HNHacker News
TopNewBestAskShowJobs

clwg

669 karma · joined February 23, 2014

submissionscomments
clwg··on Most companies using AI are 'lighting money on fire,' says Matthew Prince
Isn't this essentially just R&D? The hope is that something meaningful will be produced, but it's not necessarily clear what the result will be or whether it will be viable.
clwg··on 23andMe changed its terms of service to prevent hacked customers from suing
She was also married to Sergey Brin for 8 years.
clwg··on Qdrant 1.7.0
I've been using pgvector, it has worked as expected, which is all I want. Personally my choice was based entirely on the fact that I already use postgres, and that it will still probably exist in it's current form after the dust settles on the vector db market.
clwg··on Beeper Mini is back
They could take it the other way and start suspending accounts that use a spoofed device id. For me that's my main hesitation, I don't want to have my apple accounts suspended for violation of ToS.
clwg··on Beeper Mini is back
Back then the networks weren't so locked down to the clients, so it wasn't as big of an issue to have friends on various networks either. I have to call out IRC too.

I definitely look back on those as the "good old days" of chat.

clwg··on NetworkX – Network Analysis in Python
If I want to visualize a graph, particularly large ones I just dump it out to gexf[0] format and load it into gephi[1]. It kicks back some legacy formatting errors but it doesn't really impact the graph. Gephi also supports temporal based graph analysis which is nice.

[0] https://networkx.org/documentation/stable/reference/readwrit... [1] https://gephi.org/

clwg··on OpenAI employees did not want to go work for Microsoft
I can't even imagine what it was like to experience this from the inside, with the entire world speculating on this drama, especially considering that the day before, everyone was celebrating what you and your team were creating.

I have to assume that the environment there was pretty exciting as well, and I hope the energy wasn't ruined by this. I like being surprised by technology and I love seeing people innovate because of what you and your team have pushed to the forefront. Godspeed.

clwg··on 23andMe updates their TOS to force binding arbitration
Society and lawmakers need to update the TOS and legislate these companies out of existence and their databases need to be wiped.

Privacy laws really need to be updated for both collection against individuals as well as taking into account what the aggregate data represents.

clwg··on Intel Neural-Chat-7B Model Achieves Top Ranking on LLM Leaderboard
I would say anything from text classification, entity extraction, sentiment analysis, transcription, etc would be traditional NLP task, even things such as NYSIIS/Soundex processing can be handled by LLM's fairly effectively.

Huggingface categorizes their various models by task https://huggingface.co/models so it is fairly straight forward to determine what models may fit your use case.

clwg··on Intel Neural-Chat-7B Model Achieves Top Ranking on LLM Leaderboard
I use them for classification, entity extraction and embeddings. I also use them as a really light UI for tasks where I don't need the capabilities of GPT3.5/4 which is overkill for the more traditional NLP tasks.
clwg··on Why are we being DDoSed by Cloudflare?
They can also allow service to anyone they want and accept the liability, whatever that may be for doing so, which is what they are doing.

I'm not disagreeing with you, or trying to defend Cloudflare – I just see a very complicated situation, especially when you consider the DNS ecosystem, which in itself is extremely shady. You also run the risk of DMCA-style procedures that would require equal application across service providers and would undoubtedly be abused by bad actors.

clwg··on Why are we being DDoSed by Cloudflare?
I don't believe these groups should have free rein on the internet. However, I am also not in favor of Cloudflare acting as the police of the internet. Ideally the internet shouldn't be so centralized around Cloudflare as it is, while the regulations and laws that would govern such actions to take care of the problem need to be put in place.

It's a tricky situation, and whether or not Cloudflare endorses, facilitates, or turns a blind eye to DDoS attacks shouldn't matter as much as it currently does.

clwg··on Canadian government reaches deal with Google on Online News Act
"The new regulations will allow Google to negotiate with a single group that would represent all media, allowing the company to limit its arbitration risk." - I'm sure this will be a large and diverse group representing the growing diversity of media in Canada, either that or it will be Rogers, Bell and Postmedia doing what they usually do, which is really nothing of value.
clwg··on Is there anywhere in the world someone can just live for free?
That's a really interesting concept. When I think about the Amish, I consider how their religion greatly influences their way of life. I wonder if removing the religious aspect and substituting it with a political ideology, or something else could yield similar outcomes.
clwg··on Morris worm
It's really a sad state of affairs when those issues are still predominant on the internet. You're absolutely right that these are lessons we should take away from it; I just think the lessons needed to have been learned 35 years ago to have made any real difference.
clwg··on Ask HN: Which DNS service do you use for your computer's network settings?
I run an overkill system - a dnsdist instance provides clients on my network with DoH and standard port 53 resolution. Dnsdist forwards to a PowerDNS recursor for resolving internet hosts with root hints. Additionally, the recursor uses a custom Lua script with a Redis backend for firewalling against requests, responses, and nameservers encountered during iteration, and then all traffic is logged through protobuf interfaces with automated analysis that tell's me nothing I don't know since I live alone and baseline everything.

