Hacker News .hnnew | past | comments | ask | show | jobs | submit | QuantumNoodle's commentslogin

_dont create benchmarks that will incentivize ai labs to optimize towards... Especially ones like battle royal!_

Given how many critical systems software touches these days, I am surprised that there they are not licensed. Imagine if civil engineers can just go building shit as minimum viable products? Sure prototype quickly but someone should be found liable for final product.


lmao excellent reference! While this is poking fun at the block chain hype a bit, a shocking amount of (good) software engs don't know good security practices. I'd be interested to hear arguments for and against being licensed to write software for particular applications (e.g J.Doe can work on this application but any auth code has to be signed off by someone licensed). AI tools are great but screwing up an implementation (for a well thought out spec) does happen, esp. in security applications and someone needs to be liable for life-ruining data breaches.

Do you have any resources on hardware necessary for running models and tweaks? I see you mention 2x 3090 and I wanted to do more search on what hardware is satisfactory for what models.

I am in no way supportive of monopolies though taking "the need to compete" out of the equation and having steady flow of money that won't be cut off if "someone beats you to market" was pretty revolutionary. Consider Bell Labs, staffed with real "nerds" that never had to prostitute themselves or to pitch an idea on the merits of making money -- they simply did stuff that was fun, in ther nerdy way. Because of this we have wireless communication, transistors, digital cameras sensors, c, and many others.

(There were a lot of negatives due to this AT&T monopoly but we are talking about nerds here and having to socialize your own worth/value. It's a shitty game that real nerds aren't necessary interested in playing)


Man, I never hear good security things about npm

This doesn't really have anything to do with npm.

From the Arch mailing list [0]

>The result is a rather long list of ~408 packages all doing npm install atomic-lockfile something something

[0] https://lists.archlinux.org/archives/list/aur-general@lists....


They could've pip installed, curl|sh'd or anything else, it's not relevant to the underlying issue.

Perhaps there were other vectors, but npm was the one used here.

And yes, this is an AUR issue, but npm being used to host and dissiminate malware is also [a chronic] one, even if separate.


anything except that it's malware installed via npm

As you can see here, they've already switched it out for a different command, likely due to incident responders over-indexing on npm as an IOC.

https://hackernews.hn/item?id=48503258


So true. The JavaScript ecosystem is trash.

I want to see more of "I'm rejecting this offer to work for Google bc my moral compass" not from folks who are paid out and ready for the next thing already.

its funny how long some people wait to decide the company they work for has lost their moral compass. "dont be evil" is already 8 years dead at this point.

I mean, I get it. I have a family, financial obligations, etc. Certainly not shaming anyone for fulfilling those obligations working for a successful company. But don't put yourself up on a pedestal and cloak yourself in righteousness behind a veil of strong morals.

While EU is actively trying to erode encryption and privacy of all digital communications.

Looks like he updated his "About me" section

> At the moment, my main focus is [...] fighting against (governmental or corporate) mass surveillance

While he always had "Ethics in Computer Science” as an interest, I wonder what blinds people into accepting offers at Google -- the advertising company. I want to take his words as sincere, but Google has been privacy violating for longer than his tenure with android. Money and prestige is a hell of a drug I suppose. He could very well work for grapheneos but no money or immediate persteige there (sadly).


To me, Google switched the "Evil bit" around the time of the Dragonfly debacle (2018)

If OP is only seeing the problems now, they must have been selectively blind.


I mean, I get it. I have a family, financial obligations, etc. Certainly not shaming anyone for fulfilling those obligations working for a successful company. But don't put yourself up on a pedestal and cloak yourself in righteousness behind a veil of strong morals

I've worked roles where our priorities shift with the wind. Many times it is for good reason, like a strategic customer to get a foothold in a market. Other times it is just because management hyped up some effort. All's this to say, nod saying you will do it then just go about your day doing focusing on the actual priorities. Don't let workload mount up bc deadlines are all made up.

Ironic that the other trending HN post is "EU-banned pesticides found in rice, tea and spices"

https://hackernews.hn/item?id=48447062


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: