HNHacker News
TopNewBestAskShowJobs

panax

380 karma · joined April 22, 2015

submissionscomments
panax··on U.S. inflation rate rises to 13-year high of 5.4%
I-bonds are better, currently yielding 3.54% (limit $10k/person/year) This blog post is projecting that the rate might increase to above 7% for I-bonds next month, if that is the case then wait until November to buy them: https://tipswatch.com/2021/10/13/inflation-report-sets-i-bon...
panax··on Chip shortage leads carmaker Opel to shut German plant until 2022
I won't buy a car if it has bluetooth or cellular connectivity, but that is getting harder to find. I want that shit air-gapped. Someday I might have to just rip out the media head and telematics unit after buying it if I can't find one anymore.
panax··on Subprime Attention Crisis
> Their advertising sends people to dedicated landing pages where they can be tracked through the site and measured if they convert.

But how much of this is selection bias and how much of it is really having an impact? This reminds me of https://thecorrespondent.com/100/the-new-dot-com-bubble-is-h...

>Economists at Facebook conducted 15 experiments that showed the enormous impact of selection effects. A large retailer launched a Facebook campaign. Initially it was assumed that the retailer’s ad would only have to be shown 1,490 times before one person actually bought something. But the experiment revealed that many of those people would have shopped there anyway; only one in 14,300 found the webshop because of the ad. In other words, the selection effects were almost 10 times stronger than the advertising effect alone!

Sure you can measure clicks and how many convert, but that does not necessarily measure the effect of the ad. I think most of the time the true effect of an advertisement is usually unknown (what is the difference in outcome of using the ad vs not using the ad?) and I suspect that in a large number of cases the impact of advertising is significantly overestimated. Perhaps people won't find out until they are forced to cut back on ad spending then they might realize that it isn't as important as they thought.

https://freakonomics.com/podcast/advertising-part-2/

panax··on How do computers generate random numbers?
An infinite number of tests yes, it is like trying to find the best possible predictor of a source. No statistical test can prove that a source has full entropy and uniformly distributed, only disprove it. These tests are too often misused and are usually not very useful since they tell us nothing about how much entropy might be in the sample, and entropy sources are always biased anyway and fail the tests, and if you condition them then they will always pass the test even if not random at all. A better method is to develop a stochastic model of the entropy source and attempt to estimate bounds on the entropy, which is still generally not feasible. The statistical tests can then be used as a sanity check to verify your entropy estimates. The RNG needs a conditioning phase, or entropy extractor to transform the output into a distribution that is indistinguishable from uniform as is needed in cryptographic applications and you should always include this stage because virtually no physical entropy source has a uniform distribution. The best thing to do is to try to gather as much entropy as you can from sources and gather maybe 10x what you think you need and then put it through an entropy extractor like a cryptographic hash function to generate a PRNG seed then use the PRNG.
panax··on Climate impact of a transatlantic flight could cost global economy $3k
$3k per ton seems quite high and if so would make even current direct air capture tech at $500-$600 per ton a bargain.
panax··on MIT Predicted Society Will Collapse in 2040. Research Shows We're on Schedule
They are probably still going to be relatively good, just be sure to avoid margin debt, options, etc, play it safe and expect lower returns.
panax··on MIT Predicted Society Will Collapse in 2040. Research Shows We're on Schedule
This reminds me of this report from 2002:

https://www.wwf.fr/sites/default/files/doc-2018-10/lpr_livin...

"the world’s ecological footprint will continue to grow between 2000 and 2050 from a level 20 per cent above the Earth’s biological capacity to a level between 80 and 120 percent above it (Figure 30). In these scenarios, 9 billion people in 2050 would require between 1.8 and 2.2 Earth-sized planets in order to sustain their consumption of crops, meat, fish, and wood, and to hold CO2 levels constant in the atmosphere.... Two World3 scenarios were chosen: a standard scenario, which assumes no policy changes over the next 50 years; and an accelerated technology scenario, which assumes significant improvements in resource efficiency. In the standard scenario, the HEF grows and peaks around 2040 at about 150 per cent above the Earth’s biological capacity, while the HWI climbs to around 20 per cent above the 2000 level in 2030 but then falls away rapidly, as the Earth’s productive ecosystems are no longer able to sustain high levels of human consumption. In the accelerated technology scenario the HEF reaches a maximum of 60 per cent above biological capacity in 2020 and then declines back to the 2000 level by 2050, as more resource-efficient technologies reduce the footprint, while the HWI climbs and remains at almost 20 per cent above 2000 levels"

panax··on Suppose I wanted to kill a lot of pilots
In security the forward problem isn't as useful - adding security features/crypto is easy but probably not going to be helpful on its own. We use threat modeling and the security mindset. What is the easiest way for me to break the system/program? Where can I manipulate the inputs to the system? Where were the developers most likely to have made a mistake and what kinds of mistakes are commonly made there?

