HNHacker News
TopNewBestAskShowJobs

bradreaves2

228 karma · joined August 27, 2022

Burrito Enthusiast and Associate Professor of Computer Science at North Carolina State University. I get a lot of robocalls. All comments my own.

https://bradreaves.net

submissionscomments
bradreaves2··on Cybersecurity Body of Knowledge v1.2 Released [pdf]
The Cybersecurity Body of Knowledge (CyBOK) is a systematic anthology of cybersecurity domains. Think of it as a combination of "desk reference," "encyclopedia," and "syllabus."

The latest version was released last week. The list of experts who wrote chapters, edited them, and reviewed them for accuracy is stellar, and the content is absolutely comprehensive.

I will be using this as a reference when I'm preparing my graduate introduction to security course next Spring.

bradreaves2··on Agent Security Is a Systems Problem
This position paper argues that classic systems security design principles are what we need to secure AI agents.
bradreaves2··on Green card seekers must leave U.S. to apply, Trump administration says
H1-B is defined as “non-immigrant.” https://en.wikipedia.org/wiki/H-1B_visa
bradreaves2··on Green card seekers must leave U.S. to apply, Trump administration says
Is this intended to ensure that students and H1-Bs will not have a path to residency unless they disrupt their lives here?
bradreaves2··on CEO of largest public hospital says he's ready to replace radiologists with AI
I figured this was “CEO said a thing” journalism [1], but buried in the last paragraph is a real scorcher:

> “Undeniable proof that confidently uninformed hospital administrators are a danger to patients: easily duped by AI companies that are nowhere near capable of providing patient care,” [Radiologist Dr.] Suhail told Radiology Business. “Any attempt to implement AI-only reads would immediately result in patient harm and death, and only someone with zero understanding of radiology would say something so naive. But in some sense, they’re correct: Hospitals are happy to cut costs even if it means patient harm, as long as it’s legal.”

[1] https://karlbode.com/ceo-said-a-thing-journalism/

bradreaves2··on 'Tiny Shortcuts' Are Poisoning Science
The article misattributes the cause of the public's loss of trust in science.

The public has lost confidence in science because commercial and political entities have worked systematically to undermine scientific authority that threatens their business models and narratives.

Fossil fuels, tobacco, and refined sugar single-handedly manufactured decades of scientific "controversy" around climate change, tobacco's health impact, and the role of sugars and fats in obesity and heart disease. Religious fundamentalists fund pseudo-scientific books and articles attempting to muddy the waters concerning geological and biological evidence about any time period before the invention of agriculture. Grifters fabricate arguments and data to delegitimize Western medicine to sell placebos at high markup. Politicians attribute all unflattering research to partisan skullduggery.

It is true that hard science, social science, and medicine all have published flawed work; sometimes even in bad faith. These occasional failures -- which should be corrected and never tolerated -- are then used by the same people to indict the entire enterprise.

It's true that there's research misconduct, and it must be weeded out.

What's also true is that funding for research is declining in the US, especially relative to our need for it.

Note how many "tweaks" center on things like sample-size or statistical significance. Human-oriented research is always intractably complex, and we get the scientific outcomes we do because studies are perennially understaffed and under-resourced relative to the questions they seek to answer. Trying to answer fundamental questions about health and wellness with 30 people tracked over 6 weeks is fundamentally flawed, but it's the best we can do with the resources we have.

In a world where funding was plentiful, and career paths not cut-throat and perilous, there'd be far fewer examples of these kinds of "tweaks." People respond to incentives, and if the options are "add a few more participants, because after all the initial sample size was somewhat arbitrary" or "fail to publish, fail to graduate, fail to get a permanent position after a decade of post-secondary education because applicants must be perfect," the only surprise is that they aren't more common.

bradreaves2··on Zed will require age identification for its services
Where does it say that it will require age verification?

The link you sent basically says "you pinky-promise that you're 18."

Later in the doc it also says "you promise not to send malware."

bradreaves2··on Show HN: I speak 5 languages. Common apps taught me none. So I built lairner
Gave it a try for a language I know (Spanish) and one I don't (Russian).

On Russian, the explanations of why some answers were correct/incorrect didn't load (presumably an AI call failed?). Especially at lower layers, a good fallback would be a simple dictionary definition.

On Spanish, I did the placement test, then it asked which "dialect" I wanted. I selected Mexican, and was treated with truly excellent renderings of European pronunciation. I wouldn't have been mad if all it had was one set of pronunciation, and it's more frustrating to see the ignored option than to never have it at all.

