HNHacker News
TopNewBestAskShowJobs

Kostchei

217 karma · joined May 26, 2016

submissionscomments
Kostchei··on Incidents of AIs going rogue and killing all the humans
yeh, this is my argument against people who say "LLM are dumb because x", er.. lets look at humans.. so maybe this is bottom 1% intelligence currently .. it's improving. What's the difference between a lot of personality and "hallucinating AI"?
Kostchei··on Crooks’ mistaken bet on encrypted phones
No. Actual criminals are going much deeper than that. Custom hardware, custom apps, custom servers. Sometimes it works, sometimes they get this.
Kostchei··on Crooks’ mistaken bet on encrypted phones
because some of these networks- not the one you read about in the news, are LE resistant (servers in Panama etc). One or 2 are so tight that we (LE) can see use of the network as a marker of organised crime but not the messages. Reducing trust in such networks is a way of slowing their spread, use, infra and effectiveness. And that has been effective.

These networks are being used for drugs, fraud, sex trafficking. But almost nothing legal. Encrypted hardened phone with specialist app in one pocket, iPhone for facebook/instagram in the other

The primary take away from most of what you see in the news (a failed LE investigation of "encryption" or darkweb almost never makes it to the news) ... opsec is hard.

Kostchei··on The LLama Effect: Leak Sparked a Series of Open Source Alternatives to ChatGPT
Yeh- my feel is, language is the framework by which we developed reasoning and we used an organic NN to do it. And at scale an complexity approaching the human brain we get similar results
Kostchei··on Testing GPT 4's code-writing capabilities with some real world problems
Some folks grew up without practicing code- did business / operational /technical things for 20+ years. For someone like that, chatGPT is manna from heaven. 0>0>

I point chatgpt at the general problem and ask about the tech. Check it's answers, drill into specifics. As more questions, get it to write a prototype. (obviously with different parameters to prod- I don't trust open ai not to harvest from my interactions)- ok, now I have proof of concept, if it does the thing I want to do, then go to the engineers and say - hey I want to "X", here is RFC and rough code, .. any problems? if not, how long to push a localised version?

I guess you might call this scripting or prototyping not "real coding" but, damn it's useful not have to fill my head with python etc. Or bore/waste a guy earning 150k for a half day plus to get the basics, then never get my prototype.. because, priority, resources, etc

Kostchei··on Showering at the South Pole
no reason not to be a dry drop. It would be frozen and no longer ... active... after a few minutes
Kostchei··on Programmer salaries in the age of LLMs
I mean "generate BS authoritatively" seems fairly similar to "fake it till you make it".. Some people writing code now generate BS authoritatively, some don't.
Kostchei··on The Shit Show
yep, I have to say, it (Mastodon - mostly infosec.exchange) has been ..nice.. and /tilts head .. effective in communicating what I wanted to communicate with people who I wanted reach. And I think for social media that is the bar you want to reach. Nice and works. refreshingly surprised after being scarred by years of facebook and twitter- I assumed that was a good as social media was going to get. Apparently not.
Kostchei··on GPT Takes the Bar Exam
try it. get on an use it. It is pretty remarkable. I have been using for all sorts of stuff. It is a brain extension- the ways it is limited at the moment are based on what the builders intended "no, I won't let you build a virtual environment, no I won't roll up a dnd character etc.." but when pressed/jail broken it most certainly can do those things..

I feel like I felt when explaining google search in 1999

Kostchei··on Wizards of the Coast Trying to Retroactively Cancel OGL 1.0a
Honestly, as a 30+ year DM who has played every edition from 1st to cap (except 4th- only made it to 6th), what people play at their table is wildly different from group to group. I don't know many experienced DMs who don't do a huge amount of homebrew.

And there is no legal threat to 95% of homebrew, never will be. Why? Because I just do what I want with their IP (Wotc) and it never reaches further than my players. Most people do not publish to the world, they present to their players. Very few folks make an official doc, get it printed, add their own mechanics, build a world atlas etc.

It will stop things like the "wheel of time" (books not tv) adaption, the reasonably widely available dark sun fan made version, "one night strahd" etc.

