skysight-inc/HackerNews huggingface dataset:
They were probably looking for something like: 'The app needs camera permissions so _you_ can take photographs'. 'The camera will be used to take photographs' is not clear that the app might be taking extra photographs that you did not intend.
GitHub Offers Data Residency in the EU with GitHub Enterprise Cloud
Except for the moving fast part?
Stochastic Parrot - a name that aged like milk. How can it be a parrot when it is doing few-shot and zero-shot tasks? Humans also make mistakes, and we're also using leaky abstractions to operate.

We're "parroting" things we don't really understand. When we take a pill, we don't know what's inside. When we go to the doctor, we don't study medicine first. When we write an app, we don't know the minute details of the operating system or frameworks we use. As software developers we know the limits of abstraction and that no abstraction works everywhere.

Our society is functional, not based on genuine understanding. Can't be any other way. There is no central understanding, not in the brain and not in society. Remember the parable of the Elephant and the blind men? That's us.
Given that “AT Protocol” already has a definition in IT that’s as old as OP’s grandma, what is this AT Protocol they are talking about here?

Introduce your jargon before expositing, please.
2nd result on kagi was about him but in the form of another critic.

https://datatracker.ietf.org/doc/draft-thomson-postel-was-wr...

Hard disagree.

It's a valid argument, but I say it's merely an argument, not an argument that wins or should win.

But also, I say that detecting out of spec or unexpected input and handling it in any other way than crashing IS adhering to Postel.

Refusing to process a request is better than munging the data according to your own creative interpretation of reasonable or likely, and then processing that munged data.

I consider that to be within Postel to return a nice error (or not if that would be a security divulgence). Failing Postel would be to crash or do anything unintended.
I'm not talking about suicide prevention, I'm talking about preventing abuse of the legal framework for euthanasia for nefarious purposes (like what ended up happening in WW2-Germany).
Design notes: https://martymcgui.re/2024/08/17/jamming-on-a-13-year-old-sk...
Same. Oodle is extremely well known in the game dev sphere. It’s literally baked into PS5 silicon for hardware decompression.
|such intelligence isn't really a bottleneck today.

Yep, pretty much agree. As soon as I see LLMs start solving millennium problems one after another I might change my tune.

The bottleneck is much more likely to be people unwilling to quit hoarding economic potential in the form of money.
Ah, now that makes sense! Thanks for sharing it. We definitely didn’t have that in mind when naming it Skyvern, but it's cool to see how it could be interpreted that way
A problem shared with AT as well.
> It's important to laugh at the issues of the day

Is it? In Robert Heilein's Stranger in a Strange Land one of the central conflicts involves the main character who's grown up on Mars, where there are no humans and no humor. He is thrust into Earth, humans and humor and makes a bold observation about humor: We only laugh at things that cause pain. Whether physical, mental or spiritual, all humor is reflecting on pain.

So with that in mind, laughter starts to look a lot more like a psychological hiccup. Or a reaction to pain. That's all without getting into who's doing the laughing and who's being laughed at. They aren't mutually exclusive, but they have different psychological impacts on each participant. Does the person being laughed at, want to be laughed at? Perhaps to them its another form of social control...
This is not "haha". It's a pity. Even Russia haven't forced Telegram to do things that now they need to comply because Pavel became hostage of this situation
What is the upside for him or Stability? How, and why, would James Cameron make it easier to train image and video generators on deblurred, auto-captioned Hollywood movies and TV shows?
Source article (59 points, 6 days ago, 64 comments) https://news.ycombinator.com/item?id=41578017
No, not like GDPR.

There is mostly a motive for lots of CYA to reduce liability. Do some tickbox security to keep costs down if something goes wrong.

IN any case AFAIK most of the big fines are not for poor security, but for poor practices.

On the other hand GDPR imposes quite a cost burden on small organisations that hold limited data and thereby provides a competitive advantage to big business.
Western media keeps on being surprised over and over that Chinese can compete with and surpass western technology.

In manufacturing they've been ahead for decades, and it's nowadays very common to find state-of-the-art software from China.

