skysight-inc/HackerNews huggingface dataset:
Are you arguing to just allow any byte in names (which are ultimately user-defined input data), including 0x00, Unicode byte order markers etc., in a thread about a perceived correlation between developers' lack of i18n awareness and security bugs no less?

The reality is that there is often a tradeoff between keeping your test and edge cases simple via constraining allowable inputs and internationalization.

So I think you've got it exactly the wrong way around: These limitations might have happened precisely because somebody wanted to do the right thing from a safety/security perspective by doing overly strict input validation, at the expense of internationalization/compatibility.

Not saying that that's a good tradeoff in every case, but I really don't think you can draw any conclusions about a system's security by looking at whether it arbitrarily disallows some inputs (or if anything, maybe the opposite).
How Transaction Isolation Provides Data Integrity in Databases
You ignored "provide a few examples" part.
> Question: is it depressing, or is it a wake up call for just how much the average American hates health insurance executives?

Americans dislike the American health care system as a whole, but actually tend to like their particular insurance company and doctors.

I checked United on the ACA marketplace in my state and United is rated 4 out of 5 stars, which is the same as pretty much every other offering except Kaiser (5 out of 5) and new plans that have not yet gotten ratings.

This is not actually surprising because most people only actually use their insurance for routine things like physicals, vaccinations, lab tests, common illnesses like flu, physical injuries like sprains and broken bones and household cuts and burns, and fairly common prescription drugs.

Even the most extreme cost cutting insurance company is usually going to pay for those without question.
> “We’ve also said that our intention is to treat AGI as a mile marker along the way. We’ve left ourselves some flexibility because we don’t know what will happen,” added Altman

Musk accusing Altman of “deceit of Shakespearean proportions.”
hey

some time ago i skimmed around notion of Wardley maps and bookmarked it but did not pay (enough) attention. The other day there was another post on the topic, now with some basic resources, and i got hooked.. and read half of that book [0]. But right now have nothing on my mind to play with. May be that is a way? Map-and-try-predict the battlefield (needs lots of reconnaissance and "feeling" of the "landscape" and what-else-is-there). Mail me if you want a sparing partner - i want to learn this technique. But Anyway, have fun.

[0] https://feststelltaste.github.io/wardley-maps-book/#_the_fir...

(IMO, read chapter 2+ then 3~4 first, then restart from beginning)
The argument against is, 5 day work week only started ~100 years ago. Growing up, I thought, as humanity we would automate as much as we can, and lower the work week as well. Didn’t think people will consider that as “failure or laziness”.

The problem is, you can’t let the competitive market to make it happen, as your competition will eat you. The best thing you get is talent retention. But not the shareholder value or the products that you might be manufacturing.
Paywalled article for me.
one of the annoying things about Mathematica is that all functions are crammed into the same namespace and that there is no overloading with different parameterization options...
Good to know about the obviative case, that there's a name for these type of things.

When writing docs in code recently, it struck me as a little odd that pronouns can be used as a shorthand when referring to a singular and a plural, but can't be if they have the same plurality.

E.g. "When the name and errors exist, and it is non-empty and they are capitalized, ..."
That's great, unless you're a young person in Portugal being priced out of accomodation due to wealthy foreigners.
Show HN: Gemini Coder – Autocomplete with Gemini's 2M context
Hi! I'm happy to share my tiny, yet mighty VSCode extension for on-demand autocompletion using very large context and big models. Thanks to special prompting technique it works exceptionally well and is in my opinion currently the best solution for coding assistance out there. List of available models can be extended by OpenAI API compatible custom providers. MIT licensed.
I recall Westwood Monopoly (great game, btw) requiring Win32s to be installed to run the game on Windows 3.x. It also required WinG (which eventually got deprecated for DirectX). I have fond memories of playing around with Freecell and Microsoft Doggie (test app for WinG).
Great! I wish there was a "bang to buck" value. Some way to know the cheapest model I could use for creating structured data from unstructured text, reliably. Using gpt4o-mini which is cheap but wouldn't know if anything cheaper could do the job too.
Shortcuts and Longcuts
There are lots and lots of models, covering various use cases (e.g., on device, streaming/low-latency, specific languages). People somehow think OpenAI invented audio transcription with whisper in 2022 when other models exist and have been used in production for decades (whisper is the only one listed on that website).
I think the pre-trained checkpoint uses the same 20 TPU blocks as the original paper, but it probably isn't the exact-same checkpoint, as the paper itself is from 2020/2021.
>In the West the academias are contrarian

