Hacker Newsnew | past | comments | ask | show | jobs | submit | peterisza's commentslogin

right, 888 kB would be impossible for local inference

however, it is really not that impressive for just a client


It's not completely impossible, depending on what your expectations are. That language model that was built out of redstone in minecraft had... looks like 5 million parameters. And it could do mostly coherent sentences.


  > built out of redstone in minecraft
Ummm...

  > 5 million parameters
Which is a lot more than 888kb... Supposing your ESP32 could use qint8 (LOL) that's still 1 byte per parameter and the k in kb stands for thousand, not million.


https://www.youtube.com/watch?v=VaeI9YgE1o8

Yes I know how much a kilobyte is. But cutting down to 2 million 3 bit parameters or something like that would definitely be possible.

And a 32 bit processor should be able to pack and unpack parameters just fine.

Edit: Hey look what I just found https://github.com/DaveBben/esp32-llm "a 260K parameter tinyllamas checkpoint trained on the tiny stories dataset"


  > But cutting down to 2 million 3 bit parameters or something like that would definitely be possible.
Sure, but there's no free lunch

  > Hey look what I just found
I've even personally built smaller "L"LMs. The first L is in quotes because it really isn't large (So maybe lLM?) and they aren't anything like what you'd expect and certainly not what the parent was looking for. The utility of them is really not that high... (there are special cases though) Can you "do" it? Yeah. I mean you can make a machine learning model of essentially arbitrary size. Will it be useful? Obviously that's not guaranteed. Is it fun? Yes. Is it great for leaning? Also yes.

And remember, Tiny Stories is 1GB of data. Can you train it for longer and with more data? Again, certainly, BUT again, there are costs. That Minecraft one is far more powerful than this thing.

Also, remember that these models are not RLHF'd, so you really shouldn't expect it to act like you're expecting a LLM to work. It is only at stage 0, the "pre-training", or what Karpathy calls a "babbler".


A reminder that what I said was "not completely impossible, depending on what your expectations are"

And I was focused more on the ESP32 part than the exact number of bytes. As far as I'm concerned you can port the model from the minecraft video and you still win the challenge.

Also, that last link isn't supposed to represent the best you can do in 800KB. 260k parameters is way way under the limit.


That bar has no lower bound though so of course we're talking past one another

Also we're talking about an esp32. They aren't magic


Being able to talk back and forth with coherent sentences has a lower bound, and it's close to the limit of this hardware.

Something that can actually be an "assistant" has its own lower bound, probably a little harder but mostly a matter of training it differently.


I disagree, in the future it might be possible. But perhaps not in English, but in some more formal (yet fuzzy) language with some basic epistemology.

I mean, there is a lambda calculus self-interpreter in 29 bytes. How many additional logical rules are required for GAI inference? Maybe not that many as people think. Understanding about 1000 concepts of basic english (or say, lojban) might well be sufficient. It is possible this can be encoded in 800kB, we just don't know how.


They should move to kill the cookie popup


You don't have to have a cookie popup if you don't do stupid stuff. Don't use anything other than strictly necessary cookies and you are good to go.

Disclaimer: I anal and this is not legal advice.


Having worked at multiple companies and talked to multiple legal teams about this, they tend to be very conservative. So the guidance I've gotten is that if we store any information at all on the person's computer, even to know whether they've visited the site before, we still need a cookie banner.

Basically, the law created enough fear among the lawyers that software developers are being advised to include the cookie banner in cases where it isn't strictly needed.


But it should not be obnoxious, look at steam how is a small banner with two simple actions, vs all other cookie banners.


Agreed! Many sites don't actually comply with the GDPR because they don't provide simple tools to control the cookies and instead force you through a flow. Part of my gripe with the law is the way those violations are not being systematically cited.


You literally just described something obnoxious


If I see a cookie banner I often bounce.

You'd have much better retention rates if you don't cover up the content the viewer is trying to view.

How would you like it if I shoved a banner in your face the moment you walked into a store and forced you to punch a hole in it in order to view items on the shelves?



> even to know whether they've visited the site before

So uh, don't do that.

You don't need to notify if you use cookies for required functionality like login sessions or remembering a functional setting.

If you're tracking whether they're returning or not your activity is exactly the kind of behaviour the rule is covering because, in legal terms, it's skeezy as fuck.


