skysight-inc/HackerNews huggingface dataset:
I agree it’s risky and, IMO, it would be as good as the policy that drives it. Same happens with seccomp, lsm hooks (bpf or apparmor:selinux:smack:tomoyo), nft or netfilter, or any other policy driven mechanism.

Now, the enforcement feature, will never be unanimous (although runtime tools try to provide it). Of course there are straight forward cases like never execute a binary from procfs, or never allow x vídeos.com (that is a no brain automatic enforcement for almost everyone, let’s put this way).

It also depends on what kind of enforcement we talk: we apply synchronous network policies and dynamic ones after DNS answers for example (and that is enforced if the policy says so). This is an action (to something currently going on), different than a re-action (which happens after something has already happened but allows me to enforce a cluster policy, for example). We have synchronous actions (like our network policy update, and, soon, execution and file access policies) and mitigation reactions (try to kill, pause, introspect, etc) jittered from original trigger (search the whole tetragone discussion).

In our case we have actions for the network policy, actions for detections (in some detection methods), reactions to detection events and integration with external tools as detections occur.

To your answer: yes you will be able to define the actions, reactions and drive enforcement for reactions (3rd party integrations for example). For now we are only distributing the network policy and we are about to include more (we just need good feedback on things people want and use cases). We will also be providing soon a way for users to create their detection recipes (but we will probably have a big list of recipes made for the biggest use cases so users don’t have to worry).

Thanks for asking, I do agree with your concern (and I think most of sec people also share the same concern on that).
Spread of Australia's red fire ant population has sent 23 people to hospital
Reputational loss isn't a good argument either, because what the comment I replied to said is that repositories in control of people in e.g. Russia are dangerous. That implies that a Russian or Chinese maintainer of popular open source software is not safe, whereas someone employed by an American company is.

However, maintainers have a reputational loss risk, just like someone working at a company does, no?

And, of course, GitHub could just replace the file you're served when you download a file from it, and then blame a hacker, a rogue employee, or deny it happened. That is just as well technically possible as any other entity being forced, by their government, to do something, no?

And, of course, if a govt forces you, your reputation is not the thing you're worried about.

I understand your argument, but that seems like it's a different argument from the one I was disagreeing with.
Mining Insights from the Underground Economy
Literally nothing in this data driven world (sports, technology, entertainment, everything is data driven and maximized) is exciting, nothing.
Doesn't say what's installed by default, but Repology gives an overview of packages: https://repology.org/project/atop/versions
"screams NDA" is not the same as "might be covered under an NDA". And in any case, very likely the said company has already taken mitigative action like removing atop already.
Are you describing the same further education provided to "regular" age college kids in Australia? If so, wow.

Although not surprising. My 19 y/o niece goes to a university in Florida and even though she lives on campus, she only has a dozen in person classes per semester. Nearly everything is still online. It's like they never undid covid.
It's funny how older movies like that are unintentionally prescient.

Like the Kentucky Friend Movie "Eyewitness News" segment and smart TVs.
> it's too easy for a dictatorship to force something

We really need to get rid of this mentality. Australia has laws that allow undisclosed, compelled, software updates. Verbally by ministers, but written (confidential) changes can be requested by federal agencies. Many western countries have followed to various degrees. There's no stable trusted government that doesn't want its fingers in your code.
“Passion is bullshit”.

I don’t hate work. But at the end of the day, it’s a means to exchange labor for money.

Out of the million of things I enjoy, helping the bottom line of a for profit company isn’t one of them. It’s a necessity.

And I actually like the company I work for. It’s one of the best companies I’ve ever worked for (10 in almost 30 years).