All outbound port 53 TCP/UDP is also forwarded at the firewall through this setup.

clwg··on 1Password detects "suspicious activity" in its internal Okta account
You're absolutely correct. Identity and SSO are hard and require a high degree of competency to do well, and they're massively impactful when they go wrong.

I think the problem is trust. So the question is, why would 1Password trust Okta?

clwg··on Bruce Schneier: On the Cybersecurity Jobs Shortage
I have 25 years of experience in security, encompassing both product and I.T. security in technically focused IC roles.

I find it incredibly unrewarding.

On the front lines, most situations tend to be adversarial or highly stressful. This is the case even when your primary intention is to provide teams with the time and resources they need to address problems effectively - it can be an exhausting process to establish trust and camaraderie with your non-security peers given preconceptions about security in many organizations.

Engaging with the business and executive levels is even more challenging. I often wish that all managers were mandated to earn a CISSP. And while I respect the role of the CFO, as they ultimately shoulder all the risk, I just wish CPA’s would stay away from CISO positions, they’re not helping.

clwg··on Windows 11 available on October 5
You can get this functionality in Windows 10 using PowerToys https://github.com/microsoft/PowerToys
clwg··on State projections for Covid-19
The alternative to over reaction is under reaction. I'd rather take extreme precautions and deal with the economic fallout then under react and deal with the situation that italy is currently in.

I think in this situation fear is good, it ensures urgency and assists with decisive action making, coupled with humility to change course when your wrong. Apathy is much scarier than fear in these situations.

clwg··on Robinhood’s third outage may point to deeper problems in its tech stack
You can use Citus(recently bought by Microsoft) to scale postgres https://www.citusdata.com/
clwg··on Xip.io: Wildcard DNS for Everyone
The simplest implementation of this would be to block all outbound traffic for all hosts by default, and allow only web traffic out through a proxy. Then for other specific services poke holes for specific src<->dst.
clwg··on The Huawei Disaster Reveals Google’s Iron Grip on Android
Fundamentally I would say yes, however most of the countries that the US would likely do this to (Russia, Iran, China, Cuba) have contingencies in place through the implementation of country wide intranets[0][1]. Within those countries you also have localized social, financial and e-commerce services that minimize the general populations dependency on foreign companies and services.

So the US could cut cut them off or manipulate their connectivity to the global internet through something like BGP or DNS, but the impact would be far less than the US doing that against a country such as Canada that has a deep reliance on US infrastructure and services.

[0] https://www.theguardian.com/world/2019/feb/12/great-firewall... [1] https://en.wikipedia.org/wiki/National_intranet

clwg··on The End of an Era for EasyDNS
He's the CEO
clwg··on Bezos Investigation Says the Saudis Obtained His Private Data
Saudi's refer specifically to the House of Saud, which is the ruling family of Saudi Arabia, if another family was ruling it would be {insert family name here} Arabia
clwg··on Serverless Security: What's Left to Protect?
I don't necessarily agree with serverless thwarting DoS attacks. While technically it makes it easy to scale to accommodate the increase load (in the same way that auto-scaling will). The denial of a service is the result of your inability to pay for that "infinite" scalability.

Personally I'd much rather have to deal with my service being offline for the duration of a DoS attack, then have my company go broke from having to pay for the capacity allocated to servicing the attack.

clwg··on Why pens have rubbery grips
I was a teenager throughout the 90's and was a bit of a bully from time to time, and I don't think bullying has changed much since then. If it wasn't a pen, it was the shoes, t-shirt, or the way someone pronounced a word.

Bullies are bullies, they will pick up on any thing they can and exploit it to belittle another person.

clwg··on Demon-Haunted World
It's called a DGA or domain generation algorithm, I believe Conficker was one of the first botnet's to use this approach about 10 years ago, it's pretty standard trade craft nowadays.

https://en.wikipedia.org/wiki/Domain_generation_algorithm

clwg··on US Senate votes to undo FCC internet privacy rules
Does this apply only to the first hop or to anyone that packets route through?
clwg··on EU Referendum Rules Triggering a 2nd EU Referendum
It's a parliamentary system, so the party has to vote in a new leader. We've had similar situations in Canada where the party leader has stepped down, and the party votes in a new leader, who then automatically becomes the prime minister.
← PreviousPage 4 of 5Next →