HNHacker News
TopNewBestAskShowJobs

cvwright

2,236 karma · joined May 2, 2014

Recovering academic. Security and privacy research engineer.
submissionscomments
cvwright··on Given a place to live, Finland’s homeless were better able to deal with problems
Yes, we pay to defend Europe from Russia, and we do it for free.

We should stop doing that, and invest more in domestic needs.

cvwright··on White House announces new actions to promote responsible AI innovation
> I work within a university and socially impactful research goes through rigerous ethics committees before being approved

This is a gross exaggeration. Only a small portion of academic research requires IRB approval, and it's mostly limited to experiments on humans or animals.

If we were to start requiring IRB pre-approval for all research that might be "socially impactful", it would be the end of progress as we know it.

The first step would be to determine what counts as "socially impactful". You couldn't limit it to just AI. What about security and privacy? Why not all of CS? And then, why not Economics or History?

Source: worked for various universities doing research, first as graduate assistant, then scientist, then tenure-track professor, for 19 or 20 years.

cvwright··on Whisper.cpp v1.4.0
Not Whisper per se, but IIRC LiveCaptions is partially trained using Whisper. It also works really well!

https://github.com/abb128/LiveCaptions

cvwright··on Ask HN: Most interesting tech you built for just yourself?
Counterpoint: the bad people are already doing bad things. There is already plenty of secure communication technology, it’s just not super convenient. The highly motivated weirdos don’t mind that though.

There is a much larger group of people (parents) who need a secure and convenient way to share photos. They are not as driven as the perverts, so they need all the support and user-friendliness that we can provide.

We should build the tools that help the parents protect their kids, and let law enforcement deal with the other group.

cvwright··on Every web search result in Brave Search is now served by our own index
Cool, thanks. I will pass this along to some people who might be able to help.
cvwright··on Ask HN: Most interesting tech you built for just yourself?
That is super cool!

I’ve wanted to do the m3u playlist thing for a long time, so I could create a HLS stream for each “channel”. Then family members could watch from any device.

cvwright··on Every web search result in Brave Search is now served by our own index
What hardware would you want, and how much would it cost?
cvwright··on IKEA Redesigns Its Bestsellers
> * If I went with a butcher block construction, which is heavier, that was $1200.

Butcher block is environmentally friendly because it’s made from lots of small pieces that might otherwise be scrap.

Also, at least in the US, you can get a 30x60 piece of butcher block from a big-box hardware store for not much more than that IKEA desk.

cvwright··on I don’t want to sign up for your newsletter (2018)
It would be cool if there was a “syndication” format for sites to post summaries of all their new content, so then you could have a reader on the client side to collate the news feed of the day.

This syndication format would need to be really simple though. :)

cvwright··on Teach at a Community College
State funding doesn’t matter as much for many CCs because they have local taxing authority, just like K-12 education.

This is another reason why they are often significantly cheaper than a 4-yr school in the same state.

cvwright··on Ask HN: Why is WebAuthn so slow to take off?
Yes, but in order to enable it, they require that you enable an app first.

I can only assume that this tactic is usually an attempt to maybe get your phone number, depending on which phone-based method you choose. Which is especially weird for ProtonMail.

cvwright··on Ask HN: Why is WebAuthn so slow to take off?
I don’t know the answer, but this is a pet peeve of mine.

It’s especially frustrating when sites won’t let you enroll for 2FA with a hardware token. Instead they require that you start with some crap “authenticator” app first. Looking at you here, Gitlab and ProtonMail.

cvwright··on Rural Americans are importing tiny Japanese pickup trucks
Not sure why you’re being downvoted. I live in Dallas and this is 100% true.

What’s fun is when you notice that the biggest, flashiest trucks are all concentrated in the fanciest suburbs. Once you get out in the country, off the main roads like where I’m from, suddenly (1) pickup trucks make up a lower percentage of the traffic, and (2) they are generally* smaller, more utilitarian and more beat up.