West, and neoliberalism, is totally screwed in a few decades.
USB-C ports have a flaw in their physical design. Due to the shape of the port, dust and other gunk slowly gets jammed down into the port and eventually enough builds up that you can't get a good connection anymore. It happens after about two years for me and has happened on every USB-C phone I've had.

It's pretty easy to clean. I'll turn off my device, fill the port with rubbing alcohol, and scrub around with a pin of some kind. It takes me about 10 minute and you have to be kind of aggressive with it. I find that by the time I start having issues, the quantity of gunk I remove is about the size of a grain of rice.

Here is a short video on it: https://www.youtube.com/watch?v=GIoTlY1Wm4Q
Seems like 37 madlads have already pushed the fork button.
It seems like the intent is to encourage giving changes to exclusively the maintainer, and that forking in this context refers to distribution beyond a private communication between the change proposer and the maintainer.
“You’re holding it wrong” strikes again.
Why America hates to love chicken nuggets
Jetstream isn't an official change to the Protocol, it's an optimization I made for my own services that I realized a lot of other devs would appreciate. The major driving force behind it was both the bandwidth savings but also making the Firehose a lot easier to use for devs that aren't familiar with AT Proto and MSTs. Jetstream is a much more approachable way for people to dip their toe into my favorite part of AT Proto: the public event stream.
Oh no! I thought it was only Sam Altman and Open AI in the controversies. Are all the AI CEOs mental? I think Anthropic is our only hope now.
I think if you’re interested in heavier duty constructors such as this, the real move upwards is to unistrut…
I think for 30% of my revenue I'd expect reviewers to find the time to use the full context of the app. That may not be realistic for every app on the app store, but it is reasonable for apps with tens of thousands of reviews and hundreds of thousands (at least) in revenue.
Most competitors are repaired with screens scavenged from other devices. Which is not possible with Apple devices, because of the hardware lock.
Tiny Guide to Webscaling
Ten years earlier and she didn't publish it right away. That really goes to show how much more difficult it was for a woman to become a scientist back then.
Product opportunity: Apple Store platinum plan for just 60% of your revenue. State of the art AI account managers will be happy to answer all of your questions.
I remember hanging out in #mpeg3 on EFNet many many years ago and becoming an acquaintance of Justin Frankel while he was working on this. I had made a skin and even a few tray icons for him to use in the app, and some of them are in here. I can't remember 100% which ones were mine, but the punchlabel one definitely was. My name is in the credits too: https://github.com/WinampDesktop/winamp/blob/0695744fd658c42...
Assuming and making up numbers for pesticide XYZ degrades in 6 months.

First what is degrades is that 100% or 50%? Is that based on just because it’s no longer effective? Does your statement change if considering dumping huge amounts in a highly concentrated area? Does that concentrate what small percentage remains after 6 months, 6 years etc and does that change the conditions of decay for the stuff at the bottom of the pile, middle, top?

Just seems like dumping a 1000 trucks worth of something might introduce some new factors into the equation. But yeah, I’d be more worried about living near or down stream of a rotting orange sludge landfill that’s pulsating with fly larvae I guess in the end than the pesticides, not that people who tend to live near these dump sites really have a choice one way or another.
Some of the worst advice I read comes from some of the smartest people out there.
Who built what business on whose business? It's not clear what you're referring to.
Fear - "about food contamination over time"

Uncertainty - "how to keep the fabric ones clean?"

Instilling doubt - clearly these reusable shopping bags just aren't as hygienic as the disposable ones. Yet another way to toss out the suggestion that these disposable bag bans aren't good, and we should stick to disposable bags, without directly stating it. Have other people reading these comments have that thought stuck in their mind, "oh yea, reusable bags aren't good, they'll have food contamination."

Unless you really think NBJack honestly never thought about laundering or washing fabrics. C'mon, even my three year old understands when fabrics get dirty they go in the washing machine.
Hey roninorder, after sleeping on it, I realized I got triggered. A friend said something similar to what you said years ago, and I had a lot of time to stew about it.

