HNHacker News
TopNewBestAskShowJobs

gregatragenet3

479 karma · joined June 9, 2014

submissionscomments
gregatragenet3··on GLM-5.3 and the spread of advanced cyber capabilities
I've been planning to do pentesting of my self-hosted setup, and will probably use something like glm-5.3.. My stuff was secure from the run of the mill human doorknob-rattlers. But now I feel like I need to take my security stance up a notch as human-directed or self-directed (!) agentic systems seem like a next-level threat.
gregatragenet3··on Data centers consumed 264B gallons of water as drought hits nearly 63% of US
Its about a third of the amount of water used to irrigate golf courses across the United States.

(The number in the article doesn't specify whether data center water usage is just us-bound or global)

gregatragenet3··on Copilot edited an ad into my PR
Cursor added 'made with cursor' to its commits recently. I guess its just the dirction things are going that the tools are now self-promoting.
gregatragenet3··on Passengers who refuse to use headphones can now be kicked off United flights
Getting more pedantic, less than 1pct of the population is in California.

Pretty clear parent meant people who cross against the light / mid-block when there is a crossing 50ft away / stepping in front of the one car on the road when they could look up for one second and step out behind that car etc. in other words the people who put off 'main character' vibes.

gregatragenet3··on Can my SPARC server host a website?
Uhh, Yes? It is literally probably what this machine was doing in 2001.

(Source: guy who hosted websites on sparc's in 1995)

gregatragenet3··on A ChatGPT Pro subscription costs 38.6 months of income in low-income countries
What utility does the guy running a bonbon tè stall get from a frontier AI model anyway?
gregatragenet3··on Objects should shut up
Yes but UI engineer performance is measured by user engagement and user engagement is measured by how much crap is clicked on.

Whats measured is whats managed, and so we have a bunch of unnecessary crap to click on because that pushes the engagement metric up.

gregatragenet3··on The One-Person Framework in Practice
I used to code ruby. Now in python land and am using flask. Theres conventions but no scaffolding. Ai code tools make the scaffolding feel redundant anyway.
gregatragenet3··on Show HN: AgentAPI – HTTP API for Claude Code, Goose, Aider, and Codex
This is a developer. Task manager is a project manager.
gregatragenet3··on UCSD: Large Language Models Pass the Turing Test
Should be afraid.. If people are more convinced an AI is human than a human is human, that means AI will be more likely to convince you to adopt their 'point of view'.

To put it another way, if an AI and a human post two different views on a subject, people are more likely to be swayed by the AI's point of view.

So for much cheaper now organizations can use AI at scale to sway public opinion in a way thats more effective than ever before.

gregatragenet3··on DJI No Longer Blocks Flights over Airports and Military Bases
https://skyvector.com/ for one.
gregatragenet3··on Proxmox Announces Proxmox Datacenter Manager
Have to login to see any of the screenshots
gregatragenet3··on Is NAD your best shot at longevity?
AI summary:

1. NAD+ Injections for Longevity: NAD (nicotinamide adenine dinucleotide) is a molecule essential for cell function and longevity. Injecting NAD+ has become popular for improving metabolism, brain function, and energy levels, with some users reporting benefits like better sleep, improved workout performance, and increased vitality.

2. Celebrity and Athlete Endorsements: NAD+ injections are being used by elite athletes, such as Premier League footballers, and endorsed by celebrities. It's said to enhance endurance and improve performance in sports.

3. Scientific Backing: Research by Prof Shin-ichiro Imai suggests NAD can delay aging and improve quality of life, though there is debate on the efficacy of injections versus oral supplements. Imai supports NMN supplements as a more efficient way to boost NAD within cells.

4. Market Growth: The NAD market is rapidly expanding, with at-home injectable kits now available. These products are costly, ranging from £195 for two weeks to £395 for two months, but demand is increasing.

5. Concerns and Individual Dosing: High doses of NAD+ IV drips are cautioned against by some doctors due to side effects like nausea and headaches. Patients are advised to monitor and adjust doses for optimal results.

