Accepted applicants and collaborators must have existing ChatGPT accounts to apply
大多数人认为安全测试应独立于产品生态系统,但OpenAI要求申请者必须是现有ChatGPT用户,这打破了传统安全测试的独立性原则,表明他们认为平台内测试能提供更相关和实用的安全洞察。
Accepted applicants and collaborators must have existing ChatGPT accounts to apply
大多数人认为安全测试应独立于产品生态系统,但OpenAI要求申请者必须是现有ChatGPT用户,这打破了传统安全测试的独立性原则,表明他们认为平台内测试能提供更相关和实用的安全洞察。
Losing access to GPT‑5.5 feels like I've had a limb amputated.
大多数人将AI工具视为辅助性资源,失去后只会带来不便而非功能丧失。但这位NVIDIA工程师的比喻表明,GPT-5.5已从辅助工具转变为不可或缺的'认知延伸',这种依赖程度远超当前主流认知中人与AI的关系定位,暗示了人机协作范式的根本性转变。
DeepSeek does not appear to have fully moved beyond Nvidia. The company's technical report reveals that it is using Chinese chips to run the model for inference, but...appears to have adapted only part of V4's training process for Chinese chips.
大多数人认为中国AI公司已经完全摆脱了对Nvidia的依赖,但作者认为DeepSeek V4仍主要依赖Nvidia芯片进行训练,仅在推理阶段使用中国芯片。这一观点挑战了'中国AI已实现完全自主'的主流叙事,暗示技术脱钩比表面看起来更为复杂。
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这个看似普通的错误信息揭示了现代网络平台的根本依赖性—JavaScript已成为网站运行的必要条件,而非可选增强功能。这种依赖创造了技术排他性,使得禁用JavaScript的用户实际上被排除在主流数字体验之外。
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这一声明揭示了现代网络平台对JavaScript的完全依赖,即使是在社交媒体这样看似简单的平台上。这种依赖创造了技术单点故障,使得没有JavaScript支持的浏览器用户完全无法访问内容,反映了Web开发中过度依赖单一技术栈的潜在风险。
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这个看似简单的错误信息揭示了现代网络平台对JavaScript的绝对依赖,反映了Web架构的根本性转变。从静态HTML到动态JavaScript的依赖,不仅是技术选择,更是一种商业模式——通过JavaScript控制用户体验和数据收集。
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这个错误提示实际上暴露了现代Web应用的一个脆弱性:过度依赖JavaScript使网站失去了基本的可访问性和功能性。这引发了一个重要问题:在追求丰富交互体验的同时,我们是否牺牲了Web的包容性和基本可用性?
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这个看似简单的错误提示揭示了现代网页设计的核心依赖——JavaScript已成为互联网交互的基础,没有它,即使是像X这样的社交平台也无法提供基本功能。这反映了Web开发中前端脚本语言的绝对统治地位,以及用户对浏览器功能的潜在忽视。
JavaScript is not available. We've detected that JavaScript is disabled in this browser.
这一声明揭示了现代网络平台对JavaScript的绝对依赖,令人惊讶的是,即使像X这样的社交巨头也无法在不启用JavaScript的情况下提供基本功能。这反映了Web开发的现状:从简单的交互到复杂的用户体验,JavaScript已成为互联网运行的必要条件,而非可选项。
Many AI labs (including OpenAI and Anthropic) largely depend on these hyperscalers for access to R&D and inference compute.
这一发现揭示了AI研究生态的依赖性悖论:领先的AI研究机构高度依赖它们可能最终需要竞争的科技巨头。这种依赖关系可能导致创新路径的趋同,并引发关于AI发展自主性和多样性的深刻担忧。
Many AI labs (including OpenAI and Anthropic) largely depend on these hyperscalers for access to R&D and inference compute.
令人惊讶的是:即使是像OpenAI和Anthropic这样的领先AI实验室也在很大程度上依赖这些超大规模云服务提供商,这揭示了AI产业中一种看似矛盾的现象——最前沿的AI创新却受制于少数几家科技巨头。
The average application contains over 1,100 open source components. A bare-bones Next.js project installs 282 packages before you write a single line.