Take a show like Yellowstone: highly politically charged, and the plot is around the realities of making it in the world today. I would argue that the ranch should be public land and the ranchers should pay grazing fees instead of taxes. But they are homesteaded, so the land is theirs. Which creates tension in who profits from the land. One advantage of private ownership is that it's arguably less susceptible to development, in that a selfish person can't build a cabin at the top of the mountain for all to have to see. But it can also go the other way - the Wilks brothers (billionaires) bought large tracts of land in Idaho and immediately built fences to keep hunters out of what used to be shared. People previously all for private ownership are now suffering under cognitive dissonance at the loss of what they felt was their heritage.

I take the academic road and imagine ways to satisfy these constraints outside of the current context. But most people are trapped in a Nash equilibrium where not everyone is happy, in fact a lot of people are unhappy. I think that's what you're getting at in your comment, that these things are hard. My idealistic dreams have little effect on the situation on the ground.

Sorry if I was too confrontational in my response.
The article kind of assumes you know what it is in order to be interested in it, but it's the protocol used by Bluesky instead of ActivityPub.
I don't disagree. However, often, when I use a library, I use it within a small function that I control, which I can then type again. Of course, if libraries change e.g. the type they return over time (which they shouldn't also according to Rich), you often only notice if you have a test (which you should have anyway).

Moreover, for many libraries there are types- libraries that add types to their interface, and more and more libraries have types to begin with.

Anyway just wanted to share that for me at least it's in practice not so bad as you make it sound if you follow some good processes.
Agreed - the only RCE vulnerabilities that would IMHO qualify to "All GNU/Linux systems" would be in Linux kernel networking stack and maybe in openssh.

But the "(+ others)" seems to imply it's not Linux kernel.

And OpenSSH is maintained by OpenBSD folks, who take security extremely seriously. I cannot imagine them taking 3+ weeks and not having security fix, nor arguing whether "Unauthenticated RCE" has a security impact.

So I am guessing it's one of the other common packages, probably not installed on every computer and/or not normally exposed to the internet.
So they will just move to Miami or New Orleans.

The bigger remaining problem would be the SAG actors union deal, caused by the last strike. And this was already before Newsom signed this. Do we have elections coming up? Oh yes, we do
Blackstone/ Vista Equity Partners to acquire software maker Smartsheet for $8.4B
I'm aware, yet the statements "iCloud Keychaing is fully end-to-end encrypted" and "I was able to download some unencrypted metadata" contradict each other.

I think there's actually no contradiction – you are quoting/linking a statement about device-side encryption, but your article is making one about what Apple store on their servers.
David Wheeler has been complaining (and suggesting fixes) about this for a long time: https://dwheeler.com/essays/fixing-unix-linux-filenames.html

safename LSM https://lwn.net/Articles/686789/
I agree Apple is a monopoly and their software grip should be loosened. However, in this particular case, I think Apple is correct.

The intended functionality of the App, no matter how obvious it may seem, needs to be documented to users IMO. Yes it's a camera app - yes it takes pictures. However, users should understand WHEN and under what conditions the app takes pictures.

Saying "this app takes photos" is really not enough. Does it take photos while I sleep?

That might sound ridiculous but remember the plethora of apps that take location data when they don't explicitly need it at that moment.
Show HN: TypeScript library for merge+diff operations on deeply nested objects
Personally I would contend that none of that counts as "operating" in France or Iran. You're operating entirely in the US, and it would be ridiculous for Iran or France to try to subject you to their laws just because people who live in their country are communicating with you or sending you money. (Though obviously those people are still subject to the laws of their respective countries in what they're allowed to do when interacting with you, just as you are subject to US law in your interactions with them.)

Of course, the fact that something is ridiculous doesn't prevent a sovereign country from trying to do it anyway. Iran can threaten to assassinate you for communicating with their citizens, and France can threaten to jail you if you ever travel to France or extradite you. Both of those threats are unjustified in my opinion and should not be supported or condoned by other countries (particularly not the US), but like I said; they're sovereign countries so we can't do much to stop them if they want to be unreasonable.
This is one of the better open source but business projects as it has running it on my machine front and center. I still don't know why you are tying yourself with VCs but well done.
A platform that turns everyday devices into your own AI cloud
I’ve been working for a while on Kalavai (https://kalavai.net), a project to make distributed AI easy without a devops certification. There are brilliant tools out there to help AI hobbyists and devs on the software layer (shout out to vLLM and llamacpp amongst many others!) but it’s a jungle out there when it comes to procuring and managing the necessary hardware resources and orchestrating them. This has always led me to compromise on the size of the models I end up using (quantized versions, smaller models) to save cost or to play within the limits of my rig.

