HNHacker News
TopNewBestAskShowJobs

otakucode

3,223 karma · joined January 31, 2010

Software engineer working remotely from West Virginia in the US. Studied Computer Science and Philosophy in college and still very much interested in both topics. My gmail account shares the same username if you want to contact me.

Quote I like:

"Make game of that which makes as much of thee" -- Omar Khayaam

submissionscomments
otakucode··on Steam Windows Client Local Privilege Escalation 0day
Gamers naively assume that hating something means anything. It doesn't. Publishers look at the numbers, and couldn't care less about what gamers feel. Gamers line up to shovel money in the publishers direction, and indie publishers that don't engage in abusive practices get left out in the cold by gamers. In the boardroom, there flat out is no evidence to suggest that resisting engaging in abusive practices would be anything but destructive to the business.
otakucode··on Sentient: Classified artificial brain being developed by US intelligence
Polygraphs also perform no better than coin flips in determining whether a person is lying. They're still used throughout government to make security clearance decisions. I would be careful assuming that if this technology is ineffective that will translate into it not becoming a lynchpin in their organizations.
otakucode··on Sentient: Classified artificial brain being developed by US intelligence
Reminder: Way back when the AT&T 'secret rooms' that enabled the NSA to tap all traffic were revealed, we learned that the NSA relies heavily upon an extremely questionable legal opinion written by their own lawyers which says that communications do not count as 'collected' or 'intercepted' until a HUMAN operator reads the plaintext. That means no amount of automated processing, machine learning, statistical analysis, filtering, profiling, etc run on your communications or its metadata amounts to your communications being 'intercepted' as far as they are concerned. They know this legal opinion is dicey, and they will do absolutely anything, including dropping cases entirely, to avoid having it tested in court.
otakucode··on Steam Windows Client Local Privilege Escalation 0day
It greatly depends. Look at what happened with Apple and iTunes. Apple created iTunes, and set up rules for music publishers that wanted to participate. They were required to sell individual tracks. They were forbidden from charging more than 99 cents per track. They were required to permit the user to burn songs to audio CDs. Etc. This ended up putting music publishers in a difficult position. Their retail distribution agreements with record stores explicitly forbade them from doing any of these things. So they either had to re-negotiate those contracts, cancel them, or abandon iTunes. They attempted to re-negotiate their agreements with record stores, but record stores adamantly refused to budge. They wanted to maintain their prior agreements that forbid the publishers from selling their music through other venues for lower prices, before the retailers could stock their shelves, etc. The record companies never budged, and went out of business thanks to their stubbornness.

Contrast that with how Valve handled Steam. Valve set no restriction on game publishers. Publishers were never forced into taking advantage of digital distribution at all. They were able to preserve all of their retail distribution contracts by screwing the customer. Digital distribution is profoundly cheaper, enables release of games a week sooner, could rely on Steams DRM without needing third party extra DRM, etc. These are all things Valve could have required publishers to take advantage of to benefit customers. But they didn't. They gave publishers carte blanche and let them do absolutely anything they wanted. If another company had been the one to become the dominant platform, it could have been more like the iTunes situation.

This is also the thing which guarantees Steams eventual downfall. Music publishers considered, and a couple even tried, building their own digital distribution service. But, the publishers were incapable (because of institutional restrictions) of building a competent competitor that would be appealing to consumers. The publishers board wouldn't permit things like individual track sales, 99 cent price caps even for popular singles, etc. Steam is a different story. Since there are literally no restrictions on publishers at all, there is also no reason for publishers to refrain from building their own separate platforms and cutting out Valve's cut of the sale. Gamers have established that they are more than willing to install and use however many launchers as necessary, so there is almost no reason for big publishers to use Steam rather than just building their own.

otakucode··on Contagion in Mass Killings and School Shootings (2015)
Other things we could do: Remove all cameras from schools. Remove police from schools. Remove metal detectors from schools. Restore ability for students to leave campus during the schoolday. Stop persecuting the most vulnerable kids on the basis of nonsensical 'warnings signs' lists derived from no rational basis or evidence.

