skysight-inc/HackerNews huggingface dataset:
Congress creates, empowers and funds regulatory bodies based on the demands of the people (voters, lobbyists). You either grant licenses to operate within a framework or you have to follow people around scooping up shit and work through the legal system as enforcement mechanisms.

Big tech or big business very much prefers the scoop shit and fight it out in court method as it gives them a huge advantage.
I’m betting subconscious but intentional. I’ve heard a couple artists talk about how they organize an album and there’s a vibe they’re going for but I didn’t get the impression any of them had it down to anything like a science.

Dark Side of the Moon and the Wizard of Oz. It’s just two artists putting a story arc together by feel and getting the same shape. A bit birthday paradox, but a bit shared vibe.

In the case of The Wall, I would bet a certain degree of symmetry was being reached for. Few artists want to leave or start an album on a sour note, but there will be songs in the middle that are.

One of the things I miss from the pre-streaming era is that “nobody” listens to whole albums at a time anymore, and I find that a shame. I used to start humming the next song on the album when I would hear things on the radio. Makes it worse when they trim the intro or outro for radio play though. I prefer the album version of Wish You Were Here, for instance.
> https://telephoneworld.org/landline-telephone-history/pink-f...

Doesn't the internet still have some pretty places?
I’m as skeptical of OpenAI as just about anyone, but Marcus just seems to engage in the kind of contrarian ranting that happens to people when they spend too much time on social media. I would say a better indication of o3’s performance is François Chollet seeming kind of bummed that LLMs have reached this point, contrary to his expectations.

EDIT:

In the interest of not being overly negative myself, I found Nathan Lambert’s more measured and detailed breakdown far more instructive:

https://www.interconnects.ai/p/openais-o3-the-2024-finale-of...
> So it took 10 years to ratify absolutely essential extensions?

Essential for what? RISC-V was not just created for high performance of application cores.

The first couple years RISC-V was mostly for university research work.

Turning it into a fully capable alternative only started later and yes, that takes a number of years.

> Somehow I suspect in 10 years there will be a new set of extensions promising to solve all your woes.

Its about delivering the same as Intel/ARM and they have that now. Yes, in 10 years more extentions will exist, this is true for RISC-V and ARM and x86.

> Seriously, the way to do this is for someone to just go off and do what it takes to build a good CPU and for the ISA

No it doesn't happen that way because the company wouldn't do that wouldn't open source their ISA design. Or at least not historically.

So a different path was taken to create and open standard and it worked out pretty well, even if it doesn't do what your imagination wants.
Ask HN: Weird adware on my Mac that tries to connect to localhost on port 8000?
I know this might not be the right place to ask, so I apologize in advance.

I use the built-in Python 3 http.server module to transfer files through the local NAT across multiple computers occasionally. Unless you explicitly specify a port, 8000 is the default one.

I accidentally left my personal Mac running overnight, and hence the http.server as well. Apart from the HTTP server in the Terminal window, only Apple Music and iMessage were running in the background. Here is what I woke up to waiting for me in my connections log:

::1 - - [20/Dec/2024 20:24:30] code 404, message File not found
::1 - - [20/Dec/2024 20:24:30] "GET /setuid?bidder=rise&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=xwtlCz-9C HTTP/1.1" 404 -
::1 - - [21/Dec/2024 10:19:38] code 404, message File not found
::1 - - [21/Dec/2024 10:19:38] "GET /setuid?bidder=rise&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=xwtlCz-9C HTTP/1.1" 404 -
::1 - - [22/Dec/2024 09:31:47] code 404, message File not found
::1 - - [22/Dec/2024 09:31:47] "GET /setuid?bidder=rise&gdpr=&gdpr_consent=&gpp=&gpp_sid=&f=b&uid=xwtlCz-9C HTTP/1.1" 404 -

A quick google search of this strange URL lead me to an application called Prebid Server, which is some sort of library for programmatically interacting with advertisement services, as far as I understand. Coincidentally, by default, it also runs on port 8000, especially in development mode, so I suspect that some kind of app on my Mac found a living TCP 8000 port and tried sending these requests believing it was Prebid or something.