> You don't need to notify if you use cookies for required functionality like login sessions or remembering a functional setting

Nobody wants to be the EU test case on precisely how "required functionality" is defined. Regardless of what the plaintext of the law says, it should be self-evident that companies will be more conservative than that, especially when the cost is as low as adding one cooke banner and tracking one preference.


It's a site where they log in and we store a cookie.


"Strictly necessary cookies — These cookies are essential for you to browse the website and use its features, such as accessing secure areas of the site. Cookies that allow web shops to hold your items in your cart while you are shopping online are an example of strictly necessary cookies. These cookies will generally be first-party session cookies. While it is not required to obtain consent for these cookies, what they do and why they are necessary should be explained to the user."

https://gdpr.eu/cookies/


Right, and then the legal teams tell me they don't care, and we should put up the cookie banner anyway. I feel like you didn't read my original comment.


That just means your legal team is lazy or incompetent. I work for a massive company that handles extremely sensitive PII and we don't have a cookie banner, because we don't need to have a cookie banner. GitHub doesn't have one, Gitlab doesn't have one.


I've built software used by EU governments, and we don't use a cookie banner for our login cookies either.

If your legal team genuinely suggests that, it's likely your company uses the login cookies for some additional purposes.


The problem is that I spend hours explaining the actual technical nature of what we're doing to the legal team and I feel that there's often some kind of breakdown in communication because they don't understand the underlying technologies as well as the engineers do. And I haven't had this experience at one company, I've had it at multiple companies, several of which folks in this thread will have heard of.

To put a finer point on some of this, in one instance, I was writing an application that would allow our customers to deploy their own website with content that they had created through the tool that my company had provided. My company wasn't adding any tracking whatsoever to these pages. We were simply taking their content, rendering it properly, and hosting it for them. We ended up enforcing a cookie banner on these pages because the lawyers couldn't guarantee that there wouldn't be tracking content on that page that was added by the customers. But the end result is that every page, the vast majority of which don't have any tracking, still have cookie banners.

In essence, the law created a new legal hazard, and people aren't sure when they're going to run into it, so they end up putting up fences all over the place. Between this and malicious compliance, the end user experience has suffered greatly.


That's super interesting, because the lawyers should know that under GDPR, consent needs to be specific.

So a generic cookie banner is actually going to make the legal case worse than not having one at all (because you've now demonstrated that you knew you should have explicitly declared usages, partners, and used opt-in consent, but you didn't).


I know that everyone wants to give me legal advice. Lawyers don't care about legal advice from engineers. That's the crux of the point I'm trying to make.


So? You're not arguing that we should get rid of 'reasonable' laws out of misinterpretations of them, are you?


Laws should be evaluated on the effect they actually have on society, rather than the effect that we wish they had on society. I am very critical of laws that fail this test, and I think they should be updated to improve their performance. We want the right outcome, not the right rules.


I'm willing to argue that, sure (though it's purely a hypothetical point as I'm not a citizen of the EU and thus I don't and shouldn't have a voice in the laws there). I don't judge a law by a deontological measure of worth, but rather by whether it seems to be making things better or worse. The GDPR has overwhelmingly made my experience browsing the web worse, not better. Whether it should have resulted in that is beside the point: it has resulted in that, so that is what I judge it by. Therefore, I think it makes sense to get rid of the law as it seems that it is making things worse for people, not better.


> The GDPR has overwhelmingly made my experience browsing the web worse, not better.

From where I sit that's hard to evaluate since you cannot actually see most data abuses and privacy concerns, and you also don't know how it would have been without it. You also see the effects of various laws and regulations in combination, so the ones related to GDPR are not easy to be singled out. Are you thinking only of the cookie banners? Maybe sites would be plastered with even worse bullshit. Did you consider that GDPR also resulted in privacy policies that (if actually somewhat legal) are fairly easy to read and not just copy pasta but specific to the service(s), have proper contact information, you get some transparency about which data partners the sites work with, sites need to have full data export, right to be forgotten (removal of your data/contributions), and so on. I am certain you benefit from it often, potentially without realizing, and you wouldn't know what the world would be like without them today so it's not so straightforward to reason about.


If the law is stupid, don't follow it. Simply as


Yep. GitHub wrote a blog post on removing their cookie banner years ago.

https://github.blog/news-insights/company-news/no-cookie-for...


>At GitHub, we want to protect developer privacy, and we find cookie banners quite irritating, so we decided to look for a solution. After a brief search, we found one: just don’t use any non-essential cookies. Pretty simple, really.

