skysight-inc/HackerNews huggingface dataset:
Okay hear me out. Restructuring for profit right? There will probably be companies spawned off of all of these leaving.

If the government ever wants a third party to oversee safety of openAI wouldn't it be convenient if one of those that left the company started a company that focused on safety. Safe Superintelligence Inc. gets the bid because lobbying because whatever I don't even care what the reason is in this made up scenario in my head.

Basically what I'm saying is what if Sam is all like "hey guys, you know it's inevitable that we're going to be regulated, I'm going for profit for this company now, you guys leave and later on down the line we will meet again in an incestuous company relationship where we regulate ourselves and we all profit."

Obviously this is bad. But also obviously this is exactly exactly what has happened in the past with other industries.

Edit:
The man is all about the long con anyway. - https://old.reddit.com/r/AskReddit/comments/3cs78i/whats_the...

Another edit: I'll go one further on this a lot of the people that are leaving are going to double down on saying that open AI isn't focused on safety to build up the public perception and therefore the governmental perception that regulation is needed so there's going to be a whole thing going on here. Maybe it won't just be safety and it might be other aspects also because not all the companies can be focused on safety.
This is a natural and not really scary thing.

All code is built on mountains of dependencies that by their nature will do more than what you are using them for. For example, part of cargo watch is to bring in a win32 API wrapper library (which is just autogenerated bindings for win32 calls). Of course that thing is going to be massive while watch is using only a sliver of it in the case it's built for windows.

The standard library for pretty much any language will have millions of lines of code, that's not scary even though your apps likely only use a fraction of what's offered.

And have you ever glanced at C++'s boost library? That thing is monstrously big yet most devs using it are going to really only grab a few of the extensions.

The alternative is the npm hellscape where you have a package for "isOdd" and a package for "is even" that can break the entire ecosystem if the owner is disgruntled because everything depends on them.

Having fewer larger dependencies maintained and relied on by multiple people is much more ideal and where rust mostly finds itself.
Google Maps is cracking down on fake reviews
checking whether coordinates fall inside a national park is an exercise in computational geometry, surveying (the earth is not flat, what are coordinates on a sphere), databases, access to government data.

detecting birds is an exercise in gathering properly labeled training sets, neural networks and their topologies, matrix multiplication performance and/or orchestration of rented GPUs.

both of which cover interesting tasks, worthy things to learn, and are by no means easy.

"easy" is the bird recognition where you do an API call to a totem pole of third party services.
You can run with LitServe. here is the code - https://lightning.ai/lightning-ai/studios/deploy-llama-3-2-v...
Show HN: Deploy Next.js Apps to AWS Lambda
Hey everyone!

I've developed a new CLI that I'm hoping will turn into a vibrant community. Its a developer friendly alternative to using Terraform, Serverless, or other CDKs or Toolchains.

I'd love any feedback you all may have!
There is a correlation between new code and memory vulnerabilities (a possible explanation is given in the blog post, that vulnerabilities have a half-life that decays rapidly), but why does the blog post indicate causation between the two factors?

There is more than one possible and reasonable explanation for this correlation:

1. New code often relates to new features, and folks focus on new features for vulnerabilities.
2. Older code has been through more real life usage, which can exercise those edge cases where memory vulnerabilities reside.

I’m just not comfortable saying new code causes memory vulnerabilities and that vulnerabilities have a half-life that decays rapidly. That may —- may be true in sheer number count, but doesn’t seem to be true in impact, thinking back to the high-impact vulnerabilities in OSS like the heartbleed bug, and the cache-invalidation bugs for CPUs.
Doctoring web requests with Burp and the like in order to circumvent arbitrary input restrictions on the client side is an absolute godsend when dealing with crappy web forms, legacy software, etc.
Yeah, it's definitely less powerful that what absorb is doing. I wasn't trying to argue that it was equivalent. I just wanted to share a bash one-liner that I've had success with in case others find it helpful.

> What if I want some parts of it into one commit and another parts into another?