Yet they have participated in tons of human experimentation in the US.
Maybe this was less widely known back in 2008 when it was published? Still doesn't explain why it's getting attention now.
If you reduce it to just this then Russia is also a democracy since Putin got most of the votes. This is obviously not a sufficient condition to call something democratic.
It's easier to 10x code performance than 2x it
A large enough telescope in space, with a coronagraph could, in teory, find such planets by direct imaging. Right now, I believe only JWST fits the bill, but using it for this purpose would interfere with other types of research, so the coronagraph us used only only to observe planets the wer already discovered by other methods.
And they have the absolutely massive advantage of being able to associate content with queries that led to it, and know which piece of content was selected by the user. That surely can be used in some way to give them a leg up with both choosing good training data, and making for o1 type agentic models.
It doesn't strictly need to, but I think it arguably makes the flow of funds simpler particularly as the funds keep dripping into smaller fractions. I'm generally quite bearish on crypto, but I saw this and was like hmmm
I use them! I just add CSS to pretty them up.
There are many variants of the Latin alphabet and the English alphabet contains only a subset of the letters contained in the other variants.

There is no reason to consider the English alphabet as superior for machine purposes, in comparison to other Latin alphabets.

Its dominance in IT is caused by the fact that most of the development of commercial computers after WWII has been done at IBM and other US companies, not by any properties of the English alphabet.
Maybe, but that isn't Borland's Turbo Pascal compiler, nor Borland/Inprise/Embarcadero's Delphi.

Most likely a consequence of how many compiler writers care about optimizations in FPC codebase.
OP here. I found my last day job using a scraper that visits company websites in search of job listings. Now I've turned that into an app for others to use and access jobs found on company websites (rather than paid employer ads on Indeed or wherever). This gives the job searcher an advantage to find jobs not listed on job search sites and show the company you have taken time and interest to visit their company website. Would certainly love any feedback
Beyond TikTok – The National Security Risks of Chinese Agricultural Drones
(not everyone is into using some hot new framework, some of use stick with HTML/CSS/JavaScript)
https://archive.ph/r1VhF
I fill out as many polls as I can. I lie on them. Polling no longer yields accurate information.
I think you can solve that by funding the dependencies you rely on and have them fund their dependencies and so on...

A related project I recently found out about is https://www.drips.network/ The more I think about it, the more I like it.

In fact, TFA says

> But how should one decide which users to sponsor and how much to donate to each one? It requires data on their importance, and I used PyPI to roughly estimate it for Python packages.

It's better to have one of the slabs in the XKCD comic fund the ones immediately below it than to have users look at the whole thing from the outside and try to arbitrarily allocate importance via some metric like PyPI downloads, GitHub stars and whatnot
Pretty facetious comparison

I think you meant to say "specious".

The commenter doesn't understand what they're saying sufficiently for it to qualify as facetious.
“Who's updating their RSS feeds once an hour 24 hours a day?”

RSS is a pull-type system, no?. So the end-user is causing the overload problem by hitting the publisher’s RSS feed every hour? The problem is out of the hands of the publisher…
This is a really useful counter-argument, thanks.

Anthropic's Claude 3 series was interesting in that they offered Haiku, Sonnet and Opus - cheapest, middle, best.

I had trouble back then figuring out when Sonnet was the right option - it was clearly interesting though, and I ended up experimenting with it for things where Haiku wasn't quite good enough but I didn't want to pay for Opus.

