HNHacker News
TopNewBestAskShowJobs

laurowyn

177 karma · joined April 21, 2020

submissionscomments
laurowyn··on EU interior ministers welcome mandatory chat control for all smartphones
So then you just sideload the messaging app instead of using the official build that complies with the legal system. Just like many crime groups do already - look at the EncroChat phones that gangs were using.

This just isn't enforceable. Yet more laws made by people that don't understand the technology.

laurowyn··on Tell HN: Tesla rear-ended me on autopilot, no one will investigate
So what should they do? Copy OP and publish as is with no follow up, investigation or additional information? or should they do their job and investigate a claim that could be of interest to the public?

Not like they could get information from OP, and then make a FOIA request of the two departments OP mentioned to identify similar reports and write the facts up in an article for us to read, understand and decide for ourselves if it's an issue. That's good journalism: give the facts and let the public make opinions, not the current system which gives the opinions and let the public make up the facts. Just like this post, deciding it's a wide spread issue and the comments agreeing it is without any evidence.

laurowyn··on ‘Trojan Source’ Bug Threatens the Security of All Code
Because visual representation is separate from the underlying data structure. A string container doesn't have a specific direction, only a relative one. I.e. This character comes before the next and after the previous. Adding the bidi control code, the string indicates when the visual ordering changes in this relative direction system.

You could absolutely design a new string container that assumes left to right at all times and cannot be changed, but then it's on the programmer to ensure that strings are copied or concatenated in the right direction, at the right location, and substrings searching becomes a minor headache. How would you concatenate an RTL string to a forced LTR string representation? You would have to work out whether the end of the string it LTR or RTL. If LTR, append directly. If RTL find the character where the direction changes and insert the string in there - much more expensive. Better to just append the string, using bidi codes where required, and let the frontend process the string to make the appropriate direction changes. Yes, you may need to search the string for the bidi code to know which direction you're going at the end of the string, but that's just a simple reverse string search for a single control character, and not a complex variable multi-byte search of inferred character directions by codepoint values.

I think the issue is in the locations of which bidi codes are rendered. They provide an inherent untrustworthy-ness to the text area they're rendered in, and so should be treated as an exception in critical situations. I've seen the reversed exe file name trick used for years, and every time I ask myself why that's even a thing? If the OS used file headers and magic numbers to determine file types instead of the filename, it would be less of an issue.

For source code, I would question the rendering of RTL text in a source code editor as it's an obvious issue for code safety. Ideally, all source code would be kept to the same origin language - doesn't have to be english, just consistent. Any non-conforming text should ideally be loaded from a resource rather than inline within the source code, to avoid foreign character contamination and allow easier identification of these issues. Further, source code rendering should only render identified safe control codes, and treat unsafe ones as raw binary values to be shown as such - i.e. \r and \n are safe, \b is unsafe, and bidi codes would also be unsafe. You could even go so far as to include them in the syntax highlighting, but that results in a dependency on syntax highlighting to show the semantics of the source code rather than the text alone.

laurowyn··on What’s the Point of 15-Minute Grocery Delivery?
I checked Tesco when posting, and could get a late evening delivery slot on Saturday. Collection I could get 7am Saturday morning. Not saying the system is perfect, but it's definitely possible to get next day delivery on groceries. Even Amazon doesn't guarantee next day on everything after a certain time, and I see this as much the same - you snooze, you gotta wait an few more hours.

I am interested in a deliveroo/just-eat style grocery shopping solution though. If the store can pick and pack your order in 3 hours and put it at the front of the store for collection by a group of drivers that are constantly in rotation, how is that any different from collecting my takeaway and driving it to my house? It really isn't, but it's also not an urgent operation that needs such a quick turn around time IMO. I'm sure others will pay for the convenience, but I'm personally happy waiting 12 hours and collecting it myself so long as I don't have to step inside the store.

laurowyn··on What’s the Point of 15-Minute Grocery Delivery?
This is a thing in the UK - both collection and delivery. In fact I can even order in the morning and collect in the evening, if the collection point has the availability on the day. Otherwise I can order for delivery the following day, or up to 2 weeks in advance. Typically a £1 charge on top of groceries, but the actual amount can vary based on how busy the system is in the timeslot you pick - can even be free as a way for them to spread out customers across the timetable.

