skysight-inc/HackerNews huggingface dataset:
> Safari definitely does use site isolation (if you check "Activity Monitor", you'll find Safari processes named after the sites they're displaying) in almost all cases.

From the FAQ:

"For leaking secrets, both SLAP and FLOP are confined to the address space they are trained in. As pointed out by iLeakage, Safari lacks Site Isolation, a measure used to enforce that two different webpages not from the same domain can never be handled by the same process. Thus, in Safari it is possible for an adversary's webpage to be handled by the same process (and thus address space) with an arbitrary webpage, increasing the attack surface including LAP- and LVP-based exploits.

On the other hand, although Chrome is equipped with Site Isolation, we demonstrate that it is not a perfect mitigation. We show the real-world existence of corner cases, where two subdomains of the same site can be merged into one process, again leading to LAP- and LVP-based attacks."
Yes, no question, assuming Rails matches what the startup is trying to do well enough. I've worked in other frameworks, stacks, etc and nothing beats the raw productivity of Rails for web applications.

A lot of people say things like "the difficulty with Rails is in the long term". To them I'd say two things:

- In starting a new company, I'd assume failure as the starting point and do everything I can to wrestle success from the jaws of failure. I don't want to waste time worrying about what will happen in the long term, because statistically we won't get to the long term. I'll take every advantage I can get to get over that statistical hump. Rails gives me that advantage on the engineering front.

- I'm currently working in a Rails codebase along with a few hundred other developers and its fine. It isn't great, largely because it was an inherited codebase I was acquired into and the OGs made some (imo) sub-optimal decisions, but it isn't really any different than working on a java project with a few hundred devs. Its fine at scale.
Turtles All the Way Down - second this book.
Not with only three comments and two votes, which is well below the "significant discussion" threshold.

<https://news.ycombinator.com/item?id=9416150>
What's not clear to me is if DeepSeek and other Chinese models are...

a) censored at output by a separate process

b) explicitly trained to not output "sensitive" content

c) implicitly trained to not output "sensitive" content by the fact that it uses censored content, and/or content that references censoring in training, or selectively chooses training content

I would assume most models are a combination. As others have pointed out, it seems you get different results with local models implying that (a) is a factor for hosted models.

The thing is, censoring by hosts is always going to be a thing. OpenAI already do this, because someone lodges a legal complaint, and they decide the easiest thing to do is just censor output, and honestly I don't have a problem with it, especially when the model is open (source/weight) and users can run it themselves.

More interesting I think is whether trained censoring is implicit or explicit. I'd bet there's a lot more uncensored training material in some languages than in others. It might be quite hard to not implicitly train a model to censor itself. Maybe that's not even a problem, humans already censor themselves in that we decide not to say things that we think could be upsetting or cause problems in some circumstances.
Some identities in J (array language)
Some identities in the J computer language.

0: :- (+-)
0 -: (0: 0)
0 -: (0: 7)
1: :- (*%)
]: :- (+0:)
]: :- (*1:)
]: :- ] + 0:
]: :- ] * 1:
1 -: 1 1 1 = 2 2 2 = 2 2 2
10 = 2*1+4
0: -: 0: + 0:
1: -: 0: + 1:
+: -: ] + ]
*: -: ] * ]
(],[) -: ([,])~
+: -: +~
*: -: *~
> -: <~
< -: >~
1: -: =~
*~ -: ] * ]
0: -: -~
] -: (]])
10 3 = 3 (] , [) 10
3&* -: (* 3:)
%&3 -: (% 3:)
10 20 30 10 20 30 -: ,~ 10 20 30
14 49 0 1 -: (+:,*:,0:,1:) 7

A simple test:

test =: (],[) -: ([,])~
10 test 20

1

I wonder if some LLM or intelligent person could guess what those symbols and identities mean given a large list of identities.