Go to that link, these are the cookies it writes (at least for me):

    * _ga
    * _gcl_au
    * octo
    * ai_session
    * cfz_adobe
    * cfz_google-analytics_v4
    * GHCC
    * kndctr_
    *_AdobeOrg_identity
    * MicrosoftApplicationsTelemtryDeviceId
    * OptanonConsent
    * zaraz-consent

Some are from github.blog, some are from the cloudflare.com hosting. Not sure how the laws apply to that. But obviously there's several analytics cookies.


Sounds like the marketing team finally won.


I get a cookie banner accessing that page.


You need to wait for a meta-blog about removing banners from the blog


Don't several of the EU's own government information websites use cookie popups?


Yes; but usually it's because they embed videos from YouTube or other external sources that force cookies to be set.


All the legal uncertainty problems the cookie law produces aside, the core problem with the law is that it's fundamentally stupid. Cookies are a client side feature: You store the cookie, not the server. If you don't want to store the cookie, complain to your browser, that's the software responsible here. But instead of fixing the issue in the one place actually responsible, we make laws that force millions of websites to adopt.


You only start to need the popups if you specifically put cookies on a visitor's browser to build a personal profile of them.

This can be for e.g. sales acquisition or marketing engagement, but also includes cookies to simplify login, so not everything is "stupid stuff." A cookie that stores "was here, skip the splash page" may already fall afowl, if you put any session metadata in it.


It is just bad UI. It could have been better implemented, such as with a browser-side opt out setting, for instance. Similar to what we have for permissions, for instance.


Why do governments think they are experts in user interfaces or UX?


They don't. The GDPR doesn't mention any specific UX.


I happened to work with people who elaborated the GDPR rules and they knew very well that it would end with cookie banners everywhere, or mandatory logins.


if you don't track users you don't need GDPR consent dialogs

I think in the past you still needed some info box in the corner with a link to the data policy. But I think that isn't needed anymore (to be clear not a consent dialog, a informational only thing). Also you can without additional consent store a same site/domain cookie remembering you dismissing or clicking on it and not showing it again (btw. same for opting out of being tracked).

But there are some old pre-GDPR laws in some countries (not EU wide AFIK) which do require actual cookie banners (in difference to GDPR consent dialogs or informational things). EU want them removed, but politic moves slow AF so not sure what the sate of this is.

So yes without checking if all the older misguided laws have been dismissed, you probably should have a small banner at the bottom telling people "we don't track you but for ... reasons .. [link] [ok]" even if you don't track people :(. But also if they haven't gotten dismissed they should be dismissed very soon.

Still such a banner is non obnoxious, little annoying (on PC, Tablet, a bit more annoying on Phone). And isn't that harass people to allow you to spy on them nonsense we have everywhere.


It is up to the websites to do that, and to the users to boycott those websites showing cookie popups.


The regulatory body could clarify that a DO NOT TRACK header should be interpreted as a "functional/necessary cookies only" request, so sites may not interrupt visitors with a popup modal/banner if it's set.


The do not track header was good enough in this German case: https://dig.watch/updates/german-court-affirms-legal-signifi...

Having the EU decide on a technical implementation is more of a last ditch effort, like what happened with more than a decade of the EU telling the industry to get its shit together and unify under a common charging port.


I like the cookie banners since it is an immediate indication to me that I should leave the site. It's an innate reflex at this point.


Let me guess, you use the app instead


I'm curious as to what your thought process is for suggesting "the app" (not sure what app you are referring to) as an alternative for someone who essentially rage quits when they see a cookie banner, given that apps on average are even more so an invasion of privacy and riddled with dark patterns.


what kinda braindead take is that?


Just so long as that means killing all the tracking, not just going back to hiding it.


Simply banning most forms of advertising would be extremely welcome and might largely solve the cookie-popup issue, too.


Who will fund the content you read on websites then?


Use one of the cookie popup managers to automatically assert your personal identity sharing choices.


Well then where would be the incentive to download apps/not clear your cookies...? :-)


Kill cookie pop up dark patterns*


But that would require directing the anger at specific companies (and their 2137 ad partners) rather than at an easy target of the banana-regulating evil authority.

