skysight-inc/HackerNews huggingface dataset:
Definitely your choice to make in terms of what salary you'd accept however I don't really understand the strategy of yours. I, or any US company, could just hire in the US if I was paying higher US rates. I could avoid the timezone issues, potential language issues, would be easier to get together in person if ever needed, etc. and I don't have to learn/concern myself with German employment laws.

All things equal, skills and such, I think it would be fairly easy to find a US based candidate at this price for part-time work. So why would I bother hiring from another country unless it saves me money?
Now they need to do it for their own outputs to spot their own hallucination errors.
I think that comes back to:

> Here the use is fairly frivolous, but most such character sets do have legitimate use - like fullwidth latin characters for readability when used alongside CJK - so really shouldn't just be skipped.

The use given in the article is quirky - but these are real characters with proper uses and shouldn't just be skipped.
Maybe coders should learn to love analog? (2024)
Previous: https://news.ycombinator.com/item?id=43301369

This is not a remote exploit. It's arguably not even an exploit or backdoor at all, which is why this PR article is full of "democratized security" slop.
It is. Psychological torture is torture.
A good indication that you may be dehydrated is if your eyes are burning after a few hours of work or partway through a long drive.
It's absolutely a good thing, and arguably not a security issue at all.

It needs access to the command interface of the chip, which means you need to either have physical access to the device or compromise whatever is physically connected to the device.

It's practically like calling a read/write filesystem a security issue. Yes, an attacker can write to disk and persist there, and they can overwrite files, etc. But there needs to be a flaw that allows access to that behaviour first, else it's just a part of the interface.

And in this instance, it's a part of the debug interface of the chip. And practically makes it a perfect candidate for future bluetooth security tools, similar to the Atheros chipsets used for WiFi sniffing. Now we can do bluetooth impersonation attacks for $2 instead of hundreds.

Betting there'll be some good bluetooth research in the near future, showing all sorts of devices are vulnerable to attacks using $2 hardware. That's the real security problem here.
Browning is a feature not a bug.
It's bullshit according to previous discussion on HN (https://news.ycombinator.com/item?id=43301369).

Just a bunch of undocumented hardware registers/commands, no remotely accessible backdoor.
Would love to chat. I’m at jbornhorst [at] gmail.com
Not necessarily. Imagine a health insurance provider even partially automating their claim (dis)approval process - it could be both lucrative and devastating.
How about no?

Does no work?

Fine, it's settled, no it is.
So it's yet another one API to rule them all?

The only thing that idea ever lead to was more (complicated) APIs.
Kissing moons may explain why Earth's moon is so large
That is exactly what panics do in Rust. The difference between Result<T,E> and a panic is basically two-fold:

1. The owner of the process (whoever is compiling the binary) - not the library! - gets to decide whether panics immediately abort or try to unwind in a way that can be handled.

2. A panic is never expected (i.e. it always indicates a bug in the code rather than invalid input or other expected failure conditions), so it's optimized for the success scenario both in terms of syntax and in terms of runtime cost. In practice, it means that syntactically the panic always auto-propagates (whereas you need `try` etc with Result); and the code generated by compiler is zero-cost wrt panics if one never happens, but the unwinding is very slow if a panic does happen.
For tech firms (big to startup), the path to have success or avoid failure now explicitly includes figuring how to align with the regime. It's been visible for the biggest (Meta, Oracle, Apple, etc.) but trickles down to all.
When they do speak truth to power, they are quickly removed from office anyway.

This is why whistleblowers protections are important. Why they already were, before Trump.
I'm using Orion with ublock origin right now?
Do you understand that stuff made in Europe and sold in Europe is also subject to the VAT?
Masses buy crap if it is famous and shiny and have bells and whistles a lot.

If it is expensive too, then they become a fanboy!

