HNHacker News
TopNewBestAskShowJobs

gabipurcaru

305 karma · joined December 6, 2012

[ my public key: https://keybase.io/gabipurcaru; my proof: https://keybase.io/gabipurcaru/sigs/9-KMrXVWU5AaXEJYrYS35LVRooXg4kSZqBTVe-2jSnk ]
submissionscomments
gabipurcaru··on AGI is not multimodal
multimodality would be very useful, but on the other hand humans can't see infrared, and can't smell ~most things that other animals can
gabipurcaru··on Commission opens non-compliance investigations against Alphabet, Apple and Meta
There are multiple parts to it --

"The 2 May 2023, 6 months later, the regulation started applying and the potential gatekeepers had 2 months to report to the commission to be identified as gatekeepers. This process would take up to 45 days and after being identified as gatekeepers, they would have 6 months to come into compliance, at the latest the 6 March 2024.[8][32] From 7 March 2024, gatekeepers must comply with the DMA. [33]"

https://en.wikipedia.org/wiki/Digital_Markets_Act

gabipurcaru··on Bad bots account for most internet traffic? Analysis
> people only do it when there's no API

Legitimate scrapers, maybe. Everyone else does it to circumvent the API limitations, by posing as real traffic. APIs imply API keys which can be traced and banned.

gabipurcaru··on Exclusive access for LLM companies to largest Chinese nonfiction book collection
this is fairly easy to test for yourself. What did you try?
gabipurcaru··on Build your own BitTorrent
This is super fun! I did the same back in uni, it was an awesome project: https://github.com/bbpcr/Yomato
gabipurcaru··on Add extra stuff to a “standard” encoding? Sure, why not
yep, I think it's quite standard. The BitTorrent protocol also uses it extensively : https://wiki.theory.org/BitTorrentSpecification#Bencoding
gabipurcaru··on Engineering Intensity
this also implies that you can train for more sustained intensity, which I think is absolutely true. You can become a brilliant engineer by finding the right balance of intensity and R&R, assuming this is what you want
gabipurcaru··on Scientists claim >99 percent identification rate of ChatGPT content
As usual, journalists trying to explain what scientists do and misrepresenting the facts.

The paper mentions accuracy i.e. (true positives + true negatives) / total examples. And it's actually 100% accurate i.e. there are no false positives _or_ false negatives.

But the big caveats are:

1. this was tested only on 180 examples, which is a very very small dataset to draw conclusions on, and

2. this is obviously an adversarial space so any classifier will be obsolete with the next training run

I'm bearish on any attempt to distinguish real content vs. AI generated content (on any medium, text, image or anything else). This is an adversarial game and the AIs can incorporate your fancy algorithm to fool you better. In the end these projects only end up improving the AI models in terms of realism.

gabipurcaru··on Nvidia is now a $1T company
people buy their stuff.
gabipurcaru··on Microsoft is slowly rolling out ads in the Windows 11 start menu
well, to be fair, the app store has ads in search. When you search for app X, you're likely to see its competitor Y as the first result. (Though this is obviously not Jobs' doing.)
gabipurcaru··on Reflect – App for recording and connecting notes, ideas and contacts
Nice. I'd be super interested in deeper AI integrations for note taking apps, to help you reach certain goals, e.g.:

- calorie counting or diets: just write down what you ate, and it should be good enough to compute calories, macros etc.

- gym logging: write down when you went to the gym and what you did, and it should give you tips, help you maintain your routine and other helpful things

gabipurcaru··on Web fingerprinting is worse than I thought
I'm pretty sure wget has plenty more users in addition to Stallman
gabipurcaru··on GPT-4
This is what they claim:

We did no specific training for these exams. A minority of the problems in the exams were seen by the model during training, but we believe the results to be representative—see our technical report for details.

gabipurcaru··on Show HN: Notes.cx – A simple, anonymous online notepad \w Markdown support
this looks nice and clean. Generally, the problem with these services is that they can easily be used for malicious purposes -- fronts for data exfiltration, scamming etc., so there will be some cost attached to responding to various queries and takedown requests

https://mediasonar.com/2019/07/11/pastebins-data-breach/

gabipurcaru··on Clubhouse data leak: 1.3M user records leaked online for free
Same as the recent FB and Linkedin incidents. It's all scraped data. Doesn't mean that collecting public data at scale is not something bad
gabipurcaru··on In Praise of the Unambiguous Click Menu
My one contention with click menus is that clicking on _anything_ has a nonzero chance of accidentally navigating away from the page, depending on the particular website's implementation (and depending on whether the JS assets have finished loading). Hover menus are risk free in this regard
gabipurcaru··on Facebook is gambling Australia can't do without it. What if we prove them wrong
> The government says the code will initially focus on Google and Facebook, but could be expanded to other tech companies.

https://www.bbc.com/news/world-australia-56107028

gabipurcaru··on Terraria on Stadia cancelled after developer's Google account gets locked
> I'm not saying that companies shouldn't be able to suspend accounts temporarily. I'm simply saying that there needs to be a way to get your account unsuspended if you're innocent. The way it "works" now is that innocent consumers are without any recourse whatsoever.