Looks like absorb will automatically break out every hunk into a separate fixup commit. My one-liner will create 1 fixup commit for everything that's staged. That's typically what I need, but on the occasions it's not, I use `git add -p`, as kadoban mentioned, to stage exactly what I want for each commit.
pg is sama’s biggest DR-er (interpret this as you will).

They have that Michael Scott & Ryan energy.
The incremental transformation from non-profit to for-profit... does anyone have legal standing to sue?

Early hires, who were lured there by the mission?

Donors?

People who were supposed to be served by the non-profit (everyone)?

Some government regulator?
Bill Gates Antitrust Deposition Highlights [video]
Tourism - and if you've run out of roaming data or are being charged per MB then it's actually very useful.

We need a better way of doing it though, this unauthenticated network with a captive portal running on some embedded device or some php on a cloud server somewhere is total junk.

There is wifi that is authed via your mobile provider on TFL (now mostly redundant as lines now have 4g/5g) but I think it's actually also piped back to your mobile provider and usage comes out of your allowance if you've got one. What if we were able to do the auth step via sim (so we know who is on the network if there's bad traffic) but terminated the traffic ourselves (i.e doesn't come out of your mobile allowance or get piped to them in the first place).
I'd love to see a source but I'm pretty sure the energy, time, and money that has gone into compute infrastructure is far greater than our space programs.
Free Chat with Groq
Are there any attempts to address this at the package management level (not a cargo-specific question)? My first thought is that the package could declare in its config file the "scope" of access that it needs, but even then I'm sure this could be abused or has limitations.

Seems like awareness about this threat vector is becoming more widespread, but I don't hear much discuss trickling through the grapevine re: solutions.
Yeah prescheme is really interesting, I really liked the SystemCrafters exploration of it:

https://www.youtube.com/watch?v=QqKuHylIqBs
In the outer solar system, under miles of ice, in total darkness and cold .. it is nuclear or nothing. Short of antimatter batteries, there is no other source of power that would be even theoretically suitable.
The Truth About Thesis.com (2015)
There are no other tools. Your engineers know exactly how much work to do to satisfy business needs. They will care about work as much as you do.
Me and a friend build our own Graphics engines based on https://learnopengl.com I can highly recommend this to everyone who gets started with computer graphics. It is a lot of new information but not the most modern Graphics library, but the information will help you understand the field and pickup any other graphics library quicker. Once I had a small project up and running I started looking at https://emscripten.org/ to combine it with some web experiments and more easily share my work with other over the web. I also started looking at https://vulkan-tutorial.com/ and https://webgpufundamentals.org/ to experiment with geometry shaders.

Next to Realtime Graphics you could also dabble into the world of Ray-Tracing. Personally I'm still quite new to this field but my master thesis supervisor also gave lectures at an other university where they recoded a lot of lectures during Covid. Advanced Computer graphics at the UU for example https://ics-websites.science.uu.nl/docs/vakken/magr/2021-202... The course recommends https://raytracing.github.io/ as a resource to students, and I can also recommend this.

As a small note to end with, the website(s) of professors giving computer graphics are a true tressure trove of information: https://jacco.ompf2.com/ https://www.3dgep.com/cpp-fast-track-1-getting-started/
> I've seen conflicting claims made. Everything from "WPEngine gives nothing" to (in this thread) "WPEngine sponsors a dozen developers" [1]

To at least partially back up my claim linked for the latter, WP Engine is part of WordPress.org's "Five for the Future" program, stating "This organization contributes 5% of their resources to the WordPress project" and listing developers they sponsor: https://web.archive.org/web/20240524210250/https://wordpress...

Their own open-source projects can be found on GitHub, like FaustJS: https://github.com/wpengine/faustjs

The primary events they sponsor are, to my understanding, WordCamps and DE{CODE}.
After working with Jenkins which has "hashed value" support for automatic staggering of jobs, I think its essential in any cron syntax evaluater.
Yeah, I know but with a puck, which isn’t feasible for consumer. A phone already has sufficient compute, but Apple and Google would need to provide/open up radio- and pairing protocols.
No, I will not. I prefer to use proper language.

