome superpower if you'd had a gobful from an especially obnoxious student.
It is more just that there are a wide variety of existing ways available to harm or kill the population. No need to invoke the specter that AI magic is going to engineer some super bug. Plenty of virulent pathogens already around.

You could trivially cause enormous harm by sabotaging electrical distribution, water treatment, hospitals, airports, etc. Go to any food manufacturer/distributor and contaminate the products with listeria or such.
OpenAI keeps innovating on being more closed than the other companies
> The problem with subscription sites like that is that paying for a month's subscription gives you access to the entire backlog of the work that a person has been doing for years.

If you assume that all of their content is included-with-subscription and not separately-purchased add-ons, sure, but my understanding is that that's not the most common business model on those sites.

> If these sites were smart, they'd implement a 3 month rolling backlog and then a set add-on price for accessing additional months worth of content.

Or they'd allow creators to remove previous posts, thereby giving them the ability to control whether or not they want posted content to expire, what schedule they want it to expire on, whether they want expiration applied equally to all content, and whether any or all of the expired content would be then made available to purchase as add-on content, and on what terms. (AFAIK, they do, in fact, allow this.)
The CLI tool is PowerShell.

You just said everything “is a file” and then dismissed out of hand a system that takes that abstraction even further!

PowerShell is more UNIX than UNIX!
Sorry, that’s correct it was Debian, but Debian did apply a RHEL specific patch to their kernel. That’s the relationship to red hat.
Kind of an alternate version of "fus ro data loss": https://m.youtube.com/watch?v=tDacjrSCeq4
cuneiform.
You’re making the assumption the tweaks to the audio subsystem made a material change to the quality of the audio output. It’s not like laptop speakers are very good to start with, or like laptop sound cards ever faithfully reproduce the sound they’re asked too.

Getting good audio out of a laptops speaker in 20% hardware and 80% audio filtering anyway. No laptop speaker (even Macs[1]) sounds good without significant processing to workaround the physical limitations of tiny speakers mounted in a non-ideal chassis.

As for other speakers, sound pressure drops off following the cube law. So a speaker millimetres away from the hard drives which have substantially greater impact than speakers outside of the laptop. Of course if you crank the volume enough it’ll eventually cause an issue, but given there doesn’t seem to be widespread reporting of this issue, it looks like that wasn’t too much of an issue.

[1] https://github.com/AsahiLinux/asahi-audio?tab=readme-ov-file...
Pricing for many things in life is abstrated away.
Why would it matter? The absolute worst case scenario happened and their stock is still up 50% YoY, beating the S&P 500.
I'm going to simply address what I think are your main points here.

There is nowhere that an LLM stores all possible outputs. Causality can trivially be represented by sampling by including the ordering of events, which you also implicitly did for LLMs.
The coin is an arbitrary distinction, you are never just modeling a coin, just as an LLM is never just modeling a word. You are also modeling an environment, and that model would capture whatever you used to influence the coin toss.

You are fundamentally misunderstanding probability and randomness, and then using that misunderstanding to arbitrarily imply simplicity in the system you want to diminish, while failing to apply the same reasoning to any other.

If you are indeed an AI researcher, which I highly doubt without you providing actual credentials, then you would know that you are being imprecise and using that imprecision to sneak in unfounded assumptions.
I was so frustrated by having to enter a lot of information for every new git project (I use a new VM for each project) so I wrote a shell script that automates everything for me.

I'll probably also combine a few git commands for every commit and push.
Nutrition is correlated with childhood growth. Was there a reason why how much they were fed would have changed with each individual, but not across the entire cohort?
Old man yells at the clouds.
If it is genuine your quadratic version will perform the same number of writes as the linear time solution.

If it is non-genuine what do you care how many writes it will perform? In that case the media is trash anyways.

The quadratic test will take an eternity due to the n^2 hashing operations and reads unless it terminates extremely early.

If you really have a need to terminate writing early, you could at least perform only a few reads randomly after each write (which will terminate early with high probably not long after you reached the maximum).