Anthropic released Sonnet 3.5 as the new "best" model, but then failed (so far) to follow it with Opus. You've made me realize that Haiku 3.5 is actually the new Sonnet - it fits that same spot, at least for the moment until 3.5 Opus appears.
The same thing happened to me in 2016 — I gave up and started a new account.
Why would he do something about it if it’s helping him win?

> "And happens in most countries" is just a blanket statement. Major proportion is still declared and you dont just skate into presidential election 2nd round with 0€ spent.

Are you kidding? In the 2024 election, super PACs spent $4.5 billion on helping one candidate or the other win, and the source of more than 50% of those funds is unknown. I don’t think you can name a single democratic country where this doesn’t happen.

It’s kind of funny how people are willing to shut down all critical thinking when they want to believe a particular thing.
Eliminating data races in Firefox with thread sanitizer: a technical report
Upvoting as this usually proves the only effective way to get service.

Try cross-posting to Reddit as well
The "UTF-8" link is wrong, does anyone know where it should point?

I was hoping there would be progress on WoW64.
Sometimes shell is the only thing you can guarantee is available and life is such you have to have portability, but in general, if you've got an enormous shell app, you might want to rethink your life choices. :/
How about the simple fact that banning TikTok is even thought about but banning all US Social media is not? That is definitely picking sides and anti-democratic. I agree TikTok can cause problems, but no more than Facebook etc. Ban all or ban none.
I agree totally. But I've seen companies go to 100+ and still insist that the level of monolithic coupling I describe hasn't been outgrown.
FSharpPacker works on scripts (with extension .fsx) written with F# and usually run with `dotnet fsi`. For the F# advent calendar [1] I recently blogged about how those scripts are a viable starting point for developing an application in F#. Actually, it's even possible to easily maintain a scripted version and a compiled version of the same F# app, with basically the same code. For those interested, it's at https://www.asfaload.com/blog/fsharp-fsx-starting-point/

1: https://sergeytihon.com/2024/10/26/f-advent-calendar-in-engl...
I think people don’t get what I mean. A key with just 0s and a 1 at the last digit is very weak. Yet someone created a wallet with it for fun.
Tangent question: is there anything better on the desktop than ChatGPT's native client? I find it too simple to organize chats but I'm having a hard time evaluating the dozen or so apps (most are disguise for some company's API service). Any recommendations? macOS/Linux compatibility preferred.
I'm angry that I guessed right. I really don't like how flat the model for text generally is. I don't see text as a [Char], so if the computer does there's a hidden mismatch that people have grown to work around and with (just like searching on the Internet before 2005 felt. You had to know what was gonna work and then got the right to claim how easy it was)

We structure text in an implicit hierarchy given by spacing, margins and a bunch of other subtle things that [Char] doesn't capture, but can encode for other humans. I think that this is were all the problems stem from, and that with right (tm) structure a lot of the operations can be merged trivially with way fewer surprises.
Easier said that done for sure, and there will be more weird cases, but I'm guessing they will get closer to being just the conflicts that really need authors to deal with.
A lot of the last-minute tags are whitetail on the eastern plains:

https://cpw.widencollective.com/assets/share/asset/cgyw7aihp...
That’s profit, not basic functionality. If they denied claims at the level KP does, the CEO would still be a millionaire but they’d be spending tens of billions of dollars of the money their customers are paying for healthcare on healthcare instead of diverting it to shareholders. This should be like a regulated utility, not a private equity fund: comfortable living but nobody should be getting wildly rich because they’re taking money away from medical care.