How else could the industry pour out bigger and bigger crap with huge earnings otherwise? Poeple love shiny and famous crap!
I made a post below on this, but I had previously subscribed to Analog via Amazon/Kindle. About two years ago Amazon killed all magazine subscriptions and forced the magazines to either make their issues available for free to "KindleUnlimited" subscribers ($10/mo) or get the hell off their platform.

Analog and Asimov's took the hit, and are, to this day, available to read for free if you have Kindle Unlimited. There's no way this didn't lose them tons of money and wreck their cashflow.

And, even though I personally benefitted, I'm still mad that Amazon did this & I'm surprised there wasn't more pushback from the magazines. They could have done a lot more to incentivize off-platform digital subscriptions.
Yeah I found this article super weird. Explaining pointers & dereferencing is reasonable, but doing it in the context of Zig specifically, like Zig is the first language to feature dereferencing, is odd. Especially since pointers are such a fundamental part of low-level (really, any) programming. Also not sure why it's posted here?

Edit: Going through this author's website, it seems like a lot of their posts are about rediscovering low-level programming concepts through Zig. Like this article, where they discover you can't compare strings directly, and you have to use memcmp:

https://www.openmymind.net/Switching-On-Strings-In-Zig/

They claim that they blog because they "find that [they] retain things better when I write about them." No problem with that. Just a little odd to see on the hn front page, I suppose.
Thank you for sharing, because I didn't know what cloud-init was until your post. I've done something similar, but packaged as a library of bash functions, designed to be called in arbitrary order. I cannot comment on the specific decisions you made in your file, but the fact that a declarative, compact, and standard solution exists for this problem is music to my ears. Out of curiosity, where did YOU learn of the existence of this feature?
Early '00s was the peak of car dashboard UX. After that it has been mostly regressions, sold as "innovation".
Interesting piece but I am much more optimistic.

Tejo writes:

> At the heart of it, all AI is just a pattern recognition engine. They’re simply algorithms designed to maximize or minimize an objective function. There is no real thinking involved. It’s just math. If you think somewhere in all that probability theory and linear algebra, there is a soul, I think you should reassess how you define sentience.”

We have two words we need to define: “sentience” and “thinking”.

Sentience can be defined as a basic function of most living systems (viruses excluded). You may disagree but to me this word connotes “actively responsive to perturbations”. This is part of the auopoietic definition of life introduced by Maturana and Valera in the 1970s and 1980s. If you buy this definition then “sentience” is a low bar and not what we mean by AI, let alone by AGI.

The word “thinking” implies more than just consciousness. Many of us accept that cats, dogs, pigs, chimps, crows, parrots, and whales are conscious. Perhaps not an ant or a spider, but yes, probably rats since rats play and smile and clearly plan. But few of us would be likely to claim that a rat thinks in a way that we think. Sure, a rat analyzes its environment and comes to decisions about best actions, but that does not require what many of us mean by thinking.

We usually think of thinking as a process of reflection/recursion/self-evaluation of alternative scenarios. The key word here is recursion. and that gets us to “self-consciousness”—a word that embeds recursion.

I operationally define thinking as a process that involves recursive review and reflection/evaluation of alternatives with the final selection of an “action”—either a physical action or an action that is a “thought conclusion”.

What AI/LMM transformers do not have is deep enough recursion or access to memory of preceding states. They cannot remember and they do not have a meta-supervisor that lets them modulate their own attentional state. So I would agree that they are still incapable of what most if us call thinking.

But how hard is adding memory access to any number of current generation AI systems?

How hard us it to add recursion and chain-of-thought?

How hard will it be to enable an AI system to attend to its own attention?

In my optimistic view these are all close to solved problems.

In my opinion the only thing separating us from true AGI are a few crucial innovations in AI architecture—-mainly self-control of attention—-and under 100k lines of code.

Please argue! (I’ve had many arguments with Claude on this topic).
There is a weird dynamic going on where defaults have become "good enough": ssh with public key configured and password auth disabled, services defaulting to only listening on localhost, etc., but those improvements have also cause people to pay much less attention to server hardening or to checking if any of their services might have unsafe defaults.

