skysight-inc/HackerNews huggingface dataset:
It also feels like that people who are highly determined to build high quality, secure software are not valued that much.

It is difficult to prove their effort. One security-related bug removes everything, even if it happened only once in 10 years in 1 million line code base.
>It's a bundled deal, sorry.

And this is why Trump turned it all off. The bundled deal is not working for too many voters. They want Trump to negotiate a new deal on their behalf.
Noticeable is certainly a way of putting it.

https://en.wikipedia.org/wiki/Oklahoma_City_sonic_boom_tests

>However, in the first 14 weeks, 147 windows in the city's two tallest buildings, the First National Bank and Liberty National Bank, were broken.

If a sonic boom is "noticeable", that's one thing. But the problem is that even from cruising altitude they're shockingly loud. If the sonic boom is merely bearable, that's quite an improvement.
There are already SBOM software bill of materials standards CycloneDX and SPDX in development and in use. There is VEX and also SLSA.

Idea is if everyone does legwork to check his dependencies you can trust your dependencies because they checked theirs.

It is still trust but we go implicit into „hey you sure you checked dependencies and for sure you did not just npm install library some kid from Alaska created who pulled his dependency on kid from Montenegro?”.

Including random libraries just because we can and it had enough stars on GH was bad idea already - but nowadays it becomes an offense and rightly so.
Only the R1 671B model (aka just plain 'R1') has the censorship being discussed in the article. The smaller parameter models are fine-tunings of Llama and Qwen, and the former at least doesn't have the censorship.

This has caused a lot of conflicting anecdotes since those finding their prompts aren't censored are running the distilled/fine-tuned models not the foundational base model.

A sibling comment was facetiously pointing out that the cost of running the 'real' R1 model being discussed locally is out of the price range of most, however someone in this thread actually has run it locally and their findings match those of the article[1].

[1] https://news.ycombinator.com/item?id=42859086
> They send the same reps and senators back over and over and over.

> If they truly wanted a chaos agent, they should be turning over all the offices.

I'm primarily talking about the swing voters, who can swing elections only when they're close. Large groups of partisans also exist who vote Democrat or Republican no matter what, no matter the candidate, so it doesn't really matter to them whether the candidate is a chaos agent or not. And of course the House of Representatives is heavily gerrymandered precisely to avoid close elections.

Moreover, an individual member of Congress, 1 out of 100 in the Senate, 1 out of 535 in the House, doesn't have much power to change things. Their primary function is to support the President's agenda. That's why people focus more on the Presidential race, because the President makes a lot more of a difference than a member of Congress.

In any case, though, Congress does tend to change hands according to how the public feels about the President, especially the House, the entirety of which is up for election every 2 years.
Evaluating agents: A companion guide to "Building effective agents" by Anthropic
I used to devour GamePro magazines (and was against Electronic Gaming Monthly (EGM) for some reason.)

I also randomly received a free subscription to the print magazine "Internet Underground" which really opened up my world to some new websites.

Link to two issues of Internet Underground:
https://archive.org/details/Internet.Underground.v02n06.June...
https://archive.org/details/InternetUnderground01Dec1995/pag...
Disagree that blind optimism is just as obnoxious. Blind pessimists are much less likely to reach beyond what's currently considered possible. We need irrationally optimistic folks.
Nice, someone just shared it with me yesterday!
Different models have different kinds of censorship so your question can't be answered universally.

The only thing you can be sure is that if it's an AI-as-service, it will have an extra layer of rail guard outside of the model itself.
lets have a look https://en.wikipedia.org/wiki/Solar_gravitational_lens
What a dreadful graph on the front page

y-axis has no units.

x-axis has no years

Two many data to be able to follow it

Sigh
Tabler v1.0.0 Is Here! Say Hello to Your New Favorite UI Toolkit
GOG: New Year Sale 2025
This is great!

