skysight-inc/HackerNews huggingface dataset:
Transitory to mid-late twenties then by 7pm/early evening it was low one-twenties. Someone said something on a call or the major holders got out for some other reason.
North Korean Apt Lazarus Targets Developers with Malicious NPM Package
Orban is a racist, kleptocratic madman that runs a mafia state - trying to apply reason to his actions beyond enriching himself and his lackeys is a fools game
Meta trains on Nvidia and infers on AMD. There is incentive if your inference costs are high.
Mullvad or OVPN. The latter kept ThePirateBay safe for years.
Sounds like Amazon has it figured out way better than GCP and Google.
Our US company sent me to France to help out with an implementation. The guy I worked with spoke very little English and my French is terrible. Both of us had done Latin, however - so the comments were hilarious as we used that as our common link. One of those projects I'd expect to show on the daily WTF at some point.

I did try my hand at a translation tool, as it was all i18n up proper. Watched one guy blow coffee through his nose when I demo'ed - and the 'BACK' navigation was the French word for a persons back or something like that.
No idea in this case, but often, Deloitte is!

See, e.g, https://www.justice.gov/opa/pr/deloitte-touche-agrees-pay-14...

https://news.bloomberglaw.com/ip-law/deloitte-sued-over-clai...

https://www.ndtv.com/india-news/deloitte-clears-nigerian-fir...

https://www.cohenmilstein.com/case-study/ibew-local-98-pensi...

This is a random sampling, there is plenty more.
I mean this is why Nassim Taleb got extremely controversial with his via negativa approach during his Antifragile and Skin in the Game period (I am a huge fan of his writing).

>Drink no liquid that isn’t at least a thousand years old (wine, water, coffee). Eat nothing invented or re-engineered by humans.

The argument is straightforward, that human beings are a wildly complex multi-variate system and that throwing wrenches into a complex multi-variate system is
generally a horrible idea (this heuristic is inverted and encouraged when the that system is breaking down).

Is there a bit of a naturalistic fallacy here? I think sort of, but not significant one. The idea that we could screw up our bodies is obviously there. The flip side of this coin is that I see something as trivial as depression and/or most other non-fatal ailments as completely independent of the evolutionary process, such that experimenting on ourselves to improve our life (again, quality of life over time should not be directly related to probability of genetic reproduction success, as is made obvious from the gay uncle hypothesis).

The implications of this extend to where you live, so a bunch of genetically German hippies living in California, pretending to be one with nature, really are being dishonest about the health benefits they pretend to have, when the argument pretty much insists that the region of evolutionary development occurs will be crucial to the benefits of that evolution. Taleb himself lives in NYC, not his genetic homeland of Lebanon.

We really just need to be more honest about how little we know about health... especially health outside of the highly reproductive window (13-45).
Probability 1% percent with a 50% margin of error
IANAGL, but in Germany a ToS is not a contract and can be declared void if it's deemed by courts to be unfair.
> Collectively (and sometimes even personally), we can't "go work somewhere else"

If Company A sucks and there are many other companies that don't, every single employee at Company A could quit and go work somewhere else, and then Company A can go out of business. That's a completely reasonable outcome for a company that sucks, and is what happens when there is actually competition.

> and we certainly can't not-work at all.

No known system satisfies the criterion that we all collectively don't have to work.

> Moreover, if an "employer sucks", it may suck in multiple ways - environmental impact, social impacting where it operates, impact of its products and services on society etc. None of that changes even if you do go "work something else". What's necessary is improving things, not finding another 'stall' in the 'market'.

These are not the "Soviet Shoe Factory" issue, they're externalities. If the company tries to make only baby shoes to save material but people want adult shoes and competition exists then people buy adult shoes from somewhere else and the shoe factory making unnecessary baby shoes goes out of business or doesn't have the perverse incentive to do that to begin with.

