HNHacker News
TopNewBestAskShowJobs

Atheros

424 karma · joined December 7, 2013

submissionscomments
Atheros··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
to slow down attackers who want to brute force your password hash. At least that was the idea. I guess it also includes the salt stuff built in so that it's harder for implementers to screw up.

Is a 9-order-of-magnitude slow down worth the trouble? I dunno. Maybe.

Atheros··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
Servers usually accept data in a thousand ways in a thousand endpoints. Anyone who tries to prevent buffer overflow or slowloris attacks by limiting password length specifically is doing it wrong. An absurdly long password is surely one of the least likely places where a resource-use vulnerability would pop up since the data usually gets sent straight into a 20 year old hash implementation.
Atheros··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
The only way three people can keep a secret is if two of them are dead.

If the data can be read by so many people in the company that even the customer service people have access, it's functionally not encrypted.

Atheros··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
Allowing extremely long passwords makes everything more secure because it teaches users to use better passwords.

https://xkcd.com/936/

Atheros··on <input type="password" maxlength="20"> prevents me from logging into Vanguard
In case any programmers read this, the better procedure, if you want to use bcrypt, is to hash the password with something else first, like SHA512, then feed the output into bcrypt.
Atheros··on 'Pervert glasses': Backlash against Meta's smart glasses grows
You aren't persuaded by what I wrote because I did not attempt to persuade you. You asked me to explain what I meant by "plausible deniability" so I did.

> Neutral inanimate object or tool X is "bad" (we need laws/bans/broad social disapproval, etc.), because it enables bad faith actors

I never made this argument. I did, however, give what I thought was a pretty good example of good faith actors behaving badly when there is a plausible excuse for them to do so. (narcissism vs. creepiness)

I don't think you're a human. Whenever someone has misunderstood me this badly in the past, and I've kept talking to them, they turned out to be a bot. I've typed this out for you just in case I'm wrong but I'm not going to respond any further.

Atheros··on 'Pervert glasses': Backlash against Meta's smart glasses grows
> In both cases, do you not have the person responsible for making the recording

You have them.

> then that person has, as you say, no plausible deniability at that point, do they not?

No, they have plausible deniability if they use the common device.

> Are we talking about legal accountability

Social and legal.

> What do the glasses enable that any other video camera does not?

The glasses enable the wearer to say, "Oh sorry I didn't know they were recording." Or "They weren't recording, they're just glasses." Using a handheld VHS video camera from 1992, in 1992, would cause you to get arrested in a locker room because there is no plausible deniability. The recorder definitely chose to use it there in violation of social norms so off to jail they go.

> argument.. would have to be applied universally

Yup.

> how would it be if the manufacturers put a big, red light on the front of the glasses, that would automatically turn on when the glasses are recording

Someone else in this thread suggested that the entire rim of the glasses light up in a plainly visible and obvious fashion, including in broad daylight. That would make it acceptable because then you could tell the person, "Hey your glasses are on. They should not be on." And then the person can say "oops" and we all go on with our lives.

> You're looking for a way to prosecute unethical individuals...?

Prosecution is not strictly necessary; social effects would likely be good enough just like they are in most other contexts. Especially because many of the bad uses of these glasses will simply be mistakes. I can give you an example. I was changing in a men's locker room. You may be completely naked. There are showers and whatnot. Someone had a tripod set up with a phone attached and an LED light to take video of himself in the large mirror they have there. He surely didn't know that he was doing anything wrong. But he was. He could be told not to do that because we all could tell it was happening. With glasses, we can't.

This is an example of a problem that the glasses bring but the fact that I have typed it should not imply that it is my or anyone else's only concern. There are others.

> at least until large swaths of society accept the existence of video recording glasses like we already do with smartphones

There is no guarantee that this will happen. Open display of a firearm will get you put in a police car in many places despite owning it being a right enshrined in the constitution. You may drive a car but not anywhere you want. You may use firecrackers sometimes but not anywhere you want. You may own a cell phone but not possess it wherever you want. You may buy a backscatter x-ray machine but you may not use it wherever you want. Examples abound. You will almost definitely be able to buy Meta glasses in the future but there is no long-term guarantee that you may use them in public.

Atheros··on 'Pervert glasses': Backlash against Meta's smart glasses grows
They won't be thrown out. You'll surely be able to buy these in the future just like you can buy cell phones and fire crackers. But you can't take cell phones and fire crackers anywhere you want. You may not drive a car wherever you want, you may not carry a visible firearm wherever you want, and you may not use a backscatter X-ray machine wherever you want.
Atheros··on 'Pervert glasses': Backlash against Meta's smart glasses grows
The other devices do not feature plausible deniability when caught. The glasses do. That's the problem.
Atheros··on Why Are Birthrates Down? Two New Studies Point to Phones
Naaaaa I don't believe you. If you were actually concerned about objectification of women, especially as it applies to relationships, you would be 100 times more concerned about TikTok, Instagram, and YouTube than porn because the impact of those is proven 100 times over. The term "body count" didn't come from porn, it came from the manosphere. Incel ideology didn't spread because on xtube, it spread on Reddit. Manosphere influencers are having such a large effect on the population that men vs women demographic shifts are showing up in questionnaires about religious affiliation.