Restore as much autonomy to especially adolescent students as possible while still accomplishing education. Stop driving kids into a corner and making them feel so desperate and trapped that they're willing to throw their own life away just to do a little damage and escape.

otakucode··on Contagion in Mass Killings and School Shootings (2015)
If there were no media headlines, then the amount of murders would fall if headlines were the causal effect. You're undoing your own point.
otakucode··on Light Seems to Pull Electrons Backward
When light hits the metal, it imparts some momentum. Is it possible (and this is a stupendously naive mental picture and not what would actually be happening, I realize that) that the metal moves in one direction, kicking free electrons back the other direction? Like if you had a sheet of drywall covered in dust hanging from a rope and you threw a baseball at it. The drywall would move in the direction of the balls flight, but the dust would get kicked off back in the direction the ball came from. Is the amount of current created consistent with this sort of picture, electrons being kicked off as the metal absorbs the momentum and accelerates away?
otakucode··on Pentagon testing mass surveillance balloons across the US
Another good bit of reading material is the book 'It Can't Happen Here' by Sinclair Lewis. Bit of a warning, though, it might hit way too close to home for comfort for American readers. It was written in 1935 but still quite relevant if not prescient.

I think it is good for people to be interested in and discussing the nature of oppression and its consequences. As I see it, oppression is incremental, with people as a group generally responding fairly predictably as it increases. I think this is biologically rooted, stemming from fundamental drives toward autonomy. Any time autonomy is violated, regardless of intent, it is a small bit of harm. Sometimes, that harm is justified. If you pull someone out of the way of a speeding car, you have saved their life by violating their autonomy, but the tiny harm still exists and has consequences. These harms accumulate (though I am sure it is a complicated process where the harms are alleviated by other acts of autonomy, so not purely inevitably accumulative).

Just looking at history and at various situations in which oppression occurs (workplaces, prisons, schools, etc, not just nations) it seems to me there are broad patterns. When peoples autonomy is heavily infringed, they concentrate more on the forms of autonomy which are more difficult or impossible for whatever authority is in play to prevent. They express themselves through their dress, through body modification (piercings, tattoos, branding, scarification, etc), through their language with development of new slang or codes, and can even engage in self-harm (cutting, anorexic starvation, bulimia, binge drinking or eating, harmful drug abuse, etc) to exemplify that they still control something.

If the untouchable authority continues to increase the control it exerts, the people begin seeking to establish an alternative sense of a power hierarchy they can influence. They engage in interpersonal conflict, seeking to establish that they are stronger, better, more well-liked, more pious, more loyal, etc, than those around them.

As the oppression increases, those power hierarchies become more formalized and gangs (or cliques, brotherhoods, clubs, etc) form, with members adopting the gangs norms and moral codes as the authority they respect and are loyal to. They cling to their tribal identity, and see the actions of the group as expressions of their own desires, increasing their sense of autonomy.

As it gets more oppressive, the gangs begin to vie for turf or control or influence. Gang wars emerge. These aren't always literal guns-in-the-street or shivs-in-the-exercise-yard wars and can be done through proxy competitions of all sorts. Anything which the participants mutually agree to can be an analog, but in situations with such a high degree of oppression, violence is often the only thing left. A couple warring prison gangs can't really organize peaceful means of establishing dominance as no one has enough autonomy to do so and the overarching authority has a vested interest in not acknowledging the gangs as legitimate organizations.

In the final stage, the gangs dissolve/join and emerge as an army. They rise and destroy the oppressive authority through the only means the authority has made possible - brute violence. Democracy was revolutionary in its provision of a peaceful means of destroying the controlling authority through electing those who can change things. Every oppressive state that I am aware of has gone through these different phases. There has never been a happy, prosperous police state and I don't think that is a matter of just not getting it right. I think the basic human drive to autonomy would make such a state unlivable even if run by infinitely beneficent people and with every restriction being made in the honest best interests of those being controlled.