Now, am I human or a LLM?
Do it! I’d use this language.
And more high level exits ... not only Mira Murati, but also Bob McGrew , and Barret Zoph

https://www.businessinsider.com/sam-altman-openai-note-more-...
Some people will always manage to blame MSFT, even for someones else shadiness, lol.

Consider adding some EEE
Actually, I really disagree with this view!

Toilet in this analogy cannot be moved, because it was originally decided, that it will be locked and didn’t invest in mobile toilet. Which was reasonable, but highlights lack of vision for the final product.

I don't think the point is that the toilet can't be moved – it's just expensive and disruptive to do so.

Nobody starts building a house without knowing final design.

I would argue the exact opposite – literally _every_ house is built without knowing the final design! Who knows what someone is going to need or want in the future? I'm writing this from a house that was built prior to the existing of indoor plumbing!
The issue with on train wifi is the companies see it as a pure cost centre and aren't incentivised to provide a quality product there. Some have even turned it off!

The on train hardware is usually half decent but they typically go with the cheapest tender for the operation of it.

This is the kind of BS you get when you have private companies run parts of your infrastructure. Imagine the productivity gain of millions of journeys where users can reliably access fast internet. In most cases stumping for a quality multi sim provider, maybe a 5G upgrade and decent bandwidth allowance and support would get you most the way to that. WCML for example already has really decent coverage on my phone doing tethering but somehow onboard wifi is unusable, despite the train having multi sim multi radio hardware and special external antennas.
ICYMI, Elon Musk restarted his lawsuit a month or two ago: https://www.reuters.com/technology/elon-musk-revives-lawsuit...

I'm wondering if OpenAI's charter might provide a useful legal angle. The charter states:

>OpenAI’s mission is to ensure that [AGI ...] benefits all of humanity.

>...

>We commit to use any influence we obtain over AGI’s deployment to ensure it is used for the benefit of all, and to avoid enabling uses of AI or AGI that harm humanity or unduly concentrate power.

>Our primary fiduciary duty is to humanity. We anticipate needing to marshal substantial resources to fulfill our mission, but will always diligently act to minimize conflicts of interest among our employees and stakeholders that could compromise broad benefit.

>...

>We are committed to doing the research required to make AGI safe, and to driving the broad adoption of such research across the AI community.

>We are concerned about late-stage AGI development becoming a competitive race without time for adequate safety precautions. [...]

>...

https://openai.com/charter/

I'm no expert here, but to me, this charter doesn't appear to characterize OpenAI's behavior as of the year 2024. Safety people have left, Sam has inexplicably stopped discussing risks, and OpenAI seems to be focused on racing with competitors. My question: Is the charter legally enforceable? And if so, could it make sense for someone to file an additional lawsuit? Or shall we just wait and see how the Musk lawsuit plays out, for now?
The potential risks to humankind do not come from the development of AGI, but from the availability of AGI with a cost orders of magnitude inferior to the equivalent capacity coming from humans.
Right, but I didn't submit it.
the software/architecture analogy works in many other ways, some concepts on functionality, reusability and modularity are very similar, but i guess that works for any complex system created to solve a user-specific problem
What if dep tree is like this:

a
|-b
| |-c
|
|-c
|-d
|-c

I may have read not carefully, but what happens if you allow crate X to write files, and it gets compromised? Should we set restrictions on per-call base instead?

I see we may catch those situations when a crate starts reading/writing when it hadn't, or in an unexpected place, if we set restrictions per call, but this only limits the attack surface, not eliminates it.

...It may actually make 3rd party libraries such a big bureaucratic pain, that users will minimize their usage.
Nobody here is talking about all the sensors and cameras this thing has and how easily it can be used for unsolicited audio/video recording? For me this is the biggest reason why Google Glass and other such projects never took off.
I'm sure there were people that claimed Nikola Tesla or Henry Ford weren't "advancing humanity" at the time.