这个数据点令人震惊,展示了现代软件项目中开源组件的庞大规模。这意味着每个项目都潜藏着巨大的攻击面,开发者往往不知道自己依赖的所有组件,更不用说它们的依赖关系。
The average application contains over 1,100 open source components. A bare-bones Next.js project installs 282 packages before you write a single line.
令人惊讶的是:一个看似简单的Next.js项目在编写任何代码前就自动安装了282个包,而平均应用程序包含超过1,100个开源组件。这意味着开发者对自己使用的代码库了解极其有限,为供应链攻击创造了巨大机会。
a living attack surface that needs continuous monitoring.
这一观点重塑了我们对软件供应链的认知模型。依赖图不再是静态的、可信任的组件清单,而是一个动态演化、充满变数的活体攻击面。这要求防御体系从周期性的静态审计转向实时的持续监控,在依赖引入的瞬间进行行为拦截,实现安全左移的终极形态。
select known-vulnerable dependency versions 50% more often than humans.
这一统计洞察颠覆了“AI写代码更安全”的迷思。AI代理在优化代码功能性时,往往以牺牲安全性为代价,倾向于选择存在已知漏洞的旧版本依赖。这反映出当前AI模型在训练时对安全维度的忽视,也警示我们在AI辅助开发流程中必须强制引入自动化的安全卡点。
Many frontier AI developers, including Anthropic and OpenAI, acquire almost all of their compute from hyperscalers and other cloud providers.
大多数人可能认为领先的AI公司会拥有自己的计算基础设施以保持竞争优势,但作者认为OpenAI和Anthropic等前沿AI公司几乎完全依赖超大规模云服务提供商获取计算能力。这表明AI创新可能比想象中更加依赖大型科技公司的基础设施,而非独立的计算资源。
Extensive research has suggested that individuals who have endured maltreatment are more susceptible to PSU, highlighting a link between the two
James C. Scott tell us that humans were ‘disciplined and subordinated to the metronome of our own crops …. Once Homo sapiens took that fateful step into agriculture, our species entered an austere monastery whose task master was mostly the genetic clockwork of a few plants
for - origins - agriculture - beautiful description - our dependency on agriculture changed our sense of time!
everal of the problematic read-ers in this category admitted that they had successfully used skimming andSparkNotes to read Jane Austen’s novels and Shakespeare’s plays in otherEnglish classes.
There is also some tech involved here. SparkNotes as a tool for understanding. It is unclear if they have problems readings because they lack the skill in the first place or because they are to dependent on tech to maintain it.
With all his might can do me wrong. Nor can a lonely woman left By her dear husband live bereft.
This line breaks down the emotional and societal dependency women have been conditioned to understand. Womanhood itself is defined in relational terms of what are your prospects to being a good wife and never autonomous like being independent or self sufficient. To live “bereft” is an unbearable state, to be permanently robbed of. It makes people sad and lonely, but that comes from a place of conditioning and beliefs that their purpose and self is tied to the person they married that without them they are devoid of all good things.
Fork your own copy of drizzle-kit and update src/serializer/pgSerializer.ts
Modify your local node_modules/drizzle-kit/bin.cjs file and modify line
boosting aggregate demand domestically and there are simple ways of doing that and your digital payment system
for - First suggestion - for China - decrease dependency on American deficit - by increasing domestic demand for your own manufactured products - using your own digital super highway - and increasing wages - Yanis Varoufakis
graphics/libtiff is one of the 122 packages on the road to www/firefox, yet the resulting Firefox browser does not render TIFF images. For reasons I have not tried to uncover, 10 of the 122 packages need Perl and seven need Python; one of them, devel/glib20, needs both languages for reasons I cannot even imagine.
Dependency hell
African countries have become reliant on a few food items.
for - stats - Africa - food insecurity - adjancency - food colonialism - food insecurity - food dependency
stats - food insecurity - 20 plant species make up 90% of food consumed in Africa - 3 crops introduced by the Green Revolution make up 60% of all calories consumed - wheat - maize - rice
African countries have become reliant on a few food items.