Today I am happy to share the first public version of our Kalavai client (totally free, forever), a CLI that helps you build an AI cluster from your everyday devices. https://github.com/kalavai-net/kalavai-client

Our first use case is distributed LLM deployment, and we hope to expand this with the help of the community.

I’d love for people interested in AI at scale (bigger than a single machine) to give it a go and provide honest feedback.

Do you share our motivation?
If you tried Kalavai, did you find it useful? What would you like it to do for you?
What are your painpoints when it comes to using large LLMs?

Disclaimers:
- I am the creator of Kalavai
- This is my first post
>What if I could watch a custom edit of Starship Troopers on demand, and this edit surprised me with something new? I don't know exactly how this would look, but maybe it's interesting?

this is not interesting whatsoever actually
That'd mean they'd have to do more work then necessary & there'd at most only ever be what went back to the stripped down 5.666 code deliverable they got after it was sold on from AOL at the start of 2014 (was looked into but determined not worth the hassle when that was being sorted out at the time).

-dro
But if it's so obvious that all you have to do is wash them, what's the big deal, right?

> Unless you really think NBJack honestly never thought about laundering or washing fabrics.

I think that's infinitely more likely than some psych play trying to 'sow FUD' about... plastic bags.
Quantity vs Quality really .
Indigenous People of Taiwan: Austronesian Origins Documentary [video]
NPD now this, is 2024 the year of PII leaks for Americans?
Reminds me of this...

https://hackaday.com/2024/01/20/how-a-steam-bug-once-deleted...
Dell XPS 13 leads Intel Lunar Lake laptops with 18 hours of battery life
I would almost argue a failing of so many standards is the lack of surrounding tooling. Is this implementation correct? Who knows! Try it against this other version and see if they kind of agree. More specifications need to require test suites.
Windows executables mostly work forever. Especially if they were widely distributed.

If Winamp is broken on Windows N+1, it's Windows that is broken. If Winamp is broken on Wine, it's Wine that is broken.
That link states that they only have two data points tied to an account: time of account creation and time of last connection. Since phone numbers are used as the account identifier, law enforcement would need to supply the phone number for signal to look up the account, right?

Do you have any source for Signal supplying IP logs?
> Through experience I believe you need to strike a balance, if the project is in fluid motion you do need to care more about easiness of change until it settles but separating the actions (representation of a full fledged entity vs representation of a request/action to create the entity, etc.) is not a huge overhead given the benefits down the line (1-3 years) when the project matures. Balancing this is tricky though, and the main reason why any greenfield project requires experienced people to decide when flexibility should trump better representations or not.

I am in complete agreement, and this is why experienced architects and project managers are so key. Effective software architecture has a time dimension.

Someone needs to have the long term picture of how the architecture of the system with develop, enforce a plan so that the project doesn't get locked into or cut by early-stage decisions long term, but also doesn't suffer the costs of late-stage decisions early on, and manage the how/when of the transition process.

I think we could have better tools for this. Some of them in libraries, but others to be effective may need to be in the language itself.
If the permissions on the repo (in GitHub, not git) are such that you lack permission to create branches, then you must first clone (local git terminology) / fork (hosted on GitHub terminology) the repo so that all the permissions are yours.
tcl 8.6.13 still has serious performance problems, although indeed 8.0 did improve the situation dramatically; it's on the order of 64× slower than native code in simple microbenchmarks like http://canonical.org/~kragen/sw/dev3/dumbfib.tcl, which also means about 2× slower than cpython. its type system is a big part of the reason why

compare†:

: ~; time tclsh <<<'proc fib {n} { if {$n < 2} {return 1} else {return [expr {[fib [expr {$n - 1}]] + [fib [expr {$n - 2}]]}]}}; puts [fib 35]'
14930352

real 0m8.351s
user 0m8.346s
sys 0m0.004s

: ~; time luajit -e 'function fib(n) if n < 2 then return 1 else return fib(n-1) + fib(n-2) end end print(fib(35))'
14930352

real 0m0.127s
user 0m0.122s
sys 0m0.004s

even with the huge performance hacks added in tcl 8.0, it's only about 64 times faster than bash

: ~; time bash -c 'fib() { if [[ $1 -lt 2 ]]; then result=1; else local arg=$1; fib $(($arg - 1)); local tmp=$result; fib $(($arg - 2)); result=$(($tmp + $result)); fi; }; fib 35; echo "$result"'
14930352

real 8m24.591s
user 8m24.412s
sys 0m0.028s

which puts it about halfway in between shell scripts and native code

that doesn't mean you can't write large, successful applications in tcl, even without any c extensions! a core i7 is about 17000 dhrystone vax mips http://www.roylongbottom.org.uk/dhrystone%20results.htm while a pentium 166 was about 270 mips. so anything you could do with usable performance on a pentium you can do, with enough discipline, in pure tcl. it'll probably be a lot quicker to write than pentium assembly, too. and things like arrays (hash tables), regular expressions, sqlite, tk, etc., are of course enormously faster on a current computer, and you have a thousand times as much ram to play with and probably an ssd

but you probably don't want to write your fractal renderer or real-time raytracer in tcl. by contrast, i've done both of those successfully in lua with luajit: https://gitlab.com/kragen/bubbleos/blob/master/yeso/mand.lua https://gitlab.com/kragen/bubbleos/-/blob/master/yeso/sdf.lu...

in terms of command languages, what do you recommend for getting good tab-completion in tcl? i don't know of any good options but that doesn't mean there aren't any; it probably just means i'm ignorant

______

†before wduquette's very helpful correction, I had:

: ~; time tclsh <<<'proc fib {n} { if {$n < 2} {return 1} else {return [expr [fib [expr $n - 1]] + [fib [expr $n - 2]]]}}; puts [fib 35]'
14930352

real 0m59.757s
user 0m59.736s
sys 0m0.004s

and while, in some sense, maybe my additional 8× slowdown here was kind of a performance effect of the everything-is-a-string type system, it's not an unavoidable one
Every time I see one of these stories I'm reminded that the Nazis started by exterminating the unfit [1] - the mentally unstable, the elderly, etc. Only once they had that program well in hand did the Nazis move on to removing others who were (in the Nazis assessment) a "burden to society".

The danger here is that we're saying "there is a right to control how and when you die" but I have never seen anyone articulate an actual moral theory that allows for self-ending but does not also allow for other-ending (and the heart-rending stories that encourage allowing suicide only require the addition of "and she couldn't communicate her wishes" to cross over from supporting suicide to supporting euthanasia). Baring which, allowing suicide is allowing euthanasia. And allowing euthanasia is allowing coerced euthanasia.

[1]: https://hmh.org/event/medical-ethics-and-the-holocaust-how-h... & https://en.wikipedia.org/wiki/Nazi_eugenics
Depends a bit on the "manufactoring". It's not "black"-"white". While it's certainly true for e.g. a brewery or a bike-factory-line, it's less so for aluminum, or chemicals. And even less so for systems like a freezer.

A friend who makes juices and dried fruits on medium scale, plans his production ahead based on the spot pricing: steaming or deep-freezing can be postponed for days, apparently; I helped him with some dashboards and integrations of the pricing-APIs for this.

What I'm trying to say is: yes, a lot of industry won't be able to profit much from these markets. But many can, if they are just willing to change their current ways a little. Not all: many.
Congratulations on writing your book.
There is no such thing as a post Postel world. But handling the input in any other way than crashing or ub IS perfectly Postel.

Deciding that nul is invalid data, and refusing to allow it, and refusing to munge the data and proceed based on the munged data that you essentially made up, as long as whatever you did do instead was graceful and intentional, to me that is perfectly Postel.