The self promotion politics is the only way you get ahead in large companies with a structured promotion process where you have to show “scope” and “impact”.
They really are an improvement. Tracking data flow in a complicated component (bound props going in both directions, derived state, …) was terrible before runes — you just had to rely on compiler magic, which worked until it didn’t. Now it’s more or less obvious.
Weird metaphor. Your boss wanted to make bacon and eggs without any eggs.
Its rare in Australia too, but well known and memed about in hunting communities (one symptom is painfull swelling in the genitals).
This was an experiment from a couple of years back with making the agent basically re-write itself based on the instructions you provide. You could probably code golf this shorter depending on the language. Arguably, this doesn't solve the problem directly, but it allows you to vibe your way there.

import os
import openai

instruction = input("Enter an instruction: ")

script_name = os.path.basename(__file__)
script_code = open(script_name).read()
response = openai.Edit.create(
model="code-davinci-edit-001",
input=script_code,
instruction=instruction,
temperature=0)

new_script_code = response["choices"][0]["text"]
with open(script_name, "w") as f:
f.write(new_script_code)
YAGNI: You Are Gonna Need It.
Great read, always appreciate a deeper dive like this. A library of production-ready Ractor-safe data structures would probably get rid of a big roadblock folks are have with adopting them.
I've seen a lot of #3 used under the guise of either security or user friendliness.
Again, what is the issue with funding? If I get funding from the German government, am I more trustworthy than someone who gets funding from the Hungarian government, like, really? Is there a real, tangible risk here that does not exist with other governments?

Of course the US government isn't scary if you're in the US, but not everyone is, and governments change.

I'm asking not whether it feels like there's a risk, I'm asking whether, factually speaking, there is a significant enough risk that outweighs all else. Is there?
Would it be possible to list incorrect guesses? In case I make a typo, or I forget a previous guess.
> It doesn't matter how reputable the source is:

It does though.

"Don't go down 6th street now" means very different things depending on whether it comes from your buddy, or the bomb squad.

> if you say "don't do X" but don't give a reason why, I'm not inclined to listen.

I hear ya, but, there are sometimes valid reasons people can't say things; and this may well be one of those times. You have every right to do as you like, but it's not necessarily smart now that you've been warned by a respected professional.
I might just be a grumpy old man, but it really bugs me when the AI confidently says, "Here is your image, If you have any other requests, just let me know!".

For a start the image is wrong, and also I know I can make more requests, because that what tools are for. Its like a passive aggressive suggestion that I made the AI go out of its way to do me a favor.
I'm 32 and never been to university for more than a week but recently I found out that I can reduce my cost of living substantially if I can sacrifice my pride a little. I now live in a shared apt, cook my own food and have gone from spending 1200 (700 rent, 500 food) to 550e (225 rent, 325 food).

Seems to me that if you can optimize your living costs then you can save more, get a lot more freedom to pursue whatever you want
Deros and the Ur-Abduction
There are more suitable typographical techniques of accomplishing the same result.
Or we could price cleanup and recycling of the constituent materials into the purchase price by requiring manufacturers to pay to recycle all the items they manufacture.

This approach closes the loop in a way which encourages manufacturers to re-engineer their products to be less expensive to recycle.
"The second and biggest bucket, 460 people, is for “performance” reasons, with Dorsey explaining that Block is laying off employees who score a “below” rating on the company’s internal performance tracking metrics, or were trending towards it."

Anyone who has ever worked at a big company knows this is bullshit. I think people would prefer to not be lied to like this.
Not everything is about American politics.
Except, she kinda did disclose already. Seems a bit strange to circumvent standard embargo practices, only to publicly hint of an exploit but not give any details.
> What are the chances the Russians duped Witkoff into scanning a QR code while he was in Moscow?

What are the chances this admin had him do it ON PURPOSE?
I am currently doing a correspondence course for a Bachelor of Teaching, but could have just as easily done it for Computer Science. It's part time and I'm working full time. It's tough, but it is doable.
I am having the same problem recently. I want to get a degree in a non-tech-related area, Biological Science, but although there are online options, they are expensive, and this degree in particular has a lot of lab work. I also considered going back to my country, where university is free (but with a tough national exam to enter), but the idea of doing the degree with people 30 years younger doesn't sound exciting to me. So I’m kind of thinking about a risky path: building a curriculum with a reasoning AI model, matching it with textbooks (I don't like classes, I prefer learning from books), and studying by myself while documenting everything, so I could apply for a master’s or PhD later on (the risky part). About the labs, I will talk to some colleges and see if I can attend locally with non-degree credits. Not sure if this will work, but every other option seems worse.