Just 20 plant species now provide 90% of our food, with three
accounting for 60% of all calories consumed on the continent and globally.
at the very time when research has found
massive food and nutrition insecurity in Africa.
Yet historically, Africa had
- 30,000 edible plant species, and
- 7,000 were traditionally cultivated or foraged for food.
The continent is a treasure trove of agrobiodiversity (a diversity of types of crops and animals) and
as a native speaker I'd probably tend to refer to his drug dependency, but his dependence on drugs (maybe because I see one as a problem he has, and the other as something he's doing, I don't know).
And as others have pointed out, there is potential for ambiguity: if A is dependent on B, then a dependence or dependency (relationship) exists; but referring to either A or B as the dependency demands context.
"demands context" :)
Similarly to the first two guides,
Annotation based on available document
I’ll read through a dependency, start refactoring, and realize that it’s going to be simpler to write it myself
Ergebnisse des Farmland Bird Index für 2021
he distinguishes three dimensions of dependent origination and this is in his commentary on the guardian of malama jamaica carica called clear words he talks about causal dependence that is every phenomenon depends upon causes and 00:16:19 conditions and gives rise to further causes and conditions um myriological dependence that is every phenomenon every composite phenomenon depends upon the parts that uh that it 00:16:31 comprises and every phenomenon is also dependent upon the holes or the systems in which it figures parts depend on holes holes depend on parts and that reciprocal meteorological dependence 00:16:44 characterizes all of reality and third often overlooked but most important is dependence on conceptual imputation that is things depend in order to be represented as the kinds of 00:16:57 things they are on our conceptual resources our affective resources and as john dunn emphasized our purposes in life this third one really means this um 00:17:09 everything that shows up for us in the world the way we carve the world up the way we um the way we experience the world is dependent not just on how the world is but on the conceptual resources 00:17:22 as well as the perceptual resources through which we understand the world and it's worth recognizing that um when we think about this there are a bunch of um contemporary majamakers majamikas we 00:17:34 might point to as well and so paul fireauben who's up there on on the left well really an austrian but he spent much of his life in america um willard van norman kwine um up on the right wilford sellers and paul churchland
This is a key statement: how we experience the world depends on the perceptual and cognitive lens used to filter the world through.
Francis Heylighen proposes a nondual system based on causal dependency relationships to serve as the foundation for distributed cognition.(collective intelligence).
Historical Context and Path Dependence
… of the so-called path dependence and historical context in contextual political analysis. It analyzes the different meanings and uses of the concept of path dependence in contemporary …
Path Dependence in Historical Sociology
… This article does not seek to reorient all such modes of analysis toward the study of path dependence. Nevertheless, the article does seek to establish that path-dependent analysis …
… This article does not seek to reorient all such modes of analysis toward the study of path dependence. Nevertheless, the article does seek to establish that path-dependent analysis …
… of the so-called path dependence and historical context in contextual political analysis. It analyzes the different meanings and uses of the concept of path dependence in contemporary …
J Mahoney, D Schensul - … of contextual political analysis, 2006 - scholars.northwestern.edu
I’d start using a library written by somebody else to get started, then eventually replace it with my own version
quarter of the key nutrients used in European food production come from Russia.
Sorld is dangerously dependent on an aggressor nation’s supply of fertilizer.
Russia also produces enormous amounts of nutrients, like potash and phosphate - key ingredients in fertilisers, which enable plants and crops to grow. "Half the world's population gets food as a result of fertilisers... and if that's removed from the field for some crops, [the yield] will drop by 50%," Mr Holsether said.
Geopolitical vulnerability of the existing dependency on Russian fertilizer.
These corporate “solutions” end up driving more poverty. Whereas farmers previously relied on their own locally-adapted seeds and natural fertilizers, they are forced to continuously purchase inputs from agribusiness corporations. The expensive chemicals needed to grow these “improved” seeds deplete the soil. As a result, they have to purchase more and more chemicals over time to compensate for the degradation. This is not development — it’s a vicious cycle that grows corporate profits by trapping farmers in debt.
Cultivating dependency, not just food crops!
According to addiction expert Dr Anna Lembke, smartphones are making us dopamine junkies. So how do we beat our digital dependency?