The world is made much better by safer defaults, but they also lead to a degree of complacency.
If you can check for manufactured data, it means you know more about what the real data looks like than the author.

If there were an AI that can check manufactured data, science would be a solved problem.
OpenAI could charge $20K a month for an AI agent
Considering both of these right now. Why was Dokku so much better for you?
haha yeah... this is just for fun though!
I didn’t suggest the entire economy. I’m just saying it’s not _wild_ to consider national security when enforcing policies.
Either that or they are able to make massive inroads on solving this problem and everyone benefits.

And just as a sidenote, the Democrats had 3 times the campaign funds of the Republicans at the last election (Nancy Pelosi herself is worth 100 million..something like that). So if you want to talk about wealthy people, lets talk about the Dems.

And we can also talk about the many people getting very wealthy from the Dem NGOs (USAid was a slush fund basically).

https://www.thefp.com/p/a-20-billion-slush-fund-nonprofits
> But let's ignore that web API worst case. Imagine that you have some semi-trusted software and because you don't want to take any risks, you run in nested VMs three layers deep. The software has some plausible excuse to require access to the Bluetooth (perhaps it's a beacon demo?) so you grant an exception. You're not happy with the result (the beacon demo does not work as promised?), you remove the software and you also reset all three VM layers for good measure. Gone for good, nice. Unfortunately, the guest the malware installed on the ESP when it had access is still there...

You're hopping through 4 security boundaries and granting direct hardware access. If you don't understand the decisions you're making by doing that, all bets are off.

Better to give a virtualised bluetooth device and let the hypervisor drive the real one. Will hit performance a little, but it's far more secure.
I doubt he will, I'd think it would be to curry favor with the crypto crowd, but I don't think they have a lot of love for Bankman-Fried. But it's a spicy administration so it's not a 0% chance. Maybe a 1% to 5% chance.
This is something I don't understand. Kagi has been my only search engine since they dropped the price to $10/mo. I've only ever used Kagi with Firefox, and I use it on Linux, Windows, and Mac. I just add it to my search engines and set it as default, which takes about 15 seconds.

Everything seems to just work seamlessly. Searching in private windows works without any configuration or token juggling.

I have never tried the Orion browser or the extension because I don't understand the problem that they allegedly solve.
The main thing that kept me from getting an Ioniq was the stupid display and no buttons. If it had been cheaper I would have gotten it anyway, but the pundits guessed the sticker price about 10% low and I was not going to bother paying more than I had anticipated and deal with UX rage every time I drove my vehicle.

For some of us a car ride is how we zen out. If you make them anti-zen you will lose customer goodwill.

I’m still a little mad at VW for dieselgate but real buttons puts them back on the list.
America under Trump is the least free that America has ever been. Your freedom argument is outdated, The USA has a fascism problem right now and we are trying to fight it.
Late to the party, but there's a "canvas mode" in Obsidian where you can sort of group notes together and drag them around. Other than that, it's also got a graph view, so provided you tag and link notes properly, it will show you related notes in the graph.
I asked by eye doctor why there was so much mucus around my eyes and after she dumped in a little dye she noted my eyes were almost like sandpaper from not blinking enough.

This seems like something that could have a technical solution beyond just putting liquid in your eyes. I am wary as liquids are sometimes contaminated with bacteria or other substances. Perhaps screens or headbands that trigger blink reactions.
Capability and efficiency are very different things.

Consumers will absolutely buy worse buy cheaper products/services.
Why not just skip the human and have AI write, evaluate and submit the papers?
I wouldn't call it another form of API. It's more like an SDK. If you were accessing a REST API from Android, iOS, Windows, Mac, Firefox, they'd be mostly the same. But an SDK for Android and an SDK for iOS has been built for the platform. Often the SDK encapsulates the official API.