6. Lifestyle Factors: NAD levels naturally decrease with age, and lifestyle choices like stress, alcohol consumption, and poor diet can further deplete it. Boosting NAD levels might be a lifelong commitment for maintaining health and mitigating aging.

7. Reported Benefits: Users of NAD+ injections have reported increased energy, improved sleep, weight loss, and potential relief from conditions like Parkinson’s, menopause, and long Covid.

8. Long-term Use and Maintenance: While NAD injections may offer short-term boosts, many users eventually switch to oral supplements for maintenance due to the inconvenience of frequent injections.

9. Caution Against Miraculous Claims: Experts advise against viewing NAD as a miracle cure and recommend blood and genetic testing before use. Results may be more gradual and cellular, such as improving muscle insulin sensitivity, rather than immediate visible changes.

gregatragenet3··on Unrealized Gain Tax–A Coming Sea Change in FY2025 Budget Proposal?
'Unrealized Gains' is one of the methods by which the wealthy avoid paying taxes. When you read the article about 'Billionaire X paid 2% taxes this year' this can be the cause.

It works like this: you pay taxes on income, or realized gains (sold your stock). But you don't pay taxes on unrealized gains.

You have TSLA/AMZN/NVDA stock which has gained $10M, and you have a mansion/yacht payment coming due. You could sell the stock and pay $2M in taxes...

OR

You can get a loan with your stock as collateral. You may pay 7% interest but you still OWN the stock and the S&P grows at a rate of 10%, netting you a 3% annual profit on your collateral stock. AND the interest might be tax deductible offsetting other income taxes you may owe. You pay 0% taxes because you didn't sell anything.

Search for 'buy borrow die' for more resources on this strategy. This new tax proposal is trying to address the problem that the most wealthy individuals in our society pay a much lower percent in taxes compared to the average individual using this type of strategy.

gregatragenet3··on Data Exfiltration from Slack AI via indirect prompt injection
I look at it like antivirus - it's not perfect, and 0-days will sneak by (more-so at first while the defenses are not matured) but it is still better to have it than not.

You do bring up a good point which is what /is/ the effectiveness of these defensive type measures? I just found a benchmarking tool, which I'll use to get a measure on how effective these defenses can actually be - https://github.com/lakeraai/pint-benchmark

gregatragenet3··on Data Exfiltration from Slack AI via indirect prompt injection
What cost? A few cents per question answered?
gregatragenet3··on Data Exfiltration from Slack AI via indirect prompt injection
What solution would you recommend then?
gregatragenet3··on Data Exfiltration from Slack AI via indirect prompt injection
Great, I would love to get some of the prompts you have in mind and try them with my library and see the results.

Do you have recommendations on more effective alternatives to prevent prompt attacks?

I don't believe we should just throw up our hands and do nothing. No solution will be perfect, but we should strive to a solution that's better than doing nothing.

gregatragenet3··on Data Exfiltration from Slack AI via indirect prompt injection
This is why I wrote https://github.com/gregretkowski/llmsec . Every LLM system should be evaluating anything coming from a user to gauge its maliciousness.
gregatragenet3··on What is the significance of the character "j" at the end of a Roman Numeral? (2013)
The most interesting thing is that that post sat for months without the answer "why" it was done, but chatgpt knew, from the comment added 2h ago.

The j was to prevent forgery, or altering the document. ii could be altered later to iii.. but if it was ij its obvious its been tampered with if it later appears as iji

