skysight-inc/HackerNews huggingface dataset:
I am criticising the ideology of Islamic extremism, which notably does not include non-extremists. That includes my white caucasian ex-Muslim friend and my Kyrgyz friend who is still a Muslim.

What you are doing is muddying the waters of the argument by making that association. Are you not the racist then by suggesting the attribution?

If you can't criticise extremism without being called a racist, we are truly and utterly fucked as as species.
A lot of consumers care more about either of total capacity or the concept of "I can just double my cheap RAM later" than care about ~10% differences in RAM clock speed. The latter is for those that really know what they're doing to eek out a couple more percentage points in benchmarks or non-consumer use cases, the former appeal to both budget users and prosumers alike (just not OC enthusiasts).

From that angle I don't necessarily disagree with 4 channel boards being more common than 2 channel boards, even though I personally lean more towards a 2 channel board myself (well, depending how well CUDIMMS scale I may change my opinion).
Huh, hadn't read that context until now. Thanks
Or you can use more... underhanded means that never result in an arrest.
for the use case of a single user IMAP server this is all way, way, too complicated and buys you nothing in terms of security. it's completely analogous to why we dont use CAs to validate openssh host certificates.
While I don't disagree with the notion of the existence of BS jobs, UBI is not needed. Instead we need more companies to take on more and more interesting and world-solving things.

We keep saying we need UBI but at the same time "we don't have enough homes". Then instead of UBI, maybe people should "make homes"? (That's just one example - there are also jobs in food, healthcare, mental illness care, spacecraft, etc...
I owned one, perhaps two, Blu-Ray drives which supported this format. It was the best I could do for high-capacity backups without a tape drive.

I used 100GB BDXL discs, not M-DISC media, but nevertheless, they lasted longer than I needed them; the drive outlasted the rest of the system too. Mission accomplished.
Unless you happen to not be aligned with or really on the wrong side of that fabled ideal power monopole. It can quickly knock you from ignorance to reality. Imagine Russia was that monopole of power. Or look no further than a dictatorship. Great if your interests align or you're willing to bend them until they do, hell if they don't.

The US is the closest thing we have to a monopole these days and I'm sure it's sweet for some and very bitter for others.
I'd add "Focus on the Nouns, not the Verbs", or more prosaically, the data and the changes that occur to data, not the process of changing it.
I could see the cost of licensing data to train models increasing significantly, but the cost of compute for training models is only going to drop on a $/PFLOP basis.
Which is itself a fun attack vector to bypass OpenAI's bans for asking about CoT then :)
> LLM uses delve more, delve appears in training data more, LLM uses delve more...

Some day we may view this as the beginnings of machine culture.
Allowing self-signed certificates creates a higher risk for MITM attacks.
Sure you can trivially get a letsencrypt certificate once you register a DNS entry, but you can't trivially get a letsencrypt certificate which validates google.com

If you control the local network it's trivial to redirect traffic intended for elsewhere, like "google.com", and trivial to have the server it redirects to present a certificate with "google.com" in it's subject or SAN.

What would happen on a laptop is you would be hit with a certificate validation error because it was self signed, and on the laptop you have the ability to bypass it, but that ability to bypass is very dangerous. Most users will not properly check a certificate before clicking to trust it.

As far as what could be done, "this is a low value device to an attacker" is not a security measure, but beyond that I'm sure that people have bought games on a gamepad, and anything which involves financial transactions has the potential for malicious behavior with severe consequences
Interesting, it seems there's a conflict between what the Lebanese Health Ministry said, and what Hezbollah said (as of yesterday) -- and you're choosing to go with Hezbollah's numbers.

It does seem that the reports are still coming in, and are in the process of being evaluated and fact-checked. I chose to go by WP because in most cases at least attempts to reconcile between different sources, though it's far from 100 percent accurate about anything.

Hopefully we'll have better numbers within the coming week or so.
yeah because now that we've all been asking about it, that answer is in its training data. the trick with LLMs is always "is the answer in the training data".
Even if you had your own SMT how can you be sure no one fiddled with your lab? If you can't trust your own stack 100% how can you trust ANYTHING else then?

So my answer to your sincere question: no reason to believe it is safe, no.
I think some data about how much usage the feature gets would be more helpful here than simple I do/don’t comments.
I know very little about XML and SAML, but from what little I do know it shocks me that it's still the de-facto standard for SSO.

Great analysis and thanks for sharing!
For the more scummier or illegal elements on the network, that is true. For onion services, lasering attacks and takeovers plus honeypot are the chief danger.
I'm a globalist and all but when people say "multipolar" doesn't that usually mean "the USA shouldn't rule everyone, I want to also rule over some countries "
You are making a claim that somehow someone was sitting on something as powerful as ChatGPT, long before ChatGPT, and that it was in widespread use, secretly, without even a single leak by anyone at any point. That's not plausible.
> Or programs writing to and others reading from a Unix pipe.

write(message), read() -> message

> Or programs talking to each other using HTTP.

request() -> response

> Or Erlang processes communicating concurrently on one machine or across a network.

sendMess(message), waitMess() -> message

> Or different programs sharing one database.

execute(query) -> response

...