Resonance with the topic for the next World Weavers group conversation on Saturday, October 23: Shifting from an attention economy to an intention economy.
direnv would have to do too many releases to keep up with all the other project changes
the interesting thing here is that there are comments that say which concern depends on which.
Putting comments like these can be helpful, but it’s still set up for doing something sketchy, especially if you are new to the codebase. Being new and not being aware of all the “gotchas” a code has can certainly send you down the concern downward spiral.
What is risky here is that the concern (mixin) knows a lot about the model it gets included in. It is what is called a circular dependency. Song and Album depend on Trashable for trashing, Trashable depends on both of them for featured_authors definition. The same can be said for the fact that a trashed field needs to exist in both models in order to have the Trashable concern working.
But if you're working on a bigger project, with multiple packages and a complex dependency tree, you might want to combine npm with a tool like Lerna.
npm install <folder>: Install the package in the directory as a symlink in the current project. Its dependencies will be installed before it's linked. If <folder> sits inside the root of your project, its dependencies may be hoisted to the top-level node_modules as they would for other types of dependencies.
The local package will be copied to the prefix (./node-modules).
Yay for linking to relevant PR!
HTTP REST seems like an "out of external dependency" way to go.
The idea is to avoid additional dependency if it's possible.
This is why for a recent Angular+Rails project we chose to use a testing stack from the backend technology’s ecosystem for e2e testing.
We used testing tools that were in the same ecosystem as our backend technology stack for primrily three reasons: We owned both ends of the stack Team experience Interacting with the database
We chose to define the frontend in one technology stack (Angular+TypeScript/JavaScript) and the backend in another (Ruby+Ruby on Rails), but both came together to fulfill a singular product vision.
The implicit dependencies between different versions of different services were not expressed anywhere, which led to various problems in building, continuous integration, and, notably, repeatable builds.
Because of that, it's essential that the bundler doesn't treat the package as an external dependency. You can either modify the external option under server in rollup.config.js or the externals option in webpack.config.js,
you can take the opportunity of using Python as a corresponding module pexpect is written for it (http://pexpect.sourceforge.net). It's clear that Python language should be installed on the system beforehand
But in all this incongruous abundance you'll certanly find the links to expect It's just what is wanted: the tool, which is traditionally used to communicate automatically with interactive programs. And as it always occurs, there is unfortunately a little fault in it: expect needs the programming language TCL to be present. Nevertheless if it doesn't discourage you to install and learn one more, though very powerful language, then you can stop your search, because expect and TCL with or without TK have everything and even more for you to write scripts.
does not use TCL, Perl, PHP, Python or anything else as an underlying language is written entirely in C has small and simple source code can easily be ported to almost all UNIX-like systems
does not use TCL, Perl, PHP, Python or anything else as an underlying language
It was supposed to be a shell command, not a perl program specified on command line and introducing a dependency on perl.
There’s typically a complex tree of dependencies, where packages all tend to rely on each other in order to function.
he goes on to talk about third party problems and how you're never guaranteed something is written correctly or that even if it is you don't know if it's the most optimal solution
Keeping bootstrap-sass in sync with upstream changes from Bootstrap used to be an error prone and time consuming manual process. With Bootstrap 3 we have introduced a converter that automates this.
Often, such functions have in fact some hidden input which might be global variables, including the whole state of the system (time, free memory, …).
I managed to remove it myself this morning...apparently it used to get it's hooks in so deep it was very difficult to remove the daemon as it interconnected with ubuntu-desktop for....reasons.
Dll hell was caused by multiple apps on the same device requiring different versions of dependencies. As dlls were shared that couldn't be resolved. Giving each app it's own versions of its dependencies is a way of avoiding dll hell. I'm not saying this a good thing but it avoids that specific problem.
The worst thing about snap is that it runs contrary to the concept of shared libraries that are easy to upgrade. Each snap package includes the dependencies for the app, which means you may have multiple (vulnerable) versions of a library installed. It's DLL hell all over again from a security perspective.
The upside to snaps is they make installations simpler because they avoid the heartache of dependency hell. This is what occurs when a new application can’t run either because a required resource isn’t available, it’s the wrong version, or its installation overwrites files required by existing applications so they can’t run.