Also similar in nature is safety engineering. You think about how to make the system fail easily and unexpectedly and you avoid those.

You also try to prioritize the highest risk/lowest cost issues in these. These all involve risk management, which is also critical in investing and is a major reason why Munger has been so successful - he only goes for low risk/high reward plays and bets big on the few opportunities that he gets.

panax··on Burnout Is Real
That is a great perspective and sounds like Ben Graham's concept of margin of safety in chapter 20 of the Intelligent Investor. Apply that to your investments and find businesses that have a margin of safety and have considerably more earning power than the going rate of debt and you will do well.
panax··on Warren Buffett donates another $4.1B, resigns as Gates trustee
I am certain they will be able to deploy that capital far more effectively than the government would and will create much more value to society.
panax··on Warren Buffett sinks climate shareholder resolution, says world will adapt
Also Chevron is only a very small part of their portfolio. Another way to look at this is that Berkshire currently only owns $2.4 million of Chevron stock while BHE is investing $18 billion of their own money this year alone to build transmission lines to connect wind generation to populated areas.
panax··on Warren Buffett sinks climate shareholder resolution, says world will adapt
The article misses the point here.

BHE (Berkshire Energy) is actually heavily based on wind generation and investing heavily in renewables, more than most utilities in the US. They are basically leaders in this area:

https://www.youtube.com/watch?v=tN5pRtFeHEo

For the climate resolution, listen to Warren's answer on this in 2019: https://www.youtube.com/watch?v=xELxlV0-4yA

They let their business operate fairly independently and want to avoid creating bureaucracy which doesn't create value which is how they generally operate.

In Charlie's words: "We're about as good as you can get [in renewables] and you should worry about something else... If this isn't good enough for you we can't help you."

panax··on Stock Market Returns Are Anything but Average
I feel reasonably confident that we will probably continue to see decent gains over the medium term of the next few decades, barring major wars. But what is always in the back of my mind is just how long can human civilization continue this incredible rate of exponential growth. If you assume that economic growth requires any amount of increase in energy consumption, then there are physical limits to how much growth can occur over the long term and we are rapidly approaching them[1]. Eventually growth will need to slow and it looks like this is already starting to happen [2]. Japan may be the endgame for most of us. Eventually there could be zero growth and then things become zero-sum which may encourage conflict.

If we are able to colonize other parts of the solar system and export industry off the planet that will allow for several more decades and probably centuries (millenia?) of growth. Hopefully civilization will survive conflict long enough to make this transition.

[1] https://arxiv.org/abs/2005.05244 [2] https://www.economist.com/graphic-detail/2021/03/15/young-pe...

panax··on Sleep deprivation impairs molecular clearance from the human brain
It is still unknown whether or not amyloid plaques are actually a cause of Alzheimer's but... fragments clump together to form plaques, and once they reach a certain size they can become too large to be cleared from the brain and they could remain for long periods of time. It has also been shown that focused ultrasound can be used to temporarily open up the blood brain barrier to help clear plaques from the brain [1]. It may be that sleep deprivation is unsafe at any age and might increase risks long into the future, although older adults are probably at a higher risk if the ability to clear is degraded at older age.

[1] https://stm.sciencemag.org/content/7/278/278ra33

panax··on Gödel's Loophole
A despot may also pack the Supreme Court to change the rules, although the existing Supreme Court may prevent the court from being packed. I am curious what would happen if all the members of the existing Supreme Court were to suffer an unfortunate accident in this situation. edit: Of course you still need Congress to approve the nominees.
panax··on Bitcoin's fundamental value is negative given its environmental impact
Yes this is known as Jevon's paradox and is not unique to these situations

https://en.wikipedia.org/wiki/Jevons_paradox

We can't simply just rely on improvements in efficiency to solve these problems.

panax··on US Senator introduces ‘baby bonds’ bill to give newborns a $1K savings account
Yes this has been proposed before by Bill Ackman: https://www.youtube.com/watch?v=o9XHKc22wGk
panax··on Global real interest rates and the ‘suprasecular’ decline, 1311–2018 (2020)
"since the major monetary upheavals of the late middle ages, a trend decline between 0.6–1.6 basis points per annum has prevailed"

" Against their long‑term context, currently depressed sovereign real rates are in fact converging ‘back to historical trend’ — a trend that makes narratives about a ‘secular stagnation’ environment entirely misleading, and suggests that — irrespective of particular monetary and fiscal responses — real rates could soon enter permanently negative territory. "

"if historical trends are extrapolated, R-G will soon reach permanently negative territory –a first since at least medieval times."