If the company is dumping toxins in the river, that isn't one of the problems that competition is expected to fix, in the same way that it isn't expected to prevent thefts or murders. And it's also not a problem the Soviets fixed either.
>That's an odd thing to say. The only times I've ever been randomly threatened in public were on the road, by another driver.

There's a reason we let drunks ride public transit but not drive.

The bar for conduct behind the wheel is higher than on the subway because the risks and stakes are much higher hence why people get pissed off much easier.

Not getting accosted on the subway is a simple task of not crossing paths with the few people doing the accosting. Not getting accosted on the road requires actively performing in a manner that keeps thing flowing smoothly.
What I find amusing is that this closely mirrors the breakout moment OpenAI had with ChatGPT. They had been releasing models for quite some time before slapping the chatbot interface on it, and then it blew up within a few days.

It's fascinating that a couple of years and a few competitors in, the DeepSeek moment parallels it so closely.
> They’re literally the same people from the same land. Same ethnicity. Same history. Only being apart for under a century

I see what you mean. But there is an alternative point of view.

The indigenous people of Taiwan are very different. DNA wise they are the prototypical polynesians
Honestly man I wrote that last part as more of a thought-out-loud rather than a straight-up accusation. I just felt like a lot of comments who (to me, just my opinion) really didn't understand the writing were probably guys, possibly young, definitely in a bubble (we're on Hacker News, like it or not it's a distinct male bubble with a specific world view), and I think it's worth establishing a bit of context so that somebody might find themselves able to interrogate their reactions to it, in the event that they had a reaction at all. Maybe I was reaching, whatever -- but even your comment ascribing intent to the author's post as "trying to police other people's behavior" illustrates that you read it as instruction rather than introspection.

It's just somebody's musings on a topic, nothing more. ¯\_(ツ)_/¯
Piracy is a service problem. Also, if buying isn't owning, piracy isn't stealing.
The ecosystem rewards inheritance and patterns. The language is and always was highly opinionated about OOP which is a flawed paradigm.
Groq chips have 230 mb of sram memory. Good luck running 670B model on those chips, even without supply constraints.
A million or more, be serious.
Unless they're using a programming language that isn't English-based (for example, Russian 1С system uses Russian keywords and the whole codebase is usually in Russian), then most of the code stays English.

This way, you don't have to change keyboard layout while writing code.

Anyway, you're forced to learn some English when doing any real software development.
https://nitter.poast.org/charliermarsh/status/18846514820094...
8 megatons is like the Tunguska impact, so not planet-destroying.
That’s a lot of mental gymnastics you’ve pulled to try and justify baseless accusations.
No. I don’t think so. I think if you took many engineers and sat them at a computer and asked them to stand up a whole dev staging prod system they wouldn’t be able to do it.

I certainly would not, or it would take me a significant amount of time to do properly. I have been a full stack dev for 10 years. Now take that one step further to someone whose only interaction with a development is numpy, pandas, julia, etc…

You are, in typical HN style, minimising the problem into insignificance.

This is /not/ a “stick it behind an aws load balancer and on one of their abstracted services that does 99% of the work for you” - that would be less difficult.

E: love how this is getting ratioed by egotistical self confessed x10 engineers no doubt. Some self reflection is needed on your behalf. Just because /you/ think you would be capable, does not mean that the plethora of others would be able to.

What likely happened here is an ingress rule was set up wrongly on iptables or equivalent.. something many of your fellow engineers would have no clue about. An open dev database is rather normal if you want something out of the door quickly, why would you worry about an internal accessible only tool’s security if you trust your 10 or so staff. Have a think about the startups you have worked in (everyone here is a startup pro, just like you are - remember!) and what dire situation your mvp was in behind its smoke and mirrors PowerPoint slide deck.

Yes this was disastrous for PR. No it is not a problem solved in its entirety entirely by learned engineering experts like yourself.

Oh here. A comment from ClickHouse saying there is a legitimate reason why this will have been configured this way and happened
https://news.ycombinator.com/item?id=42873446
That's pretty much the same mistake as in VW recent "We know where you parked" hack. [0] So while I don't really want to say anything nice about VW, the mistake is no something that only happens to side projects.