I'm a mathematician at heart so I'm staying away from category theory as long as possible.
This just doesn't make any sense. Even in an ideal world where voice assistants never failed, some of the most basic daily interactions become extremely complex and time consuming with audio only. When 3 different people text you it takes infinitely more time to clarify that with voice than you would be able to just read. Plus, people like social media, and young people really like tik tok. How are you going to record or meaningfully play back videos on a device where you can't see? Voice only is significantly more of a gimmick than the Vision Pro.

Nobody likes navigating call center menus. A voice only smart device would be doing that all day long.
Yes! That was it. I'll try it again.
Goodhart's law isn't as useful as you might think (2023)
Make money. Build chips. Eat electricity.
This probably wasn’t cloudflare doing per se. It was probably Maxmind, which is the most widely used IP to Geolocation service out that.

And cloudflare uses it as well.

https://developers.cloudflare.com/network/ip-geolocation/
They pay too well to say no if you don't have any other competing offers. For some roles they pay too well even with competing offers. It's literally life changing money for a lot of people.

I'm just about to hit 2 years and was planning to leave anyway around that point, which is typical, but now there's going to be a sudden increase in the competition for remote jobs that I wasn't anticipating.
What's absurd to me is that Cloudflare gains more and more control over the internet, by people voluntarily submitting to its domination.

My favorite is trying to go someone's random blog with like 5 posts (because they have a singular post about the technical topic I'm trying to figure something out about) and I can't access the site because Cloudflare has decided my locked-down Firefox ("resist fingerprinting" + strict privacy mode etc.) running on OpenBSD is somehow malicious. So much for the open web. (nevermind the audacity that "we can't spy on you sufficiently" is enough to serve a 403 Forbidden response header)
Let me guess, the ones you term to be "Islamists" are those who fight America or Israel.

Most of the Afghan fighters who took shots at American soldiers weren't motivated by some sort of boogieman religious extremism. They were simply shooting at armed foreigners who invaded their country. They weren't terrorists by any reasonable definition of the but were called so anyway because they happened to be Muslim and dared to defy America.
> cost

Oh yes, I love paying a couple cents less per drink to have micro plastics in me
Oh no, it's been here for quite a while. Our culture is already heavily glued to the machine. The way we express ourselves, the language we use, even our very self-conception originates increasingly in online spaces.

Have you ever seen someone use their smartphone? They're not "here," they are "there." Forming themselves in cyberspace -- or being formed, by the machine.
I live in a small EU country.

There are many, many american sites that just block the whole EU IP ranges becaus they don't want to deal with GDPR.
I wasn’t aware that there was any publicly accessible interface to the Mistrals (or any other) models without training-wheels!
Ah, that’s good – it’s been a while since I last had to work around that.

And I generally agree on local networks being insecure. So how about making them more secure instead of marginalizing them even more?

TOFU for TLS certs on .local (for Zeroconf, and maybe something else/new for local DNS) would be a huge step forward from unencrypted and unauthenticated HTTP. Such sites could even still be displayed with a broken padlock or whatever HTTP gets these days to not create any false expectations by users.
The Verge website, Threads share icon has replaced X (Twitter)
does iphone support name constraints on CA certificates? (https://systemoverlord.com/2020/06/14/private-ca-with-x-509-...)
Sure the scope did change, and Tek made those moves as they should have.

There was a great argument for trading some capability to continue to build new products on now current processes, with the same rapid feedback loop in place.

That should have happened rather than the very aggressive tear down and brain drain we actually saw.

The key point being ongoing and regular investment in the company and people would have yielded more and better products that would compete just fine, not just be the cheapest.

That organization would be smaller, but still potent and a lot more nimble, able to continue supporting technical engineering across many fields.

And as I have mentioned up thread, couple that with returns from smart spin-off investments and an ongoing innovation culture rather than just a cost cutting one and we would have seen more than we did.

I would also argue the big push to apply software was sexy, and took the air right out of hardware efforts. Lack of investment there was not about the lack of returns, and it still is not about that. They are just a different kind and over a longer time.

Ignoring those has bled the region of a lot of capability. It is much harder to make things and here we are trying to understand how the next generation makes it on hair, laundry and food.

Making things is important. And it is not the cheapest way of course. Having a large percentage of people unable to build lives is and will continue to be very expensive. Crime, need for government services and more abound.

Early on, the promise of new tech and automation was a reduced need to work as much and or at the least maintaining respectable standards of living.

Put simply, it was supposed to cost less to live and for the most part these things did not happen.

