skysight-inc/HackerNews huggingface dataset:
It only produces low quality if you don't code review the output and don't use subsequent prompts to refine.

In my case, I notice the extension was requesting more permissions that it should. This would have delayed approval on the Chrome store, so I directed the LLM to simplify permissions and the like.

We are still the ones accepting pull requests and asking for improvements, so vibe coding does not need imply low-quality at all.
This. I am not asking for a special 1000x fee for AI. Just pay the normal fee a human would have paid, but at least pay that.
They say there are sun, earth and Venus in the shot. So the second most bright thing must be the earth.

I assume the earth here is simply blown out from overexposure. With my digital camera I can overexpose a new moon if I set the exposure long enough. So I guess it works the other way too.

Edit: Actually it looks like the moon surface is already mostly in the shade with the hills illuminated from the back. There must be a hill behind the lander. So this light was reflected twice and is rather weak. On the left there are some higher hills still in direct sunlight, they are blown out. Meanwhile, light from earth is reflected twice, but at an acute angle.
A New Byte System
Land of the Lawless
The illustration shows a page from Matter by Iain M. Banks. I don't suppose that's an IP violation, but it implies a human artist with attention to detail.

Mind you, it's page 1 and the book is not on page 1.
> Why would being a derivative work not be OK?

That's not even the real problem. It's a problem, yes, but not the real problem. The problem is that before they could train the model on the book, they had to copy the book from somewhere. Is it ok to make illegal pirated copies of a copyrighted book to train your model? I think that's the issue we are dealing with here.

Whether it is ok to create a derivative work or not is beside the point.
This doesn’t necessarily allow attackers to circumvent authentication entirely - it’s a framework so it depends on how you configure your app - but there have been plenty of vulnerabilities over the years which break auth or even allow an RCE for the conceptually similar challenge of trying to support complex proxying setups or, more broadly, failing to have clean boundaries for untrusted data.

I’m not defending this one - it’s bad, and an indicator about technical debt levels - but simply trying to encourage some humility about this. It’s not the language, it’s the complexity and attempts to paper over rather than reduce it.

If you want the most recent similar one I’ve seen, Apache Camel had one last week where you could inject their internal magic headers by using different case than the developers expected.

Going a bit older, in some ways this Tomcat exploit from 2020 feels similar because it’s an unenforced internal trust boundary. The AJP connector was more trusted, but also enabled hy default on all ports.

https://issues.apache.org/jira/plugins/servlet/mobile#issue/...
Oracle has the worst security posture I’ve ever seen. They are completely anti-bug bounty. I’ve reported multiple critical vulnerabilities as a customer and it was nightmare. They denied there being an issue until I developed working exploits. Then they took nearly a year to develop a fix. It amazes me how they haven’t had more breaches
Replied to daavoo, can I suggest adding a tag for ML originated features? As other comments have stated, it is likely that these tools are already being used (potentially semi-automatically) and this could help prevent them from polluting the DB wholesale.
I agree regarding polishing the public-facing side of the project, though I don't find it particularly problematic that it's not on Github.
Acute and chronic pesticide exposure trigger different responses in bumble bees
Plot twist: the loss function for training is basically a benchmark
From the README:

> Read the fine manuals of syd,
libsyd, gosyd, plsyd, pysyd, rbsyd, syd.el and watch the asciicasts Memory Sandboxing, PID Sandboxing, Network Sandboxing, and Sandboxing Emacs with syd.

I do agree, though, that the docs could be improved.
There's no marketable benefit to using Mootools to build web apps at the moment.
I’m splitting hairs a little bit but I feel like there should be a difference in how we think about current “hard(er)” limitations of the models vs limits in general intelligence and reasoning, I.e I think the grandparent comment is talking about overall advancement in reasoning and logic and in that finding things AI “cannot do” whereas you’re referring to what is more classify as a “known issue”. Of course it’s an important issue that needs to get fixed and yes technically until we don’t have that kind of issue we can’t call it “general intelligence” but I do think the original comment is about something different than a few known limitations that probably a lot of models have (and that frankly you’d have thought wouldn’t be that difficult to solve!?)
> The idea that you can’t train on copyrighted materials is ludicrous, imho.