That's a direct answer for (2) too - instead of writing a JS SDK or Swift SDK or whatever, it's an AI SDK and shared across Claude, OpenAI, Groq, and so on.

(3) is exactly related to this. The AI has been trained to run MCPs, viewing them as big labeled buttons in their "mind".

I think you got the questions spot on and the answers right there as well.
ANSI escape sequences exist and are good enough for basic formatting like bold, italic, underlined etc.
I would put that heavily on the “excuse not reason” category. The public doesn’t understand this nuance and I hope you’re right about next steps.

It makes no good goddamned sense that money that was given in order to be featured in a web browser cannot be spent primarily on that web browser, and can only be spent on anything except that web browser.
Yeah, but you need to ensure that you have an actual isolation boundary in place between systems with different invariants to ensure that there's no shared state (since any shared state implies shared invariants). Which is exactly what processes are. Not necessarily OS processes, though - e.g. consider Erlang, where the notion of an ultra-lightweight process provided by the runtime instead is exactly what makes this kind of error handling a natural fit.

Now for some languages it is possible to determine that the state strictly through code analysis, without any runtime boundary enforcement. And I think that safe Rust might be in that category, but unsafe Rust definitely isn't - and whether any given library contains unsafe code is an implementation detail...
Blackstone vs. BlackRock: The Greatest Wall Street Frenemy Story Ever Told
Several years ago I was working for major network hardware vendor, we were using MS Yammer (now it seems to be renamed to Viva Engage) as internal social media. I wasn't heavy user of it, actually I think I have checked it few times during my whole employment there as most of my teammates. I remember it as a place for semiformal interaction, related to company, like bragging about releases and other milestones.
>The iZEV rebate is paid to the the point of sale who in turn is supposed to knock that price down for the owner. So it is a 'dealer' in that Tesla itself is the dealership.

No, the rebate is paid at point of sale to the purchaser of said vehicle, not to the dealership, and not to Tesla.

>So yes it is suspicious.

So it is not suspicious.

>Especially considering that the Model Y starts much more expensive then it's competitors like the Mach E, the Ioniq 5, the EV6, the Equinox/Blazer, and Prologue.

It's not that much more in price, and it's a much better vehicle than anything Ford or Chevrolet makes.

>Whether anything comes of it or not is an entirely different matter because there are ways of doing this that do not violate the letter of the law.

Nothing will come up because nothing happened. Consumers went on a buying spree because the rebate was quickly coming to a close.
Why not skip the AI and remove "referees" that allow papers to be published that contain egregious errors?
Presumably part of the court order is that they can't just do the same thing again without suffering the same (or worse) consequences.
Adding to this, government use cases would be most likely to cause issues because they’re often relevant regardless of how badly they suck.

There are already active discussions about AI being used in government for “efficiency” reasons.
What makes Hogfather interesting is that I might argue that he is not a god. At least for taken meaning of what a god is and acts like in/on Discworld. He is more so a force of nature like Death. Or a thing like tooth fairy.

Such entities have a special existence on Discworld.
Author here. I agree this is a less-than captivating piece. I write a lot about Zig and wanted something I could reference from other pieces.

But, to answer your question directly: absolutely. In addition to writing a lot about it, I maintain some popular libraries and lurk in various communities. Let me assure you, beginner memory-related questions come up _all the time_. I'd break them down into three groups:

1 - Young developers who might have a bit of experience in JavaScript or python. Not sure how they're finding their way to Zig. Maybe from HN, maybe to do game development. I think some come to Zig specifically to learn this kind of stuff (I've always believed most programmers should know C. Learning Zig gets you the same fundamentals, and has a lot of QoL stuff).

2 - Hobbyist. Often python developers, often doing embedded stuff. Might be looking to write extensions in Zig (versus having to do it in C).

3 - Old programmers who have been using higher level languages for _decades_ and need a refresher. Hey, that's me!
You can send an email with your situation and what you're looking for and we'll see how we can help.
Both things can be good ideas at the same time.