The 'inefficiencies' in law enforcement where not everyone is surveilled at all times, which enables some laws to be broken, is not a flaw. It's a feature of the system. And a valuable one. Every ratchet click towards catching every single infraction squeezes people tighter. We've seen in schools what happens when you load the place with cameras, have cops roaming the halls arresting kids for insubordination, requiring ID badges be carried at all times, restricting dress, speech, affectionate contact, etc. Some people will snap and be made to feel so desperate that they are willing to die just to do some damage. What happens when that sort of infrastructure comes to every workplace and every public place including the sidewalk?

otakucode··on Norwegian F-35 Sending Sensitive Data Back to Lockheed Martin (2018)
I'm curious about the actual communication here. Does each plane have a satellite uplink or something? If they do, I would expect that they would be configured to use Norways military satellite comms network. I'm not sure how or why that network would be able to contact Lockheed. So are there multiple communications systems? What portion of them are military and what portion, if any, transit the public Internet? Lockheed might own their own communication satellites, I'm not sure, but I really don't think they have carte blanche to use the US military communications networks for their own products. Details might be sensitive or classified so I'll probably just be kept wondering, but the mechanics of the actual physical communication of data aren't clear to me.
otakucode··on Lawsuit filed against GitHub in wake of Capital One data breach
I could see that working if it wasn't done naively. Prompting for confirmation and then whitelisting that high-entropy string if it is deemed safe would probably only be annoying very occasionally and catch slipups. Did they ever revisit it with a more nuanced strategy?
otakucode··on Lawsuit filed against GitHub in wake of Capital One data breach
If the 'established industry standards' were real, they would hold up in court. Software has no established industry standards. This has been an issue in many court cases. There are many "standards" but none of them are official which results in any claims of negligence when it comes to software, no matter how egregious the behavior was, failing. We saw this with the Toyota 'unintended acceleration' scandal. The court acknowledged that out of 90+ automotive industry 'recommended' and 'suggested' coding practices, Toyota's code only followed 4. They acknowledged that Toyota let software engineers play no role in deciding scheduling. They acknowledged that Toyota software engineers did not have static analysis and other tools, or even a bug tracker. But, the court had to find them not guilty of criminal negligence because there simply aren't any legal standards or regulations which they could be said to be negligent of.

If you were building a bridge and you hired unqualified engineers, deprived them of tools they needed, ignored them when it came time to determine scheduling, didn't follow established regulations and standards, etc, the companies executives would be prosecuted for criminal negligence and be sent to prison. If software is involved, however, the situation couldn't be more different. It's an issue that has been debated for well over a decade in the ACM at least. Companies don't want to have to pay more for talent, and most software engineers don't want to raise the barrier to entry. The real danger is that if the software industry waits too long to establish some way of handling these issues, some public tragedy will inspire a kneejerk government response that results in a suffocating set of standards that makes everyone unhappy.

otakucode··on Lawsuit filed against GitHub in wake of Capital One data breach
Expect GitHub to be dropped from the case pretty quickly, I presume. They have a Safe Harbor exemption from responsibility for content posted by users on their site. The complaint doesn't even allege that anyone ever warned GitHub about the presence of the data whatsoever. They just baselessly assert that GitHub "should have known" without providing any support. Section 230 of the Communications Decency Act provides the Safe Harbor protection to platforms as long as they do not do things which amount to them having editorial control (things like holding posts for moderation before posting can do this and lose their safe harbor, as happened to LiveJournal years ago, but taking posts down afterwards and responding to flagged content does not).
otakucode··on Would you accept cheaper rent in exchange for a monthly Amazon purchasing quota?
In the future which is rapidly closing in, everything is a "license." You own nothing. Nothing is transferrable or resellable by you. Things will feel like you own them, but you will not. Despite all the marketing and advertising telling you that you are "buying" something, you will actually only be able to secure a license to possess and use it. These licenses will restrict how you use the thing, and circumventing them will result in federal charges of violating the DMCA. These licenses will also not obligate the seller to anything whatsoever and be voidable at any time with no notice for any or no reason. This is already the case with most peoples 'ownership' of most media, and it is already spreading into other products. Farmers have had to fight John Deere for the right to repair their own tractors (they won temporary special exemptions which can only exist for 3 years at a time and have to be re-fought-for every 3 years) but still can't prevent their own tractors from reporting soil data back to John Deere which the company then sells to Monsanto and other companies.

None of the things you 'buy' will be fungible because they will all be discrete licenses locked to you personally and have no actual 'value.'

otakucode··on What If Consciousness Comes First?
>It’s as though someone created a very elaborate spreadsheet and carefully defined how the values in every cell would be related to the values in all of the other cells. However, if no one enters a definite value for at least one of these cells, then none of the cells will have values.