I wrote a very similar tool for myself a long time ago: “wd” or Working Directory. Uses similar numeric slots but also has named “schemes” and sets environment variables for your slots for you.

https://github.com/karlin/working-directory
My wife walked into my office about an hour ago with a message from her school related to grants being halted, and how they're going to try to respond. It wasn't anything that directly affected her studies, but there are undoubtedly fallout and cascading effects that this could exercise on schools.

If nothing else, a lot of this mad-cap swinging of the executive-order hammer has exposed how much of our society depends on the existing provided infrastructure.
> Surely we all agree on medication and life-saving care for children.

That is absolutely not a given. The currently in-power minority earnestly believe that people are only due the level of healthcare they can personally fund and afford, period.

> These are real questions that Americans are trying to answer right now.

Which Americans? There's no grand debate happening right now, just a table-flipping tantrum.

It's a fun exercise to do the chin-stroking thing of asking about efficiency and tax rates and so on, but it's so disconnected from the reality of the federal budget that it's hard to believe it's anything other than a cynical tactic.

Military spending is the overwhelming majority of non-discretionary spending, and there are effectively no limits to it. Meanwhile, extremely high-leverage foreign aid (like the HIV-related treatments that have been mentioned) are always first on the chopping block, along with things like school lunches and early childhood education that have been demonstrated to be effectively free in terms of how much spending on remediating bad outcomes later in peoples' lives.
Just ask to reply in rot13
Are you just going to ignore the massive amount of research done by Citizen Labs in exposing the use of Israeli spyware to surveil journalists and activists?
Still, give me democracy over anything at any time. Nothing better has ever been developed than democracy.
I am offering the generally accepted definitions of these terms as some HN readers might not be familiar with them.

If you don't think that ML is AI, I am fine with that.
Either seem better than arbitrary lines
Right, and making an improvement is a big part of Boom's marketing. (It's in their name?!) I'm surprised I didn't hear them make any comments about it in the video during the flight as they crossed the sound barrier each time. Unless I missed it?
New information is available, we've incorporated it and decided the spending isn't worth the cost.

We will find a new equilibrium. It will likely not be 0 spending and will hopefully not be the spending regime we have today.
Why is that? (These are my favourite planes to fly on, curious how the A350 is derivative given the apparent difference in packaging.)
Departing the New York Times
An Interview with Chris Lattner
> That's what I'm calling capabilities at the application level (where you say "this .jar can't access the network"), rather than at the language level (where you say "this function wasn't given access to the network as an argument")

it wasn't, it was done at the type and classloader level

have a read about SecurityManager
They don't have cut-scenes in 4k HDR though. Even the latest Age of Empires downloads an extra 40GB if you enable 4k HDR. It's nice that they give the option at least.
Here in the UK I was seeing the recruiter emails begin to return to more normal levels in Sept/Oct. Albeit with lower salaries than 2022/23.

But then it all abruptly stopped and disappeared again for a few months.

It's now started again but very slowly.
My problem is what part you're implementing can be different. Are you implementing the ability to use someone else as auth? Are you implementing the ability for others to use you as auth? Are you a client, or a server? etc

I don't know oauth at all, but that was the area that always felt convoluted when i'd research it. I think i'd be much happier if they had sub spec names with very specific use cases. OAuth2 Client Redirect, OAuth2 Server Authority, or w/e.. i'm just making stuff up for attempted clarity.
Unix systems protected against a physical person trying to read or modify another persons file. They did not stop programs run by the user reading the users own data unexpectedly which is now considered unacceptable but was previously the norm.
Start a social club/co-op/non-profit/religion or whatever and the metrics are different.

However, when you’re asking for investments your goal better be profit or you’ve just committed fraud.
Exactly, which is why Nubank is miles away from "disrupting" the traditional banks, and not only at what Nubank does.
Just had a thought, perhaps software engineers will become more like car mechanics.
More than anyone could ever count.
In my case just CPU (it's a Hetzner server, checked in /proc/cpuinfo and it said "AMD EPYC 9454P 48-Core Processor"). I apparently had still in terminal backlog some stats, so I pasted below.