It's likely the case that large corporate social media platforms have thought about what formatting options they want to provide and have decided that they will make more money if they keep it as it is. Attempts to get them to change that aren't somehow connected to their profits are unlikely to succeed.

It's possible to convince people to change their behavior by appealing to empathy, sympathy, or a sense of justice.
Nice, if it runs on Linux it can run on Windows through WSL.
it seems he also overlooked, in his tirade against EU VAT, that almost the whole world has VAT.

It's just an handful of countries like USA and Malaysia that are the weird ones, and don't implement a VAT tax
Electron apps were popular, not Electron itself. Even now there are only 4-5 dozen popular apps using it, while I probably run across that number of Qt/GTK apps a month. It's a sort of weird dichotomy it finds itself it.
port 22 and usepam is interesting. maybe set that to not 22 and not use pam unless you have a specific reason to. didn't dig deep to see if you had one but you're not setting a pam.conf.d file as far as I saw. There's more to pick apart, but if that's the best Claude can do my job is safe for 30 more seconds.

hire a professional to secure your shit.
People buy them and might still hate the touch screen. I know I hate my car's touch screen.

Just because people buy something doesn't mean they love every aspect of it.
Writing code for interfaces is an extra "cognitive layer" for the AI, just like it would be for a human.

Let's say you want to add or delete Jira tickets. A MCP is like a big labeled button for the AI to do this, and it doesn't come with the token cost of reading an API or the possibility of making a mistake while accessing it.
Water is about to get a lot more expensive for Californians
>> No SQL, no UI framework, no MVC architecture - yet it solves the actual problem perfectly.

No SQL but in it's place is some code. The point of SQL was to standardize a language for querying data. This is just using a language other than the standard. A UI is a way for people to avoid writing code.

Sure doing your own custom thing results in something easy for the programmer. Nothing new about that.
As someone responsible for explaining to junior operations people why we call them ToR switches when they are in fact in the middle of the rack (due to efficiency of the copper cable lengths) could we please agree to stop calling them ToR switches?
It is as if you were on your phone – a game by Pippin Barr
I love H3. Isaac and Uber did a real service to the geospatial community with that one.
I don't doubt that that's true, but my surfing there has been effectively nonexistent, so I know that I don't know. I'd hazard a guess, however, that there is a great deal of variance between different subreddits.
I prefer all proposals to be modest.
> Keep Google Chrome. Separate search. Sell it to private equity.

This. If Search + Google Ads is independent from Android + Chrome + Gmail, it will choke the user-data flow that Google Ads platform is feeding on. This opens doors to new competing search engines!

Android + Chrome + Gmail needs to be bundled with hardware purchases, like Apple does with Safari + iCloud. This will create incentive to make them actually privacy focused, and could be its selling point. No need to feed Google Ads with data anymore!

Yeah, dreaming.
worse for the consumer or the provider? if the llm is going to fundamentally do a "worse" job no matter what the incentive (whatever that is, maximising profit, maximising claims, whatever that may be) we will end up with the "more efficient" system in charge

the counterpoint to this (which i guess is the tenet of the original comment?) is that hype can shadow good judgement for a short period of time?
I would think that that CDA/230 would probably have to amended if such a new law were to make any sense.
This is not a remote exploit. It's not even a backdoor. It's just a bunch of undocumented interface commands that allow access to things like memory. To exploit any of this you need an attacker have physical access or get to run privileged software on the device. In both cases you'd already be totally screwed anyway. This is a clickbait nothingburger and that's the reason why it was presented at a random local conference. An actual backdoor that infects billions of wireless devices would have easily earned you a top presenter spot at a highly prestigious conference.
Get ready for having your data sold to everyone. Rather than just a few major players having access, anyone willing to pay will get the raw data rather than something obfuscated through an ads platform.
What’s the reasoning behind lack of B/I text on social media? These are mature platforms, I can’t think of a good reason to prefer “math symbols as style” over actual B/I characters?