Let us for a minute accept that it is ok to train on copyrighted materials. I don't believe that but I'll humor you. So let's accept it.

To train on copyrighted materials, they need to purchase the copyrighted materials, correct? If you wanted to train a model on all O'reilly books, you'd purchase the O'reilly books first, wouldn't you?

Do you think it is ok to make illegal pirated copies of the book to do your training?
https://news.ycombinator.com/item?id=43023698
Speaking broadly, the publishers who hold the copyrights on these materials have often behaved poorly. From overbroad DMCA takedown demands that chill fair use, to threatening libraries, students, and scholars with lawsuits and stiff penalties for minor infringements, to "copyright trolling" campaigns sending mass settlement demands to alleged infringers -- I have little sympathy for copyright holders.

I'm still angry about how publishers and the Authors Guild sued Google over Google Books. Intellectual property is why we as a society can't have nice things. While I'm not a fan of Meta, their open weight models are probably one of the best things they've ever done, and I'll back big tech over publishers every time.
What taxpayer time and money. The change request is literally reinforcing one plastic tab.

If you want to hyperbole at least find a valid thing.
I think I know of some of the other MCP posts you’re referring to. I saw multiple posts recently about AI controlling browsers using MCP and thought that was interesting. I’m not sure if it will be a fad or not, but I’ve been trying to model browsers as an HTTP resource instead as a side project. This allows you to HTTP DELETE a tab or POST /browsers to create a new browser. I think it might be a more natural way of using an API plus it can just use the classic auth in the form of API keys.
Herr Fahrenheit measured the temperature many times over a period of one year in some town in Germany. He defined 0 degrees as the coldest measurement, 100 the hottest measurement.
It's actually wild to imagine what could be done, with current compute power, if you had the full genome of every person in the US in addition to their healthcare records. I would bet that you'd be able to determine, with high confidence, the probability of many serious health conditions years or even decades before symptoms appear. And it would completely change the manufacture and administration of medicines. It would change the course of human history.

Of course, we'd totally !@#$ it up and use it to put group X, Y, and Z in camps or try to breed super soldiers.
That Scottish tree is amazing
Disintermediation is the name of the game, and they won't stop because there's money to be made.
https://www.independent.co.uk/news/world/americas/us-politic...

Worked for multinational companies and the typical chatters are:

- US based employees get taxed less on RSU maturity but have to figure out how much they owe the Government afterwards.

- Meanwhile, EU and Canada based employees are all paying top rate tax and get refunded afterwards.

Interesting that US is the only outlier
> Why do they have a say in this?

Because at the institutional level, there isn’t the appropriate will to mandate that devs fix their local environments, and I don’t feel like burning my own political capital on that particular fight.

Agreed on the performance comments.
I don't get it. What is the dead body thing about?
> Still, much saner than PHP arrays.

PHP basically has arrays and maps merged into one. Basically like Lua does.

It is pretty handy. Not sure what you find insane about it.

Of course the functions for arrays in the standard library are consistently inconsistent but that is just a general PHP thing. Isn't a big deal when you use an IDE.
Too bad the US did not have this contest, but that would mean it would have to care for the environment. Maybe Canada and Mexico can get together to have NA Contest.

All the pics were beautiful.
But would that have solved anything here? The main maintainer was overwhelmed. The back door was obfuscated inside a binary blob there for so-called testing purposes. I doubt anyone was reviewing the binary blobs or the autoconf code used to load it in, and for that matter it’s not clear anything was getting reviewed. Fetching and building straight from GitHub doesn’t solve that if the malicious actor simply puts the binary blob into the repo.
Right, there's only one meeting room at the Pentagon.
I doubt that’ll stop the current administration from trying, even unintentionally
I am not an expert, but I suspect the disconnect concerns number of data sources. LLMs are good at generalising over many points of data, but not good at recapitulating a single data point like in your example.
An UI would be fine, but having no permission to access ~/ is a terrible default. It causes a lot of breakage and glitchiness because applications are simply not written with that limitation in mind. This is why Flatpaks often crap out. It will cause a huge amount of applications / binaries to crap out if it became the default in NixOS, and lord knows NixOS has enough sharp edges already.

