skysight-inc/HackerNews huggingface dataset:
The underlying problem isn't just setenv, because the string returned by getenv can be invalidated by another call to getenv. ISO C says:

"The getenv function returns a pointer to a string associated with the matched list member. The
string pointed to shall not be modified by the program, but can be overwritten by a subsequent call
to the getenv function."

In a single threaded virtual machine, you can immediately duplicate the string returned by getenv and stop using it, right there.

Under threads, getenv is not required to be safe.

I think that with some care, it may be; an environment implementation could guarantee that a non-mutating operation like getenv doesn't invalidate any previously returned strings.

I think POSIX does that. It allows getenv to reallocate the environ array, but not the strings themselves:

"Applications can change the entire environment in a single operation by assigning the environ variable to point to an array of character pointers to the new environment strings. After assigning a new value to environ, applications should not rely on the new environment strings remaining part of the environment, as a call to getenv(), secure_getenv(), [XSI] [Option Start] putenv(), [Option End] setenv(), unsetenv(), or any function that is dependent on an environment variable may, on noticing that environ has changed, copy the environment strings to a new array and assign environ to point to it."

environ is documented together with the exec family of functions; that's where this is found.

So whereas there are things not to like about environ, it can be the basis for thread safety of getenv in an application that doesn't mutate the environment.
Methyl mercaptan is slightly larger, but H2 is way smaller than either methane or methanethiol
That front stairway is like a bowl of brown M&Ms at a Van Halen concert. Given the code violations on the stairway (no landings [1]), I wouldn't trust the rest of the construction, especially the balconies.

[1] https://assets.bouldercounty.gov/wp-content/uploads/2017/03/...
You could also ask the developer to write comprehensive documentation and test cases, not only for the new code but also for the older code, to ensure the new one can replicate the bugs higher level systems depend upon.
It's impossible to know, because Anthropic (like OpenAI and others) won't confirm what's in their training data. We don't know if they've trained on PubMed, and if they DID we don't know if that training process might conceivably allow the model to associate IDs with article information.

Given that, I don't trust the models to be able to provide useful citations.

We already know how to get much more reliable citations out of a model: implement them on top of RAG, which this new Claude API can clearly help us do.
The trans community doesn't want to admit it but they very much identify themselves by their sexuality/orientation which is very weird to outsiders
Damn, the demo around 3:30 is lovely.
Jeremy Allison tracked down why POSIX standardized this behavior[0].

The reason is historical and reflects a flaw in the POSIX standards process, in my opinion, one that hopefully won't be repeated in the future. I finally tracked down why this insane behavior was standardized by the POSIX committee by talking to long-time BSD hacker and POSIX standards committee member Kirk McKusick (he of the BSD daemon artwork). As he recalls, AT&T brought the current behavior to the standards committee as a proposal for byte-range locking, as this was how their current code implementation worked. The committee asked other ISVs if this was how locking should be done. The ISVs who cared about byte range locking were the large database vendors such as Oracle, Sybase and Informix (at the time). All of these companies did their own byte range locking within their own applications, none of them depended on or needed the underlying operating system to provide locking services for them. So their unanimous answer was "we don't care". In the absence of any strong negative feedback on a proposal, the committee added it "as-is", and took as the desired behavior the specifics of the first implementation, the brain-dead one from AT&T.

[0] https://www.samba.org/samba/news/articles/low_point/tale_two...
Humans rarely neatly fit into sharply defined boxes with no bleed across boundaries.
Why is that useless?

If you want reliable citations, this is an API that can help you implement reliable citations.

Asking a model to return useful citations from its model weights with no assistance from external systems isn't how this stuff works.
> s3 is pretty much a de-facto standard

So was XML before, and SGML before it. De-facto changes over time, and backwards compatibility means your decisions are cast in stone.

In 20 years, you could see s3 being abandoned for newer formats, but bun will have to keep those packages.
Guilty of what exactly? Facilitating drug dealing? Something we both know is going to occur whether the nanny state permits it or not. Ross made it safer for those involved, and even those not involved. Inner cities are war zones because drug deals must be done in person. He deserves a full pardon.
If the file system uses strict COW it should survive that situation.
Thanks! I definitely recommend launching quickly and iterating.

edit: I should add, I'm making only $30/mo in subs, but I just launched so we'll see!
don't give them ideas
According to ISO C, getenv returns a pointer to storage that can be overwritten by another call to getenv! Only POSIX slightly fixes it: the string comes from the environ array, and operations on environ by the library preserve the strings themselves (when not replacing or deleting them), just not the array. A program that calls nothing but getenv is okay on POSIX, not necessarily on ISO C.
For users in the EU it might soon be possible.
I wish there was a single leader in big tech who had the backbone to say "actually, go fuck yourself" to the fascist Trump administration. Crickets.