Does it sound to anyone else like the author would benefit tremendously from learning the Lambda Calculus? It seems to me to be a disproof of the authors contention that a 'definite value' is needed at some point.

otakucode··on What If Consciousness Comes First?
You personally determine what 'boring' and 'pointless' are and how important they are.
otakucode··on What If Consciousness Comes First?
I don't know that learning more about the brains operation will satisfy people who resist the notion that their consciousness is a property of a physical system. Since it is an emergent property of a complex system, even if we understood the functioning of each independent piece, we would still be left with the question of why all of those pieces in concert have the property of consciousness. While we gather more and more data on the brain, we barely even have a beginning notion of how emergent properties actually work. If we had to take everything we know about atoms and their interactions and explain where phase transitions and states of matter come from, we would be stymied. We know from experimentation that very large groups of many atoms do experience distinct phase transitions. We know every way individual atoms can interact. But bridging that gap from components to being able to predict large-scale complex nonlinear dynamics... we have more proofs of our inability to do such things (with conventional tools) than hints of how we might tackle it.
otakucode··on Algebraic Effects for the Rest of Us
>It turns out, we can call resume with asynchronously from our effect handler without making any changes to getName or makeFriends:

This sounds like a terrible idea. Especially given the nature of Javascript, this basically would mean that you would have to write every single bit of code to be re-entrant. What if you 'perform' and then the 'resume' doesn't happen until every single assumption made about the entire program state for the entirety of the function in which the perform occurs has been invalidated? After doing a 'perform', you would have to operate under the presumption that nothing done in the first portion of the function has any relevance any longer, no? The enumerateFiles example later in the article is an even better example. It performs in multiple places, but carries on like it's a normal function, not considering that at each of those performs, the entire state of the program could be changed, and none of the conditions established prior to those lines can be relied upon to still hold.

otakucode··on A Worrying Analysis of Recent Neural Recommendation Approaches
>Greater availability of data and code makes for better science.

Lack of availability of data and code should be an immediate disqualifier from publication for research. In any field. There is no substantial difference between withholding source code or data and withholding experimental procedures or list of materials tested. I can only think that the people who withhold such things are either actively malicious or are completely ignorant of the stupendous danger of cutting corners in science. Given the history we have to work with, it's pretty clear that the distance from cutting a corner in a way that seems harmless to the deaths of millions of people is very short. This is not something people should trifle with.

otakucode··on Equifax Is Said to Be Near $650M Settlement for Data Breach
What you are talking about is called punitive damages. Punitive damages exist exactly for the purpose of causing financial pain to companies in order to give them actual incentive to change their behavior (since if it is profitable to kill people, companies will make killing people a standard operating practice, we have multiple proofs of this). No other type of damage is levied as punishment. Other types of damages are driven by actual recovery of damages.
otakucode··on Equifax Is Said to Be Near $650M Settlement for Data Breach
Since software is involved, it is basically impossible for any court to ever judge a company guilty of negligence. There are no standards for software. No licensed engineers they could fail to hire, no industry mandated practices they could fail to follow, nothing. Even when Toyota's outrageous negligence killed dozens of people in their 'unintended acceleration' scandal, the actual negligence claims failed. That's very bad, because it is exactly those negligence claims that provide the best motivators to corporate executives when building critical infrastructure. A guilty verdict for negligence when building a bridge or road or similar can easily result in executives in real prison cells. But if a computer is involved, they know they don't need to worry. Their main worry then becomes the potential punitive damages awarded by juries, but that's just a monetary penalty and even those usually aren't larger than what it would cost for them to do things like hire experienced software engineers, give those engineers control over product scheduling, provide them with the tools they need, etc.
otakucode··on How I tried to compete with YouTube and Google with Livevideo.com
Keep in mind, YouTube recently announced that they're planning on going after computer security information with their claws soon. That means Google doesn't like that information either. Even though PH is very limiting, that would probably be a better option than YouTube because you're very unlikely to ever see a cent from monetization there. I follow a lawyer with a small (100k) YouTube channel and he has to fight tooth and nail with YouTube for every video he uploads, no matter how innocuous. Whether you follow their rules or not, even if you walk on eggshells and avoid everything even remotely controversial, none of it matters.