The best solution would be a framework akin to macOS that pops up 'allow application X to access folder Y from now?' in the UI or in the CLI as a terminal prompt whenever an application tries to access a folder. With a special permission for "full home access" and "full disk access".
Maru: A Task Runner
> RTFA, agents churn through credits.

I literally use Claude Code as part of my job, so either the "FA" is wrong, or my costs are only low because work just happens to have a codebase that reduces costs (lol)
a billibyte? sure. I'll try.
> 'Why do you dance?' Dirac asked [Heisenberg]. 'When there are nice girls, it is a pleasure,' Heisenberg replied. Dirac pondered this notion, then blurted out: 'But, Heisenberg, how do you know beforehand that the girls are nice?'"

The difference between a theoretician and a scientist. Heisenberg was clearly the scientist.
TikTok is a legitimate national security concern.
Huawei is the 'single most formidable' tech company in China
51% isn't exactly a glowing review.
Fuck recycle bins. Make proper backups.

When I delete something I want it deleted. If I make a mistake I grab it from a backup or just re-obtain it.
>Still, I think the xz backdoor did not work on NixOS because its unusual non FHS-compliant filesystem structure.

It didn't work on NixOS because the build-time hooks that inserted the backdoor only activated itself when it recognized that it was being built for an RPM or Debian package.
> lets do it all over again with fission

You can look at it this way.

Or you could can look at it as we reduced radioactive emissions by switching to nuclear from coal.

Everything has trade-offs. It's not like solar has no side-effects.
Latent space has a certain shape, which may mean I'm missing a technical distinction.*

There's been publications with a pause token (https://arxiv.org/abs/2310.02226), backspace token (https://arxiv.org/abs/2306.05426), or a think token (https://arxiv.org/html/2405.08644v1#Ch0.S4), all of them based on the theory that a generic token can sort of act a placeholder for manipulating attention further without further meaningful output.

However, in practice, those approaches haven't been used in the training of a large scale model, i.e. I haven't seen it at all, the most adventurous people have gotten at scale is doing Mamba. (and RL)

* It had a particular technical meaning. The first round of the telephone game was when it came to mean "a 3 spatial dimensions-like space, with N dimensions, in an image diffusion model, that contains all possible image styles, that is navigated by a prompt." We're many iterations afield of it now, I'm afraid. Now, you sort of have to interpret it like you would negative space, defined by what it is around it.
> They take quite a toll on ... people living in the area.

How?
yeah it wasn't the best call, have a look at v0.1.4, I think it's better now!
If that happens with your government, your best option is to be somewhere else.
Thank you for sharing.

I have long suspected that the sequencing data isn't valuable except to law enforcement.

If it were as easy to link sequencing to diseases, we would have seen a rapid advances in our ability to address those diseases. The genetic data alone isn't enough of a predictor.
"This will waste the time of people using screen-readers, but that is a sacrifice I am willing to make."
Seems indicative of the companies priorities especially as of late.

This has always been an issue with Vercel. I highly recommend people stay way from their stuff.
Last I checked, I think with nextjs, if you want to build once and deploy with different base paths (without having to rebuild), this is impossible, since the base path is hardcoded all over the build. This makes some forms of deployment of nextjs sites much more difficult than with other frameworks.
Perceiving temperature involves dew point and relative humidity, not just temperature.
It really was the peak of Windows in terms of usability, aesthetics, and speed.
Oh, yeah, ours aren’t nearly that bad. Our pre-commit checks are <1s and our pre-push are <10s. (And the worst-performing pre-commit hook is Git LFS that runs through pre-commit... maybe there’s some way to improve the performance there.)