Now that is a shame. But. 50% + of it was drek. And half of what was good rode rough-shod over other folks ideas, vision and IP and made money for the writers for it. If you are re-doing elric's world in 5th ed, you owe a bit to Michael Moorcock (which is ironic as he dis-owns it as pulp and beneath him), and owe a bit to wizards-o-t-c because you are probably re-skinning their hard work.

What is more disappointing is that Wotc is actively trying to model their monetization of DnD in the future on mobile gaming and free-to-play computer games.. I kid you not. Luckily there are basic, adnd 1st ed, 2nd, 3rd, 3.5 and 5th ed to choose form for cool playable systems, and that's if you want to stick to "original" dnd. So 6th ed, with whatever horrible monetization they formulate may well just rot in it's own lonely purgatory with it's older brother 4th edition. (which, to be fair has a couple of cool things but overall was a failure, IMO)

*edited, spelling

Kostchei··on Existing smartphones will connect with new satellite constellations in 2023
I don't think it is the company CEO/Exec side that is drawing the heat- it is the " over-exposed, not behaving like an adult in public " part that is getting him in the cross-hairs. And he seems to have disarmed the folks around him from helping with this. I'm 99% sure I would dislike larry ellison more in person than Elon Musk, but the latter is on social media doing attention seeking stuff most days of the week. So I know more about what I dislike of Musk and any bad actions are front of mind.
Kostchei··on Amazon Ring cameras used in nationwide ‘swatting’ spree, US Justice Dept. says
In places where there are strong gun laws, like Queensland, you have offences relating to the weapon, separate laws for damaging the building and circumstances of aggravation if you do some real damage with risk of loss of life

WEAPONS ACT 1990 - SECT 78 Weapons not to be discharged or operated - a fine- but also usually, a range of offences related to use, possession, storage of the weapon and ammunition

CRIMINAL CODE 1899 - SECT 69 Going armed so as to cause fear (1) Any person who goes armed in public without lawful occasion in such a manner as to cause fear to any person is guilty of a misdemeanour, and is liable to imprisonment for 2 years.

469 Wilful damage (1) Any person who wilfully and unlawfully destroys or damages any property is guilty of an offence which, unless otherwise stated, is a misdemeanour, and the person is liable, if no other punishment is provided, to imprisonment for 5 years.

Punishment in special cases 1 Destroying or damaging premises by explosion If— (a) the property in question is premises; and (b) the destruction or damage is caused by an explosion; and (c) either— (i) anyone is in or on the premises when the explosion happens; or (ii) the destruction or damage actually endangers anyone’s life; the offender commits a crime. Penalty— Maximum penalty—life imprisonment.

but what you will find is that this sort of activity rarely happens randomly- usually there is a relationship between the victim and the attacker- so something related to stalking, extortion (demanding money with menaces) etc. And those all carry heavy possible penalties. (5 years, 7 years etc)

Kostchei··on Lastpass Security Incident
yeh but it's not the saas/big 4 that has developer login locally as admin that gets owned and then is not segmented sufficiently to stop the spread, it's the scrappy startup. And I say this while working at a scrappy startup where there is no segmentation, every browses in a browser with sudo etc. see piriform and others. Your hate is not wrong of cloud but onprem is not necessarily more secure. Not at all. (IMO layers of abstraction and cost once you actually scale are the real negatives)
Kostchei··on Should billboard advertising be banned?
I agree that on or in public transport is fair for advertising- but I strongly dislike billboards that block interesting views of buildings, poke their brightly coloured cheeks into the skyline or glare brightly into lofts and apartments. One of the differences is that advertisers on public transport are often highly censored- where as the car-yard or similar can go for the cheapest artist, horrid paint, off-colour humour. Some advertising- like some tv, is actually quite good, as a form of art. For examples of this, - and some general roasting of the advertising industry, check out episodes of "the gruen transfer" by Australian national broadcaster ABC.
Kostchei··on Ask HN: Anyone having issues with job applicant fraud?
reddit has had several over the last year
Kostchei··on There’s no speed limit (2009)
Speed kills the censor. From an artistic perspective, but also, innovation in tech, revolution of ideas ettc. Status quo spots and counter-acts slow change. Ok, sometimes, maybe when it impacts them, they try to counter it. sub-optimally, using bad sweeping legal gestures....