I didn't use it until the pandemic kicked off, and then I only started using it as a way to avoid the long queues outside supermarkets. And it was a revelation. I can now select everything I want to buy over the course of a few hours to a few days, and then go and collect at the time I picked. I rarely forget anything, as I can just add it to the order as I remember it. And from arrival to departure is normally no more than 10 minutes, can be ridiculously short if you pick the right timeslot, or can be up to 30 minutes if busy - that's still faster than parking, going into the store, wandering around, forgetting things, checking out and loading the car.

The downside to it is if an item isn't available, you may get some weird replacements or just don't get the item at all. But that's not entirely different to if you went inside anyway.

In all seriousness, if Amazon can get a delivery across the country and out for delivery within 6 hours, supermarkets should be able to select your order, pack it and make it available to collect from the store in less time.

laurowyn··on How I re–over-engineered my home network for privacy and security
You're making an apples to oranges comparison. If you knit a scarf and give it away, all you're left with is the knitting needles and the knowledge of how to make another scarf. Same thing with ansible - you're left with ansible and the knowledge of how to write a playbook in future.

But also, why do you care so much about what other people do with their time? Live and let live, my friend. Nobody is forcing you to write ansible playbooks, build your own homelab, or comment on posts you view as a waste of everybody's time.

laurowyn··on MP Maria Miller wants AI 'nudifying' tool banned
The quote was about the technology in general, not the specific application.

The technology has plenty of applications in CGI and trying to push through the uncanny valley. By no means am I claiming that a tool designed to generate sexually explicit material without consent is an appropriate use. But the fact is, technology is used and abused every day without having such huge sanctions put on it. What makes this any different? the fact it's new.

But it's not a new trend by any means. 20 years ago, 'x-raying' was a thing. Photoshop someone to look like their clothes are transparent. Or the bubbles effect, using circles cut out of a mask layer to hide clothing to make the image look like a nude without showing anything explicit.

The fact is outlawing technology just means something new will turn up to replace the old. Whereas making the end product illegal to possess and/or distribute gives a far more beneficial power to law enforcement and the legal system. "I'm sorry officer, these were generated using a different tool, so they're actually legal" or "you can't prove what tool was used to create them" would be perfectly viable defences if the tool is outlawed, vs the act itself.

laurowyn··on MP Maria Miller wants AI 'nudifying' tool banned
First one, then the other.
laurowyn··on MP Maria Miller wants AI 'nudifying' tool banned
>> "If software providers develop this technology, they are complicit in a very serious crime and should be required to design their products to stop this happening."

so we should outlaw any piece of technology that can be misused?

This is what happens when technologically inept people make laws to regulate technology. By this standard, cameras should be outlawed in case they're used to take sexually explicit pictures without consent. Computers should be outlawed in case they're used to distribute anything illicit.

Outlawing the production (by any means) and/or distribution (by any means) of non-consensual, sexually explicit material should be enough. If someone can show evidence that someone has produced to shared such content, then that's enough to demonstrate the offence.

No need to go stopping the rest of us from using technology just because some disgusting excuse for a human decided to demonstrate some of the worst of humanity with said technology.

laurowyn··on MP Maria Miller wants AI 'nudifying' tool banned
So just delete the exif data, and we're back to square one.
laurowyn··on Despite Tuesday’s flight, Jeff Bezos is running out of time to save Blue Origin
Where did anybody expect Blue Origin, SpaceX and Virgin Galactic by this point? 17-20 years of R&D, building on decades of rocket science and space exploration, consulting with NASA et al. and between the three of them, only 1 has been able to send humans into orbit and that was only very recent.

20 years to go from a pile of cash and no experience, to a full production line of safe orbit-capable launch vehicles is a very big ask. SpaceX has achieved that, but at the cost of many of its employees (just look at the press around SpaceX working conditions).

Yes, it's longer than the time between the Mercury missions and Apollo 11, but the 50s-60s era of space travel was significantly higher risk. If corners could be cut in the same way, no doubt 20 years would have been fairly reasonable. Add in an existing presence in space R&D and the shorter time frames of the space shuttle program seem even more reasonable. But that just isn't possible in today's safety first world.

