HNHacker News
TopNewBestAskShowJobs

scrps

1,209 karma · joined November 24, 2016

Currently being held captive by Pakleds on Ferenginar.

Providing long-term consequences for short-term thinking.

submissionscomments
scrps··on I'll refrain from providing code that involve concepts as you're under 18
This is fantastic
scrps··on I'll refrain from providing code that involve concepts as you're under 18
Parent: "Go to your room! How many times have I told you about memory safety? Now I find gcc on your computer and you are hanging out with the GPL crowd... You are grounded!"

Kid: "I AM NEVER USING RUST, I HATE MEMORY SAFETY AND I HATE YOU!" door slam

scrps··on Price fixing by algorithm is still price fixing
The rental market is a decentralized network, with companies like these the network gets routed through a central node and the operator of that node has pefect visibility while the connections being routed have no idea what every other connection is doing like a dark pool, it's the centrality that makes it an analogue.

I could think of several advantageous moves like artificially inflating rents then favoring a well paying client by keeping their rents lower than the market. Investing in property spread out across shell companies and then have the algo favor them in a non-intuitive way.

scrps··on Price fixing by algorithm is still price fixing
That sounds like a dark pool for the rental market.
scrps··on A recent abrupt change in Internet SSH brute force attacks against us
I run ssh on an overlay network so it is never directly exposed to the internet and it is nice to not have to worry about changing ports, fail2ban, knocking. Of course you don't get to do fun analytics on the bots though.
scrps··on Ameria claims to have created the first AI device based on a laptop
Poking around their site a bit deeper they seem to make some sort of marketing displays that are gesture controlled so obviously this qualifies them to make an "AI laptop".

What is that? Local LLM? Do I have some agent watching all my system calls for tomfoolery? Does it tell me I am doing a great job while it watches me butcher some poor programming language? Can it at least format yaml for me since I am not lazy enough already? Better yet, can it infer from the quality and depth of my yaml nesting my deepest fears and desires and output them in json?

scrps··on How The Prodigy's The Fat of the Land fell out of favour (2022)
Well either the Prodigy is a misogynistic nazi front band (they must hide Maxim and Thornhill at the rallies) or Ed Power has run out of non-fiction to write.
scrps··on ATT outage investigated by the FBI as a cyberattack
Wondering if maybe someone got clever with SS7 or some other signaling protocol and found a way to DoS using it, seems like a dumb way to burn it so I am probably wrong and it will turn out to be some backend service everyone uses got popped.
scrps··on Feds want to ban the Flipper Zero – Experts say it's a scapegoat
That at least heads toward rationality. Something along the lines of if you are caught with a flipper zero during the commission of a crime AND the flipper zero was used to further it then it becomes a "burglary tool" or some such classification.

Edit: typo... Again

scrps··on Freenginx: Core Nginx developer announces fork
Bravo!
scrps··on Feds want to ban the Flipper Zero – Experts say it's a scapegoat
Presumably having a flipper in your pocket, if the ban happens, will subject you to legal liability and something tells me the penalties will be less than stealing a car. So the people who are trying to use the flipper zero to commit a greater crime will simply not care and carry on because who cares about a misdemeanor when you are about to commit a felony.

Organized criminals can get bespoke hardware simply by hiring skilled labor overlooked or outcast by industry. Skilled tech-based criminals can build their own kit.

This hurts mostly people who want to get into some form of security or hacking and at best maybe stops high school antics but threatens to upend the entire way hackers have always honed their skills by doing and tinkering and also upending the small industries that support them and the security professionals who use the gear in production.

Edit: typo

scrps··on Heroku Having Serious Issues
This is an archived incident from today, seems to be latency and some memory use issue or I'd assume related.

https://status.heroku.com/incidents/2614

scrps··on Framing Frames: Bypassing wi-fi encryption by manipulating transmit queues
Wi-Fi Alliance: Fixed management frame deauth in WPA3.

Also Wi-Fi Alliance: Refactored(-ish) deauth to unprotected power-save bit.

scrps··on HP CEO Says They Brick Printers That Use Third-Party Ink Because of Hackers
HP in the role of the guy who just stumbled upon the dumpster fire of security and now sees conspiracy everywhere to justify vendor lock-in... The chips are in the ink maaaaaaan!

I'd like off the ride now.

scrps··on Gene therapy allows an 11-year-old boy to hear
A friend of mine was stabbed to death during a robbery, he was from a low income neighborhood very much in a wealthy western city, he was stabbed to death simply to avoid him fighting back because he was a big guy so they ran up on him from behind, something he would have heard had he not been deaf but thank you for the lecture.
scrps··on Gene therapy allows an 11-year-old boy to hear
I think some religious parents with gay kids have tried that line before.