Snap gets rid of dependency mess. Good. Snap offers in one place FOSS and proprietary app’s. Here I am suspicious. It may be an advantage for a commercial app-store and for some users. But this advantage may lead to loss of comfort and flexibility for the many users that rely first on FOSS.
snaps have many benefits that are huge: automatic updates List item shorter delivery times between develper and user possibility to use tracks and choose how much on the bleeding edge you want to be way more security and privacy, less dependency issues software available on the same versions independently of distributions and versions of distributions
Why should she be unhappy? She had a right to happiness. Frank would take her in his arms, fold her in his arms. He would save her.
This internal monologue goes to show the power of inertia and the subsequent cognitive dissonance that it entails. Might I suggest that both of the sides of the coin are wrong? On one hand, she wants to stay into her safe zone and go on to live for her father and brother, on the other hand she thinks of going away with her other half. Notice how both of these realities have her essentially being dependent, or placing her wellbeing, on other people. A third option would be to make a change from within as a first step.
By default the current directory is used, but it's recommended to pass a value in your configuration. This makes your configuration independent from CWD (current working directory).
Yeah I see what you're saying. In my case, I had a group of classes that relied on each other but they were all part of one conceptual "module" so I made a new file that imports and exposes all of them. In that new file I put the imports in the right order and made sure no code accesses the classes except through the new interface.
manually specifying the order isn't really a great solution (as tempting as it sounds) because you'll probably have broken behaviour if you subsequently move away from Rollup.
In the many projects I have maintained so far, sooner or later I always run into the same issue: circular module dependencies. Although there are many strategies and best practices on how to avoid circular dependencies. There is very little on how to fix them in a consistent and predictable way.
Secondly, whether this works is highly dependent on the module bundler. For example, in codesandbox, when bundling our app with Parcel (or Webpack or Rollup), this solution doesn’t work. However, when running this locally with Node.js and commonJS modules this workaround might work just fine.
Examples of this include: requiring base classes or reading from imported variables that have not been initialized yet.
as soon as you have a (indirect) circular dependency, you might be interacting with a half loaded module in your code.
`Module ${a.id} may be unable to evaluate without ${b.id}, but is included first due to a cyclical dependency. Consider swapping the import statements in ${parent} to ensure correct ordering`
Specifically, since Root, Rule and AtRule all extend Container, it's essential that Container is evaluated (and therefore, in the context of a Rollup bundle, included) first. In order to do this, input.js (which is the 'gateway' to all the PostCSS stuff) must import root.js, root.js must import rule.js before it imports container.js, and rule.js must import at-rule.js before it imports container.js. Having those imports ensures that container.js doesn't then try to place Root, Rule or AtRule ahead of itself in the bundle.
import './at-rule'; // break cyclical dependency deadlock
Unfortunately something along these lines will always be necessary when handling these sorts of pathological cyclical dependency cases without using require.
These are fine and do not cause any issues.
For simpler patterns, such as A -> B -> A, refactoring may be necessary. Perhaps the modules that live in B could be moved to A. Or, necessary code could be extracted to a C that both A and B reference.
A simple Vue project can be run directly from a browser with no need of transpilation. This allows Vue to be easily dropped into a project the way jQuery is.While this is also technically possible with React, typical React code leans more heavily on JSX and on ES6 features like classes and non-mutating array methods.
But maybe this PR should still be merged until he finds time for that?
If you do want to include the module in your bundle, you need to tell Rollup how to find it. In most cases, this is a question of using @rollup/plugin-node-resolve.
When you publish this module, you do not want to bundle React, for the reasons described above. (It would be even worse to bundle React in a library, because then its copy would duplicate that loaded by the application!) But the fix is slightly different for a library than an application. In this library's Rollup configuration, we only want to specify external, not globals:
many CDNs nowadays ultimately source from npm (before caching the JavaScript on their own edge servers). So you'll be guaranteed to have the same library version on the CDN as on npm
Why bundling 3rd-party dependencies can be a very bad idea
So React, and other large third-party dependencies, should not be bundled alongside your application; they should be kept external. But where will they come from then?