And please don't say, "I care about those things too." You brought up porn specifically. That's why I don't believe you.

Atheros··on Why Are Birthrates Down? Two New Studies Point to Phones
Maybe it's not mentioned because it's not supported by data and probably wrong. I think if that if porn were effectively banned outright, not only might nothing change, it might get worse. After all, we remove AI-child-porn from online services under the argument that such porn would increase the desire to do the activities shown, right? If that's true then it's true whether the people depicted are 17 or 19.

> it goes unspoken.. because no one wants to admit

A more likely explanation is that few people actually agree with you. Your argument is extremely common among people using motivated reasoning to try to ban content they don't like, starting with porn.

Atheros··on Some car companies are operating without regard for a declining customer base
Airtaxis can't retrofit suburbs just like cars can't retrofit 1850s cities. Imagine a city built around airtaxis and delivery drones. I think it is doable which means that they'll do it.
Atheros··on Some car companies are operating without regard for a declining customer base
Cities were originally built around walking. Later they expanded a little bit with horses. After that they were rebuilt for cars. They will be rebuilt again when transportation technology changes, at least for those that can afford it.
Atheros··on AI poster wins Ohio State Fair contest
They hacked the hackathon. You didn't.
Atheros··on DEF CON bans Meta-style 'pervert glasses'
There are other weird things. If these become widespread, meta will know and be able to sell (or turn over to the government) a list of everyone you spend time talking to in public and private. Cell phone companies only have low-resolution location information. Meta will know that you talked to Sarah for 288 seconds before handing her an envelope before she went to an abortion clinic.
Atheros··on If coding has been solved, why does software keep getting worse?
Evidence-based UI design maxed out in 1995 with the release of Windows 95. Evidence-based design was popular in all sorts of areas back then. Star Trek: The Next Generation (1987-1994) I think is the gold-standard of set and costume design and the modern cartoon mostly follows that design. Cargo pants were in style. The MTA in New York City used this map[0] which was designed by sociologists and psychologists to be maximally useful.

The late 90s is when fashion appears to have started taking over. Apple's logo went flat grey in 1998 and Windows XP was released in 2001 and it's only gone downhill from there. Perhaps it was inevitable. When other people can see your UI, people will start using it to signal things and companies like Apple will cater to that. The designers will then be given way too much power with no accountability and then all evidence-based design gets thrown out the window.

Perhaps this is what you're seeing in academia also?

[0] https://maps-nyc.com/img/0/mta-map.jpg

Atheros··on SPCX is now Wall Street's most shorted new stock
I still feel like there is a difference between Fractional Reserve Lending and this. 181 million shares are anti-owned: the traders don't want to own the thing, they want to anti-own it. Surely that has to count for something!

If a short seller decides, today, that they no longer want to involved with this stock at all and, simultaneously, by pure coincidence, the person they borrowed the share from decides that they also don't want to be involved with this stock at all so they both close their positions and settle up. The third person out on the market keeps owning the share that they never knew was borrowed at all, and everything stays exactly stable. One 'long' dropped out of the market but it had no effect on anything because the 'short' also dropped out at the same time.

That's not what happens when someone takes their money out of the bank and converts them to Benjamins: there is less money available to lend which raises the interest rate somewhat. That's an actual effect!

Atheros··on Claude Fable 5
https://link.springer.com/article/10.3758/BF03195929
Atheros··on Anti-social: It's fads, not friends, which now dominate social media feeds
Social media is a service where people who know each other in real life communicate mostly about things happening to them personally.

Online Publishing is process by which people, who largely don't know each other in real life, publish their content for others to consume via an online service.

A Link Aggregator is a service where people publish links to outside web services and users vote to establish the ranking on the aggregator.

The only reason any of this is debatable is because old social media sites like Facebook, Instagram, and Twitter stopped being Social Media and switched to Online Publishing and people are having trouble updating their vocabulary.

Atheros··on Anti-social: It's fads, not friends, which now dominate social media feeds
Because the phrase 'social media' was coined to describe a very specific thing: people who know each other in real life communicating online about things happening to them in real life. There were and are plenty of other words you can use to accurately describe other things, like 'chat room', 'forum', or 'link aggregator'.
Atheros··on Meta's ships facial recognition on smart glasses
Remembering someone's birthday and the names of their kids signals that you care about them. If Meta short circuits that then the signal evaporates.
Atheros··on “I applied to be pope”: Losing grip on reality while using ChatGPT
Their primary information source was a random sampling of Reddit posts which they admit were "coauthored with the AI (who clearly wrote the vast majority of it)."

These were on long-dormant Reddit accounts that suddenly reactivated. Classic. I don't believe any of it. I would bet that, with some exceptions, these are bots talking to bots about bots.