The other thing to remember is that people don’t get healthcare for recreational purposes. The American healthcare system delivers quite poor outcomes because so much money is being pulled away by various levels of middlemen. Each layer of people second guessing your doctor, processing claims, negotiating rates, etc. is a lot of professional jobs taking money away from actual medical treatment. If people actually need care, that’s a negative savings they’re simply shifting to society.
Company I work at moved to an ID like [A-Z]Employee-number. Moot point for them :
Non-paywall summary: https://www.reuters.com/technology/openai-seeks-unlock-inves...
I think Goodhart's law only applies if you have fixed, published criteria for funding. That's why I mentioned transparency explicitly. I wonder if you could avoid some of the worst of Goodhart's law by saying something like "the formula changes every year, and we will publish it only after 5 years, but the goal is to reward value provided, and de-risk the ecosystem". The idea being you're explicitly trying to incentivize broadly valuable work rather than specific metrics.

It's a bit like the SEO dance. Publishing the exact formula makes it much easier to game SEO, so instead search engines say stuff like "we're trying to gauge the overall quality of the site, we use metrics like [...] but not exclusively, focus on making good, responsive, accessible content above all else". Obviously it doesn't work perfectly and the more money there is, the more incentive to game the system, but it seems better than the alternative of publishing the exact ranking algorithm.
Even with those things, blast radius for mistakes is ..the entire company is down.

e.g. User management deploy has somehow taken down core payment processing.
Authorities know that the killer arrived in New York ten days beforehand, they know he left on a greyhound bus bound for Atlanta. They don’t know his identity or current location.
> That's not how democracy works, and as a matter of fact, how the human brain works.

> You can't make informed decisions when state actors are working day and night to make you go against your own interest.

It is possible for a brain to do, but it is not common because almost everyone thinks based on heuristics, like you are doing.

It is highly analogous to the rise of science's influence on beliefs and thinking styles in the physical realm, but a different realm. We remain in a sort of dark ages in this regard.
Does it need any special care?
Great point - wish the people in charge at my job knew that lol
My argument here is narrowly scoped to human language and literature. (We already know the objective rule criteria of life is 42.)

It may very well be possible for an AI to read all of literature, and figure out what makes Hemingway, Tolstoy, and Dylan "good writing" vs. "bad writing". That has not yet been achieved. The problem, as the OP implies, is that by polluting the universe of literature with current-gen AI output, we may making the task of generating "good writing" in the future harder.

Then again, maybe not. Perhaps we have enough pre-AI works that we can train on them versus the mountains of AI generating schlock, and determine the objective function.
I’m not 100% sure what you mean. Systems I have used that do this don’t generally store each time series in a different table. Normally there’s just one big table for intraday time series and one for daily, with columns being like ts, as_of, series_id, value, metadata or something like that.

It scales just fine depending of course on the usual stuff - load pattern etc. If you want really high scalability you should be using something like clickhouse anyway.

Edit to add: the rationale behind having separate intraday and daily time series tables in those systems is the type of the value and as of timestamps is different (in one its a date, in one its a datetime), and storing dates as datetimes is a rich source of bugs.
Specially when GitHub gatekeeps users from accepting sponsorships, even if you have stuff published for over a decade.
It’s not a 3D printed gun. That technology is barely capable of single shots and they look very distinctive.
>He took aid from Russia which is against Romanian law.

Funny that you know this, but the actual court decision that should show proof of this has yet to be released. Either you are spewing hearsay, are in the intelligence community and are sharing secret information or... you are lying.

Please, do link the so-far unreleased information that the court based its decision on. I'll wait.
> Tesla's Model Y is still the best selling car model in the world in 2024

Do you have a source for that? Tesla is not even in the top 10 largest auto manufacturers, but the larger ones have way more models so I suppose it is possible Model Y is the best selling car (though it certainly isnt in the US).
In other words, considering we are talking about string and unicode...

There are two types of programmers, those that are wrong and those that are very wrong
Yes. The more excited someone else is about an idea, the stronger the signal. The more you have to show them the idea, the weaker the signal (with exceptions at the edges)
> The immediate neighbors collected transit fees for Russian gas and oil. Ukraine itself collected transit fees for gas deliveries to Austria until very recently.