We have a lot of IDE checks, but they’re just warnings when debugging (because devs complained, IMO reasonably, that having them as errors during dev was too inconvenient during development/debugging). CI fails with any warnings, and we have devs who don’t bother to check their IDE warnings before committing and pushing to a PR.
You’re right - I was specifically referring to it giving a concrete example (which may or may not be correct) of the vulnerability as opposed to the main article just pointing in the direction of the header.
I’m not sure that’s the whole picture. Followed to the logical conclusion, everyone should have the right to pirate whatever books they want and then feed them into a local LLM. Which leads to less kickback to the author, which means they can’t sustainably write, and we end up in a worse off situation.
Cloudflare blocks Common Crawl's bot no matter how slow it goes.
Nah, recycle bin is the wrong model. Automatic filesystem snapshoting is the way to go. Snapshots are cheap and let you recover full state from your history.

Just use btrfs, and set up btrbk to snapshot your home directory every 5 minutes, and have its gc keep every snapshot from past few hours, an hourly snapshot for past few days, and weekly for past few months.
> No, demand is unlimited and defined by the amount of production.

Enough of your trolling, go waste someone else's time.
Upcoming changes to how live videos are stored
It wouldn't raise enough money. Probably better to say: "Tax the multi-millionaires", or even people who earn more than 1M USD per year.

What if we change the tax code such that passive income (capital gains, dividends, coupon payments, etc.) is taxed at a higher rate than active (employment) income?
No, it's not really the same thing: with dual-stack you do need to think about your IPv6 configuration quite deeply, you can't just copy and paste what you're doing in IPv4, even if what you're doing in IPv4 could work just fine with essentially a fixed prefix on all your own addresses. (that said, I'm sure there's subtlety to this which makes it not so easy to implement as a standard. But AFAIK it wasn't even really a goal of IPv6)
After going through hell with self hosting and then their platform around version 12 we migrated away.

I recommend finding something else. In our case we moved that code to what is now react router 7 but eventually all the react code we have will get replaced by Vue in some manner. We mostly moved away from react as a whole over time
The point of what? Slamming a bunch of contributions in? Or actually improving the product for end users?
The Mythbusters did it for real once. I'd call the results as "within error bars, consistent with same speed drop". Lift does not seem to be a significant factor. Shooters would have noticed. They notice a lot of things.
> exactly the same speed

Within a couple hundred yards within the capabilities of normal riflemen, basically yes. In real life though, there are tons of effects. E.g., there's a minor lift/drop in a crosswind because of the pressure differential from the bullet's rotation. E.g., when you have a gun properly sighted in and shoot at a horizontal target, the barrel will be tilted up slightly, the bullet will be tilted up slightly, the rotation will mostly preserve that upward orientation (like a gyroscope), and you'll have a lower descent rate than you might expect for roughly the same reason an airfoil does (and shooting upward or downward can amplify or have the opposite effect). Beyond a few hundred yards, all kinds of things matter.
I missed that FAQ item, thanks. I've seen (and used) the "report fraud" page before, and I had seen something to suggest that it was the right place to report illegal spam, but it wasn't clear how "spam" and "fraud" were related.
I literally described the mechanism to you twice and you're still acting confused. I'm not sure if we have a language barrier here or what but go check out a Khan Academy course on economics or maybe try running a lemonade stand for an afternoon if you still don't get it.
Cloudflare is luring web-scraping bots into an 'AI Labyrinth'
One chef. 30 pizzas a night. Inside the Bay Area's most eccentric pizzeria
https://archive.is/C1eVg
The problem is California would win it. Not our fault the most beautiful trees in the world call this home.
I just said something like "If you don't remove me from the list within 24 hours I will report this to the FTC as a violation of US federal law." That's the easy part, the hard part is actually getting through to someone.
Wouldn’t a millibyte be a thousandth of a byte?
Today was Plato's Academy's seminar on The Philosophy and Psychology of Anger

The video should be posted, I think. Most of the talks were very good.