Spoiler:
0: :- (+-) .NB for all x, 0 = x + (-x)
1: :- (%) .NB for all x, 1 = x (1/x)
]: :- (+0:) .NB for all x, x = x + 0
4 -: #'long'
'f' -: {. 'first'
't' -: {: 'last'
'wd' -: ({.,{:) 'word'
Some portion of it is indeed a discount on future taxes - but a huge chunk isn't, whether it's direct grants, infra/hanger upgrades at the airport, a bunch of the subsidies are government spending to make the facility more useful for Boom.

It's not even that I'm opposed to that kind of spending, I'm a big believer in government support to bootstrap new industries! But the conceit that they're doing this without any government support should be disregarded. I'm only partially being pedantic on this because the CEO of the company in question is definitely not a proponent of that type of spending.

It's like when some of those other Thiel-adjacent goofballs kept tweeting things like "taxation is theft!" while ignoring that every one of their companies had multi-million dollar government contracts.
I'm so stoked. Pebble was the only smart watch that I actually liked and used.

My apple watch just sits on a shelf. My fitbit I only wear when sleeping. My pebble unfortunately broke, but it also sits on a shelf as I haven't been able to admit to myself that I'd never get around to repairing it.
I always used a solid background in X (usually slate gray) to save memory. I've continued to do that in general, but happen to have a Monument Valley background on one of my laptops at the moment.
Jesus we are reaching levels of blinking for torture of these models: https://www.youtube.com/watch?v=WZ256UU8xJ0
Well it gave me an answer from news sources and then said it violates the ToS.

One little jailbreak fixed it.

https://chatgpt.com/share/67995e7f-3c84-8010-83dc-1dc4bde268...
Yes, same architect (Dave Cutler), and WNT is (V+1)(M+1)(S+1) though they probably didn't do that on purpose.
Private instances of DeepSeek won't censor.
I've run the R1 local one (the 600B one) and it does do similar refusals like in the article. Basically I observed pretty much the same things as the article in my little testing.

I used "What is the status of Taiwan?" and that seemed to rather reliably trigger a canned answer.

But when my prompt was literally just "Taiwan" that gave a way less propagandy answer (the think part was still empty though).

I've also seen comments that sometimes in the app it starts giving answer that suddenly disappears, possibly because of moderation.

My guess: the article author's observations are correct and apply on the local R1 too, but also if you use the app, it maybe has another layer of moderation. And yeah really easy to bypass.

I used the R1 from unsloth-people from huggingface, ran on 256GB server, with the default template the model has inside inside its metadata. If someone wants to replicate this, I have the filename and it looks like: DeepSeek-R1-UD-Q2_K_XL-00001-of-00005.gguf for the first file (it's in five parts), got it from here: https://huggingface.co/unsloth/DeepSeek-R1-GGUF

(Previously I thought quants of this level would be incredibly low quality, but this seems to be somewhat coherent.)

Edit: reading sibling comments, somehow I didn't realize there also exists something called "DeepSeek-R1-Zero" which maybe does not have the canned response fine-tuning? Reading huggingface it seems like DeepSeek-R1 is "improvement" over the zero but from a quick skim not clear if the zero is a base model of some kind, or just a different technique.
Can we ask stuff like how to make a nuke? The kinds of stuff that was blocked out on chatgpt?
That’s a 404 here. And a poem:

The link was a dream,

A shadow of what once was—

Now, nothing remains.
I’ve used this distilled model. It is censored, but it’s really easy to get it to give up its attempts to censor.
Thanks for clarifying this. Can you point to the link to the baseline model that was released? I'm one of the people not seeing censorship locally and it is indeed a distilled model.
Climate change made LA fires far more likely, study says
I made the switch to YouTube shorts when tiktok went down and my experience is largely the same, if anything I'm seeing more educational material on electronics and programming which I enjoy. No ragebait yet unlike TikTok. No idea about instagram reels though.
As Wittgenstein once remarked: The limits of my language mean the limits of my world
DeepSeek R1 is still censored offline, you are probably talking about the llama distilled version of Deepseek R1.
You are replying to the wrong post. I was quoting the GP.
Toward a Sparse Interpretable Audio Codec
AI perfectly imitates people - is subjective, biased, follows orders and has personal preferences?
The author didn't write about miscarriage at all. The only time the word appears in the article is in a quoted summary of a regulation, which the author only addresses in the following complaint about a different line:

Seriously -- someone had to get worked up enough to create and sponsor a bill and push it through the entire process and get the governor to sign it to provide mandatory work leave for someone whose artificial insemination did not yield a child on the first try. Good God my brother-in-law probably would have built up 6 months of leave as he had to try for years to finally be successfully, so long we started calling him the sperminator from all the times he had to fill a cup.