What else were they supposed to do? Block transit altogether and alienate their partners?
Biggest I know of is https://github.com/sonic2kk/steamtinkerlaunch/blob/master/st...

27k lines/24k loc
The average person in the US maybe.

And the third world.

In Western Europe? Not so much. I mean, yes, there are poor people, but the middle class mostly doesn't live paycheck to paycheck.
> I've noticed quality issues in your code recently...

Why is it always the report who is the source of the problem and not the manager?

How about "I've created a toxic work environment and put my reports under a lot of stress. And I have not given them any opportunities to grow and learn new skills. I am planning to do better..." Words that will never come from the mouth of a manager.

Have a hard conversation with yourself first before blaming the reports.
On that note, the article states that it donates more to higher risk projects, and risk increases by OpenSSF score. One question I had about the article is does that mean that projects with more security vulns get a higher donation? If so, then that might become a perverse incentive to leave security gaps in your code.
Domain harvesting and the Twitter long game in retrospect
>Americans DO support people in Gaza/Westbank

Americans !== America.
Yeah, most of the advice is really bad, because they want to avoid the harsh truth: that things aren't necessarily going to work out. You can't sell a self-help book that teaches "you need people to love you but you might be left alone forever". People want a guaranteed solution but that simply doesn't exist.

However, a lot of people, like the person I originally replied to, choose to remain alone, and that's often because they are scared of rejection or of being left alone. It's kind of ironic, like a contradiction. Longing for connection, but being so scared of rejection that you force the rejection to happen yourself, so that it doesn't happen to you involuntarily, but by forcing that rejection through self-isolation you basically guarantee your doom rather than opening the possibility for flourishing.
if this is what you think, I highly recommend you watch some episodes of Financial Audit on YouTube. Lots of people out there living paycheck to paycheck because they spend all their money on DoorDash and interest on bad debt, even with good income.
Title is cut off; it is missing “… via GitHub Sponsors and PyPI data ”. My project, for instance, does not use GitHub, nor is it a Python library or even Python-only.

I suspect that a better measurement might be based on what software people actually have installed, perhaps using the Debian Popcon data.
One of my favorite hard sci-fi books! Well worth a read
It does make some sense, even if life would be viable only in (for example) the twilight rim of the planet (such as around the poles)
meanwhile in america: "you're taking time off work for a 1 week vacation this year? what are you, a commie?"
I’ve had AI influencers reaching out to inquire about the bridge I have for sale, everyday for the past 2 years.

We’ll never see AGI in its original definition in our lifetimes. It doesn’t take being a rocket…company buying billionaire.
Pretty much weasel words way of saying they aren't helping because they agree with the killing.
> As per the current terms, when OpenAI creates AGI - defined as a "highly autonomous system that outperforms humans at most economically valuable work" - Microsoft's access to such a technology would be void.

That’s their definition of AGI? What does that have to do with actual intelligence?
lol. :)

Funny but not entirely true. I had cases when we had to urgently store a firehose of data and figure out the right string encoding later. Just dumping the strings with uncertain encoding in `bytea` columns helped us there.

Plus for some fields it helps with auditability f.ex. when you get raw binary-encoded telemetry from devices in the field, you should store their raw payloads _and_ the parsed data structures that you got from them. Being this paranoid has saved my neck a few times.

The secret is to accept you are not without fault and take measures to be able to correct yourself in the future.
First things first:
(Parenthesis)
From now on, if it is important, pay for it. At least a smaller email provider with real human support, but best is "buying" your own domain and hosting your email. Same goes for backups. And pass the info to your loved ones.

Less importantly: Since you know exactly what phone# is requested, try to contact it. Approach it in a way that doesn't alarm the renter and blocks you. Meanwhile, contact a real human in "telephone company" (maybe said # is free) and explain the situation: you want/need to PAY to get the phone number assigned to you (My telecom offers that service)

Human Is always the keyword
Thank you, will probably resort to that as well.