https://platosacademy.org/
Starting from Firefox 137, extensions can open the keyboard shortcuts manager
Sounds a lot like most cryptocurrency exchanges.
Are you suggesting that it is a good thing for corporations to be more powerful than governments?
said "drastic move":
buy a new computer.
Saved you a click.
BTW if you do end up having to buy a new computer when Windows 10 goes out of support,
maybe get something that doesn't run Windows.
And TikTok is still available in the US and on the app stores…
I'm not sure what Sabine means. It is a somewhat obvious category error, and fundamentally in error regardless. (I find it hard to believe that, for example, Sabine would beat an LLM on a randomly selection of 10 3x3 digit multiplication problem to be complicated in 60 seconds max, by either party)
There are people building things and making money using these new techniques, but because they haven't stopped to produce research studies and white papers about their work, you want to presume it doesn't exist.
I could imagine more sophisticated crawlers might be able to detect false information and then avoid those pages, but maybe that's more far fetched than how it comes across in my mind.
Iguanas floated 5,000 miles from North America to Fiji on vegetation rafts
do {
resp = callAI(input);
} while (!isOutputSane(resp) && attempts++ < MAX_RETRY)
Polyrepos are not a requirement for deploying microservices, and if we're goging to discuss failures from an economic perspective, the ROI of LLM use qualifies. As it stands, claims of 'higher productivity' all seem to trace their origins to anecdotes, press releases, and self-reports on surveys.
> If the US wants some content gone from the internet, they (usually) have enough might to make that happen

There are plenty of states in the US that enacted age verification laws for porn sites. Every single one of the porn sites that are not hosted in the US just ignored the laws. I live in one of those states
> They were good

So why wouldn't you keep them? If you're able to produce even more with AI enabled engineers, why downsize? To me, it sounds like a startup's dream to be able to output more without increasing headcount.
chattr +i /lib/ld-linux.so.2

Sounds tempting.
No one knows why it happened! It was possibly one rogue triple Z volunteer on a bender, not some organised putsch.

We’ve known Paul and David from custard for a long time now. Only time we ever talked about that was waaaaay back, around 1996 when we interviewed David for Semper, the UQ newspaper.

(“We” is my wife and I… girlfriend back then)
i really dont get this and i personally beleive the world would be a better place without IP in any form.

But also no one is selling "your book", the product is completely different in literally every conceivable way.

you have never (and no one ever should) own words arranged in a certain way. You own the right to sell a book. Not the words themselves.

meta does bad things and im not a fan, but this really pales in comparison.
> Better DPI support in aero.msstyles -> Credits: Vaporvance (high DPI classes from Aero10 that will be ported to Windows 7)

Are they planning to add support for perMonitorv2? High DPI is the only thing that makes Windows 10/11 better than 7.
So the first sentence is fact and then it veers into wild unsubstantiated predictions (egg prices never spike that high for Easter, the journalist is delusional).
Had a Vectrex bought on clearance from Toys R Us, sold it long ago unfortunately. I randomly though still have its Lightpen in my drawer here, any retro hardware aficionados need it?
srry for the confusion.

the 2010 "source" further above is abysmal Holocaust denial.

your source (ushmm) of course is not.

I got confused on the small smart phone display about who I was responding to.

apologies again.
ThePrimeagen is doing some kind of vibe coding ad on twitch right now trying to build game in 7 days. There are 10x coders in the room and two days later they are struggling with hilarious basics like off by 1 errors while tweaking something that could be described as donkey.bas.
Finding street parking in SF sucks so much so we decided to create an app called [ParkingKarma.io](http://parkingkarma.io/) on the appstore! It's free to download and we're currently trying to get user feedback so would love those in SF to download and try it out!

What makes this different:

- we're using computer vision to track open spots for street parking
- if your car gets broken into during the time of parking - we'll be able to send you the footage just like Tesla sentry!
- the parking is free and would save you $$$ as well as time since it's street parking
- we integrated all of the different rules
Indeed, but a constructive reduction to practice means that the inventor still has to describe how it can be done. And if it's impossible, then it's not a reduction to practice, just an invalid patent.
Cloudflare's documentation says that Labyrinth is not based on robots.txt.
A Full Stack Dev position is listed at 4.5K to 6K monthly, really doubt they're going to pay QA more than that.