There will always be people who disagree with the politics/opinions/alleigances of a successful person and who wish to downplay their success for selfish reasons.
>will have very little patience for any individual who wears always-on cameras that infringe on my privacy.

I'm not a violent person but wouldn't rule out using my fists if someone was filming me or my kids. That said, I live in Japan, so they'll more than likely be banned or heavily restricted like other devices used to make covert recordings.
I cannot actually believe that of anyone working at OpenAI, unless the company internal culture has gotten so unpleasant that people want to quit. Which is a very different kind of change, but I can't see them going from Bell Labs to IBM in less than ten years.
2003? If I remember correctly, SQL injection has been in OWASP Top 10 until 2016
Page title: HPA activity mediates the link between trait impulsivity and boredom
No. But I mean it is like half the energy density, not a tenth. And a nice LiFePo4 cell can match a cheap Li-ion.

Maybe better cycle performance somewhat outweights the initial smaller energy too?
But they're OK with the use of those resources if WP Engine contributes more code, which makes it... at least partially about the code?
A properly designed feature shouldn’t require an entire blog post, let alone multiple, to understand.
The board drama part and key people leaving seem oddly familiar.
I2P Compared to Other Anonymous Networks
Well, humans are humans, and after all, it's very very clear when you scan Hacker News comments that a lot of devs are just having the assumption that managers are useless fakers that bring nothing. It would be very hypocritical to pretend that devs are the victim of managers having a bad opinion of them while at the same time having no problem to have a bad opinion of managers. Live by the sword ...

My position is that it's sad and childish, in both case. Devs are not aimless creatures. But my point is that it is just physically impossible to not deviate if you don't get feedback. And importantly: your biggest deviation occurs when you don't realise there is a mismatch, so when you would NOT call a meeting. Because of that, constant re-alignment that occurs even when people of the team thinks there is no deviation are needed. It is not a judgement on the devs aimlessness, it's just a mathematical reality.

It's a bit like saying: because of this disease, I need to take my pill every morning, but it is frustrating to have this assumption that I'm a aimless creatures who needs constant pill-taking, I should be able to take all the pill in one go and go on with my life.
When I began as a junior web developer in 2014, I also started blogging [0] about React.js on the side. Despite hearing that "blogging is dead," I kept at it because I enjoyed sharing what I was learning as a junior dev.

Three years later, I began receiving job offers through my blog, which led me to try freelancing as a web developer. Fast forward seven years, and I've never had to actively seek out projects, because clients have consistently reached out to me via my website. In fact, blogging has allowed me to stay fully booked as a freelance web developer. I had freelance gigs at governments, at a DAO, at enterprise companies and startups which reached from code monkey positions to lead positions.

Would I do it again? Absolutely. But would I start blogging in 2024 just to get job offers? Probably not. The developer content landscape has changed significantly, with many more people now blogging. However, if your goal is personal growth and learning, a well-maintained blog can still be a valuable way to attract clients.

AMA :)

[0] https://www.robinwieruch.de/
If WP Engine is not capable to contribute to WP development, how do you imagine they will ne able to support a fork?
> Afaik specialisation (in full generality) would cause soundness issues, so it's not even just blocked by the trait solver, it's also blocked by figuring out a 'slimmed down' proposal that fixes those.

There is already a proposal for how to prevent unsound specializations [0], but it requires a lot of support from the trait solver, hence why I said it's blocked on it.

[0]: https://smallcultfollowing.com/babysteps/blog/2018/02/09/max...
I wrote a terminal dungeon crawler game with pure Ruby in less than 150 lines
I'm very happy that the EU got into the game early and started regulating AI.

It's way easier to adapt an existing framework one way or the other if the political part is already done.