"Whatever the precise dominant driver – simply extrapolating such long-term historical trends suggests that negative real rates will not just soon constitute a “new normal” – they will continue to fall constantly. By the late 2020s, global short-term real rates will have reached permanently negative territory. By the second half of this century, global long-term real rates will have followed."

panax··on They Thought They Were Free: The Germans, 1933-45 (1955)
I was not referring to any specific group of people. And you are right, there has been a great deal of attention and action. I think it is a healthy sign and may be a reason for cautious optimism, but this is a continuous effort and we need to remain vigilant.
panax··on They Thought They Were Free: The Germans, 1933-45 (1955)
The most chilling part is "But the one great shocking occasion, when tens or hundreds or thousands will join with you, never comes. That’s the difficulty. If the last and worst act of the whole regime had come immediately after the first and smallest, thousands, yes, millions would have been sufficiently shocked—if, let us say, the gassing of the Jews in ’43 had come immediately after the ‘German Firm’ stickers on the windows of non-Jewish shops in ’33. But of course this isn’t the way it happens. In between come all the hundreds of little steps, some of them imperceptible, each of them preparing you not to be shocked by the next. Step C is not so much worse than Step B, and, if you did not make a stand at Step B, why should you at Step C? And so on to Step D."

Many wait for that single moment when the line is crossed for everyone to stand up and take (non-violent) action and speak out, but that moment never comes. That's not how this works. Authoritarianism rises gradually and relies on people looking away from it, unable to confront inconvenient truths. The time to speak out is early and not to wait for that moment for others to do so.

panax··on Stop the Earn IT Bill Before It Breaks Encryption
Here is some more criticism of the EARN IT Act supporting that https://www.schneier.com/blog/archives/2020/03/the_earn-it_a...

Lindsay Graham has repeatedly sought to weaken encryption and mandate backdoors and key escrow. Also in June this year following the EARN IT Act he introduced the Lawful Access To Encrypted Data Act (LAED) which would mandate backdoors:

https://cyberlaw.stanford.edu/blog/2020/06/there%E2%80%99s-n...

LEAD is extreme and has little support. It is widely believed that the LAED was not intended to be passed but is meant to help pass the EARN IT Act by making the EARN IT Act seem like a more moderate and reasonable piece of legislation.

The EARN IT Act is really a ploy by Lindsay Graham and others to bypass Congress on this issue which they cannot otherwise get passed, and allow a small group of people who are not even security experts to develop regulation and mandates (which will probably be against encryption) under the guise of fighting child porn.

panax··on Pasco, Florida’s predictive policing system monitors and harasses residents
They're getting harassed too: https://www.youtube.com/watch?v=3mEpdfPJq6w

https://mclynasforsheriff.com/pcso-corruption/

panax··on Zero Knowledge Proofs applied to Auctions (2019) [pdf]
Try one night ultimate werewolf... except that kind of breaks the game
panax··on Mysterious heart damage, not just lung troubles, befalling Covid-19 patients
https://www.youtube.com/watch?v=jAW6VBWTiAA#t=36m

ACE2 is also found in several other organs in which they are seeing multiple organ failure with this virus so it likely is can bind to them and contribute to damage in these organs including the heart but as OP says there are multiple ways the heart could be affected

Loss of ACE2 receptors in the heart can cause impaired heart function

https://www.youtube.com/watch?v=jAW6VBWTiAA#t=8m

panax··on Private Key Extraction from Qualcomm Hardware-Backed Keystores
In this particular case they are using bits leaked from the nonce which changes with each execution, but they use lattice reduction after using these bits to generate hidden number problem inequalities[1-3]. They aren't exactly brute forcing the remaining unknown bits here but they do need to try running the lattice reduction multiple times over different samples of their guesses until it works.