* except for the occasional F350 dually pulling an actual horse trailer

cvwright··on California public school enrollment sees big drops
My otherwise nice schools in the 90s were like that. No door on the boys’ bathroom, and no doors on the stalls.
cvwright··on Orange Pi 5 Is a Great and Fast Alternative to the Raspberry Pi 4
The Kirkwoods were great for the time. I had a PogoPlug and a Seagate DockStar.

Thermals were the Achilles heel though - very easy to overheat either one of those little boxes doing simple things like uploading a lot of files to its storage.

cvwright··on Matrix 2.0: How we’re making Matrix go voom
If you’re really eager to try it out, then apparently you will need to set up the sliding sync proxy in front of your homeserver.
cvwright··on US Supreme Court releases leak investigation report
Don’t the WaPo and NYT have anonymous submission sites for exactly this kind of thing?
cvwright··on In the past, I've had students call my problem sets “emotionally trying”
Backup NFL quarterback is a pretty damn elite job. There are what, 50 or 60 of them in the world? Vs dozens of NCAA div 1 starters who graduate every year.
cvwright··on Netflix has created a self-fulfilling cancelation loop with its new shows
> female characters standing around tugging on their hair or smoothing their dresses

Or folding their arms under their breasts. Or commenting on one another's cleavage. Or really any excuse for the author to mention boobs out of the blue for no reason at all.

This seemed to start somewhere around book 4, and it happens WAY more than in any other books I've ever heard of. Super awkward once you notice it. WTF man?

It's like they did some market survey and found that their average readers were all 13 year old boys who wanted to hear about... you guessed it.

cvwright··on Apple announces full Swift rewrite of the Foundation framework (2022)
Mostly through sites like hackingwithswift.com

Those are generally enough to get you to the point where you can make sense of Apple’s documentation.

cvwright··on We have an employee whose surname is Null (2010)
I actually knew a guy with that surname who was a Java developer and data analyst. He did eventually change his name after many years of frustration.

It’s an extreme solution though. Not something you can ask of most people.

cvwright··on End-to-end encrypted messages need more than libsignal
I would love to hear what you and your team think about Matrix’s proposed fixes, especially MSC3917.

To me, it looks pretty good on the surface, but I don’t know if I can convince myself that it’s secure. I’m not even sure if I could write down a precise definition of security here, without banging my head on it for a while.

cvwright··on Practically-Exploitable Cryptographic Vulnerabilities in Matrix
It’s encouraging to hear that you’re getting an audit of the new approach.

Reading over the new design doc for authenticating membership events, and the Github comments, it feels like this is a case for some sort of model checking or automated theorem proving. Manually verifying that the new system does everything we want seems… tough.

cvwright··on Practically-Exploitable Cryptographic Vulnerabilities in Matrix
It’s definitely making the software better.

See the MSC3917 document linked by Arathorn. They have put a lot of effort into thinking about the threat models and how to address each them.

Is it perfect? Well, no. But it’s a hard problem and they are making meaningful progress.

cvwright··on Scaling up a Mastodon server to 128K active users
What are good numbers for a Mastodon server?
cvwright··on You need to earn over $200k to afford a typical home in these 8 U.S. cities
But that is their hypocrisy. If you have a thousand times more than most people, nbd. If you have a thousand times more than them, then that’s an outrage.
cvwright··on Apple Rankings
I suspect the author has a sample size of one for some of these varietals. Some of these descriptions are… off.
cvwright··on Apple Rankings
That’s only because you have terrible taste in apples. :)

Seriously though, who rates Braeburn at 73 and Cortland at 24? They’re really not that different if you get them fresh.

It sounds like they found their test Cortlands in a wet bag behind a dumpster.

cvwright··on Single-Board Computer from a TV
Apparently LineageOS works on some AndroidTV devices, including one that you can get at Walmart.
cvwright··on From Plex to Jellyfin Media Server
They link to a commercial app for the AppleTV. It’s totally worth the $0.99/month until they get the official Swiftfin version working.
← PreviousPage 9 of 29Next →