I don't trust the AI industry to be a good stewart even less then the tech industry in general and when the area where I live has a chance at avoiding the worst outcome (even if at a price) in this technological transition I'm taking it.
Yes, it's been the reason I've been hired for the last 5 years: https://xeiaso.net It is now the reason I get consulting work.
This game is so fun! I spent entirely too much time playing it just once last night, and got to the 1024 piece in the first run. I don't know how long it took me, but it was long. With 2048 my runs are far quicker.
We should strive for easy to learn, easy to use.
> The most surprising thing to me in this is that the non-profit will still exist. Not sure what the point of it is anymore.

As a moral fig leaf. They can always point to it when the press calls -- "see it is a non-profit".
I was strongly in the static typing camp for a long time, with Haskell, Purescript, Idris, OCaml, and Typescript, but over time I realized that the costs mostly outweigh the benefits.

> The problem is that you invariably have to think about types. If you mistakenly pass a string to a function expecting an integer, you better hope that that is properly handled, otherwise you risk having type errors at runtime, or worse—no errors, and silent data corruption.

The silent data corruption is really only a problem with weak dynamic typing, that usually automatically coerces types. A lot of dynamically typed languages still have strong typing and will immediately error out. And usually in practice you end up testing all of the code you're writing anyone, so this almost never happens in practice except when someone is refactoring without thoroughly testing what they did, which should be done anyway whether there are types or not.

> Primarily that if specifying types is optional, most programmers will not bother, or will just default to `any` to silence the type checker.

They probably do bother when it's an important module, or a an edge boundary that needs to be documented with a contract, or during times of significant refactoring. And these days LLMs can generate the specs, optional types, and tests pretty easily for any sort of self-contained, modular, reasonably well written code.

So now with LLMs I think there's even better reasons to use dynamic typing. And type completion in an IDE still exists for a bunch of dynamically typed languages anyway, like javascript.
This was 100% my inspiration. I used emacs+magit for years. After switching away from emacs for dev work, I still cracked it open for git interactions for another year or so. Eventually, I moved entirely to the shell with a bunch of aliases to replicate my magit workflow.
Is it really a new class of language considering we had Ada / SPARK for ages? It takes safety further, too, with formal verification.
This can be optionally supported. To be clear, does it mean almost "RANDOM at construction" and the parser will assign a value by a hash/random function and then the crontab struct has an immutable value of that field?
Thank you - I am in my early fifties and have “that book” still not written and “those oss projects” sitting unloved. That “up to date” comment rings true and is just the right motivation to get things sorted

Plus I now want to make a virtual tour of some of my favourite places :-)
I feel like there could be little need for rules if people had a little common sense, then if you have targets, other start doing the bare minimum, I'd rather have parasites like WPEngine put off
It's way simpler than that, people don't burn bridges unless it's for a good reason.

I do think that whoever Bob is, they probably really are a good manager. EDIT: I guess that's Bob McGrew, head of research, who is now also leaving.
I don't see the point of anyone acquiring OpenAI - especially not Microsoft, Google, Meta, Anthropic, X.ai, all of which have developed the same tech themselves. The real assets are the people, who are leaving ship and potentially hireable. With this much turmoil, its hard to imagine we've seen the last of the high level exits.
I can't believe Android Police has a link at the end of the article, directing you to Amazon so you can go and buy your very own pair of Exploding Galaxy Buds lol
Can anyone trust the next "non-profit" startup ?
So easy to attract appeal with a lie and turn around as soon as you are in a dominant position.
I think it's fair to assume this is where the VAST majority of the Reality Labs spend was going ... cutting edge R&D on getting this kind of form factor, whilst some others (who perhaps lack object permanence) thought it was all going on Horizon.
ClopenAI
I use the git history all the time. For example the git history of PostgreSQL is amazing but I have also worked with proprietary software with good git history.

And one key to good git history is people splitting up big PRs in multiple commits.
from man entr:

Rebuild project if a source file is modified or added to the src/ di‐
rectory:

$ while sleep 0.1; do ls src/*.rb | entr -d make; done

Though I shudder to think of the amount of code needed to rewrite that in a compiled language while sticking to the principle of not reinventing anything remotely wheel-shaped. (Btw the libinotify/src is like 2.3kloc, inotify cli <1.2kloc.)