Have you considered Patreon?

otakucode··on How I tried to compete with YouTube and Google with Livevideo.com
Book publishers let white nationalists, pedophiles, sex offenders, and others publish books. Books don't even have age gated ratings, so parents don't even have any idea what kind of content their children are consuming when they read a book. If you want disgusting trash, pick up 'In Defense of Elitism' sometime. It's the only book I have destroyed after reading several chapters.

When you paint a medium or platform with a broad brush, and chastise them for not censoring it to your liking, you should at least check the alternative you're recommending is at least as censorial.

otakucode··on How I tried to compete with YouTube and Google with Livevideo.com
I don't think that even if Google avoided the tactics they used, you still could not compete with YouTube. Alphabet has as one of its goals cultural "guidance". This is openly advocated by Eric Schmidt in his book 'A New Digital Age.' They ran YouTube at a gigantic ongoing loss for over a decade solely to suppress competition and establish themselves as the only viable video platform. If you can build a billion-dollar infrastructure, and after those bills are paid you can lose hundreds of millions of dollars a year running it, than and only then can you compete with YouTube and face these tactics in addition to all of the legal and political pressure Google can produce. They haven't even needed to break out political pressure (and by that I mean getting government to establish regulations and legislation that YouTube is omitted from by being grandfathered in, not any kind of 'conservative/liberal bias' sort of thing) yet. And so long as Alphabet is profitable, we may never see those tactics as they're simply not needed.

YouTube is a key factor in Alphabet exercising the cultural 'guidance' that Eric Schmidt argues is not only Googles responsibility but moral obligation. For people who agree with Schmidt and disagree with the position that the public should be permitted to decide their own future, good or bad, it will be impossible to gain their support. Make no mistake, that viewpoint is the one that has supported every monarchy, dictatorship, theocracy, and non-democratic social structure throughout history. Political scientists call is Conservatism with a capital C, whereas the view that the public should play a role in their own governance and decide their own fate, for good or ill, is the alternative that drove the American Revolution, French Revolution, and countless blood-soaked revolutions across the globe. It won every single one of those wars. But it, too, lost to Google.

Just consider, if 70+% of the public today believed that interracial marriage was offensive and disgusting, which was true when interracial marriage was legalized by the Supreme Court in the 1960s, Google would deplatform anyone who agreed with the legalization of interracial marriage in order to defend that status quo. They do not seek to provide an open, global platform that can host or play a part in public debate about serious issues. They seek to exercise cultural guidance as Eric Schmidt sees fit. It has been the public which has reliably improved over time and progressed while still containing contingents of nuts and extremists. And it has progressed not despite that, but because of it. No closed and centrally managed society in history has become more progressive except through dreadfully bloody revolutions that destroyed its management.

otakucode··on Slug: Dynamic GPU Font Rendering and Advanced Text Layout
Yes, monitors have been forced to include scalers that enable OS to use extremely low resolution modes. The 'problem' is that this mode of display makes the first experience a user sees to betray the extremely high fidelity modern displays are actually capable of. I understand if you personally feel that starting up into 80x25 text mode is still acceptable in 2019 with 4k displays, and that's fine. But if someone wanted to build a brand new OS which was designed from the ground up as if it was built for and with the actual technology we have now, rather than the technology we had 30 years ago, I am just asking how difficult that would be.
otakucode··on Slug: Dynamic GPU Font Rendering and Advanced Text Layout
How difficult would it be for this library, or something akin to it, to become the first thing loaded when a PC boots? For several years now I have thought the ancient default of a 'textmode' as the underlying and initial display was destined to only become more and more useless as pixel densities continue to climb. We need the first display mode available to an OS to support vector display. Raster images can come later. I don't know what all is involved in initializing a GPU and handing the display over to it, though, so I'm curious how hard it would be. Would it absolutely require a new BIOS?
otakucode··on Waymo gets green light in California to pick up passengers in self-driving cars
Companies which produce aircraft must hire licensed engineers to do the design and implementation work. AVs are almost all software. Licensed software engineers do not exist. While there are regulations and standards for every other form of engineering, there is nothing for software. And courts have recognized this. They have stated that companies can not be found criminally negligent regardless of their practices because there are no standards which they are failing to adhere to.
otakucode··on Waymo gets green light in California to pick up passengers in self-driving cars
I would be more comfortable limiting it to the families of the managers. The engineers, due to our legal and social system, have almost no control whatsoever over when the product gets released, what tools they have access to, how much time they are given for testing, etc. All of those decisions are driven by management who have been guaranteed by courts that there simply is no degree of corner-cutting which could ever possibly amount to criminal negligence because software is involved.
otakucode··on Waymo gets green light in California to pick up passengers in self-driving cars
>I hope we can view these incidents in context.