As for the placement test: I got dropped into lesson 2 for Spanish. For comparison, I placed into Lesson 5 in Russian, where I actually got more incorrect answers. The Spanish placement test wasn't very deep, and I knew all the answers. It told me I got two wrong, so either the test is wrong or I just got punchy and hit the wrong buttons.

Recommendation: scale back on the ambition. Focus on getting the educational and product experience right with languages you know first. Be honest about data provenance and limitations.

bradreaves2··on Objects should shut up
All the external noises are a big problem.

But the things that irritate me even more are the infernal modals and alerts on my computing devices. It is hard enough maintaining focus without having to spend an entire work session playing whack-a-mole at random intervals for a hundred different things that aren’t relevant. I never want to know that my scanner software has an update available.

I realized that at its core, this problem is caused by developers and product managers mistakenly believing that I care as much about their product as they do.

It would be nice if the gatekeepers had mechanisms that punished this behavior. Search engines should lower the rankings of every site with random modals. App stores could display a normalized metric of alert click through — “this app has an above average number of alerts that are ignored”.

bradreaves2··on Your Job used to impress people. That era just ended
> This scene might feel like science fiction

This article is fiction followed by commentary.

If the anecdote were real, it would still be an anecdote: tempting to generalize, but wise to hold loosely.

The article is about how AI will lead to a labor surplus in certain professions, while other professions will retain employment.

The article compares this to the Black Death, where labor supply decreased uniformly. Labor was then able to extract concessions from capital.

Industrialization leads to a different outcome: capital captures more value initially, while devastating workers in the short-term. In the long-term, everyone benefits from higher living standards. Even if the article is correct about AI impacts, it doesn't explain why AI is different from all prior industrialization.

bradreaves2··on The movie mistake mystery from "Revenge of the Sith"
Counterpoint: the past continues to inspire, surprise, and delight.

Your comment about “1700’s newspapers” reminded me of The Past Times podcast, where comedians read random newspapers from across American history. The episodes I’ve listened to were delightful, and they covered mundane news in mundane places.

“O brother, where art thou” is one of my favorite movies. It’s a retelling of The Odyssey (a literally prehistoric tale) set in Depression-era Mississippi, made in the early 2000’s.

The specific question of editing out these production artifacts doesn’t rile me either way, though. I didn’t see the original mistake, and I won’t notice the fix either.

I’ll also agree that just as no one steps in the same river twice, how the past is viewed and interpreted changes over time. What is valued or not also changes. 90% of everything is still crap. And quite a bit of the interest in the past is reflected in remixes or retellings for modern audiences.

Still, people also read Beowulf or Chaucer in the original or in modern translation. Others will enjoy both Jane Austen and Bridgerton. People will listen to Beethoven and Jon Batiste. Sure, not all those things are for everyone, but neither are modern music genres, sports entertainment, or most TV shows.

bradreaves2··on The Press Falls to Another Record Low in Public Trust
Certain right wing figures have spent decades coordinating an alternative media infrastructure whose only goal was to sow doubt about truths that were inconvenient to their political aims.

Any discussion of public media trust that doesn’t include this as a component of analysis is immediately suspect.

An analysis that claims that public mistrust in media is because the media did not create more space for right wing obfuscation and disinformation is at best misguided. In practice, it is more likely another element of the campaign that created the problem in the first place.

There are many valid criticisms of the modern press. “They didn’t conform to the right wing’s warped presentation of reality” is not one of them.

bradreaves2··on The anxiolytic effects of resistance exercise
It's worth noting that this is a paper from 2014. The premise seems well-known now, but I wonder if it was as strong then?

I agree root cause analysis would be more interesting, but it wouldn't be justified until the base phenomena was validated.

Sure, people who do exercise think it helps stress and anxiety, but lots of people also find homeopathic remedies to be helpful. Papers like this show the former stand up under experimentation and the later don't.

bradreaves2··on RFC: 64-Bit Sequence Numbers for TCP
The claim made here is that at 100GbE the sequence numbers wrap in milliseconds. That number seems right (source: vibes).

Why isn’t this a serious problem then? I’d love a networking expert to chime in.

Is it that high bandwidth links also have very low packet error rates?

Or is it that individual TCP flows rarely saturate the link? (Because of congestion control, lower end to end throughput, sharing links, or some other reason?)

bradreaves2··on Don't use Excel for data analysis
OP is citing a post about genomics research data sharing, where they have identifiers that are exceptionally vulnerable to Excel’s date inference and conversion algorithm.

The problem is so bad in the discipline they changed how they name things: https://www.theverge.com/2020/8/6/21355674/human-genes-renam...