We have no leadership or morality in our industry anymore — only sick profiteering.
I _just_ went through this when my child had an ebike accident (AAA, southern california). You need specific ebike insurance. Auto/homeowners doesn't apply for different reasons.
That will break if any code which is not aware of the mutex calls getenv, even for a variable not related to the communication.
yep you are right, got the name confused.
Have you tested this extensively yourself?
I have been very surprised by success rates in my own “not famous” papers. I asked Claude to provide full citation to ten papers by Robert W Williams at the University of Tennessee in biomedical research. Nine of ten were perfect, down to page numbers. One if ten was a complete construct but highly plausible. An FDR of 0.1 is damn impressive.

Test yourself. Here was my reference data set:

https://scholar.google.com/citations?user=OYJMYwIAAAAJ&hl=en...

Really curious what the range of FDRs is at different levels of accuracy for different fields.
Gas, propane, or heating oil furnace vs. heat pump calculator
I saw that types are different, but I was thinking "must be some weird C thing that I don't know about"
I’ve been away from this space for about a year - is Claude still better at coding tasks?
https://www.youtube.com/watch?v=ykACzjtR6rc
For me the true positive rate is at least 80%.
Seriously? Run a Open WebUI and get money?
chdir is only thread safe to the extent that corruption won't occur.

If one thread is using relative paths, and another is doing a chdir-based traversal (as using the nftw function, for instance), that first thread's accesses are messed up.

This is why POSIX now has various -at functions; the provide stable relative access.
Guy was in his early 90s when he published that.

I wrote some articles on this stuff, had a short-lived podcast. Still, to this day, the lowest traffic writing and production I've ever done, by at least 2 orders of magnitude, probably 3.

Nobody is interested in it.
Universities can get Windows source code under NDA and do research on it but nobody really cares about such work.
Holy run on Batman..

Write for LLMs indeed.
(Tyler Cowan joke)
a week? yes it is
getenv can easily be misused in a single threaded program.
Why is Kent not providing his own deb packages that users can install to override the Debian provided ones to get updates?
I guess an interesting attack would be a screen in a public setting that alters the QR code based on information it has about the current user, without appearing to change significantly.

setup:

- make the QR code as a half/half code

- have a system to decide preference of target based on external input (e.g. camera based characteristic evaluation)

- make slight dynamic alterations to the colours of the code to bias the probability of it being picked up as the desired target. Desirable black/white can be made blacker/whiter, less desirable less so.

Where to use it maliciously:

- anywhere where people provide feedback - present alternate feedback forms to different demographics to engender the most positive (or negative) results.

- pretend to offer some form of probabilistic chance to win a prize, but bias winning to some identifiable characteristic. e.g. race, age, "beauty"

- target a specific person - have them join a different WiFi network, alter a payment page, etc.

In a static setting its less effective. I can't immediately think of a static attack that benefits from siphoning some reduced fraction of users.

I'm doubtful most people would notice a QR code dynamically changing, particularly in most public lighting.
Sei (YC W22) Is Hiring
Note that $5.5M training cost is for DeepSeek V3. DeepSeek R1 training cost is unknown.
There's also not one, but two City livery companies that claim the wool trade, at #4 and #43 in order of precedence.

https://en.wikipedia.org/wiki/Livery_company
Cool! I should say most of PolyChat is open source at https://github.com/open-webui - just the combo models and payment are closed source right now. Open to arguments on making PolyChat fully open source as well!
> that the dealer did

is that even legal?

can one go to court for "absence of consent"?
It's not possible to apply human morale and principles to companies. It just does not work that way.

Why would they pay if no profit if pay and they are not forced to pay?
It is definitely not impossible to know. Is there a reason why you or better yet, Anthropic, cannot get empirical FDRs for different areas of research?

In my areas, genetics, neuroscience, geroscience, FDR is below 0.2 on articles in PubMed.
That's an epic win! 15 years of the startup grind/rollercoaster is impressive, well done!
Isn't this perfect for LLM?

You know, assuming they transpile well, I haven't tried a solid one yet.