[0] https://www.spiegel.de/international/business/we-know-where-...
You've linked to HIV in the US. Here's the global stats: https://www.unaids.org/sites/default/files/media_asset/UNAID... Turns out context matters - otherwise the general statement is biased on the specific country's situation and seems to put more weight on the sexuality than necessary. (I.e. the difference is more about frequency/partners/protection than about being gay, they're just correlated in the US)

> the de-biased model was less accurate when given unambiguous prompts.

Correct. And that's not what I wrote about. These are not questions about population, but specific cases and yes, we should try to maximise accuracy while we minimise bias.
Advice to use substack, medium and a few others similar.

No point hosting a blog or anything of the sort, unnecessary effort in the beginning when you don't know if you'll continue.
LineageOS devices are subject to desupport at any time, when the maintainer(s) makes the decision to retire it (and no volunteers appear to replace the maintainer).

With the sunset of 3g, many devices that were not capable of 4g were retired.

That being said, Lineage still does support several Pixels that Graphene has desupported. In fact, I am typing this on a Pixel 3a XL which is in this category.

The original Pixel, Pixel 2 and 2XL are still supported by LineageOS:

https://wiki.lineageos.org/devices/#google

Graphene has explicitly removed everything prior to the Pixel 4, including:

Pixel 3a XL (bonito), Pixel 3a (sargo), Pixel 3 XL (crosshatch), Pixel 3 (blueline), Pixel 2 XL (taimen), Pixel 2 (walleye), Pixel XL (marlin), Pixel (sailfish).

Edit: This extended support does come at some risk. The chipsets used in Android can sometimes have showstopper bugs. Sometimes, these cannot be patched, although maintainers will go to great lengths to find solutions. The "firmware age" is reflected in the "vendor security patch" date in Lineage - the older, the more dangerous.

Graphene largely does not allow this.
I think we're close, and they're trying damn hard. We'll see what happens.
Related to this, it's been shown that Long Covid sufferers have low levels of circulating serotonin due to viral inflammation downregulating the gut intake of tryptophan (serotonin's precursor) and is also (I believe) correlated with IL-6 similar to the article. [1]

Tryptophan is the only way your body can produce serotonin, and if you're not getting serotonin that is a problem and can cause depression, fatigue, irritability, brain fog, brain zaps, etc.

The cool thing is there's a workaround: The same paper also found that if you supplement with Hydrolyzed protein (basically pre-digested protein, you can get it off Amazon) the tryptophan variant therein uses a different cellular uptake pathway which is not downregulated. This type of tryptophan is not generally found in food, so it's not like you could just eat a bunch of turkey instead.

I tried it and I'll be damned, it worked. This is not medical advice btw, just sharing what worked for me. You have to take it very very slowly because your brain, having been serotonin-starved for years, will have a very, VERY low tolerance, so even though your body rate-limits serotonin production, even the "normal" amount is a big disruption and you can still induce Serotonin Syndrome if you're not careful. I take no more than about a 1/4 serving every other day.

Also, goes without saying but DO NOT combine with SSRIs / MAOIs, or anything else that modulates serotonin.

[1] https://www.cell.com/cell/fulltext/S0092-8674(23)01034-6
> However, i'm not sure that them being LLM researchers compared to quant researchers changes the dynamic of their relaxed security posture.

It does not indeed, but that's not the part I was commenting on.
I'm not talking about OpenAI, I'm pointing out the unnecessary sideswipes directed at China whenever they do something bad that the US pioneered.

It's hard to read those as anything other than casual racism.
This is definitely one view, but not sure I buy it at all.

History is littered with things that were made orders of magnitude better, people who claimed nobody would be happy until that happened, and then nobody writ large cared .