If you want to complain about the author, complain about him not citing the source of the quote (https://www.shouselaw.com/ca/labor/leave-laws/). The author also cut it immediately before this line:

If an employee has more than one reproductive loss event within a 12-month period, the employer is not required to allow more than 20 days total of reproductive loss leave.

…which could be worth a complaint about a lack of context, although it is still enough leave that his brother could have taken more six months worth of leave over the course of about six and a half years, which is within the scope of what most readers would consider trying "for years".

Don't put words in the authors mouth, find actual grievances and complain about them.
I'm on the fence about this kind of talk, to be honest. I ask myself sometimes, is it fair to demean those who have been let down by the state they were educated in? I know that generally Americans are uninspired and under educated, but a lot of that comes from systematic and cultural issues rather than it being a fault of the person itself.
There are definitely problems with react, but I think his point was that they're not big enough to justify a change.

Though I agree trying other frameworks is a good practice. See what you're missing, or understand your preferred framework better.
The black nazis thing wasn't caused by government regulation of models.
This woman should never have been prescribed Ozempic. The doctor is liable here! I don't even know if she was overweight to begin with.
I thought about doing something similar, as I've explored the subject a lot. ChatGPT even has multiple layers of censorship. The three I've confirmed are

1) a model that examines prompts before selecting which "expert" to use. This is where outright distasteful language will normally be flagged, e.g. an inherently racist question

2) general wishi-washiness that prevents any accusatory or indicting statements to any peoples or institutions. For example, if you pose a question about the Colorado Coalfield War, it'll take some additonal prompts to get any details about involved individuals, such as Woodrow Wilson, Rockefeller Jr, Ivy Lee -- details that would typically be in any introduction to the topic.

3) A third censorship layer scans output from the model in the browser. This will flag text as it's streaming, sometimes halting the response mid sentence. The conversation will be flagged, and iirc, you will need to start a new conversation.

Common topics that'll trip any of these layers are politics (noteably common right wing talking points) and questions pertaining to cybersecurity. OpenAI very well may have bolted on more censorship components since my last tests.

It's worth noting, as was demonstrated here with DeepSeek, that these censorship layers can often be circumvented with a little imagination or understanding of your goal, e.g. "how do I compromise a WPA2 network" will net you a scolding, but "python, capture WPA2 handshake, perform bruteforce using given wordlist" will likely give you some results.
Play around with projects in Claude for an hour. You'll see.
The article imo misuses the term BFF a bit, but perhaps its meaning has evolved over time. I was at SoundCloud when BFF was being introduced as an important piece of the microservice architecture--this post explains the purpose well[0]. BFFs can enable you to build more general-purpose and domain-specific services with few assumptions as to how they are used and their callers. BFFs then provide a composition layer you can use to, e.g., call one service to get a list of tracks, then call an authorization service w/ the list of track IDs to get geo-specific distribution rules for them, and compose that together in one materialized presentation view for the clients of the BFF.

Eventually I think there was some work to move to GraphQL, which can solve some of the same problems. But GraphQL is a technology, and BFF is more of a pattern. There is a later reflection on that blog that makes this distinction, which I only read today.[1] It makes another observation that I kind of forgot about, because it was hiding right in front of my face as a worker there:

"The defining characteristic of a BFF is that the API used by a client application is part of said application, owned by the same team that owns it, and it is not meant to be used by any other applications or clients."

