HNHacker News
TopNewBestAskShowJobs

3np

8,274 karma · joined August 27, 2020

https://pleroma.remerge.net/3np
submissionscomments
3np··on Law Enforcement Can Break 77% of 'Three Random Word' Passwords
First time I hear of this "three words" - is this actually promoted? Canonical "correct horse battery staple" is 4. 5+ truly random should still be strong.

https://xkcd.com/936/

3np··on Google Play unable to complete identity verification
If you haven't already: Look into alternative APK distribution channel(s) to Play Store. Don't let Google hold you hostage for all your sensitive info.
3np··on I use zip bombs to protect my server
Also might open up a new DoS vector on entropy consumed by /dev/random so it can be worse than 1:1.
3np··on Chain of Recursive Thoughts: Make AI think harder by making it argue with itself
Also a little clickbaity with "my AI" and then it's all Mistral...
3np··on O3 beats a master-level GeoGuessr player, even with fake EXIF data
Because an accepted answer to that specific question is invariably a link/reference that the asker could have searched for (and posted if they think it's useful for the discussion) themselves directly, instead of putting that burden on the rest of us and amortizing everyone's attention. It's entitled and lazy.

Alternative example: "I wondered what the rules actually say about web search and it is indeed not allowed: (link)"

3np··on Let's break everyone's code for no reason
Yeah, if you haven't migrated to MariaDB at this point you're kind of asking for it... Consider this update a friendly nudge from Oracle.
3np··on Migrating away from Rust
I've also seen Cython used to this effect for hotspots or entire applications in scientific Python code.
3np··on Redis change license from BSD-3 to dual RSALv2+SSPLv1 (2024)
Valkey is the open-source fork blessed by antirez and where the community is moving.

https://valkey.io

Migrating a bunch of old and new dbs from Redis 6.x to Valkey 7 went smoothly here.

If you're migrating: 7.2 is the ideal version to switch over. If you upgrade Redis above it, compatibility guarantees drop.

3np··on Building a Successful Web Dev Career (and Podcast) with Wes Bos
Cult of personality is falling out of fashion around here lately I think. You might get more connection of you tone down the hype vibes.
3np··on ZFS: Apple's new filesystem that wasn't (2016)
I haven't had any issues with attaching normal SATA drives with SATA-over-USB cables. Meanwhile some otherwise apparently fine USB thumb drives got abysmal results (<100kbps read IIRC).

ZFS on Linux.

3np··on The Enshittification of Tech Jobs
> these actions are a consequence of going public and becoming huge megacorps

IDK, seen and heard plenty of the same in private companies with no apparent track to go public. It's industry-wide, not just FAANG. I'm not sure that can all be waved off as cargo-culting.

> There is NO OTHER INDUSTRY wherein "normies" that didn't go to highly-regarded school for years and years on end have a realistic shot at this kind of compensation.

> Software is still a high-skilled, highly-niche profession. Generative AI "simplifies" writing software, but that's only 20-40% of the job, IMO. As long as that remains true, and as long as margins on software remain astronomical, demand will remain high and SWE/SWE-adjacent professionals will continue to be paid well.

That's not counter to Doctorow's points. In fact, they contribute to the trend he's describing ("golden handcuffs", for example). The relatively high paycheck and impression of privilege and comfort vs workers in worse conditions are levers, not the point.

3np··on Unauthorized experiment on r/changemyview involving AI-generated comments
The buried greens, yeah. I was guessing it was some meatpuppets I was arguing with after looking at account age and post history though. Still considered it worth the effort and trollfeeding to set the record straight for others and yeah, getting harder to tell the difference between puppets, zombies, and bots.
3np··on Ask HN: CS degrees, do they matter again?
I think you may be undervaluing effort and payoff of CS fundamentals, as well as overestimating payoff of the paper from an online degree.

(Caveat: If you'll be emigrating in the future a degree can make a difference for visas if recognized )

If you do it and actually apply yourself (as opposed to optimizing for points/effort) I guess you'll be on the up regardless of which (:

3np··on Hundreds of smartphone apps are monitoring users through their microphones
"Asking for a friend"?
3np··on Antitrust Woodstock: Google and Meta Go to Court [Podcast]
> Listen via Apple or Spotify, or wherever you get your podcasts.

