HNHacker News
TopNewBestAskShowJobs

maxcoder4

214 karma · joined December 14, 2023

submissionscomments
maxcoder4··on Monogon: A Linux userland in pure Go
It also, AFAIR, gives you full reproducibility which is nice.
maxcoder4··on Some notes on Firefox’s media autoplay settings in practice as of Firefox 124
Ublock origin has this feature where it blocks large media files automatically (you have to click to load them). I use it for a long time and never had problems because of it.
maxcoder4··on Full-scale file system acceleration on GPU [pdf]
There are plenty of cases where you can't just change the file layout. And the GPU filesystem is being implemented by someone else, so the choice is: migrate your data to another filesystem OR fix the data-in-files layout, even though the files may come from completely different source than your application, the layout may be a standard or other applications may depend on it, or you can't easily change it for another reason.
maxcoder4··on Banner blindness
They were obviously on autopilot. People are sometimes tired, may be going through a lot, think about something else at the moment, and just don't read every sign on every doors they find. You sound a bit bitter here. I know I am friendly distracted and made many similar mistakes in my life - but never intentionally.
maxcoder4··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Is this lzma compressed? Hard to tell because of the lack of formatting, but this looks like amd64 shellcode to me.

But that's not really important to the point - I'm not looking at a diff of every committed favicon.ico or ttf font or a binary test file to make sure it doesn't contain a shellcode.

maxcoder4··on Backdoor in upstream xz/liblzma leading to SSH server compromise
Imagine someone tried to revert all the commits you ever did. Doesn't sound easy.
maxcoder4··on Doom Captcha (2021)
What's wrong with "start with sound" and "start without sound"? That's a guaranteed single click, whereas with a checkbox you need either one or two clicks.
maxcoder4··on First practical SHA-256 collision for 31 steps. fse2024
1) yes, I gave you an example of a hash algorithm that is broken right now. SHA1 is only getting there, because the attacks are always only getting stronger. Responsible people don't wait until the attacks are practical and devastating, but instead react by predicting the obvious things that will happen in the future.

Overall I don't think you're arguing in good faith, so I'm going to walk away from this discussion.

maxcoder4··on Ethereum has blobs. Where do we go from here?
I can't walk into a store and pay with USD either. It doesn't mean USD is not a currency, it's just not usually accepted by stores in my country.

I use Monero semi-regularly to pay for things online (usually privacy products, because sadly nobody is interested in selling me groceries in exchange for xmr). You can absolutely buy things with it.

maxcoder4··on Ethereum has blobs. Where do we go from here?
I'll rephrase a bit for the HN crowd: "The Ethereum currency (Ether) value proposition is that it is used to pay for decentralized apps on the Ethereum Blockchain. The more application and users are there, the more Ether is needed and hence it's value goes up". At least that's how I understand it.

OPs point is that most cryptocurrency advocates go for "but my token and hold, it is sure to grow 10x in a few months" and I (like probably OP) consider it misleading baseless hope at best, fraud usually.

maxcoder4··on Ethereum has blobs. Where do we go from here?
As the OP said, the cryptocurrency you're looking for is Monero.
maxcoder4··on Ethereum has blobs. Where do we go from here?
>More generally, I would say that Etherium itself is mostly nonsense.

It's "Ethereum". You can't even write the name of the project correctly, so how can I trust you expertise on that?

>I will admit I don't understand very well what the purpose of the "blobs" are

But we're talking under a link to a post about blobs? Sounds like an important context.

>from my perspective the entire idea of blockchain technology is not useful

Instead of trying to discuss that (and I could) - on HN there are plenty links to thinks I don't consider useful, like retrocomputing, programming in AGDA or yet another rust rewrite of some tool. I don't go around and leave nonproductive comments there, i just don't click them. Why do you feel a need to do so?

maxcoder4··on Ethereum has blobs. Where do we go from here?
That sounds suspicious. Maybe a few years back out would work, but now cryptocurrency is pretty regulated.

And at the same time it's not battle tested. Any CFO who signs of on something like that risks shareholder fury when anything goes wrong.

maxcoder4··on Ethereum has blobs. Where do we go from here?
I use it everywhere where it's an option (so not very often, let's say once a month). I also only use privacy services (vpn for example) where you can pay using cryptocurrency, otherwise what's the point
maxcoder4··on AI hallucinates software packages and devs download them
That's not true. For every non-trivial[1] question I've asked chatgpt hallucinated and then kept hallucinating no matter how many times I've asked, clarified, or gave it hints.