In any case, this threw me completely off-guard, because up until this point I wasn't even aware of this library existing. Not only that, but this is certainly something running locally, because the requests are coming from localhost (::1). None of the software projects I am working on are known to be exhibiting this kind of behavior, so it only could be a third-party app or something malicious.

I ran multiple scans on this Mac through conventional anti-malware software, like Malwarebytes and Avira, and they found nothing. I've always been skeptical about this kind of software being accurate, so I expected them to provide me with such results.

My question is still, what could this possibly be? What kind of other clues I should be looking for to find out what it is (logs, leave Proxyman running overnight to try to see from which app the request is coming from, etc)? I know this is going to be hard to figure out, but I am willing to provide as much information as I can about this computer, if that helps with the search.

Thanks to everyone in advance!
This argument gets trotted out frequently here when it comes to LLM discussions and it strikes me as absurd specifically because all of us, as humans, from the very dumbest to the brilliant, have inner lives of self-directed reasoning. We individually know that we have these because we feel them within ourselves and a great body of evidence indicates that they exist and drive our conduct.

LLMs can simulate discourse and certain activities that look similar, but by definition of their design, no evidence at all exists that they possess the same inner reasoning as a human.

Why does someone need to explain to another human that no, we are not just neurons sampling impulses or algorithms pattern-matching tokens together?

It's self evident that something more occurs. It's tedious to keep seeing such reductionist nonsense from people who should be more intelligent than to argue it.
The Terminal seems like one of those things that management declares to be “done” and then nobody touches it for a decade, until somebody notices that there’s enough user outcry for a big overhaul. That’s what happened on Windows, where the console rotted for decades until there was finally enough attention to justify the (actually very nice!) new Windows Terminal. Hopefully there will be, because Terminal.app is indeed lagging far behind iTerm and other alternatives now.
Because prices are determined by supply and demand
I believe Dr Greger (well known vegan doctor who provides research support for his claims) has some videos on this.
From a related JEP (on AOT): https://openjdk.org/jeps/8335368

As another possible mismatch, suppose an AOT code asset is compiled to use a specific level of ISA, such as Intel’s AVX-512, but the production run takes place on a machine that does not support that ISA level. In that case the AOT code asset must not be adopted. Just as with the previous case of a devirtualized method, the presence of AVX-512 is a dependency attached to the AOT asset which prevents it from being adopted into the running VM.

Compare this with the parallel case with static compilers: A miscompiled method would probably lead to a crash. But with Java, there is absolutely no change to program execution as a result of the mismatch in ISA level in the CDS archive. Future improvements are possible, where the training run may generate more than one AOT code asset, for a method that is vectorized, so as to cover various possibilities of ISA level support in production.

Also: https://openjdk.org/projects/leyden/
Show HN: Artab – Get Inspired by the Greatest Artworks in Every New Tab
...but your post reads like you do have an emotional reaction to this question and you're ready to believe someone who shares your views.

There's not nearly enough in here to make a judgment about things like security or privacy. They have the bare minimum encryption enabled. That's better than nothing. But how is key access handled? Can they recover your email if the entire cluster goes down? If so, then someone has access to the encryption keys. If not, then how do they meet reliability guarantees?

Three letter agencies and cyber spies like to own switches and firewalls with zero days. What hardware are they using, and how do they mitigate against backdoors? If you really cared about this you would have to roll your own networking hardware down to the chips. Some companies do this, but you need to have a whole lot of servers to make it economical.

It's really about trade-offs. I think the big trade-offs favoring staying off cloud are cost (in some applications), distrust of the cloud providers,and avoiding the US Government.