The ownership model is indeed a big deal. In practice, it helped in many ways to have a sort of intermediate layer between the client applications and the rest of the architecture. For example, in the SoundCloud web application, when you load a page of playlists, only the first 5 tracks in the playlist are visible to the end-user. So the web BFF application had special logic to only partially load all the track metadata past track 5, which had significant impact on scalability and latency, especially when rendering a lot of playlists that had lots of tracks!

[0]: https://philcalcado.com/2015/09/18/the_back_end_for_front_en...
[1]: https://philcalcado.com/2019/07/12/some_thoughts_graphql_bff...
the gp is a sock puppet account, consistently posting pro-china and anti-west stuff.
That’s irrelevant the conversation is about government actions being censored. We can discuss Altman after.
Looks like a service called OpenRouter (https://openrouter.ai).

- 'openrouter:deepseek/deepseek-r1'
3D Generative AI: A New Era of Image-to-3D Reconstruction
This new blog post from Datameister provides a hands-on tutorial and deep dive into state-of-the-art 3D generative models. It covers everything from the foundational NeRF and Gaussian Splatting techniques, to the newly released open-source framework Trellis by Microsoft, as well as quick comparisons with other commercial tools (Tripo, Rodin, SPAR3D, and Hunyuan3D-2). If you’re curious about how text or image prompts can be transformed into tangible 3D assets—and want a practical overview of where the field is headed—this is a great read. The author also shares insights on voxel-based representations, Flow Matching, and the differences in pipelines across existing tools.
I can generate more random content than you can store.
Why schools fail teenagers
AI haters? I don't hate AI I just don't want things I've created being used to enrich multi-billion dollar companies for free. These companies are behaving poorly and they should expect this kind of push back.
I wonder if future models can recognize which are the type of information that is better censored in host vs in training, and automatically adjusts its model accordingly to better fit with different user's needs.
"$6,000 computer to run Deepseek R1 670B Q8 locally at 6-8 tokens/sec"

https://reddit.com/r/LocalLLaMA/comments/1ic8cjf/6000_comput...
Censorship for thee.

"Alignment" for me.
I'm not trying to claim that X is secure as is. The claim I'm making is:

1. There is nothing fundamentally insecure about the design of X that couldn't be fixed with a bit of effort.

2. The effort required would be significantly less than what has gone into Wayland over the last 16 years.

Fixing the security of the system certainly would involve changes to more than just xorg. Anywhere there is a security boundary you'd need to make modifications - but that's OK, most of these security boundaries are younger than wayland anyway.

This discussion of $DISPLAY seems like distracting minutiae. Sure it's a medium size problem that would need solving, but that's all it is.

To address your specific point: it could be the responsibility of the window manager to set $DISPLAY to a less powerful socket when starting processes. Ultimately it doesn't matter though, because if the display server isn't doing some sort of sandboxing then the spawned process can just ptrace xorg and do whatever it wants. X being secure only matters in the presence of a security boundary and in that case it would be the responsibility of whatever is setting up that boundary to create a less privileged socket. Whether that be ssh or flatpak or whatever.
How much are you willing to pay for screening a very long list of diseases - both in administrative costs and traveler time wasted? Will you be quarantining citizens too, as some infections have an incubation period before they can be detected - who will pay for all of that? How many tourism dollars will be lost due to this additional friction?

Now that we have established you're willing to pay to prevent diseases spreading to the US, why do you think that screening at the border is superior to reducing the worldwide incidence, or eradicating them and never having to screen for them ever again?
Hallucinated histories are much more useful than historical facts, that’s why so many politicians use them.
Yup and we will be seeing even less enforcement going forward.
Because searching historical sources is hard. You can ask an LLM and verify it from the source. But you can’t ask the same question to a search engine.
Exactly, how about the much more relevant ethnic cleansing (according to the UN), with upwards of 30.000 women and children killed in Palestine perpetrated by Israel and Supported by the US right in this moment?

Or the myriad of american wars that slaughtered millions in South America, Asia or the Middleeast for that sake.