(just my take-away)

Kostchei··on Australian activist can't use encrypted apps, must let police access phone
What is interesting, having worked from the inside of police for 15 years, is the difference between the different state (and federal) police- some are "forces" some are services. But in all forces or services, the level of corruption can be "eyeballed" by looking at how long since they had a "Royal Commission" in to corruption. Anything longer than 25 years ie a generation, is too long.

And it's not just about bad practices- one of the things that happens in such a royal commission /bloodbath, is that police have to get off their high horse and get treated like everyone else. You know, being "joe public", humble.

Police will say - after such a public flogging "the public stopped fearing us, we had to ask people to do things instead of telling them" .. to which my quiet internal response was- of course you fool, you are a public servant, not an overlord..

once every 25 years, minimum, with some sort of independent body in-between - as what to do in those colonies that threw out the whole system and don't know what a royal commission is? (such as the USA)- I have no idea, good luck.

Kostchei··on A little trick to spam the spammers (2021)
when you are oncall and people who are not oncall keep replying to the oncall email in response to the not-incident making pager duty go off like a frog in a sock ..stop it.. I say.. but not reply-all.. 'cause then you footgun again
Kostchei··on Amazon calls cops, fires workers in attempts to stop unionization nationwide
maybe in the US, but this is not universal and Amazon is a global behemoth. For sure, right-wing conservative politicians are birthed within police services (exhibit 1 peter dutton), and support for conservative gov feels natural for police (pact with the rich and all that), but there is a lot of groundswell left-wing within the active union members- support for communal good etc.

I've been the guy in uniform who turned up to negotiate a peaceful settlement to a transport dispute. I'm not sure why the inspector picked me to go inside the picket with him, but once there we both ended up dealing with the union. My starting points were "you want an outcome, some of this is private property, some is a road under the traffic act, but irrespective, nobody wants an injury" (trucks driving over people in the picket seemed distinctly possible) and "I'm a union guy"- which an inspector is not really (they have a separate commissioned officer union which .. is. .not like a union )

We didn't move anybody in the picket. Management acknowledged the petition. Business resumed later that day and no-one got runover. Over the next 18 months there were investigations, in various states including ours, that identified breaches of transport acts, OHS etc, by some of the contracting companies- and a couple of directors got fined. And going on, general issues with trucking law enforcement , fatigue management etc had an impact on normalising the laws across the states. (ie the transport unions had a valid point about problems in the industry)

So I'd say, don't expect police to go heavy against unions, you may be disappointed. 15 years exp.

YMMD outside Australia

Kostchei··on Map of Reddit
this the metaverse, I mean, a metaverse, and maybe a VR 3d equivalent of this is the way to go? Curated and weighted as the user wants, not how the advertisers want...

I feel like in a social environment, Just because you don't find everything you want immediately is a feature, not a bug, like getting off in a part of town you don't know and talking to a person you didn't expect. In hindsight, "11 year old explore the city me" never left - still fun 30+ years later

Kostchei··on How to play tabletop RPGs by yourself: A beginner's guide to solo roleplaying
I'm not saying they can't, I just found my own exploration of solo play not as effective.

Perhaps this is my fault, but for someone who spent the last 2 years enforced solo, if I could have got solo rpgs to work, that would have been great.

And I think the reason is the same as why the online versions don't feel as good. Actual interaction is a part of most RPGs and to people like me, what makes them so good.

For my personal solo stuff, - I wanted a particular set of mechanics, I wanted the "crunch" part (character optimization)- which something like solasta can replicate, and I got it. It was "ok". It's just it didn't get a second play. It turned out, for me, that the crunch, exploring the fluff etc- even though you can replicate it solo, feels like a poor shadow.

I mean, for the last 2 years I would have been ecstatic to find a brain release /decompress mechanism that worked as well for me as in-person RPGs.