The last two are arguably judgment calls that have some inherent emotional content. The first is calculable in principle, but people may not be using the same metrics. For example if you don't care that much about security breaches or you don't have to provide top tier reliability, then you can save a ton of money. But if you do have to provide those guarantees, it would be hard to beat Cloud prices.
nit: Crowdstrike

Unless the incident is now being referred to as “Cloudstrike”, in which case, eww
It really became apparent to me when I watched the FX remake of Shogun, the 1980 version seems downright silly and carefree by comparison.
You are not. The conclusion of the article is the same, you "need to expand the far end of the hose" by increasing deployment rate or making more, smaller changes. What was your interpretation?
There are many common situations where professionals are helpless, like people that needs to clean up dead bodies after an accident.
That both exist does not make negative margin sales not an anticompetive practice. Dumping is the correct term for such anticompetive behavior. Consoles are just x86 PCs. They run the same application software.

The Witcher 4 is a high budget single player game and sold 30 million copies despite having no DRM. I don't think you're familiar with the games industry.
A computer can only judge based on things that can be measured. Martial arts (and really sports in general) rely heavily on things that can't be measured such as aggression, spirit, toughness, etc.
Inspired by the MIT camera discussed here 13 years ago

Trillion-frame-per-second video
https://news.ycombinator.com/item?id=3346609
It's now been two years since I used KMS, but at the time it seemed little more than S3 API interface with Twitter size limitations

Fundamentally why would KMS be more secure than S3 anyway? Both ultimately have the same fundamental security requirements and do the same thing.

So the big whirlydoo is KMS has hardware keygen. im sorry, that sounds like something almost guaranteed to have nsa backdoor, or has so much nsa attention it has been compromised.
yup, a company I worked at allowed Scala and Clojure to make different developers happy
imo rust is a great language, but the leadership/project setup is very untrustworthy.

The systemic security problems of cargo package distribution opens the door for state-sponsored threat actors to performing supply chain attacks. And when asked about these issues the only people who will comment using their real identities are based in China.

The security issues in the rust development experience are well-documented since several years, so my summary at [1] was no news to them.

But if you offer things like rustfmt, rustdoc, and a nice-to-use package distribution platform like cargo.io you should be a bit more concered with security imo.

Their lax attitude to these issues and substantial corporate interests not only from US-based but also China-based companies might be good for funding but for me raises many questions.

[1] https://github.com/bf/rust-security-problems
For generic PostgreSQL: https://baseshift.com/
>As we stare in the smartphones we get dumber than when we roamed the world with eyes opened.

This is oversimplified dramatics. People can both stare at their smartphones, consume the information and visuals inside them, and live lives in the real world with their "eyes wide open". One doesn't necessarily forestall the other and millions of us use phones while still engaging with the world.
The effects of BYD have BARELY been felt by Germany.

It will cause huge problems, but it has barely scratched the surface.

Everything else has been going on for decades - aside from the electricity prices which have sky-rocketed, mostly due to Germany's harebrained idea to shut down all of its perfectly working nuclear reactors for no reason other than politics.

What comes around goes around, and that decision will kill the party that made it, thankfully.

It is an insult to German ingenuity for those idiot politicians to have shut down reactors that generated almost $12B of CLEAN electricity per year.
I disdain the modern UI, especially how it treats the scrollbar. On MacOS, even with "Always Show Scrollbar" turned on, applications and web pages try their worst to hide scrollbars or make them unclickable for the users. Check the webpage of ChatGPT for example.

I don't know who the hell had the original idea to do that, but I'll curse in my head for eternity.
>Nuclear waste in one sense is not a big problem, because it's so compact.

Neither was the exhaust from the first cars.
Yes, Google is positioning themselves to be the regulator.
> This is where you lose all credibility.

People who write that, well...

If you're greatly impacted by performance problems, how does that become a physics problem that has as a solution which is being closer to your users?

I think you're mixing up your sales points. One, how do you scale hardware? Simple: you buy some more, and/or you plan for more from the beginning.