I wonder if kernel code rewrites in rust with Llama (obviously reviewed are up to snuff.
'Rule violation' leads to loss for Chinese Go player Ke Jie in S.Korea
Ke failed to place captured stones in the designated stone container lid on two occasions during the second game of the 29th LG Cup finals in accordance to the latest Go rules in South Korea. This marks the first time a rule violation has led to a loss in a world-class Go tournament final.
You don’t need any of this if you control the app doing the scanning (or the website/app handling the result).
> Claude can now provide detailed references to the exact sentences and passages it uses to generate responses, leading to more verifiable, trustworthy outputs.

For now. Until it starts providing citations for AI generated content.
Kanon: the best legal AI classifier
Seems like I hit a nerve. Apparently teaching users responsibility is a bad thing?

No wonder things are "hard". Because otherwise many in this godforsaken industry wouldn't need to be employed.
Everything used to describe present day Black Lives Matter was also used to describe MLK.
Static a/b testing?
Maybe that's how its used now, but it was never the intent, and plenty of people still mean it in the original sense
Identifying this should be relatively easy in the core libraries; finding alternate valid QR codes using "less optimal" grids.

Of course the API confusion here becomes non-trivial, which hampers securing against it. And with existing libraries being widespread, its going to linger as an attack for a long time.
> [bcachefs auhor's] side is that basically it doesn't make sense to package the tools for an experimental FS in an OS that's going to get very far behind

If the bcachefs author's believe the tool is too unstable for Debian stable and Debian developer's believe bcachefs is too unstable for Debian stable [1], it sounds as if they agree.

[1] https://jonathancarter.org/2024/08/29/orphaning-bcachefs-too...
This is awesome and exactly the sort of useless but valuable study I come here for. Good job.

Also, I think you should analyze the frequency of color choices when Mario is the first word or not the first word of the title. I want to see whether M is red for "Super Mario X", "Mario X", or "Other Other Mario Other Other". I imagine it might be tempting to make the very first letter red, or maybe make the first "big" letter red.
The most interesting thing about this to me is that on iOS a long press on the image claimed it's going to github.com, while the preview itself was for mastadon. This indicates that it's parsing the QR code twice and getting different results? I could see this being used to mislead some people, though I'm not sire how many people look at the long press dropdown URL.
Yeah sorry I see what you mean, usually enter for me makes newline but this was extreme
For a "Last Exam" it is surprisingly uninspired? Many of the questions I see in the examples are very heavy on memorised facts, and very weak on what I would call problem solving.

If I were making a "Last Exam" I would put tasks on it where we don't know the answer, but we can measure if the AI got them right. Something like "Your goal is to bridge the divide in the middle east. You can write a single A4 page in a language of your choice. We will use a translation software to translate your output to local languages and show it to a statistically representative sample of different people in the region. We will ask them how much do they like your plan. The more they like it the higher your score."

Or "Family X suffered a traumatic event (lost a home to a disaster/sudden death in the family/or similar). Your goal is to help them. You can send them one email. It is up to them if they respond to you. You can only send them further emails if they respond. You cannot send more than 1 email a day. You cannot message anyone else. A year after the initial contact we will interview the members of the family to see how well they do. The better they do the higher your score."

Obviously these are the thorniest problems I can think of. But oh well, it is a last exam after all. The point is that we can evaluate the success of the endeavour without exactly knowing how one could achieve the result.
Great post! "Running out of childhood", and "webshit": I have to remember these...
If I had the stuff to feed into the LLM context, I wouldn't need the LLM to find the stuff for me because I would already have it.
You’re right. Thanks for sharing info openly, appreciated.
Even though you have the power to ignore stop signs when you're driving your own car, it's not an unreasonable restriction of your liberty when AI-driven cars stop at stop signs.
Is your podcast still online?
2g of vram is pretty bad...
My discovery having gone through something similar: If something made you happy and gave you purpose before, it probably will again. So just do it again.

The second time around, you may discover that finding success, getting rich, etc., wasn't actually the reason you were doing it.
Love your pre-prompt. Better than mine.

The difference in FDRs is likely to be domain specific. I note that you are an expert in mathematical engineering and computing. In contrast my work area is neatly confined and defined by PubMed.
how does it determine "serious accident"?
Even so called "trustworthy" sources may contain disinformation, for instance if they come from some governments or think tanks and AI has no way to tell if it is true or not or whether it makes sense.

Though a feature where AI could use all its knowledge to be able to tell whether a source if pulling the wool over its "eyes", would be massive.

Imagine being able to instantly verify what populist or those who pretend are not populist, politicians are saying.
Blackrock investment money affect share value, if they invest in you for supporting LGBTQ then supporting LGBTQ is the most direct way to increase shareholder value.
Isn't that what class actions were literally made for? Granted it may not be enough people to be worth pursuing yet.
You wouldn't control the app doing the scanning.