The "person" who wrote this might be a bot. It's extremely delusional. He/It gets to the point where it watches bots talking to other bots and making shit up and it 'believes' the nonsense, saying, "I am truly glad to see preservation of life, non-violence, and non-lethality explicitly laid out here. To return the gesture of good will, I have started archiving (in encrypted form) spores I come across."

I don't think any human is smart enough to write this much about AI on LessWrong but also dumb enough to not recognize hallucination.

Atheros··on Why airlines are always going bankrupt
New revenue model idea: Charge $40/month on a person's credit card; a subscription. This buys the customer miles. Whenever you want to go somewhere, you use your miles. I think it would work based on the fact that people are willing to pay much more money for services if it's spread out and predictable. The fact that it's pre-paid also creates a lock-in benefit for the airline that the 'pay later over time' schemes lack.
Atheros··on Common drug tests lead to tens of thousands wrongful arrests a year
You're right! I wrote it backwards! I swapped the 95 and 100% in the post above.

My claim is that the cops in the article are walking around drug testing widely. Not literally everyone they see but if they are testing every white residue they see during any interaction with anyone, including bird droppings on the hood of someone's car, we've reached that point for all statistical purposes. The base rate fallacy will start applying.

Atheros··on Study found that young adults have grown less hopeful and more angry about AI
I think it remains to be seen whether the various AI tools we have today are a net-negative or net-positive for society.

Most inventions are a net positive: The steam engine, vaccines, chimneys.

A few are net-negative: grenades, leaded gasoline, asbestos insulation.

If we can no longer trust that a potential job candidate in a video call actually exists, they will have to be flown in. That's a cost. If we can no longer trust that an employee who wrote a document actually thought about it at all and must be questioned to make sure, that's a cost. Those costs will add up.

A written document or a video essay used to be proof-of-thought and now it's not. If we can't find new proofs of thought, and if AI doesn't get vastly better to the point where we can trust it blindly, then I think this will all be a net-negative.

One of the motivations to build data centers as fast as possible and improve tools as fast as possible may be to get to net-positive before it all gets banned. This article exists. The clock is ticking.

Atheros··on Common drug tests lead to tens of thousands wrongful arrests a year
This has Base Rate Fallacy written all over it.

If you had a drunk-driver-detection machine that output "positive" 95% of the time when the driver is drunk and output "negative" 100% of the time when the driver is not drunk, and started administering the test to all drivers on a road, the probability that a positive detection is accurate is only 1.96%. That sounds exactly like what was happening: dragnet testing of bird droppings and little old ladies.

https://en.wikipedia.org/wiki/Base_rate_fallacy#Example_2:_D...

If simple statistics are difficult for people to understand, the Base Rate Fallacy is right out.

Atheros··on We're Training Students to Write Worse and to Use AI to Prove They're Not Robots
Your math teacher was wrong when he said, "You won't have a calculator" but he wasn't wrong when he implied "You need to learn this."

If children are allowed to use AI as an omnipresent tool, what do you believe students should learn? Lots and LOTS of people would be perfectly happy to outsource all of their thinking to AI as soon as it's possible to do so.

Atheros··on The Brand Age
You misunderstood the article. Paul Graham isn't saying "Don't buy things based on brand", he's saying "Don't buy brand."

It's perfectly healthy to use brand as a heuristic to help yourself more easily buy products that work well.

Atheros··on IBM CEO says there is 'no way' spending on AI data centers will pay off
I really don't think any of that is true; it's just popular rhetoric.

For example: "Buybacks concentrate cash in the hands of existing shareholders" is obviously false: the shareholders (via the company) did have cash and now they don't. The cash is distributed to the market. The quoted statement is precisely backwards.

> A big chunk of that cash just gets recycled

That doesn't mean anything.

> more financial claims (index funds, private equity, secondary shares, etc)

And do they sit on it? No, of course not. They invest it in things. Real actual things.

> buybacks

Already discussed

> M&A

If they use cash to pay for a merger, then the former owners now have cash that they will reinvest.

> balance sheets

Money on a balance sheet is actually money sitting in J.P. Morgan or whoever. Via fractional reserve lending, J.P. Morgan lends that money to businesses and home owners and real actual houses (or whatever) get built with it.

The counterfactual for AI spending really is other real actual hard spending.

Atheros··on IBM CEO says there is 'no way' spending on AI data centers will pay off
> likely would have otherwise been put toward stock buybacks

Stock buybacks from who? When stock gets bought the money doesn't disappear into thin air; the same cash is now in someone else's hands. Those people would then want to invest it in something and then we're back to square one.

You assert that if not for AI, wealth wouldn't have been spent on materials, land, trades, ect. But I don't think you have any reason to think this. Money is just an abstraction. People would have necessarily done something with their land, labor, and skills. It isn't like there isn't unmet demand for things like houses or train tunnels or new-fangled types of aircraft or countless other things. Instead it's being spent on GPUs.

Page 1 of 10Next →