How do you deal with network latency for users on the other side of the planet? Either you plan for and design for long tail networking, and/or you colocate in multiple places, and/or you host in multiple places. Being aware of cloud costs, problems and limitations doesn't mean you can't or shouldn't use cloud at all - it just means to do it where it makes sense.

You're making my point for me - you've got emotional generalizations ("you lose all credibility"), you're using examples that people use often but that don't even go together, plus you seem to forget that hardly anyone advocates for all one or all the other, without some kind of sensible mix. Thank you for making a good example of exactly what I'm talking about.
I took a look at your bio but after a glance (forgive me if I’m missing something obvious) it looks like you do consulting but I don’t see FOSS for sale. I’m curious what your project is if it’s something else, but if it’s consulting that makes sense. Consulting doesn’t really work for a lot of categories of software though. Like nobody is going to pay FUTO for consulting on following YouTubers.
CO₂-eating bacteria can recycle carbon from chimney smoke
Adventures in Stereograms (2021)
Some context: I have kids and I build functional prototypes as my day job.

There are tons of circuit kits out there, but I’ve been surprised/disappointed with how pretty much all of them are designed. So I’ve built out a new approach that uses a graphical sticker on a breadboard to make it easy, but still uses the raw components to make it work so the maker can gain comfort/experience with real engineering.

I also wanted the kit to do something truly interesting/useful. Not just blinking a light or mimicking something else you can easy find elsewhere. This first kit is a fully generative music box that can play millions of different song patterns.

Would love to hear thoughts from the other maker/engineer parents on here :)
I don't know how this JEP affects Clojure, but if you want to use Clojure for fast-loading CLI apps, a good thing to look at is babashka (bb). I wrote about it here:

"Learning about babashka (bb), a minimalist Clojure for building CLI tools"

https://amontalenti.com/2020/07/11/babashka
Gameto says first baby born using new stem-cell tech
Apple doesn't do this. But other service providers do (Dropbox, Google, etc).

Other service providers can scan for CSAM from the cloud, but Apple cannot. So Apple might be one of the largest CSAM hosts in the world, due to this 'feature'.
It's as if chatgpt got its style from somewhere... For a hyper sanitized LLM like chatgpt, it's not surprising that it will sound like a sanitized corporate blog (that I still personally liked).
When people are protected from the horrors of the world they tend to develop luxury beliefs which leads them to create more suffering in the world.
None of those problems really matter if we don't have a planet to live on
It’s a lot of very bright folks on HN, and very well read.

But this stuff at this stage of the game is somewhere between propaganda and Stockholm’s Syndrome.

Hackers have never been paid less, or had worse job security, or been more subject to being fucked with than in decades.

Getting funding or traction or press or customers has never been more insular and nepotistic and corrupt and numb in decades.

There is a season for de Montaigne and there is a season for Thomas Paine.
One of the ways the NSA and security services get so much intelligence on targets isn't by direct decryption of what they are storing in data or listening in.
A great deal with their intelligence is simply metadata intelligence. They watch what you do. They watch the amount of data you transport. They watch your patterns of movement.

So even if eight of us is providing direct security and encryption in the sense of what most security professionals are concerned with key strength etc etc etc, Eddie of us still has a great deal about of information about what you do, because they get to watch how much data moves from where to where and other information about what those machines are
it has been getting better. Records and lambdas cut down on a lot.

still seems too verbose though even though it is my preferred language
I'm pretty sure I've used some tool in the past to convert a HAR in to WARC which can then be browsed with https://replayweb.page/
That's amazing, congrats!

I've also come to believe a mix of metabolic therapy and targeted supplementation (particularly B vitamins, chiefly B3), yields much better results than medications. And it seems the medical profession is slowly waking up to it too.
Thank you for posting your original comment. The process of writing my reply gave me a flash of inspiration:

https://github.com/openzfs/zfs/pull/16896

I doubt that this will make us as fast as ext4 at unlinking files in a single thread, but it should narrow the gap somewhat. It also should make many other common operations slightly faster.