laurowyn··on Despite Tuesday’s flight, Jeff Bezos is running out of time to save Blue Origin
My point is he could buy a lot of time to save the business. He's not "running out of time". The entire article just feels like: woe is the billionaire's pet project failing because it's not profitable in an unreasonably short amount of time despite plenty of cash availability if said billionaire wants to continue and achieve their original goals.
laurowyn··on Despite Tuesday’s flight, Jeff Bezos is running out of time to save Blue Origin
Has he some how gone bankrupt? I can't help but feel if he wants to keep Blue Origin running, he could use a handful of the cash he has laying around one of his mansions. or one of his yachts. or his Texas launch complex. Pretty sure he could bank roll Blue Origin for decades without seeing any significant hit to his personal wealth.
laurowyn··on MongoDB Wire Protocol Specification License
The license is for the published version available publicly only. There's no reason why it can't be separately licensed to an individual/entity to grant commercial use on a case by case basis. This is no different from negotiating a contract - the license defines the terms under which you are allowed to use the provided software.
laurowyn··on All public GitHub code was used in training Copilot
Which is why I think this could be a big turning point. IMO, GitHub is breaking licenses. If an ML algorithm ingests a viral licensed block of code, its outputs should be tainted with that license as it's a derived work. Otherwise I can make a program reproduce whole repositories license free, so long as I can claim "well, the AI did it, not me!" It's produced something based on the original work, therefore it should follow the license of the original. And that issue is exacerbated by the mixture of licenses available - they will all apply at the same time, and not all are compatible.

I would hope GitHub (and Microsoft) did the legal work to cover this, and not just ploughed ahead with the plan to drown any legal challenges. From my perspective, they're doing the latter.

laurowyn··on All public GitHub code was used in training Copilot
which is a different issue to my point, but still very valid. what terms are implied if no license is specified? I would argue attribution should be expected if used, but I also wouldn't go near any code without a specific license attached as there's no express permission given - just because a license isn't disclosed doesn't mean it isn't there.

you can't go copying anything and everything just because nobody has told you that you can't. and I feel that's part of the purpose behind GPL. force a license on derivative code so that at least there's clear rights moving forwards.

laurowyn··on All public GitHub code was used in training Copilot
All of the copyright cases were settled, so no precedence is set. Open source as a contract has been ruled legal, and licensors can sue for breach of contract - which is not the same as copyright infringement.

I think my point still stands.

laurowyn··on All public GitHub code was used in training Copilot
Could this be the beginning of the true test of open source licenses? My understanding is that there has never been a ruling by a court to give precedence to the validity or scope of any open source license. I can see a class action suit coming on behalf of all GPL licensed code authors.
laurowyn··on FINRA Orders Record Financial Penalties Against Robinhood
This is why I asked the second question. If FINRA has no obligation to enforce its punishments, but doesn't want to deal with the fallout of the same company with the same name and leadership reapplying for membership, then how do they get around that? Force the company to change name, change executives and reapply in 6 months. it all blows over, FINRA gets their membership fees and everybody is none the wiser.

But yes, in an ideal world it wouldn't work this way. who watches the watchmen? If FINRA isn't regulated, then they can do what they like.

laurowyn··on FINRA Orders Record Financial Penalties Against Robinhood
Which begs the question; why can't you just ignore the fine, rebrand under a new name (including changing leadership) and then apply for new membership?

What is keeping FINRA's interest in following up with punishments of members?

laurowyn··on Audacity 3.0 called spyware over data collection changes by new owner
Yes, and I agreed with that in my comment. My point is that the software already hands out some data by its core function, so users are generally accepting of losing a little more data as long as it seems reasonable.

It's the psychology of "well, it's already sharing some data. what's the harm in a little more?" There will always be people that want minimal data sharing, and I'm one of them, but the vocal minority are exactly that - the minority. The majority of users don't actually care, which is why the data harvesting industry is as big as it is - plenty of data out there to harvest.

laurowyn··on Cryptocurrency Blockchains Don’t Need to Be Energy Intensive
But as the coin with the largest market cap, greater than the next 9 put together [1], is by far the biggest one.

I agree though. Bitcoin isn't the only crypto coin worth talking about.

[1] https://www.forbes.com/advisor/investing/top-10-cryptocurren...

laurowyn··on Audacity 3.0 called spyware over data collection changes by new owner
I think the argument is that things like Firefox need to share some data with third parties to function correctly. The remote web server needs to know what page you want, your login details etc. That's not to say there's other things that Firefox does that isn't privacy focused, but it's accepted that Firefox has to share some data at some point to function.

Audacity, however, doesn't. It's a standalone application. It works on local files. It has worked perfectly fine like this for decades. And now a new owner has come in and changed that within weeks. That's not okay.

The same complaints are being made about other software doing similar. For example, Microsoft's attempt to make all Windows accounts online. We've had 30+ years of Windows without online accounts. Why should that change? and most importantly, why must it be forced upon unsuspecting users?