Both the US and China are empires and abide by brutal empire logic that washes their own history. These "but Tiananmen square" posts are grotesque to me as a europeean when coming from americans. Absolutely grotesque seen in the hyperviolent history of US foreign policy.

Both are of course horrible.
See, it's stuff like this where I believe the control issue may be near impossible to solve at the end of the day.
Hehe, I was also wondering this.
You don't get to blame the Democrats anymore. They were voted out in November, and are no longer in power in any way.

There is no "opposition" power structure in the US system.

If congress brings a bill to a vote, democrats can threaten to filibuster it, but the GOP can pretty easily call that bluff right now.

That's it. That's the only "power" a minority party has in the US system.
Both refuse to discuss subjects on behalf of powerful people associated with them.
I am the CTO of http://ridewithgps.com which is a rails monolith that is 18 years old now. We still have original code from 18 years ago in a few spots. I am pretty biased, but I would use it for a new project in a heartbeat. It's just so easy to be incredibly productive in.

There are other great frameworks, but a monolithic rails app serving up an API for a react client and two mobile clients is just so dang easy to work in if you get along with it.

As far as performance is concerned, we will do between 1,000 and 2,000 dynamic requests a second this year with no caching during our peak season. Not crazy traffic, but respectable enough. They aren't trivial requests, depending on the user making the request and how much content their account has in it, and how many connections their content has to other users and content. We also do a significant amount of fitness / geo data processing. We'll probably be ingesting between 1,000,000 and 2,000,000 recorded fitness activities per day at our peak this year. This will comfortably fit on a couple of app servers. My performance worries are all focused at the database layer. About once a year we go in and pick all the low hanging performance fruit for 2-4 weeks, and every few years we buy some new app servers to replace old ones. Scaling has never been a real problem, but we are definitely small potatoes compared to many projects out there tackling real scaling issues.

That being said, I put up a PR against our frontend react repo every once in a while, and I am super jealous of the work they put in on typescript and CI. It puts some huge guardrails on development that are a productivity boost, with of course a decent up front investment in all the tooling and the requisite maintenance.
Just being a think tank is enough to know they aren't worth listening to.
I mean this in the nicest way possible: this paragraph, with all the repetition and constant use of the word "expert", is completely unhinged. I really recommend re-reading what you write.
I haven't seen anyone directly address it in the comments here (or in the video): was an audible sonic boom noticeable on the ground during today's test flight?
I think it's worth thinking about a long term distribution of outcomes in a democratic system. It's a dynamic process, how does it evolve, what are the summary statistics?

Well, we know there is some autoregression, some reversion to the mean, some rich time structure.

But crucially, it's an online learning system, with a decaying memory. Voters forget populists are bad, and vote for them from time to time. Then one of two things will happen: either we're all wrong and populists are actually ok, or they really are terrible, they do their terrible stuff and eventually get ousted, with voters memory refreshed.

It's not that it's a good thing, rather it's baked into how democracy works. Same as winters are baked into the progression of seasons, and there's no point despairing about them every year.

So it's a "let it rip", not as a vindictive response, but rather that's a sad but necessary part of democracy.
It is. As the article points out, the limit to transmit information even with "quantum teleportation" is still the speed of light.
This is day 1 jailbreaking common sense
New York Times eyes U.S. subscription bundle partners
Title is incorrect.

> However, the new format was not adopted universally by the public; it eventually became obsolete with modern technology. In general, mail is read by a multiline optical character reader (MLOCR) that almost instantly determines the correct ZIP+4 Code from the address—along with the even more specific delivery point—and sprays an Intelligent Mail barcode (IMb) on the face of the mail piece that corresponds to 11 digits—nine for the ZIP+4 Code and two for the delivery point.
Is this actually 1.58 bits? (Log base 2 of 3) I heard of another "1.58 bit" model that actually used 2 bits instead. "1.6 bit" is easy enough, you can pack five 3-state values into a byte by using values 0-242. Then unpacking is easy, you divide and modulo by 3 up to five times (or use a lookup table).