That is extremely unlikely and borders on impossible. AVs have some profound things working against them. They share the problem airplanes have. Human beings are abysmal at risk estimation, and a very large factor of the estimation they do is whether they have personal control. It doesn't matter that planes are much safer than driving, the fact that people don't have direct control of the aircraft makes them feel unsafe to the point that some people are paralyzed by their fear of flying. The same will be true of AVs, and for the same (un)reasons.

But I have my own doubts that it will even get far enough for that to pose a serious problem. We have a more general problem with technology in our society. It is nearly unanswerable to the law. Take the Toyota "unintended acceleration" scandal from a few years ago for example. Investigation of that issue determined firmware flaws were the cause, and led to the deaths of over a dozen people. The criminal court case against Toyota unearthed that while the automotive industry had coding practices that established 'required' and 'suggested' techniques, lists of around 100 practices. Toyota followed 4 of them. Firmware developers working for Toyota did not even have access to a bug tracker at all. They did not have access to static analysis tools. They had no role in determining scheduling.

They were found 'not guilty' for criminal negligence. The reason given by the court was that because the problem involved software, criminal negligence was impossible. No standards exist governing software, and therefor no company can be held criminally responsible regardless of their practices. During the civil case, they were found guilty and responsible for the deaths, but before the jury could award damages, Toyota settled with the victims families.

That legal precedent is terrifying. The first AV to market will inevitably be the one that cuts the most corners and is rushed the most in its development. When it kills someone, as is basically guaranteed to happen by simple statistics, the public will be paying more attention than they did to the Toyota case. And when the public at large hears that tech company executives are literally above the law, the outrage and consequences will likely be swift and severe. Sensing political opportunity, the legislators will descend and could very well end up dictating what language must be used, what coding standards must be followed, what tools must be used (you know the tool vendors will be lobbying hard), etc. The ACM (Association of Computing Machinery) has been discussing this issue for years, debating the potential merits and pitfalls of establishing a licensing system for software engineers. Thus far, the discussion always ends with 'companies would have to pay more for licensed developers and the cost of labor must be contained.' The looming pitfall of avoiding certification and licensing, however, is that government will step in and do it themselves which is virtually guaranteed to enact the greatest pain on the software industry.

otakucode··on YouTube bans content “showing users how to bypass secure computer systems”
Really? It is almost the textbook definition of Conservatism. Not like 'Republicans are conservative', but the political science sort of Conservatism that ruled the world for centuries, the ideology that supports monarchies, dictatorships, theocracies, etc. The belief that the rights of the state (or church or similar) are primary, that some people are 'special' in a way that destines them to lead while the majority are destined to follow because they are constitutionally incapable of anything else. A refutation of that was the meaning of "all men are created equal" in the Declaration of Independence which was the first official codification of Liberalism. Liberalism then conquered the world, but I imagine there's nothing absolute in place that would prevent it from re-emerging.
otakucode··on YouTube bans content “showing users how to bypass secure computer systems”
'Slippery slope' is an illogical way to argue things. There are better arguments against censorship, most notably: There is no cogent argument in favor of censorship. It's that simple. People don't like simple truth, but really, that's their problem. The fact of the matter is, there is exactly 1 person who can control the impact of any expression - the audience. No one else can do it. When the audience wishes to abdicate their responsibility to determine their response, and wish to pawn it off on the creator or anyone else, they have abandoned civilization.
← PreviousPage 6 of 34Next →