It's not a speed demon but enough to mess around and test things out. Thinking can sometimes be pretty long so it can take a while to get responses, even if 6 tokens/sec is pretty good considering pure CPU setup.

---

prompt eval time = 133.55 ms / 1 tokens ( 133.55 ms per token, 7.49 tokens per second)
eval time = 392205.46 ms / 2220 tokens ( 176.67 ms per token, 5.66 tokens per second)
total time = 392339.02 ms / 2221 tokens

And my exact command was:

llama-server --model DeepSeek-R1-UD-Q2_K_XL-00001-of-00005.gguf --temp 0.6 -c 9000 --min-p 0.1 --top-k 0 --top-p 1 --timeout 3600 --slot-save-path ~/llama_kv_path --port 8117 -ctk q8_0

(IIRC slot save path argument does absolutely nothing unless and is superfluous, but I have been pasting a similar command around and been too lazy to remove it). -ctk q8_0 reduces memory use a bit for context.

I think my 256gb is right at the limit of spilling a bit into swap, so I'm pushing the limits :)

The --min-p 0.1 was a recommendation from Unsloth page; I think because the quant is going so low in bits, some things may start to misbehave and it is a mitigation. But I haven't messed around enough to say how true that is, or any nuance about it. I think I put --temp 0.6 for the same reason.

To explain to anyone not aware of llama-server: it exposes (a somewhat) OpenAI-compatible API and then you can use it with any software that speaks that. llama-server itself also has a UI, but I haven't used it.

I had some SSH tunnels set up to use the server interface with https://github.com/oobabooga/text-generation-webui where I hacked an "OpenAI" client to it (that UI doesn't have it natively). The only reason I use the oobabooga UI is out of habit so I don't recommend this setup to others.
Right. The strategy this time around should be universally concerning: our system is built for drawn-out consideration, not handling rapid-fire edicts from an executive who doesn't understand (or doesn't wish to understand) the division of power between branches of government.

Trump appears to be signaling that he's going to sign orders and memos until the other branches roll over through attrition. I hope they remember their coextensive powers before that strategy actually works.
Cool. I hate the term of calling AI because its an excuse to throw out a flawed pretentious innovation where by it can be flogged as a product to sucker those who don't know better.

"Cloud Servers" anyone? Glorified dedicated servers.
Not even that. You always have insurance for this stuff.
> Did use cases exist? Sure. But not sufficiently to move the needle on app store usage.

We can't say that for sure. There is no shortage of examples where Apple neglects a feature that might provide parity with their own services to avoid competition. Safari, being a mandatory feature of iOS, is reasonably implicated as part of the conspiracy to prevent users from buying and selling software without the assent of a corporate benefactor.
> Not teaching me technical details of chemical weapons, or the etymology of racial slurs is indeed censorship.

https://chatgpt.com/share/67996bd1-6960-8010-9578-8a70d61992...

I asked it about the White racial slur that is the same as a snack and the one that I only heard from George Jefferson in the 80s and it gave an etymology for both. I said both words explicitly.

> It is astounding to me the hand-wringing over text generators generating text, as if automated text generation could somehow be harmful.

Do you remember how easily early chatbots could go off the rails based on simple prompts without any provacation? No business wants their LLM based service to do that.
I'm not sure really, but I also did get a recruiter contact me for the first time in like 2 years. This is all anecdotal of course, but I'm hopeful.
Ah yes, let's use the timeline for a first class passenger as the average for how long it takes to go from check-in to take off.
ISO 27001 doesn’t mean secure. It does mean they have invested money in compliance though.
This is an interesting article to have up alongside the SLAP and FLOP vulnerabilities. I like capabilities as much as the next programmer, but my gut tells me that process boundaries are only going to get more important, not less, as chips get faster and untrusted code gets more widely understood. Or other sorts of hardward-enforceable memory boundaries
This is only true from the point of capital - if a startup changes the world in a way you like it can be a success to you. Profitability brings a certain approval and sustainability, but don't confuse that with your goals in what you are working on.
The issue is that you are taking max GPU power draw, as a given. Running a LLM does not tax a GPU the same way a game does. There is a rather know Youtuber, that ran LLMs on a 4090, and the actual power draw was only 130W on the GPU.