OP’s post is probably still a good idea for researchers, where something like SPSS offers better protection for datasets, albeit with a higher learning curve.

For the rest of us, so long as we pay attention, Excel is an incredibly underrated analysis approach.

bradreaves2··on XAI Campus in Memphis May Use 1M Gallons of Auqifer Drink Water per Day
Memphis is unique in sitting on a major artesian aquifer, and its tap water is as good or better than can be bought in a bottle. The environmental group here is concerned about unsustainable use of the aquifer, instead of gray water or Mississippi River water.

TFA states the facility will use gray water, but I think it’s good of watchdogs to make sure that stays the case.

bradreaves2··on Abolish the Jones Act
The author states the purpose of the Jones Act was to preserve US maritime capacity. He then claims that because the US does not have a global hegemony on this market, the Act has failed. Therefore, we should end Jones Act protectionism to compete with China.

I don’t see how removing a guaranteed market will spur investment in the capital intensive activity of ship building.

It also occurs to me to ask how much domestic shipping traffic there is in the first place, and if it is actually price-sensitive. Unlike Japan and Korea, most of the US is far from coastal and riverine shipping lanes.

bradreaves2··on Court decision barring Chinese student sends message about espionage risk
I am a professor of computer security in the US.

Chinese students who want to study this topic in the US face extreme scrutiny in visa interviews. On cursory inspection, there is a logic there.

The logic falls apart when you realize that all academic research is intended to be published. We don’t develop secret IP or trade secrets[1]. Our development offices want us to obtain patents on our work, but that is another form of publication.

I wish the powers that are moving to stigmatize Chinese academics would be clearer why they are doing it.

If they are concerned that students are using a student visa as a cover story for traditional espionage (cultivating assets, etc) they should say so.

If they are doing it in an attempt to starve China of trained workers in cutting edge tech, like they are with chip bans, I wish they would say so.

But claiming this is about “IP theft” makes it unclear if these efforts are pretextual or if our national security apparatus legitimately doesn’t understand the basics of how universities work.

[1] Some labs do classified work, but are limited to cleared citizens.

bradreaves2··on Transputer.net
Is this idea the progenitor of SoCs?
bradreaves2··on Google Fiber - 20 Gig + Wi-Fi 7 will be available to select customers
Supposing they offered this at my house, what could I do with it that I already can't do with gigabit fiber?

Google Fiber already offers 2Gbps to a friend of mine, but he hasn't upgraded because he doesn't see the point. Most of his bulk transfers (Steam, etc.) seem to be throttled at the source, and upgrading from Gigabit to 2.5GbE or 10GbE gear isn't cheap.

I could see this being useful for an office building or an apartment building, but what would a single family home do with it?

bradreaves2··on Inside Ohio State’s DEI Factory
Academic who has served on tenure-track hiring committees here.

At my (public) institution, none of these identities were discussed when considering candidates.

We did look at diversity statements as an indicator of if applicants were aware of the broadening participation requirements set by federal funding agencies.

As an aside, the experiences of the marginalized people you describe don't seem to indicate that there is a net advantage to them. I think anyone who was adopting an identity in bad faith would quickly discover that it wasn't as helpful as they thought.

bradreaves2··on My rants about TP-Link Omada networking products
I bought into the Omada ecosystem in 2020, when Ubiquity was hard to buy and had also just had a major breach.

TP-Link has been good about deploying improvements to the ecosystem.

The flipside is those improvements are basic functionality that should have been present in a commercial product from v1. Like the ability to set firewall rules, which came in late 2021 or 22 iirc.

Other issues:

- The Safari interface issue she mentions is a major pain, and it’s a regression.

- All of their equipment has multiple “versions” under the same model number, and the early adopters like me get updates last for some reason.

- Documentation is ok, but logging and troubleshooting is difficult with the limited interface you get.

- DHCP IP reservation was broken until the last release.

I am glad the ecosystem is improving, and I appreciate having visibility into the network from a single pane of glass.

For a home network I can tolerate these issues. But I would be furious if I were trying to run a business network with it.

bradreaves2··on Ask HN: Where do you sit?
Posture is most affected by muscle (im)balance, so if you want to fix hunching, consider exercises like face pulls that strengthen the back muscles that counter the chest muscles that pull your shoulders forward. There are ways to do these exercises at home with no equipment.

Second to that is the fit of all of your equipment: chair height, keyboard/mouse height, and monitor height. This can be difficult, especially if you are below the median male height.

I use motorized standing desks because they offer the greatest amount of control over surface height. I have a keyboard tray on one that allows me to set the keyboard lower than the work surface. I have all my monitors on arms so that I can set them to the proper height.