In other settings, yes you can still gather leaked bits and use them to reduce the search space until it is small enough to brute force. I've had my own elliptic curve implementation broken through differential power analysis from a leakage due to a conditional branch just like the one in this paper. It leaked only a single bit and it was leaking a bit of the key or a nonce but the least significant bit of an intermediate value in the same way that the LSB was leaked in this paper. All I did was select one of two results, both of which were computed using the same number of operations every time and discarded the other based on whether a result was odd or even. Simply branching is generally enough to leak. After running many operations using the same key on different data you could reduce the search space down to one which could be brute forced in a few minutes. Both the OP's implementation and mine also tried to use some side channel countermeasures, but leaking this single bit was enough. You simply cannot use any conditional branching or memory addressing based on secret information [4-5]. Even being aware of this, it was not obvious how to avoid this conditional branch while implementing the algorithm (the math can be reformulated to avoid it).

We did find that randomized projective coordinates[6] significantly helped in our case (we had already implemented this but was disabled by default). This probably only makes it more difficult to extract the secret but it should be implemented in constant time.

[1] https://www.nccgroup.trust/globalassets/our-research/us/whit...

[2] https://www.youtube.com/watch?v=QCsvBFFLsqE

[3] https://www.nccgroup.trust/us/our-research/return-of-the-hid...

[4] https://cr.yp.to/highspeed/coolnacl-20120725.pdf

[5] https://www.bearssl.org/constanttime.html

[6] http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.1.5...

panax··on OOP Is Dead, Long Live OOP
Steve said it too, but he said it like he was proud of it: https://www.youtube.com/watch?v=Gk-9Fd2mEnI&feature=youtu.be...

"You need all the objects that come with it to make it work"

panax··on Breakthrough in Nuclear Fusion? – Prof. Dennis Whyte (2016)
There is also an excellent presentation from one of the post docs

https://www.youtube.com/watch?v=L0KuAx1COEk

The approach and physics are well established. This seems like the quickest way to break the net power gain barrier with the lowest risk and lowest cost today and will allow individual labs and entrepreneurs to iterate on the implementation and engineering much more rapidly.

panax··on Ask HN: Is 23andme (and others similar to it) worth the cost?
23andme was invaluable to me for health, but that is rarely the case. Most likely you won't learn anything profound from it, though if do you learn something important it is probably not going to be good news. I personally much prefer that I know my results now and be able to take action to address them than to not know, but I am also able to take a sort of stoic view toward it without worrying about it and allowing it to impact me negatively. Many people would rather remain ignorant of potential risk factors which may actually never impact them than worry their whole lives about something outside of their control(at least for now. CRISPR?). It can severely disrupt the lives of some types of people and cause them anxiety. So before you take it you should ask yourself if you are the type of person who would worry and obsess over it and allow it to disrupt your life. Though if you do find unpleasant results, most genotypes, with a few exceptions, are only weakly correlated with their risks so don't take most of the results too literally. And even for many of the genotypes with very strongly established links to disease, most are only risk factors, and only increase the probability of an outcome.

I don't think 23andme is currently reporting on health risks anymore until they get things cleared with the FDA, though, and the other reports they currently offer are not really useful. You still have access to the raw data, though, and can use a third party like https://www.snpedia.com/index.php/Promethease to analyze the data. It will generate a report for you, but remember these reports will try to link your SNPs to pretty much any studies available, even when there is very little evidence or low confidence of the interpretation. Don't take most of the results seriously unless it is well studied and well established. This may be difficult to determine sometimes unless you have a background in science or medicine, and it is a good idea to consult a medical professional first if there is something that you think is significant and concerns you.

panax··on Edward Snowden's New Research Aims to Keep Smartphones from Betraying Owners
There is also the convenience factor. I do remove my battery frequently from my phone but it is too easy to just leave it on. People will generally not want to hassle with it if they don't have to.If security is easier and requires less effort then it lowers the cost and will be favored more often and it will protect more people.

There are also many times that people have been unhappy because I have my phone off and unable to reach me. There are also other times you want to be available.

Unfortunately, if your phone is owned then they can just exfiltrate the data when normal data transfer occurs. The data will still need to be stored for transmission later though.

With the iphone, you also need to monitor Bluetooth and WiFi in addition to cellular activity. Hopefully they will also monitor these.

panax··on FBI’s Comey Concedes Mistake Was Made Over iPhone in San Bernardino Case
Edit: Even if Apple were to require authentication before updating the software it doesn't matter because of the third immutable law of security:If a bad guy has unrestricted physical access to your computer, it's not your computer anymore. The FBI can still load FBIOS directly into RAM since they have physical access. But this is a much more cumbersome procedure since they need to pull parts off the board and probably need to spin a new PCB and they can't automate it the same way as if they were to do it purely through code.
← PreviousPage 3 of 4Next →