[1] i.e. specific to my niche where i didn't know the answer immediately.

maxcoder4··on AI hallucinates software packages and devs download them
In many cases yes, but: What if you publish multiple tools in a single package? What if you publish a package for a web service called X, but also include a tool for it called xcli? What if your package is primarily a library, but you also include an optional cli (like in this case, probably)?

I think what's worse is publishing a package under a different name than its root namespace.

maxcoder4··on First practical SHA-256 collision for 31 steps. fse2024
Birthday attach is a real attack and often useful in practice. "Just use brute force" is a huge oversimplification, but the SO link explains it in more detail.

One time pad is not a hash algorithm so obviously a generic attack on a collision function doesn't apply to it.

maxcoder4··on First practical SHA-256 collision for 31 steps. fse2024
Do you mean with the current public knowledge or hypothetically? For md5 all of these are doable right now (except maybe code that "makes sense"for human reader). Also in practice it's much easier to do this with a data file, as demonstrated for SHA1 with a "backdoored" certificate.
maxcoder4··on Scientists rename genes to stop Microsoft Excel from misreading them as dates (2020)
when I type "age" into a spreadsheet it is text. When I type "23" into a spreadsheet I can later use it as a number without converting to another type. People want and expect this behavior. What is your preferred solution to this problem?
maxcoder4··on ZenHammer: Rowhammer attacks on AMD Zen-based platforms
>Even a "gamer" on a pure gaming computer will have some crucial information on that machine

Which belongs to the gamer user, so it can be extracted or encrypted by every malware running on that system. No need for esoteric attacks like rowhammer at this point. Unless you think about, for example, exploring user machine via rowhammer in js running in a browser tab, but as far as I know that was never made practical.

maxcoder4··on Friends don't let friends export to CSV
They kind of do. In my language there exists a central "governing" body that decides what is correct, and some "incorrect" regionalisms are disappearing because of it.
maxcoder4··on Why do regexes use `$` and `^` as line anchors?
I clicked this link because the question is interesting. Yes the answer won't change my life, or even make me more money, but it got me curious. That's why I don't think your response is helpful or insightful.
maxcoder4··on Crypto Had Its Chance
First: can we stop calling cryptocurrencies "crypto"? It's short for cryptography.

Second: What is the point of this article being on HN? It doesn't really bring anything to the discussion. In fact, this is just an invitation for everyone to repeat the same talking points in the comments.

Because of this I won't share my (repeated at nauseaum on HN before) opinion here, in hope this and the future posts like this are removed.

maxcoder4··on Computing with JavaScript's Undefined (2020)
As the author mentioned, JSFuck uses a very similar mechanism.
maxcoder4··on Commission opens non-compliance investigations against Alphabet, Apple and Meta
>The 3 types of first-party cookie we use are to: >(...) >gather analytics data (about user behaviour).

Well they do collect user data using third party services. A bit disappointing, but banners seem to be necessary in this case.

maxcoder4··on Commission opens non-compliance investigations against Alphabet, Apple and Meta
Sorry for being cynical, but from your message it sounds like you were working hard with regulators to comply as little as possible not to get sued. Which makes sense - I mean it was probably just business - but doesn't mean you were not being "your evil selves" (whoever your were).

Maybe I'm underestimating the complexity at scale, but I've read GDPR in original (it's not long), and the intentions and what's required seem pretty clear. I only have practical experience with it from a regulator side, though.

maxcoder4··on “Emergent” abilities in LLMs actually develop gradually and predictably – study
Clear water freezes exactly at 0 degrees. I guess the graduality depends on if you think about this as interpolating the water temperature, or interpolating the energy given/taken from a body of water.
maxcoder4··on “Emergent” abilities in LLMs actually develop gradually and predictably – study
If a process can be measured by a linearly growing metric I'd say it's predictible.

And of course scientists try to understand complex processes and make them more predictible. That distinguishes science from magic. You said that like it's a bad thing

maxcoder4··on “Emergent” abilities in LLMs actually develop gradually and predictably – study
You can check the code it generated in the long OP provided (this button is not very visible so I understand if you missed it).
maxcoder4··on “Emergent” abilities in LLMs actually develop gradually and predictably – study
I don't know what exactly "emergent" means in this context, but doesn't ice appear pretty rapidly? It appears between -1 and 1 degrees, and when cooling down from 100 to 75 to 50 to 25 water you would learn nothing about the freezing point.
← PreviousPage 2 of 4Next →