The only module names that Rollup understands out of the box are relative or absolute file paths, like ./maths.js in the example. This works just fine for your own code—but what about 3rd-party dependencies?
Resolve imports to module ids (i.e. file names) using the same plugins that Rollup uses, and determine if an import should be external. If null is returned, the import could not be resolved by Rollup or any plugin but was not explicitly marked as external by the use
require 'minitest/autorun' class BugTest < Minitest::Test
Knowing all this, what would you do? Which path would you choose and why? The answer might seem obvious now that you come from the future - React
Zhou, Dong, and Amir Bashan. ‘Dependency-Based Targeted Attacks in Interdependent Networks’. Physical Review E 102, no. 2 (3 August 2020): 022301. https://doi.org/10.1103/PhysRevE.102.022301.
Peikert, A., & Brandmaier, A. M. (2019). A Reproducible Data Analysis Workflow with R Markdown, Git, Make, and Docker. https://doi.org/10.31234/osf.io/8xzqy
It shouldn't be problem to watch the remote scripts for changes using Travis and repack and submit a new version automatically (depends on licensing). It does not put the script under your control, but at least it's in the package and can be reviewed.
Remove upper bound in our dependencies Doing this we are only asking people to fork our gem or open issues when they want to use a new version of the dependency and we still didn't tested with it.
GNU gettext is designed to minimize the impact of internationalization on program sources, keeping this impact as small and hardly noticeable as possible. Internationalization has better chances of succeeding if it is very light weighted, or at least, appear to be so, when looking at program sources.
First sighted at: https://github.com/neutrinojs/neutrino/pull/1003
You might want developers building projects with this CMS to be able to change the behaviour of some UIs, or to be able to provide new components that can be consumed by the CMS. Those components can't easily be included in the JS bundle for the CMS, as it would require recompiling the shipped code with outside references.
before and after also accept arrays of constraints.
controlling order
Registering new services to the Injector If you've created a module using React, it's a good idea to afford other developers an API to enhance those components, forms, and state. To do that, simply register them with Injector.
Instead of overriding a service with your own implementation, you enhance an existing service with your own concerns. This pattern is known as middleware.
I'm doing a newer project in Vue.js because it looks much lighter than Angular and just awesome all around
Anything that can be derived from the application state, should be derived. Automatically.
No more waiting around for pull requests to be merged and published. No more forking repos just to fix that one tiny thing preventing your app from working.
arg maxvw;vcP(w;c)2Dlog11+evcvw
maximise the log probability.
p(D= 1jw;c)the probability that(w;c)came from the data, and byp(D= 0jw;c) =1p(D= 1jw;c)the probability that(w;c)didnot.
probability of word,context present in text or not.
Loosely speaking, we seek parameter values (thatis, vector representations for both words and con-texts) such that the dot productvwvcassociatedwith “good” word-context pairs is maximized.
In the skip-gram model, each wordw2Wisassociated with a vectorvw2Rdand similarlyeach contextc2Cis represented as a vectorvc2Rd, whereWis the words vocabulary,Cis the contexts vocabulary, anddis the embed-ding dimensionality.
Factors involved in the Skip gram model
In general, add providers to the root module so that the same instance of a service is available everywhere.
So, from this I take it that once a Service is added to the root module, it can be used by any component of that module.
What about the components imported, from sub-modules of the root one? Can their dependency needs be met, in similar fashion? For example, could a Component in another module (imported into the root one) just request a Service provided in the root module and have it properly injected from there, without anything else on the developer's part?
you get a new instance of the service with each new instance of that component
So, I take it that the Service instance will not be a singleton anymore? Whereas, if provided from the root module, it will?
Interesting article on dependency injection and combining FP and OOP. The central question explored is how a language might work if function parameters were split into two categories, data and services/environment.
How is all this different from mainstream constructors?Because an instance is created by sending a message to an object, and not by some special construct like a constructor invocation, we can replace the receiver of that message with any object that responds to that message. It can be another class (say, an implementation based on polar coordinates), or it can be a factory object that isn’t a class at all.
Question: Is this different in any way from say Python where objects are constructed using a function call?