gregatragenet3··on FAA orders grounding of more than 170 Boeing 737 Max 9s
If it ain't Boeing it ain't blowing.
gregatragenet3··on Falcon 3.0 game manual (1991) [pdf]
Still vastly cheaper than 10 hours of flight training in a Cessna that was built when humans were last on the moon.
gregatragenet3··on Helen Toner shares her side
Anyone else come to the realization that when spokespeople talk about "AI Safety" they aren't concerned with the skynet-esque enslavement of mankind or paperclip maximizing, but that controls be in place that prevent people from using the technology in a way that is misaligned with the maximum extraction of profit?
gregatragenet3··on Why we’re dropping Basecamp
TL;DR - Duke is dropping Basecamp due to 37 signals policy of people at work focusing on, you know, writing software that provides customers value, while having a policy that ppl at work not be spending their work time on causing distractions with ideological side-quests.
gregatragenet3··on We have reached an agreement in principle for Sam to return to OpenAI as CEO
Does this mean they'll get back to work improving their Moneyclip Maximizer?
gregatragenet3··on Hearing aids may cut risk of cognitive decline by nearly half
How about this, people who experience hearing loss are more likely to have a /diagnosis/ of dementia? Because hearing loss causes them to underperform on the verbally administered evals.

My father in law got a dementia diagnosis, after this my wife and I started going with him to his appointments - and discovered why he had such a diagnosis. He's the type of person who'll nod and pretend to hear/understand when he doesn't. We know this just from our interactions with him. The tool they use to eval is verbal question/answer and he did much better on the evals when we were with him and keyed the doctor in on that they ensure he hears the question or they give it to him in written form.

gregatragenet3··on Sailcargo
Just did some napkin math on this, just the carbon footprint of the crew for this ship nets out to almost the total carbon footprint of 16.14g-co2/ton/km for container shipping..

Take the average person's footprint of 7co2-ton/yr, math that out with the 80 ton cargo capacity, the short daily distances ~250km/day, 14 crew, and you come out with about 12g-co2/ton/km just for crew for these schooners. easy to see another 4g-co2/ton/km being in just upkeep for a vessel of wood and canvass. So yeah if someone wants to virtue-signal, then go for it ship your stuff this way but don't think you are actually netting out a smaller carbon footprint then a container ship here.

gregatragenet3··on How to build a Linux-based wireless router out of spare parts (1998)
Wow. glad y'all enjoyed that little walk down memory lane.

I am still around and still working in tech -- although nowadays work involves poking API's to launch servers and related infrastructure vs. the time that this article was written where someone in my line of work had to drive to the datacenter whenever a server needed an upgrade or became unresponsive. My roommate at the time is still around too, his work is in the realm of reducing internet latency in routers by doing clever things with their packet buffers.

Some 5 or 10 years after the howto was written Cisco/Belkin reached out to us. Someone had patented putting a wireless card in a router, and they wanted our help with showing there was prior art. That process opened my eyes because to a couple guys like us it seemed like an obvious thing to do to put a wireless card in and network with it, like any other network card at the time it just had an antenna instead of a cat5 cable. Nothing 'inventive' about doing it, its just a logical step. I think they ended up settling so maybe that original patent-holder gets a couple cents on every wireless router, not sure.

I remember the hostname that document was served from when it was written, a tower PC hostname 'screamingslave' (NiN reference), and it served that document from the Redwood Estates (remote) side of the wireless link. 'for work' my work is all cloud infra, I still run my own personal server -- something I built and configured to run openstack, to be a "cloud in a box" -- hostname 'mantaro' (a reference to the river that is the source of the amazon), and that document is served from a VM running within, hostname 'immora' (doom reference).

It seems to be surviving the HN hug-of-death so far, but it was written in what was state-of-the-art for 1998, just a plain html doc, with maybe a css style sheet (did the original even have that?). Yeah no Nuxt/Vue SPA with some nosql backend.

If you wanna see another of my efforts in 98, I was also involved in bringing 'directory services' to Linux, tldr something more modern (at the time) than NIS, using LDAP for managing your users and other directory objects. That doc can be found here http://www.rage.net/ldap/ldapns-howto/

gregatragenet3··on Update on Samsung SSD Reliability
This posting came two months late for me.

My 980 2TB crossed the river styx over the holiday break. Failure mode exactly as described. Nice Christmas present for me. Took 3 weeks to get the warranty replacement from Samsung.

gregatragenet3··on Congress Crams Language to Criminalize Streaming, Meme-Sharing into Omnibus Bill
It's very possible. Simply outspend the other side Disney et al on lobbying and campaign donations.
Page 1 of 4Next →