I wonder why there isn't a program for self-taught students that provides validation for their efforts, like exams and access to local labs, but no classes. I believe a lot of older adults would like to go back to school but don't want to be in an environment that hasn’t even been remotely designed with them in mind.
>>>In my first week on the job, I was told, explicitly, that if I shared Classified or Controlled Unclassified information over unapproved channels, I would be reprimanded—likely fired, or less likely, prosecuted.

Now, I’m not replying to you about the morality of what happened or to tell my opinion of what is right and what is wrong.

But do you honestly believe the president is held to the same standard as you?

Would it shock you that they aren’t?
OpenSMTPD and Maildrop working in concert
If you are in Australia and using a vocational college, then this is what you'll get. Try doing a course with UNE.
We are, if this comment is the standard for all criticism on this site. Your comment seems harsh. Perhaps novel writing is too low-brow of a standard for LLM critique?
My name is correct now, but I'm not a security researcher. ;-)
There is a more recent approach to auto-regressive image generation.
Rather than predicting the next patch at the target resolution one by one, it predicts the next resolution. That is, the image at a small resolution followed by the image at a higher resolution and so on.

https://arxiv.org/abs/2404.02905
But a future chatbot would be able to internally project manage itself through that process, of first emitting an outline, then producing draft chapters, then going back and critiquing itself and finally rewriting the whole thing.
Was this an auto-generated comment? Because yes, of course it's related, it's someone doing their own investigations based on the news.
Why comment if you aren't interested in having an actual discussion or addressing anything that's being said?
I'm more skeptical about this:

> Dorsey’s email denies that the layoffs are for financial reasons or to replace workers with AI.
Because you can use the ID to recall a previous command with "!". This is a feature that predates Bash+readline.
No. That's never going to happen and, frankly, this journalist is either an idiot or "playing one" for an easy layup PR piece.

Has she not done even a modicum of research?! The incentives are higher in Germany and VW's equivalent initiative already failed. Plus, we already have a similar defective market example in heavy farming equipment in the U.S. and EU.

There's just too much money to be made for aftermarket used car parts and having the manufacturer have a private monopoly on "the circle" is even more incentive for built-in obsolescence and lack of innovation for materials up-cycling/re-use.
No, this isn't University (though that can be patchy). Under the Abbott government, he decided to gut TAFE (the government run Technical And Further Education) and put in a whole bunch of privately run VET colleges. They are almost universally awful and were designed to bring in overseas students who used it as a springboard for permanent residency.

The current government is doing a major crack down on them.
> Now you have a additional stage in your build, a bunch of new code to maintain, and either a bespoke language embedded in your standard C++ or a bunch of code emitting C++ separately from the code it logically belongs with.

The preprocessor is already a bespoke language embedded in your C++, and code written in it is generally harder to maintain than, like, Python.

The cost of doing something non-standard is real, but not infinite; at some point the benefit in code maintainability and sanity is worth it.
You said you don't like it when things are marketed/written about. Why? That's the point of "news".
And we only had ASM for microcontrollers in 1990!

Who is this 'we' you are talking about?

Jovial and CORAL-66 had been compiling for various microcontrollers and embedded systems since the 1970s. In the '80s, Ada took over that space.

By 1990, the 8051 (probably the most common uC at the time) had several C compilers, PL/M, at least 1 BASIC compiler, a Pascal, PL/M and several more. Some of those were years old by 1990. There was at least 1 Modula-2 compiler for the 8051, but that might have been a few years after 1990.