To spare other deplatformeds the search:

https://www.iheart.com/podcast/269-organized-money-226343733...

3np··on Mark Zuckerberg personally lost the Facebook antitrust case
I think he's gonna have to offer up the naming off his child at minimum.
3np··on The Policy Puppetry Prompt: Novel bypass for major LLMs
I see much more of offerings pushing these flows onto the market than actually adopting those flows in practice. It's a solution in search of a problem and I doubt most are fully eating their own dogfood as anything but contained experiments.
3np··on Hegseth had an unsecured internet line set up in his office to connect to Signal
> took me a second

Well yeah, your latency is still capped by speed-of-light on the downlink ;)

3np··on Looking for Feedback for Hardware Server Security
That sucks. If it were me I'd suck it up and consider that I now have two dedicated IPMI NICs with failover and attach new ones if needed for system network...

> Thanks for the FYI on AsRockRACK.

NP. FWIW at least I think the BMC networking doesn't have the kind of failure mode you're describing.

> Have you had any firmware updates for IPMI with them, however?

Yeah, they have unofficial newer "beta" versions that you will get a private download link for over email if you contact support and ask for it. Same if you want fixes for UEFI or AMD firmware vulnerabilities more than a year or so after board release.

Thinking about supply-chain security when flashing those make me a bit nauseous... The industry seems to be stuck with 90s mindset and processes.

3np··on The Policy Puppetry Attack: Novel bypass for major LLMs
The same argument could be made about computers. Do you prefer a society where CPUs are regulated like guns and you can't buy anything freer than an iPhone off the shelf?
3np··on Looking for Feedback for Hardware Server Security
Only speaking for ASRockRACK, the situation is not much better with regards to firmware updates or confidence in IPMI security. Oh, and there's a fishy undocumented preconfigured second Admin account you have to go into user management to spot... Thank for alleviating buyers remorse as the grass seemed greener at SuperMicro ;^^

> They still seem to have ridiculous LAN sharing of IPMI, which means that even if you set their IPMI to use the dedicated NIC, and setup an isolated network, a loss of defaults means your IPMI is now no longer on that network but sharing the NIC on your main network.

This sounds partilularly weird though, if I am reading it right. Are you saying the BMC will bridge IPMI over multiple NICs in default configuration? And that there is no setup that safely and consistently binds the IPMI to a single NIC?

Isolating management to a dedicated network continues to be part of basic security and it's very surprising to hear that this would not be a supported use-case by SuperMicro...

3np··on Hegseth had an unsecured internet line set up in his office to connect to Signal
I guess we can stop feeding the trolls now...
3np··on Careless People
I don't see how that complicates things?

This is the thread GP was supposed to be a reply to:

> > Does anyone actually believe that hard work and talent are either zero or negatively correlated to success?

> I do.

3np··on Devenv 1.6: Extensible Ad-Hoc Nix Environments
Good to see! Somehow I missed that in the log.
3np··on Hegseth had an unsecured internet line set up in his office to connect to Signal
So go read up enough that you can then. It really doesn't take a law degree or unreasonable time. More constructive use of your time than arguing for something completely ungrounded (unless spreading doubt is actually your goal here).
3np··on Hegseth had an unsecured internet line set up in his office to connect to Signal
Screenshots were published in the Atlantic and not denied. Read the reporting, read up on relevant laws, and judge yourself.
3np··on Devenv 1.6: Extensible Ad-Hoc Nix Environments
Patch to disable built-in telemetry: https://github.com/NixOS/nixpkgs/pull/382568/files
3np··on Show HN: Colanode, open-source and local-first Slack and Notion alternative
With a sane local API and some examples, there shouldnt be need for a DSL or in-app integration logic.
3np··on Careless People
Maybe you should, you know, read the book or court files or something before publicly speculating.
3np··on Careless People
Judging authors parenting is way off topic.
← PreviousPage 4 of 34Next →