Something needs to.
Raising the standard in PTAB like this bill seems like a pretty bad idea, a huge % of patents are invalidated today in PTAB (I think like 80%) because a huge percentage of them are horseshit. One overworked patent examiner can basically derail an industry.
Probably easier to impound some CloudFlare assets, if any available. But any blocking would follow an escalation process. X itself was only blocked as an remedy of last resort, after months refusing to abide by court decision, refusing to pay fines and firing all employees and self-nuking its own local presence to avoid compliance at all costs. It was even reported[1] X refused to honor severance pay to the employees fired.

[1] https://www.correiobraziliense.com.br/economia/2024/09/69349... (Portuguese)
Might be a blessing for introverts. Just turn on some autopilot chat giving generic responses while I can zone out in my thoughts.
My comment is strictly about exit nodes which are not used as part of connecting to onion services.

Ignoring TLS errors might mean you’re ignoring the fact your exit relay is MitM attacking you.
Without defining your terms it's impossible to know exactly what you mean. That said, the MIRAI worm/botnet exploited loopholes in domestic/residential home router deployments, and there are many instances of large scale attacks grounded in the domestic internet deployment.

ISPs routinely have to regard their customer base as a potential threat to the core network. And of course, inside the home, it would be sensible to think about threat models from IoT against devices inside the protection ring, against other nodes in the home network.

So I kind of wonder: given we already routinely see attacks from 'residential IP' in what sense are they NOT seen as a security risk?

I am not allowed to cross my work firewall boundaries from a machine which is not itself protected against threats, even in my home. And I cannot attach random devices in my home to the work network: it's seen as a security risk.

So: what makes you think they are not seen as a security risk?
Mmmm authentic doesn't mean good or positive or rational.

So, what were you trying to say?
This just screams to me that o1's secret sauce is easy to replicate. (e.g. a series of prompts)
But he was deluded and believed that his sub was safe. Not sure what your point is.
https://spec.torproject.org/vanguards-spec/index.html

>A guard discovery attack allows attackers to determine the guard relay of a Tor client. The hidden service protocol provides an attack vector for a guard discovery attack since anyone can force an HS to construct a 3-hop circuit to a relay, and repeat this process until one of the adversary's middle relays eventually ends up chosen in a circuit. These attacks are also possible to perform against clients, by causing an application to make repeated connections to multiple unique onion services.
PRC-Linked Actors Compromise Routers and IoT Devices for Botnet Operations [pdf]
The difference between someone making $50k/year and $500k/year is functionally irrelevant as compared with the C-levels. It's a rounding error to their multi-million comp packages.

There shouldn't be anything distasteful about advocating for yourself and others who rely on their labor to survive, even if they're well paid for that labor.
I created a healthcare management software for medicine
Apple and Google Diverge on Photography Philosophy
> Assuming arguendo that apple did want to do that kind of messing with DNS though - what's there to stop them from changing getaddrinfo() in the same way?

Nothing, I already acknowledge they have the power to do rootkity things if they wanted to, but I don't consider that likely.

I do consider it likely they might do that kind of a thing at a framework level and try to push most developers to use it.

> As someone pointed out upthread, if you don't trust your OS vendor to do DNS lookups correctly, your only option is to not usre your OS vendor for DNS lookups, which is in the realm of Byzantine faults.

I responded to that as I'm responding here, by pointing out that isn't relevant to the threat model that I've described.

> now the user has one app that behaves differently to all their others, which is worse in every practical sense.

Not if that app actually gets the user to where they actually wanted to go.
That made me laugh. Thank you.
Countries silence climate protest while preaching about rights elsewhere (study)
a 500 ml Al can weights 13 grams. life knows if we can skim down its weight if we don't have self openers, the price if we develop a better recycling system etc.

if plastics have impact on human health, how many $ we can save for using re-usable glass and metal?
So, all the cloud, vps, and hosting providers?
I'm currently sitting in a GDPR region, though just visiting.

The setting is visible and settable for me (it was ON, now it's OFF)
What do you suggest, then? What’s your legal opinion?
Whomever hired IBM to build this mess should have been fired

https://en.m.wikipedia.org/wiki/Phoenix_pay_system
In Larry Niven's "Known Space" universe of science fiction stories, ground-based lasers built for interstellar propulsion end up being used to fend off alien invasion.

Example story "Madness Has Its Place"

https://temp.larryniven.net/?q=bibliographic-reference/madne...

Available at Baen's Library
https://www.baen.com/Chapters/0671878794/0671878794___3.htm

.

(okay, not necessarily Earth based lasers; perhaps the "ground" is more like "asteroid" or "tiny rock space station"...)
Better to look for another job where you think you might not be as disposable, even if at lower pay.
I wouldn’t have ever thought that LinkedIn feed content was written by real people if I hadn’t met some of them in real life.