Keil, IAR and Tasking went on from 8051 C compilers to write compilers for dozens of microcontroller targets by 1990.

There were C compilers from others for 8096 (multiple vendors), TMS320xx and TMS340x0 (TI), 68xx (Hitachi), ADSP-2100 (Analog Devices), and more.

Intel had PL/M compilers for 8048, 8051 and 8096. Gary Kidall ported a PL/M subset compiler to the Signetics 2650, if you want something really obscure. Green Hills had Pascal compilers for a couple of embedded procs (i960, anyone?).

Lots more I've forgotten.
2.71bit DeepSeek-V3-0324
I shrank DeepSeek V3 to 230GB or so from 720GB and it works still! Model uploads are at https://huggingface.co/unsloth/DeepSeek-V3-0324-GGUF
I tried to point out that though the topic is a duplicate, the link does add additional value. Do you not think the previous discussion is worth linking? Yeesh
But if it was 3, why not say "I know there is a vulnerability, but I can't share the details"?

I'm not saying it isn't 3, but if it is, it seems like there might be more to it than a run-of-the-mill CVE.

Or maybe she doesn't know of a specific vulnerability/backdoor but has some reason to be suspicious there might be.
I agree it's not good but being realistic: I'd be far less worried about the Australian government stealing/selling customer data, using my servers in a botnet, using my servers to spread malware.. etc.

Mainland China, Russia, North Korea, all have proven track records of doing these things and having corporate espionage rat lines: https://www.youtube.com/watch?v=y27B-sKIUHA
Say what you want about dependabot, and people who allow it to auto-merge changes, but at least NPM releases are not mutable (... anymore, at least. NPM had to learn that one the hard way, but unlike github it actually learned something).
Google's AI has just given you a plausible sounding but mostly wrong list of distros - it's not in the enterprise distros, elementary or pop os
> They are simply assuming that there is a brain "embedding" that can be directly compared to the matrix of numerical weights that comprise an LLM's training.

If there were no such structure, then their methods based on aligning neural embeddings with brain "embeddings" (really just vectors of electrode values or voxel activations) would not work.

> They mention a profound difference in the opening paragraph, "Large language models do not depend on symbolic parts of speech or syntactic rules". Human language models very obviously and evidently do. On that basis alone, it can't be valid to just assume that a human "embedding" is equivalent to an LLM "embedding", for input or output.

This feels like "it doesn't work the way I thought it would, so it must be wrong."

I think actually their point here is mistaken for another reason: there's good reason to think that LLMs do end up implicitly representing abstract parts of speech and syntactic rules in their embedding spaces.
I once saw Bram Moolenaar do a Q&A on Vim. Someone asked about some feature or the other and Bram didn't really know how it worked from the top of his head, "because I never really use it".

Shells are large programs. Everyone is unfamiliar with some bits because it just doesn't fit in their workflow.
I think that there is a parallel story to this one that is equally as interesting. There is one group of consumers of this story who see the receipts provided by Jeffery Goldberg, along with confirmation of their authenticity from a spokesperson at the National Security Council, followed by admissions by cabinet member participants of the Signal chat in hearings before congress, and those consumers of all this news can only conclude that the evidence is about as conclusive as you can get that Jeffery Goldberg is telling the truth, that these people are sharing the names of active intelligence officers, and describing imminent plans of action of the US military.

Then there is another group of consumers of this story, with the same access to all of the same evidence, and all of the same first person confirmations, who confidently declare the argument that this might be illegal null and void because Joe Biden allowed the CIA to use signal, and are persuaded away from accepting all of that evidence by articles with that contain such gems as "what the media wont tell you about the Atlantic hit piece", "Democrats talking points on this story quickly unraveled", and "help us continue to expose the lefts desperate attempts to manufacture scandals".