Sadly whenever this kind of discussion pops up it's usually a very unpopular take.


ahhhh, every time the same discussion

1. GDPR consent dialogs are not cookie popups, most things you see are GDPR consent dialogs

2. GDPR consent dialogs are only required if you share data, i.e. spy on the user

3. GDPR had from the get to go a bunch of exceptions, e.g. you don't need permission to store a same site cookie indicating that you opted out of tracking _iff_ you don't use it for tracking. Same for a lot of other things where the data is needed for operation as long as the data is only used with that thing and not given away. (E.g. DDOS protection, bot detection, etc.)

4. You still had to inform the user but this doesn't need any user interacting, accepting anything nor does it need to be a popup blocking the view. A small information in the corner of the screen with a link to the data policy is good enough. But only if all what you do falls under 3. or non personal information. Furthermore I think they recently have updated it to not even require that, just having a privacy policy in a well know place is good enough but I have to double check. (And to be clear this is for data you don't need permission to collect, but like any data you collect it's strictly use case bound and you still have to list how its used, how long stored etc. even if you don't need permissions). Also to be clear if you accept the base premise of GDPR it's pretty intuitive to judge if it's an exception or not.

5. in some countries, there are highly misguided "cookie popup" laws predating GDPR (they are actually about cookies, not data collection in general). This are national laws and such the EU would prefer to have removed. Work on it is in process but takes way to long. I'm also not fully sure about the sate of that. So in that context, yes they should and want to kill "cookie popups". That just doesn't mean what most people think it does (as it has nothing to do with GDPR).


"Share data" !=== "spy on the user"

Oauth, for example.


If you need it in order to do what the user asked, you don't need the popup. The user asking to do a thing is consent to do what is obviously necessary to accomplish that thing, and may be consent to do what is less obviously necessary. The user's click on "sign in with google" is consent to share data with Google as needed to complete the sign-in, but no more - it's not consent to Google Analytics.

Legal bases for processing: https://gdpr-info.eu/art-6-gdpr/ Everyone knows part A because that's a catch-all. If the user requested something, it's better UX to use Part B. Parts C and F apply sometimes. You still have to follow the rest of the GDPR, like letting them delete it.


Note that, back when it started (pre-GDPR cookie banners), this was pure malicious compliance in 90% of cases.

Most sites didn't need a banner. Even post-GDPR, many use-cases don't need one.


you can simply choose not to use it


and then the inventor should go to prison along with the guys who design the UI of microwave ovens (joke)


those are not addictive


just switch bro


Yes we should put a Skynet into space so we can't even pull the plug when there's a problem. What could go wrong, right? :D


Putting the Sky into Skynet


so you own the stock then. right?


Isn't the battery life shit? Maybe I'll try it


It's such a shame that we have come to this. MacOS is basically Windows now. :(


Windows 7 you mean.

Windows 11 is far deeper into the sewer.


Post Big Sur, macOS has felt alarmingly close to Windows 8.


It really hasn't. The hyperbole here has been though.


Comparing Tahoe to Windows 7 is hyperbolic. 7 had Media Player, 8 had Groove Music. 7 was welcomed as a feature-rich upgrade, 8 was boycotted as a user-hostile downgrade.

I don't know what school of contemporary design you hail from, but you can't piss on my back and tell me it's raining. Liquid Glass needs an 8.1 update, at the very least.


The Windows 7 vs 8 analogy doesn’t support your argument, it undermines it. Windows 8 wasn’t disliked because it was “modern”, it was disliked because it broke core interaction models in a way that actively obstructed use. macOS Tahoe hasn’t done anything remotely comparable. No Start screen catastrophe, no forced touch-first UI on non-touch hardware, no fundamental workflow regression.

What you’re reacting to is aesthetic drift, not functional decay. Liquid Glass is a visual language experiment, not a UX rupture. You may dislike it, that’s fine, but equating it to Windows 8 is category error. One is a design iteration layered on top of a relatively stable interaction model, the other was a structural interface failure.

Also, invoking Media Player vs Groove Music as if those are meaningful historical markers of “user-hostile downgrade” is... generous to the point of fiction. Windows 8’s problem was input metaphors, not media apps.

This isn’t Apple becoming Microsoft. It’s Apple doing what Apple always does: overreaching aesthetically, then sanding it down in point releases until everyone forgets they were angry in the first place. Which, incidentally, is exactly what happened with Aqua, iOS 7, Big Sur, and every other supposed apocalypse.


Slop belongs in the sewer


Has MacOS ever been better than Windows for allowing fine grained control over system services?