Now add that this guy has 7x3060 = 100% miner. So you know that he is running a optimized profile (underclocked).

Fyi, my gaming 6800 draws 230W, but with a bit of undervolting and sacrificing 7% performance, it runs at 110W for the exact same load. And that is 100% taxed. This is just a simple example to show that a lot of PC hardware runs very much overclocked/unoptimized out of the box.

Somebody getting down to 520W sounds perfectly normal, for a undervolted card that gives up maybe 10% performance, for big gains in power draw.

And no, old hardware can be extreme useful in the right hands. Add to this, its the main factor that influences the speed tends to be more memory usage (the more you can fit and the interconnects), then actual processing performance for running a LLM.

Being able to run a large model for 1600 sounds like a bargain to me. Also, remember, when your not querying the models, the power will be mostly the memory wakes + power regulators. Coming back to that youtuber, he was not constantly drawing that 130W, it was only with spikes when he ran prompts or did activity.

Yes, running from home will be more expensive then a 10$ copilot plan but ... nobody is also looking at your data ;)
> Using iTunes or Beets is a great way to start.

I'm _just_ worked on cleaning my library with Beets today, excited to see more "frontends" being available. I'm currently on Plexamp but the Mac app (Which is just the iPad app) could be much better.
The title was correct but they appear to have changed the policy since the post was made, likely as a response to feedback.

Notice that in the archive from earlier today the "Who is excluded from this account email-based new device verification?" section did not have the new fifth bullet point about being able to opt-out:

https://web.archive.org/web/20250128011007/https://bitwarden...

Thought it was worth pointing this out since I've already seen people reply to old comments thinking people didn't read the article without realizing it was later changed.
https://svelte.dev/docs/svelte/v5-migration-guide#Event-chan...

Yes, what a completely frivolous change that will only cause headaches.

Changes like this are why I dislike the mentality in the JS ecosystem. It was just cosmetic, and creates unnecessary churn. They seem to be addicted to changing things. They didn't like the old syntax? Though. What's done is done.

Don't make frivolous changes in frameworks damn it.
Well, the only photo released to the public at least.
Yep, and we could have gotten there with a lot fewer people being hurt in the process.
Well, artificial means made by humans, not naturally.
Pretty rough.

Using LM Studio, trying to load the model throws an error of "insufficient system resources."

I disabled this error, set the context length to 1024 and was able to get 0.24 tokens per second. Comparatively, the 32B distill model gets about 20 tokens per second.

And it became incredibly flaky, using up all available ram, and crashing the whole system a few times.

While the M4 Max 128GB handles the 32B well, it seems to choke on this. Here's to hoping someone works on something in-between (or works out what the ideal settings are because nothing I fiddled with helped much).
SendGrid, pre IPO, had a GoDaddy security incident: someone social engineered one of the GoDaddy support reps into giving them control of our domain. We were able to re-secure the domain before the attacker fully locked us out. They could have powned all of our email links.
At this point I have to wonder if judicial intervention will have any effect; a court ruling only matters if the administration decides to obey it. There's a lot of frozen funds which legally cannot be frozen due to them either not being subject to executive control (e.g. Medicaid funds[0]) or because there are contractual obligations for dispersal (e.g. many infrastructure projects), so it seems unlikely that a little thing like the law is going to make a difference here.

As someone in higher ed, this all worries me greatly. My position may not be federally funded, but if layoffs occur to balance the budget, I'm relatively low on the seniority ladder.