This is absolutely spot on, with the caveat that you do need to disaggregate from accounts to people, which is the hard problem. Having people call a phone number is definitely not going to work as a way of achieving this disaggregation. I'm pretty sure I could create a system to bring that call center to a halt with fairly minimal cost in less than a week of coding.

As an attacker, you can also hire people in call centers to make phone calls at scale for you.

gabipurcaru··on Terraria on Stadia cancelled after developer's Google account gets locked
> How many innocents have to get caught in the crossfire before we start protecting them?

> Again, it's not a "request" [..] suspension notifications can also be automated.

Can you clarify what you mean by "protecting" them? I'm not sure suspension notifications qualify as meaningful protection

gabipurcaru··on Terraria on Stadia cancelled after developer's Google account gets locked
privacy, online safety, no false positives

Pick two.

Different companies do different trade-offs. The optimal solution depends on how the internet community weighs each individual axis

gabipurcaru··on Terraria on Stadia cancelled after developer's Google account gets locked
> The "spammer" can only pretend to be 10 million different people because e-mail is free. Paying a tenth of a penny per e-mail has been one of those long-standing impossible anti-spam measures, but walled gardens can implement something like this at their whim.

Maybe. A few problems here:

1. payments come with privacy concerns, unless maybe you're talking about zero-knowledge-based blockchains, but we're a LONG way from such functionality being widespread

2. $0.001/email is actually very reasonable for an attacker; they'd probably gladly pay even up to $1 or more, depending on their exact needs, especially if that comes with an elevated privileges account

3. all of this is easily defeated by fanouts. E.g. if they sign up with bob@gmail.com and then are able to use bob+1@gmail.com, bob+2@gmail.com etc. to sign up for a different service, this defeats the purpose

gabipurcaru··on Terraria on Stadia cancelled after developer's Google account gets locked
the legal system deals with a finite number of people; the internet enables that finite number of people to act as a potentially infinite number of entities, without a great way of disaggregating them into people.

E.g. if a spammer can pretend they're 10 million different people, and each of those "people" requests an explanation, the whole system grinds to a halt.

This is the reason behind a push for more KYC-like verification on these platforms (e.g. asking for IDs). But this comes at a huge privacy cost for legitimate users. So one way or another people who are real, legitimate and with good intentions somehow pay the cost of the harm that is being done on the internet. This is a hard problem.

Source: am thinking/working on this sort of stuff; not representing my employer, my opinions are my own etc. etc.

gabipurcaru··on Pfizer Covid vaccine approved for use next week in UK
gov.uk: https://www.gov.uk/government/news/uk-authorises-pfizer-bion...
gabipurcaru··on AWS Lambda pricing now per ms
same. I went through the trouble of implementing my function in Rust (Rocket), and it's actually quite slow because (a) startup is slow and (b) async/await is still pretty painful to use so I'm blocking on IO
gabipurcaru··on Your single-page app is now a polyfill
it's just a bunch of JSON bundled inside the rest of the JS assets with webpack
gabipurcaru··on Your single-page app is now a polyfill
> Ship your users an app including a copy of the data ahead of time

I did exactly that with a hobby project (https://www.acceleratul.ro/). The funny thing is that I had to add a short (~50ms) artificial delay with a spinner before showing search results, because people completely missed the fact that the page had refreshed

gabipurcaru··on Facebook announces policy changes ahead of 2020 elections
https://transparency.facebook.com/community-standards-enforc...

https://www.oversightboard.com/

gabipurcaru··on The first human trial in Europe of a coronavirus vaccine has begun in Oxford
WHO publishes a list of the vaccine landscape here - https://www.who.int/blueprint/priority-diseases/key-action/n...

As of April 20 2020, there were 5 in clinical evaluation and 71 in preclinical evaluation. I'm a layperson, but very interesting to see the different techniques and testing methodologies used.

gabipurcaru··on What Is Good About Haskell?
Can't really comment on that - most of the code I use is built on the awesome Haxl[0] so we never have to worry about those things. I'm curious what other people think though

[0] https://github.com/facebook/Haxl

gabipurcaru··on What Is Good About Haskell?
I've been using Haskell for quite a bit in production. My personal take, as an engineer who is generally skeptical of fancy language features:

Plus:

- The type system. It can make your life a huge pain, but in 99% of the cases, if the code compiles, it works. I find writing tests in Haskell somewhat pointless - the only places where it still has value is in gnarly business logic. But the vast majority of production code is just gluing stuff together

- Building DSLs is extremely quick and efficient. This makes it easy to define the business problem as a language and work with that. If you get it right, the code will be WAY more readable than most other languages, and safer as well

- It's pretty efficient

Minus

- The tooling is extremely bad. Compile times are horrendous. Don't even get me started on Stack/Cabal or whatever the new hotness might be

- Sometimes people get overly excited about avoiding do notation and the code looks very messy as a result

- There are so many ways of doing something that a lot of the time it becomes unclear how the code should look. But this true in a lot of languages

Page 1 of 4Next →