Tech in particular has a grand history of claiming we need to produce the technically best thing, but in practice, the market almost always chooses somewhere in the range of useful products, which is not the same at all - the technically best thing has rarely, if ever, become the market leader.
Steam has a feature for this where for supported games like Counter Strike 2 or Team Fortress 2, your connection will be routed through other players, or just people on your friends list depending on your settings.
The Meaning of the DeepSeek Drama
https://archive.today/hbNLL
OTOH setting up a static blog site is a great way to procrastinate on actually writing blog posts
Feist comprehensively rejected that argument under US copyright law, and the attempts in the late 90s to pass a law in response establishing a sui generis prohibition on copying databases also failed in the US. The EU did adopt a directive to that effect, which may be why there are no significant European search engines.

However, OpenAI and Google are far more politically influential than the lobbyists in the 90s, so it is likely to succeed.
That's not a matter of battle hardened experience. Publicly exposing database management endpoints that allow arbitrary execution is a *massive* no-no that even a junior developer with zero experience should be able to sense is a bad idea.
Greek Judicial Investigation Cover-Up Claims in Predator Spyware Scandal
As a Turkish developer, I can say that all developers learn at least some English in order to be able to grasp documentation and also programming languages since syntactic elements are in English too.

That said, many developers might still prefer Turkish for naming DB tables, fields, variables, types and so forth if that’s the preference of the team. It wouldn’t be an exceptional situation. It’s quite easy too since Turkish also uses a Latin alphabet. May not be as easy or preferable in Chinese.
> are they using a connection pooler

We use Hikari [1] an in-process connection pooler. We didn't opt for pgbouncer at al, because we didn't want to add the extra infra yet.

> since what they did in code can be natively done with PgBouncer, PgCat, et al.

Can you point me to a reference I could look at, about doing a major version upgrade with PgBouncer et al? My understanding is that we would still need to write a script to switch masters, similar to what we wrote.

> The big bottleneck is all the active connections

The active connections we were referring too were websocket connections; we haven't had problems with PG connections.

Right now the algorithm we use to find affected queries and notify websockets starts to falter when the number of active websocket connections on one machine get too high. We're working on improving it in the coming weeks.

I updated the footnote to clarify that it was about websocket connections.

> I did feel for them here:

Thank you! That part was definitely the most frustrating.

[1] https://github.com/brettwooldridge/HikariCP
I imagine you could have a non-English toolchain, it's just uncommon. You may have to write a bunch of it yourself.

Come to think of it, I wonder if there are language concepts that don't map to English that artificially restrict what we can program?

For example would programming U->D, R->L in Chinese (vs L->R, U->D in English) result in easier to read programs somehow?

Would being able to program using iconography (like a bunch of FE languages) result in more "screens" of text to aid understanding?
That is also underselling the situation because that observation is pretty normal too. Typically hospitals are at breaking point, they're funded to roughly match demand. If anything unusual happens then they reach breaking point. In my experience in Australia we get a "hospitals at breaking point" announcement every bad flu season because they are funded to just-about cope with a bad flu season.

COVID was worse than a bad flu season by a big margin, but that doesn't change the fact that the blip was relatively small. You're going to see hospital capacity being forced to expend to more-than-COVID levels just to deal with the baseline number of oldies in the next decade.
Yes, but you don't need to know what "for" and "while" mean in your language, you just need to know their behavior. The same way Arnold Schwarzenegger was acting without knowing much English - everything was phonetically spelled for him in early roles.
I enjoy sandboxes. I like Minecraft, Terraria, etc. "Make a gold axe so you can dig further" is something to work forward. Make an anvil so you can craft new equipment to explore, sure.

Here it's "make a qreblz machine because the voice tells you to". And then you can craft a wewrkz. Why.
The copyright office ruled AI output is uncopyrightable without sufficient human contribution to expression.