It’s a low enough bar that I think AI content will fit right in.
Books printed before 2018, right?

I already find myself mentally filtering out audible releases after a certain date unless they're from an author I recognize.
Jupyter is not the end of the story here. There are plenty of "extensions". These extensions go, generally, down two different ways: kernels and magic.

It's not very common for Jupyter magic to be added ad hoc by users, but it typically creates a huge dependency on the environment, so no jupyenv is going to help (eg. all the workload-manager related magic to launch jobs in Slurm / OpenPBS).

Kernels... well, they can do all sorts of things... beyond your wildest dreams and imagination. And, unlike magic, they are readily available for the end-user to mess with. And, of course, there are a bunch of pre-packaged ones, supplied by all sorts of vendors who want, in this way, to promote their tech. Say, stuff like running Jupyter over Kubernetes with Ceph volumes exposed to the notebook. There's no easy way of making this into a "module" / "black box" that can be combined with some other Python code. It needs a ton of infra code to support this, if it's meant to be somewhat stand-alone.
This looks like the best option. They all support RS232 and are pretty cheap. Requires some DIY work but not horrible.

Thanks for pointing me in that direction.
It should not be, and people should use OIDC in preference to it wherever they can.
This is one of my standard interview questions, how do you familiarize yourself with a multi-million line code base with partially correct partial documentation (in addition to generated documentation). Looking for interesting tooling, and stepping thru the framework code to see how it all comes together (and enough concrete details to verify the claimed work history).

I'm not sure about the advantage to seeing all the code at once for understanding it. Surely for refactoring or massive editing, but to encode it into your brain, I feel the crucial thing is more abstract than actually seeing the code.

I personally find the large screen is something that's more useful when I am moving between different low-concentration tasks (confluence, slack, teams, emacs, whatever) but for deep problem solving/thinking, just 1 window I can see everything completely with a full-screen emacs is more conducive. I assume other editors than emacs would have this same facility. Extremely rapid answering of different questions about the code via LSP type facilities is more key than seeing a bunch of text at once, so I can follow the flow of my thoughts. Sometimes, when I'm trying to make sure that 2 or 3 functions have the same flow/logic (yeah, haven't found the abstraction to replace them with) I'll want a big side-by-side comparison of 2 or 3 places at once.

This ability to follow into third party code you use was one of the initial attractions of Gentoo - you can build all from source, keep source and symbols around, and edit/trace the code for anything on the system. Reading a lot of code I think makes my own code better.
LinkedIn strikes me as the adult equivalent of self conscious school kids trying to hold a conversation among themselves, each self consciously trying to sound cool.
This might be what you meant, but the ordered dicts are faster, no? I believe ordering was initially an implementation detail that arose as part of performance optimisations, and only later declared officially part of the spec.
I created a healthcare management software
I’m excited to share a project I’ve been working on called Medisys.

Medisys is a medicine reminder and prescription tracking tool designed to help users manage their medication schedules and medical notes easily. With an intuitive interface, it allows users to:

Add medicine reminders for specific days of the week
Track up to 5 prescriptions and update them as needed
Take notes from medical professionals for easy reference
Store all data locally, so it persists even after closing and reopening the browser
The app is built using Next.js and TypeScript, ensuring a responsive and reliable experience. All medication schedules and notes are saved in localStorage, so they can be accessed even when switching devices.

If you’re someone who needs a simple way to stay on top of your medication or prescriptions, Medisys might be helpful. Let me know your thoughts or if you have any feedback!
A person asking the question here means there are now several good succinct explanations of it here.
I doubt the "next few years", and if the world shifts to multipolar, it won't solve the problem, it will just move everyone to the "bad side" where frictions big and small abound.
For me the killer feature of Kafka is that topics are persistent until the data expires. Meaning different readers can be working at different offsets. And you can rewind or fast forward the offset you are reading, which can really be a life saver when things go sideways.

Does RabbitMQ have equivalent features?
> the Linux kernel is fully preemptible,

So this means there are no critical sections or interrupts being disabled anywhere in kernel code when PREEMPT_RT is enabled?
Would you say that your laptop can get 120fps on non-minimal settings while playing the current Call of Duty? What about Grand Theft Auto V or Overwatch?
Supercharger is the best product, and without Tesla we wouldn't be half as far as we are with car electrification. I don't get the ludicrousness of statements such as yours.
I don't disagree but if America distances itself now it will lose credibility, something which is somewhat low on the international stage at the moment. It has however done wonders for the defence industry here in Europe now we can't trust a traditional political ally. (This is not a criticism of the US, but a criticism of the UK and EU who should have military and political independence)

I think you miss that people tend to become less idealistic and further right as they get older. The "boomer" generation is just replaced by more of the same people. It's never going to change.
Would an LLM using character tokens perform better (ignoring performance)?