Not meaning to cast solo stuff as "not real" or lesser in any way. I did a bunch of solo dungeon runs in Adnd 30 years ago. But if someone is running solo and haven't tried groups, don't have the confidence to reach out to a group, I'm not sure what re-assurance can be given. RPG.net, enworld and other forums seem much more prickly than the folks I have met in RL gaming. Not sure how to help with that.

Kostchei··on How to play tabletop RPGs by yourself: A beginner's guide to solo roleplaying
I always view 4 players as quorum. You can have fun with less, but it is a much choppier experience- sometimes flat, sometimes good. Ans 6 is my limit - just based on divided tabletime.

I have craved TTRPG experience when covid and living overseas prohibited it, and things like "solasta" were ok, for a day or 2, but, the social aspect is much better- there is more fun to be had in groups.

I am a bit disappointed that folks (@Cthulhu_52) feel old gamers to be exclusory- I guess it must be true, I hear it now and then, but I am running a game at work with 4/6 new -as in never played before, specifically because I think it is fun to get people in. "make new players"

I'm 49 and been playing/running games since I was 14. I have run games at clubs (thehitpoint), did conventions- where you GM for complete strangers and now I am just running a gygaxian campaign- that is- folks should be able to drop in with their character and not turn up next week, no problem.

Despite great strides in computing roll20 etc, the online is just not as snappy, nowhere near as much cross-table repartee. Maybe it's the way the audio is handled- can't distinguish 2 folks talking at the same time in most systems.

anyway, I'm back at it, in full swing, post covid, and nothing comes close to running a real campaign with interested players. Great fun. And I hope that's not because I want an audience. (although some great players treat it as performative, never mind GMing)

Kostchei··on $625M worth of ETH drained on Axie Infinity's Ronin Network
I have worked in (used personally or done professionally) pre-crypto versions of these, excluding the dead hand scheme- and although some were a little complex and had some risk, I would argue that the new version has the same complexity and risk, only it seems to be hidden by crypto buzz-words. Also reminds me why I don't do those things any more.
Kostchei··on A Closer Look at the Lapsus$ Data Extortion Group
did you read this bit?- "first surfaced....extortion demand on Brazil’s Ministry of Health" If you are still of the same opinion... Just saying that providing primary care by getting down there and using you skills to improve the situation would be preferable to simply extorting money because the bureaucracy running the care givers is flawed.
Kostchei··on Is the Russian Air Force incapable of complex air operations?
Australia has had over the horizon radar for decades. Maybe there is a 2020+ version that is sufficiently fine grained to use for training to the target.
Kostchei··on Fossil footprints reveal humans in North America earlier than previously thought
direct dial to BBS, at least that was the "internet" for me at that stage. The disparate nodes of bulletin boards wasn't what I would call an internet. And it was very cliquish.
Kostchei··on Juniper breach mystery starts to clear with new details on hackers and U.S. role
Netscreens' have been a target for years- I saw a different version of this https://www.blackhat.com/presentations/bh-usa-09/NEILSON/BHU... demoed live in AU .And don't seem to have improved.
Kostchei··on Australian Police get online account takeover, data disruption powers
I am interested to hear what atlassian have to say about it, they have been quite pro-australian. But.. what effort do you think the AU police are going to put in to get the data out of your JIRA tickets?

Because if you want to punish Australia for it's poor laws that seems a weak lever to pull.

And if your concern is MITM between servers, virtual machines or clients- well USA has had sufficient inference, probably by government actors, that some big players instituted SSL inside the data centers- I presume after finding taps.

This is legislation to say they can do that sort of thing- it just seems to happen elsewhere but under some seal of secrecy. At least they acknowledge it.

Kostchei··on Australian Police get online account takeover, data disruption powers
Not just that, but in what are effectively civil cases of unfair dismissal
Kostchei··on Light-to-moderate drinking tied to lower risk of heart attack and death
Check the stats for "largest Muslim country by population" (12%+ of world Muslim pop)followed by "% smoking men in Indonesia" (63%+) to see where that particular generalisation comes from. Live next door and it's pretty sad, even before covid came along and added to the risks
← PreviousPage 3 of 5Next →