Prompts, they said, were unlikely enough to satisfy the requirement of a human controlling the expressive elements thus most AI output today is probably not copyrightable.

https://www.copyright.gov/ai/Copyright-and-Artificial-Intell...
My (Timex Pay) one seems to function using a virtual card (remotely lockable) provided by the bank, which uses some sort of tokenization-based security chip on the band itself. I imagine there's probably some security flaws because they provide the NFC encoders to the user. It's backed by https://tappytech.com
> but most probably was training data to prevent deepseek from completing such prompts, evidenced by the `"finish_reason":"stop"` included in the span attributes

As I understand, the finish reason being “stop” in API responses usually means the AI ended the output normally. In any case, I don't see how training data could end up in production logs, nor why they'd want to prevent such data (a prompt you'd expect to see a normal user to write) from being responded to.

> [...] I'm guessing Wiz wanted to ride the current media wave with this post instead of seeing how far they could take it.

Security researchers are often asked to not pursue findings further than confirming their existence. It can be unhelpful or mess things up accidentally. Since these researchers probably weren't invited to deeply test their systems, I think it's the polite way to go about it.

This mistake was totally amateur hour by DeepSeek, though. I'm not too into security stuff but if I were looking for something, the first thing I'd think to do is nmap the servers and see what's up with any interesting open ports. Wouldn't be surprised at all if others had found this too.
The fact that we have foreigners immigrating just to be poor here should tell you that its better here than where they came from. Conversely, no one is so poor in the USA that they are trying to leave.
IANAL, but you don't need a license to publish yourself playing a piano or a guitar, and synthesizers are also musical instruments. That said, I'm not sure that's ever been tested in court, so if someone wanted to be a right-wing asshole about it, like take over Suzuki and try to get royalties from every hit song that used it, I guess it might be interesting.
This is the same congressperson who named a bill after Aaron Swartz,

https://news.ycombinator.com/item?id=5064448 ("Rep. Zoe Lofgren Introduces Aaron's Law [pdf] (house.gov)" (2013))
Tangentially, I think the mostly attribution-free discussion style of the C2 wiki has some merit. It's nice to read opinions and contributions on a topic without the cognitive noise of associated user accounts and reaction counts.
For an ops person yes, for a ML engineer (basically an academic) I'd be more surprised if it was secured to be honest.
Did you intend to ask if being story- vs fact-based is story or fact?

I find it fun that you posed this then said you identify as fact-based. This dichotomy is a story (regardless of whether or not it has any basis in fact).
Node is fine. This is very much old man shouts at cloud. Pyright is really quick. Node is fast enough for a majority of uses.
Yes, for Java in particular you need to know the various English keywords. At least I don’t think anyone has written a non-English Java variant that compiles to the JVM just as Java would.
The fact it is out and improving day by day. Unsloth.ai is on a roll with their advancements. If DeepSeek is banned hundreds more will popup and change the data ever so slightly to skirt the ban. Pandora's box exploded on this one.
'Headed for technofascism': the rightwing roots of Silicon Valley
It's never a good idea to make definitive statements like this from a single unreplicated study, especially when it has serious methodological problems.

https://www.tandfonline.com/doi/full/10.2147/JIR.S456000
GSMArena is such a valuable resource.
Oh right, I keep forgetting that. The LGPL part is just the library that lets apps talk to the driver.

I still think the main thing Interception has going for it is code signing. I once wrote a keyboard filter driver for personal use, but due to signing requirements I never felt it was worth the trouble & cost trying to use it past the computer I developed it on (and then later moved to firmware based solutions like QMK).
I'm a user of Mullvad, I can get configurations for Wireguard and OpenVpn through my dashboard. This eliminates the possibility of being used as an exit node as I can read the wg config and see exactly what it does. I think other providers should do the same with their systems. It allows for high flexibility.
I am not demanding anything. I am very curious for real stories from the Soviet Union relevant to economics.
There was necessarily a "first reasoning being" who learned reasoning from scratch, and then it's improved from there. Humans needed tens of thousands of years because:

- humans experience reality at a slower pace than AI could theoretically experience a simulated reality

- humans have to transfer knowledge to the next generation every 80 years (in a manner that's very lossy), and around half of each human lifespan is spent learning things that the previous generation already knew