Deafness is a medical issue depriving a human being of a naturally evolved sense that is critical to survival even in a stable civilized world. Denying them that sense because of identity politics is every type of wrong.

scrps··on Amazon's Ring to stop letting police request doorbell video from users
Is there a country or a system of government that doesn't have this class of problems? I sure can't find one and I've been to quite a few.
scrps··on Boeing whistleblower: MAX 9 production line has "enormous volume of defects"
Normally I would agree if an engineer directly knew what they were doing was bad and didn't say no but in the case of MCAS: pilots had no idea it was there. Yes, it also wasn't properly redundant and that is bad but had the pilots known it had existed in the first place and understood it was operating off a single data source they would have acted accordingly and a lot of people would still be alive. Door plug I can't speak to.

Hiding MCAS to avoid recertification was well above the paygrade of an engineer at a bench poking a circuit.

Also, if you want a short version of how this stuff goes very wrong even when engineers do say something, the challenger disaster[1] movie is great. Chase it with the NASA documents[2] for the long version.

[1]: https://www.youtube.com/watch?v=bvv2-7iOD_8

[2]: https://www.nasa.gov/history/rogersrep/genindex.htm

Edit: typo

scrps··on Many AI researchers think fakes will become undetectable
I agree with the bulk of what you are saying but at the same time there are different levels of threats, gait analysis and access to massive troves of data is state-level or central corps.

Where most ordinary people run into trouble is decidedly very well down that particular foodchain.

scrps··on Many AI researchers think fakes will become undetectable
I think our wires are getting crossed.

Who is the threat in your scenario?

scrps··on Many AI researchers think fakes will become undetectable
This has what to do with flooding so many fakes of a person that all photos are assumed fake by the public?
scrps··on Ask HN: Donating Residential Internet Bandwidth?
Could look into mirroring something like a package repo for a linux distro. Could offer devs of any software you use free hosting. Host any number of services like mastodon or searx, etc.

Two things to remember is legal liability and security, I host some things on my connection but everything is piped in via proxy from a cheap VPS and is throttled and has a clamp least badness happen. As for liability I'd read up on local laws, it gets tricky.

scrps··on Many AI researchers think fakes will become undetectable
Insane idea: generate a ton of fakes of yourself, some subtle, some obvious... Which mirror in the forest or mirrors is actually you?
scrps··on Feds warn China-made drones pose risk to US critical infrastructure
I actually bought a cheapo chinese drone, works well, works a little too well. I get curious... It is supposed to work on 802.11 (according to the FCC filing) but it has exceptional range which wasn't matching up to my expectations. I do scans, nothing, it isn't operating on wifi.

Break out the spectrum analyzer and it is actually operating on wifi just on channel 14 but the mystery goes deeper from there because as it turns out they are using a RTL chipset with a heavily modified firmware that I suspect modifies the wireless stack to hide it, violate rf power limits and I am not quite sure what else. I dumped the flash and I have the modified kernel module they are using I just haven't gotten around to poking at it.

Edit to add: Also I've only worked on the controller so far, I am very fascinated to see what I find on drone side.

scrps··on German developer guilty of 'hacking' for exposing hardcoded credentials in app
Good marketing pitch for disclosing to the highest bidder rather than responsibly to industry, gonna go to jail you might as well get top dollar for your trouble.

Oh no we did a terrible job and hardcoded credentials, someone found and tried a password and then reported it without stealing or destroying anything but our egos... the horror. Let's run to the cops and potentially ruin a life.

scrps··on Examples of AI rip-offs making their way into Google News
I'll join you in being downvoted.

Human teachers can be audited without advanced knowledge in maths, computer science, and information theory to discover what went wrong.

Human teachers can be held accountable.

A Human teacher has limited scale thus limited damage over bad information with more safeguards than "Big Corp promises not to be bad"

A human teacher can realize their own mistakes.

Human teachers have complex incentive structures that can modify their behavior.

Many humans (even ones with technical training) tend to see computers as infailible in first principals of math and carry that forward to deep learning which is where the math becomes tough to audit, couple that with LLMs affinity for overcoming the uncanny valley enough to seem like a rational human actor because of the datasets being used and you have "magic". This is before you even add financial incentive.

Not saying these issues in deep learning can't be tackled but the disengenous hype-train and the downvoting because people point out flaws with the new internet ATM is wearing thin.

scrps··on Ubisoft Exec Says Gamers Need to Get Comfortable with "Not Owning Your Games"
I see what you did there and I like it but inquiring minds must know: will it come with a launcher and preferably a rootki... I mean anti-cheat/drm?
scrps··on OpenAI now working with US Military on cybersecurity tools
Ah the old National Security play. Nothing gets you a nice political Do Not Touch sign like military/natsec contracting.
scrps··on Infowars and Goop sell the same exact pseudoscientific "wellness" products
People have been believing in woo-woo for time immemorial, the new magic is just scale thanks to modern comm channels.

SSDM. Same shit, different medium.

scrps··on Ask HN: Should I try to manufacture toasters?
It really has, I love that thing!
← PreviousPage 4 of 12Next →