I had looked into range lock overhead years ago, but when I saw the majority of time entering range locks was spent in an “unavoidable” memory allocation, I did not feel that making the operations outside the memory allocation faster would make much difference, so I put this down. I imagine many others profiling the code came to the same conclusion. Now that the memory allocation overhead will soon be gone, additional profiling might yield further improvements. :)
thanks for suggesting @yahasolutions. Dozzle looks good, and lightweight too. I will explore more
Not sure if you will still see this, or if you are the right address, but anyway.

Just thinking ahead ... does this mean that for next 5 months, any subject related to Ryelang is not really desired on HN? For example, let's say that I integrate a game engine and write a post about that with examples and make a live database backend for the Rye contexts. Is this all still considered incremental releases / follow up?
But doesn't Kotlin compile to Java?
Maybe you should re-think what it takes to violate human rights at massive scale while fooling the rest of the world into believing its not happening…
Ex-OpenAI engineer who raised legal concerns has died
If that's the case then there can also be no ethical employment, either, both for employer and for employee. So that would seem to average out to neutrality.
Whole articles are reasonable.

100 articles are not reasonable.

100 articles where most of them are 1+ year old is madness.

RSS is not an archive of the entire website.
https://archive.ph/2024.12.22-124508/https://www.nytimes.com...
FrontierMath A math benchmark testing the limits of AI
Elinor Ostrom covered this extensively in her Nobel Prize-winning work if you are genuinely interested. Enclosure of the commons is not the only solution to the problems.
Enneagram of Personality
I don’t conflate Hamas with Palestinians at all, in fact I believe that it is those justifying the wanton murder of the Palestinian population by an oppressive military force who are doing exactly that.

But we know full well that duplicity has been weaponized in this conflict.

As for your ‘tone policing’, I’m not sure I can take your advice to heart given the position you take, of justifying the inhumane treatment of the Palestinian people. Provide evidence that this statement is true and then perhaps we can discuss your desire to manipulate my position to fit your rhetoric:

“But Hamas will not do that, because they want the destruction of Palestinian peoples more than Israel does.”

The only ones destroying the Palestinian people are the IDF.
> Jenkins shouldn’t be near production

> we can’t possibly put things live without QA being involved

> we need this time to make sure the quality of the software is high enough

I've only developed software professionally since 2012, but in that time not only have I never encountered such sentiments, but (and, perhaps, because) it has always been a top priority of leadership to emphatically insist on the very opposite: day one of any initiative is Jenkins to production—often directly via trunk-based development—and quality is every developer's responsibility.

At the IC level, there was no "fighting bureaucracy," although I don't doubt leadership debated these things vigorously, from time to time, especially as external partners and stakeholders were often intimately involved.

> I would sack everyone but programmers and maybe two designers and let everyone fight it out

That works for me! But it doesn't scale. We definitely have to keep at least one product "owner" or "expert" or "manager" to enqueue stakeholder priorities and, while this can be a "hat" that devs and designers trade off, it's also a skill at which some individuals uniquely excel.

All that being said, I don't want to come across as pearl-clutching, shocked Pikachu face about this. I understand that many organizations don't operate this way. The way I've helped firms make this change is via the introduction of a single, experimental team of volunteers dedicated to these practices—one protected (but not dictated to) by a mandate from on high.

But, then again, this is California.
That makes more sense. I suppose an audit log would also fit. I guess append-only backups wouldn't fit the "small" requirement though.
At the same flea market, there was a stand selling pages ripped from a book (I think it was a dictionary) and fed through a printer to add a picture to the page. I found the concept interesting, but the pictures they used were mostly bad. There were a few good ones, but most were pixelated Star Wars clip art kind of stuff or Jack Daniels logo.
I hope Lively is able to extract a pretty penny from the parties involved (if not deep six them). What an aggravating read.