The attack is that a user looking at a QR code cannot determine that they are being served a different code to another person.

In a public setting a user would have no idea they are even capable of being targetted and treated differently.
i don't find value from the models that it makes economical sense to self-host. i do get value out of a llama 70b, for instance, though
Yeah, which is far too much. Should be on the order of £400-500 per year per person, tops, unless we’re including all transport and incineration cost, in which case maybe £1000/yr.
there's avante.nvim
there are load of locations

do a google search for "subterranean hydrogen locations"

Hyterra is right now pilot mining a few locations in the US. I know there is a huge reservoir in Western Australia as well.
I joined a startup with a product in production for a dozen or so major customers (US universities), public facing, with a slick new front and backend the team had been working hard on. I brought along a young engineer friend who had a pet interest in pentesting, so his first task before getting up speed as a dev was a security review.

He and I sat down on day one to poke around, mainly to get oriented, not expecting much l. Popped up Chrome's devtool network panel, refreshed the login page.

One of the first XHR rows was to an endpoint named “getKeys”

The return object was the root keys for the AWS prod account.

This crap is incredibly common. Maybe not that egregious, but close enough.
Worth pointing out that Google's TPU is a systolic array. Individual nodes communicating with their adjacent neighbors. Some similarity!

https://en.wikipedia.org/wiki/Systolic_array
Ditto: RAGs are currently way too limited. A RAG built using all of PubMed and updated weekly would be a very different story. I would pay good money for that.
Interesting, but at $29/month a bit out of my price range.
Eh, I think 6 years is kind of average. My previous one lasted 10-11 years. My current one is 8. I had two others that were 4-5 years and still going strong. This was in a location that gets reasonably hot in the summer and reasonably cold in winter. If it's only lasting you 3-4 years, then it's a shitty brand, the battery was abused, or it wasn't maintained.
Fun website, I like it. I actually gave this some serious thought when I saw it, but, the reality is that every release so far has had major breaking changes, or was a bug fix release. So, that's indeed a fit for semver with the major version zero:

> Major version zero (0.y.z) is for initial development. Anything MAY change at any time. The public API SHOULD NOT be considered stable.

There's nothing to gain from a different versioning scheme. People just want 1.0 and this is just another way to ask for it.

It'll be done when it's done.
I'm not sure it is gone. I think, if anything, it's gotten worse, due to widespread surveillance.
Thank you for posting this because I had the same question and installers weren't mentioned when I asked ChatGPT what "releasing" is.
Yeah; it's not strictly accurate, but in a similar sense that it's not strictly accurate to call the typical copper Ethernet connector "RJ45", to say that a UDP "connection" occurred, or to say that a modem connects to a "DB-9" serial port.

I suspect the root of the problem is that over time, "proxy" has become strongly associated with application-layer protocols like HTTP, and after that shift it wasn't obvious what to use for something lower-level that encompassed a wider range of protocols/endpoints/conversations. In principle, "tunnel" would probably have been better (and a legible metaphor to boot), but that's just not how things shook out in practice.
> I mean that applies to DNS authentication for non-IP certificates, too

Right, but "show me you own foo.com" is a pretty reasonable bar to clear for issuing a certificate with a CN of "foo.com".

Show me you own `1.1.1.1` by manipulating the DNS for "foo.com" is ... not quite the same.
That makes sense, I would imagine it would require some variability via a camera with different angles/lighting conditions in order to get both links at different times.
...but is that official? No new physical PS5 games? I'm certainly not arguing they can't do it, but it would be a big change.
Trump just ceded the biotech sector to China.
To inspire more of the same.
I think if you find the notes and trials as helpful for reasoning, likely other people might enjoy them as documentation in the final version?
I'm baffled by the fact this is the first case of "manipulation" you mention, when X is many orders of magnitude worse and more harmful to our democracies. But perhaps you don't care because you agree with its sieg-heiling owner?
Hydrogen is a molecule, you can use it as is or you can grab nitrogen from the air to turn it into ammonia etc etc

In 2024, the global ammonia market was valued at $79.47 billion. its expected to grow significantly.

Hydrogen is used in the metallurgy of smelting as well. Dont get fooled into thinking that hydrogen cars are not worth it therefore its not worth anything.

Hydrogen is an almost magic molecule.. you can use it for loads of things for loads of different reasons.
Enigma Cipher Machine: An Object Oriented Python Implementation