[0]: https://www.healthcaredive.com/news/trump-freezes-federal-gr...
The "grand debate" happened, Americans voted, and now the guy who won is delivering on his campaign promises. Whether you agree with Trump or not, this should not be a surprising outcome. He told us he was going to do this.

>Military spending is the overwhelming majority of non-discretionary spending

This is so wildly wrong and easily disproven that I really can't take the rest of what you say seriously.
I've been tremendously disappointed by how chickenshit corporations have been this time.
I'd say the opposite actually, that the idea that an established company can lose money and still be considered a success is absolutely a hallmark of late-stage capitalism - and not a very healthy one either.

(I know Boom isn't gigantic, and of course it's losing money at this stage which is right and proper. However losing money in aviation is extremely easy and so I think we call it a successful business when it's profitable. Today, it's proven itself a successful prototype engineering endeavor.)
It’s fine to have multiple aims, but asking for investments without trying to be profitable is fraud.
I am intrigued. What did you use to run your deepseek instance?
I'm hoping a result of this shitshow is a curtailing the power of the executive. We've been slow-walking our way towards this by congress abrogating their responsibility under both parties. Probably requires actual restructuring of congressional elections and seniority systems though, which is... well going to be hard.
File locks are the thing that has most been biting me, to be honest. The horrow show of NTFS, and Windows Defender, where a 'close' can become a costly operation.
Win 3.11 allowed 256 color .bmp wallpapers

After Dark allowed everything.
Agreed on the writeup itself. It's beautifully written and presented. Kudos to Jean Kaddour and anyone else that may have been involved in putting it together.
They've needed rules like this forever. Is it the Sea of Japan or the East Sea? The Persian Gulf or the Arabian Gulf? And so on. This is just another similar pissing contest.
Thank you! Great question.

"Infinite-length sequence processing" in StreamingLLM refers to handling much longer sequences than the model's training window (e.g., millions of tokens), by combining a sliding window for recent tokens with fixed attention sinks from the start of the sequence.

I can't speak for DeepSeek, but if I had to guess, I'd say that the infinite context window isn’t practical because storing all past tokens eventually becomes too expensive.
I've had a dim view of them ever since my first interaction with Domains by Proxy (At the time, I recall finding that many 'windows support' scam sites and other malware distribution was showing up under their domains, and every attempt to uncover would only lead to a 'oh that account is now banned but we wont tell you thx'.)

... Honestly it reminds me of how some Internet VOIP providers won't tell the name of the business who actually bought the number (Which, of course, complicates the ability to collect on TCPA when it's a number used for spam.)
The question is, how many were taken at supersonic speed? What non-military aircraft could keep up with the Concorde at Mach-2? Only another Concorde.
I'm pretty sure that's still the same multimodal LLM, and considered a form of prompting?
Anyone above the lowest pay grades gets categorized as some type of "expert".

I've read that at the F.B.I., anyone not pushing a broom gets the title "agent."
It only needs to be economically viable for billionaires bored with collecting yachts and $100 millionaires who want to flex with charter flights. Scheduled commercial service is a pipe dream but not a requirement for success.
The title was changed, but it's worth pointing out that they updated the article AFTER criticisms in this thread were already made (the original policy did not say you could opt-out):

https://news.ycombinator.com/item?id=42859698
I think it’s funny that people get upset about China censoring a few random topics, but then fall over themselves to defend all the censoring that goes on in western models to make them “safer”.
No, you’re not. You’re building specialised tools for each job.

Also with GQL you can separate by business domain as opposed to consumer for example your customer apps/website could use one gateway, and your back office app could use another.

Also, if you have an old monolith in something like rails, and want to build new functionality in something different whilst migrating parts of it over, it makes sense to have a service oriented architecture. A gateway is a layer that exposes all of the services in a unified and consistent manner.
I made my first cute lil micro-SaaS