How can propaganda be so effective that people lose the skill of object permanence?
Barefoot got me into running. It simply seemed easier and freer to run almost barefoot than in boxy shoes that everyone (falsely) assumed you needed. I did 2 marathons and many, many half marathons and 10 milers this way. Ironically I just switched to hokas, which have a barefoot feel in a very padded, spongy sole
Ctrl-R and sorting by time since the last run is nice, but odds are you run the same commands again and again WITHIN the context provided by the current directory, so the cwd should be kept

Another important parameter is the number of successful runs: if you successfully ran the same command in the same directory 30 times in the last 30 days, it may be more useful that the one you have only run 1 time yesterday, so the exit value (like `false ;echo $?`) is another thing to keep

I have 2 bash shortcuts: one for a context-free search (Ctrl-T), while the default (Ctrl-R) is restricted to the current directory, and I throw everything (cwd, start time, stop time, exit value...) in a sqlite database to do more advanced queries (ex: on average, at which hour do I make more mistakes?)
What here is manufactured?
If people could speak truth to power and bosses and didn't just suck anything up for the paycheck, we wouldn't need "a clear metric to objectively differentiate between bullshit jobs and real productivity".

Our intuitive understanding of bullshit jobs would be enough.
Ok but you can’t block someone else using their own IPs to send email.

If you set DMARC to report, you’ll get notices from remote email systems when they receive noncompliant emails with your domain in the Envelope From field. Those reports are where you’ll see Russian IP addresses show up when they are trying to spoof your emails.

But there is no way to block them because neither the senders nor receivers are on your infrastructure. The best you can do is set a reject DMARC policy and hope everyone follows it.
It feels like Gemini 2.0 Pro + Reasoning.

I also see Gemini 2.0 Pro has been replaced completely in AI Studio.
> But I know that motorcycles are dangerous. You can try to say that your demographic/etc is more sane, safer, etc, but the same applies to a car and you come out safer.

Of course they are, but if you wear gear and don't ride drunk then they go from being an order of magnitude more unsafe to what I would consider a mitigable risk. My point was more that society's prevailing attitude is one of placing blame on prospective victims than punishing conspicuously-bad driving. Small cars are probably a more casually-defensible case since we both mentioned them.

> It's also worth noting that a lot of freeways don't allow trucks.

In my experience this is rather unusual. I've only ever seen lane restrictions for trucks and even then it's usually for actual trucks, not the quarter-ton luxury family haulers that have emerged over the past 15 years.
Show HN: B2B Sales Meeting Prep
I built MeetingLens to solve a real problem in B2B sales which is the need to deeply understand your buyer before a meeting. Researching the attendee and their company is key to positioning your product effectively and delivering real value. It’s what builds trust and credibility, but doing it properly takes time most reps don’t have.

MeetingLens automates that prep. It takes a few key details (name, company), pulls relevant public data, and uses AI to generate a concise meeting brief which includes role context, company intel, recent activity, and tailored discovery questions all in under a minute.

It’s designed to be simple: no integrations, no setup. Just log in, enter a name and company, and you’re good to go. You get a 5-day trial to test it out.

Let me know your thoughts.
If only OpenAI would dogfood their own product and use ChatGPT to make different choices with marketing that are less confusing than whoever's driving that bus now.
Accuses people without evidence, and so do I.
You're not listening either. Of course it can't. It's not fine grained enough to tell you what's happening in your back yard. Your back yard could be 30 degrees and 2 miles away it could be 35. You're asking for something impossible.
Respectfully disagree. If you're maxing out your spend so at the end of the month there is no surplus you aren't living within your means. For a lot of folks this is an ugly necessity, but programmers generally aren't in this group.
First I've heard of this! What's the advantage, in your experience?
How sad should I be about ChatGPT? (2022)
Home cooked meals software is a nice phrasing for this kinda thing. I admire your packaging and documentation touches, going that far is cool and creative
Well it's trending where I work, that's why I asked. I can search Teams and it doesn't come up at all, until the last month. Bam, tranche this and that instead of "group", which has been normal for 40 some years.