As for seating, other posts about spending for quality are right, as are options to buy used.

Herman Miller isn't the only game in town, though. I've been very happy with Steelcase products. I have the Gesture at work, and it's a great work chair with fantastic back support. At home, I have the Leap. Also a great chair for work, but I find it's easier to use in more relaxed tasks (e.g., gaming or watching YouTube).

It's taken me a while to get everything set up ergonomically, and while if you are judicious there are ways to save money, it isn't cheap. Of course, it's a lot cheaper than healthcare, so spend what your budget allows to take care of your body during working hours.

bradreaves2··on Ask HN: How to be a manager? Any good sources for learning how to delegate?
Going from sole principal to having a staff is a unique transition compared to the typical “engineer to first level manager” so not all advice is going to work.

Here is one approach. Not perfect, and there are obviously going to be cases where it doesn’t apply. All models are wrong, some are useful.

A good metric for delegation in your case is “How much work am I doing that could plausibly be done by someone else?” Let’s call that value X, and the ideal value is zero.

Ex: you are the only one who can make strategic decisions for your company. You are not the only one who can send a promotional email.

Your process as a manager should be to systematically lower X over time. Reasons X is nonzero include but are not limited to:

- New staff need training to learn how the org etc works. This should be temporary but unavoidable, and explains why you feel like they are making more work for you.

- Staff need to upskill to take more off your plate. This means either you pay for training or train them yourself. Short term loss for long term gain.

- You have not hired the right kind of staff for the workload you face. Maybe you hired an engineer, but on balance you should have hired an accountant since that actually takes up more of your time.

- There is more work than can be handled by staff. This is an urgent problem that you need to resolve. If you burnout staff you end-up in a death spiral of turnover. The solution might be to replace inefficient processes/systems/practices, reduce work through trimming features/customers/whatever, or hire to handle growth.

bradreaves2··on The DeSantis Campaign Texted Me with a Large Language Model
Is anyone aware of an independent source for this claim? I'm not finding anything using search.

I'm happy to believe the author's account, but I'm curious how widespread this might be. I'd also like to know if this actually came from some group associated with DeSantis, as opposed to a fan who can glue together APIs or another campaign trying to generate bad publicity for a rival.

bradreaves2··on ‘It’s the Wild West’: Vienna’s spying problem spins out of control
Nice try, domestic intelligence service.
bradreaves2··on Construction Time Again: The quality crisis in American building
The article focuses on macro-level construction techniques and materials.

As an American, the thing I find most unnerving is the low standard of workmanship and materials in 21st century homes of middle-class neighborhoods. Incompetent installation of plumbing, electrical, and HVAC lead to all sorts of problems for the homeowner soon after purchase. Finish materials -- even safety critical ones like railings and bannisters -- are the cheapest possible and need replacing within the first decade of ownership. "Builder-grade" means "barely serviceable."

I bought a house built in the late 1970's -- late enough that there's no lead or asbestos, but early enough that material quality and construction was still decent. The cabinets are original and look new. The trim material throughout is all real wood. It was hit by a tornado before I was born and everything is still solid.

A friend has bought several "newer" houses and is always complaining about how nothing works right and is always breaking. I suggested he look into an older home, but he was priced out in his town. He also was unwilling to exchange home size for build quality like I was.

I'm told that if you hire custom builders you can get better craftsmanship and materials, but it's unclear if good build quality is actually reflected at sale time.

bradreaves2··on PhD Simulator
As a former PhD student who is now faculty, I have to say that the pace of the game is one of the most realistic aspects. Every small step forward takes about a month, it may or may not pan out, but it passes in the blink of an eye.

It's a game, so it can't model everything. But I thought the biggest missing thing was "leveling up." As you accomplish more, you should have a higher likelihood of future success, and your hope should increase as you gain confidence and experience.

That's how a PhD works -- those who can get early wins (or stick through a lot of bad bounces) can build on success will finish well.

To rip off Tolstoy, "Happy PhDs are all alike; each unhappy PhD is unhappy in its own way."

bradreaves2··on Show HN: I made CSS Pro, a re-imagined Devtools for web design
I think if I did webdev full time, the price would be easily justified.

OP: Consider hobbyists and generalist who aren’t full time. There might be a market segment for short term access for hobbyists or generalists.

I would be easily willing to pay $2/day to have this while redoing my personal website, but $30 seems steep for a short term use. Doing a daily price could work to bring in users by serving as a low-cost demo.

bradreaves2··on Remembering GitHub's Office, a Monument to Tech Culture
Only for an hour.
Page 1 of 2Next →