I do agree with you, though, that anybody can call it anything they want, and that doesn't make it true. But it's also fair to be suspicious of unnecessary changes that, on their own may seem innocuous, but together lead to something far worse.

laurowyn··on Microsoft announces Windows 11
I think the implication is TPM 2.0 and secure boot preventing users from booting unsigned code and installing Linux.
laurowyn··on Effects of cat ownership on the gut microbiota of owners
What is this even supposed to mean?

Humans are outdoor animals. Yes. Well done. A+. We even have opposable thumbs, which means we can operate door handles and make our own way outside. Or are you asking us to demolish our houses and live out in the farmland now?

We build homes for warmth and security. Even our nomadic ancestors built movable homes (tents, teepees, caravans, mobile homes, RVs etc.). Just because an animal is supposed to be outside, doesn't mean it has no benefit from access to an indoor area. The rules for survival fit animals just as much; 3 minutes without air, 3 hours without shelter, 3 days without water, 3 weeks without food. The numbers will be different, but if an animal cannot find shelter on a cold night, it's unlikely to survive (unless specifically adapted for that situation).

laurowyn··on Effects of cat ownership on the gut microbiota of owners
You should probably qualify this with location.

Countries that have had domestic and wild cats for millennia are mostly unaffected by domestic cats being outside, especially in urban areas where wildlife is overrun by vermin.

Yes, there are plenty of examples of cats causing issues, but only in locations where they were introduced and not where they are native. Australia is a good example, as domesticated cats have become a nuisance and bred in the wild. But then you look at what has happened since the cat population was culled, with the many videos of mice on farms. Removing them isn't a perfect solution, as they've been around long enough to become a part of the ecosystem and not just a destructive force.

I would also qualify this with; cats should be kept inside whilst in heat. Many of the issues caused by cats are due to owners letting their cats reproduce. Where cats have a good supply of food, naturally they will reproduce up to a balancing point with the available food. Many cat owners are unaware (or just don't care) about cats reproducing and the impact that has. Spaying/neutering is also a viable option if owners don't want to have to lock their cats in during their heat cycle - cats birthing can be traumatic for the mother, so this can be a major benefit. Similarly, male cats will mate with multiple females so neutering is many times more effective than spaying alone.

laurowyn··on Effects of cat ownership on the gut microbiota of owners
This, in my opinion, is why we can't have nice things. Calling for the death of any living thing that we disagree with isn't okay. And trapping an animal indoors where it can't exercise its natural tendencies is also a non-solution.

I completely understand the want and need to protect your property from intruders, animal or human. But calling for the death of any and all animals that enter your property is borderline psychopathic IMO.

There are humane ways to deter animals from entering your property. Something as simple as spraying a cat with water will deter it effectively - no need to murder it. Other options include putting down plastic spikes (that don't cause injury) on garden fences, growing certain plants which cats dislike the smell of, or even sprays that cats dislike.

And for future reference; if your neighbours cats are pooping in your garden beds, keep the surface of the soil moist. Cats (generally) won't dig in wet soil, and will instead find somewhere else to go. And your plants will appreciate the extra water.

laurowyn··on Particle seen switching between matter and antimatter at CERN
I'm not reading that as the matter/antimatter didn't annihilate each other after the big bang. Rather, that matter and antimatter were not produced in equal amounts - if they were produced in equal quantities, why do our observations show such a large amount of matter and not equal amounts of antimatter? production and annihilation are balanced processes, so why the heavy sway to one side?

Th obvious suggestion is that if there was equal amounts of antimatter near us, we would likely be annihilated already. But that doesn't explain why so little can be found remotely either.

The potential for matter and antimatter to alternate is an interesting proposal that could explain our little island of stability in the universe.

Or it could be something else entirely. I'm a software engineer, not a physicist.

laurowyn··on I mailed an AirTag and tracked its progress
Good job nobody has posted a teardown of the device, with detailed notes on how to open it without damage and where the speaker is mounted. Otherwise anybody could prevent their airtags from beeping and alerting their stalking targets that they're being tracked.
laurowyn··on The global chip shortage is starting to have consequences
Taxing the hell out of it would work. What company would want to pay 90% of their cryptocurrency in taxes? and if you can't pay your taxes in cryptocurrency, and instead have to convert it to cash, that'll drive the price down pretty quick and make everybody scatter.

edit: to head off the downvote brigade, I'm not advocating for this. Only pointing out that "banning" doesn't necessarily mean outlawing its use, but can also include making it unfavourable to use.

← PreviousPage 2 of 3Next →