I've been a Mac user for my entire life so maybe I didn't understand what things were like with Windows, but the fundamental problem identified by Howard, that there are many many system daemons and it is expected that the user not know what they are, or what they do, and to just leave them alone, has been the case for at least 20 years, I think.


The entire point of Macintosh is that you don't need to know anything about it (and Apple used to actively try to hide things you didn't need to know about). Or at least that is the user it has always been targeted at since the original Mac OS was released.

Windows used to be known as the OS you'd "have to" tinker with.

Early versions of OS X allowed more freedom in what you could do with the OS. As soon as SSV/SIP entered, that cut off a lot of freeform access.


As long as apps can continue to steal focus on windows, windows will always be worse.


Apps can do that on macOS too — Steam is a very good example.


Every login steam steals focus no less than two times. Steam is one of the few login items I'd choose to keep, but wasting the first 30 seconds of login is too heavy a price to pay.


I personally can’t name any examples and I have been using Macs for design and development for 15 years.


It's worse on a Mac, not only can they streal input focus directly, but also visual focus by continuously jumping up at the dock


I don't know if you've used Windows lately, but Windows is orders of magnitude less pleasant than MacOS (or even previous bad Windows versions like Vista).


Finally an OS that is really an OS and not a linux distro


So good to see a developer who actually cares about resources. Thank you!

I usually develop my apps on a 1300 MHz single-core Intel Atom mini PC from 10 years ago. When something like this goes wrong, the app becomes unusable and I immediately notice it.


A bit unrelated but I found this interesting: water is transparent only within a very narrow band of the electromagnetic spectrum, so living organisms evolved sensitivity to that band, and that's what we now call "visible light".

http://hyperphysics.phy-astr.gsu.edu/hbase/Chemical/imgche/w...


I like to joke that while nitrogen gas is the most common thing around us, we are blind to it. Of course, that's a feature, since it allows us to perceive everything else further away, instead of stumbling through a perpetual fog.

This location-dependent tradeoff is something to think about when it comes to "false color" images in astronomy. If some aliens described Earth as "a boring uniform nitrogen-colored ball", we'd probably be a little offended at their ophthalmo-centrism, and tell them that the fault lies in their eyes, not in our planet.


Is there a camera that would show me what our world looks like through the eyes of these hypothetical aliens? Would love to see it.


It would probably be some application of spectral imaging [0], highly dependent on what data you choose to capture based on your assumptions about how the aliens see.

Even if you have a mathematical "photo of a planet of nitrogen gas clouds", that leaves the problem of how to present it to humans, since we have no concept of what "nitrogen gas color" is supposed to be.

https://en.m.wikipedia.org/wiki/Hyperspectral_imaging


As OP said, most astronomical pictures, even in the visible, target specific wavelengths and are thus "converted" for human vision. It's also obviously the case of any picture in wavelength beyond visible light. Keep in mind that there is also massive processing to clean the pictures, not just a translation of the wavelengths


Given the fluid inside your eyeball is mostly water, this is probably very related.

It’s interesting (kinda optimal) that different cones explore near both edges.


visible light is also the last octave before you hit ionizing radiation. it’s very energetic. good for harnessing in chemical processes. not so energetic that the electrons leave the party.


Interesting, given that most life is water based, most life will respond the most to this spectrum.


A guy copied&pasted this comment to X and got 42k likes lol: https://x.com/sridatta/status/1947180254684237851


At least he gave credit to HN, so the diaspora could find the source. The article is interesting. I think more needs to be said about how our eyes perceive color w.r.t. led lighting.


I thought it was mostly that those are the wavelengths output out by the sun.

But I guess it could be both.


The sun is very close to a black body radiator, so all wavelength. The atmosphere and water filters a lot.

It is actually quite strange that plants are green -- that's the wavelength the atmosphere lets through particularly well, so would be particular good to be absorbed instead of reflected, for energy production. It seems nature hasn't come up with a good, cheap way to move the absorption into that wavelength.


Well, black-body radiation is still peaked around a certain range of wavelengths depending on the temperature, it's not just equal power at all wavelengths.

Light visible to humans is at the peakiest bit of the sun's black body spectrum, see here image here: https://i.sstatic.net/kRUju.png

Green isn't just the wavelength the atmosphere lets through the best, or the wavelength humans are most sensitive to, it's also the peak of the sun's black body spectrum.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: