HNHacker News
TopNewBestAskShowJobs

throw_me_uwu

52 karma · joined September 9, 2024

--
submissionscomments
throw_me_uwu··on Unauthenticated remote code execution in OpenCode
That's the point, it was!

https://github.com/anomalyco/opencode/commit/7d2d87fa2c44e32...

throw_me_uwu··on Unauthenticated remote code execution in OpenCode
WTF, they not just made unauthenticated RCE http endpoint, they also helpfully added CORS bypass for it... all in CLI tool? That silently starts http server??
throw_me_uwu··on Nokia N900 Necromancy
Just play with electronics, Arduino/Raspberry/ESP32-compatible stuff is cheap and available. Lots of information about it. A phone is not that much different from a microcontroller board on a battery.
throw_me_uwu··on EFF launches Age Verification Hub
You don't need conspiracy, you need the incentives.

The state always thinks of self-preservation. Any bureaucrat is aligned to this goal by getting the benefits from the state. So, the more power it has over its citizens, which is the first threat it, the more safe it is and the less opinions of citizens matter.

Understanding this, every citizen must think carefully about giving away more power to the state.

throw_me_uwu··on EFF launches Age Verification Hub
If age check is truly anonymous/zero-knowledge, as in the requester can't identify me, the issuer can't link me to the attestation... why wouldn't someone start selling age verified accounts? Easy money for some 18yo.
throw_me_uwu··on AI scrapers request commented scripts
> most likely trying to non-consensually collect content for training LLMs

No, it's just background internet scanning noise

throw_me_uwu··on Alibaba Cloud says it cut Nvidia AI GPU use by 82% with new pooling system
Because ML infra is bloatware beyond belief.

If it was engineered right, it would take:

- transfer model weights from NVMe drive/RAM to GPU via PCIe

- upload tiny precompiled code to GPU

- run it with tiny CPU host code

But what you get instead is gigabytes of PyTorch + Nvidia docker container bloatware (hi Nvidia NeMo) that takes forever to start.

throw_me_uwu··on Petition to stop Google from restricting sideloading and FOSS apps
Requiring ID won't stop scams.

Often bank scams rely on sending money to another account (obviously registered with an ID), and then being drained at ATM. The account is going to be registered on a drop or another victim. Sure, it's burned after that, but as long as it's an insignificant cost, scamming is still profitable.

The same situation with malware, bad actors are incentivized to put effort into bypassing this, so dev accounts will be registered on random homeless people, stolen IDs, or just fake IDs. While normal developers will choose to give away IDs.

And as always, it starts with 'protect the children/elderly/vulnerable', then that authoritarian country requires Google to give away info on every developer to operate legally, then it's UK and other 'democracies', then you can't run your code on your device without the government approval.

throw_me_uwu··on Meta's flirty AI chatbot invited a retiree to New York
Why/how society should give more protection than people close to you? Why his wife let him go somewhere unknown, knowing about his diminished state?

With all the labels and disclaimers, there can always be this one person that will get confused. It's unreasonable to demand protection from long tail of accidents that can happen.

throw_me_uwu··on Right to root access
The preference has been stated thousands of times. There's nothing to debate. They won't give you root and power. The only question is what you will do to change things:

Do you:

- Buy open devices?

- Sponsor development of open devices?

- Start open device companies?

- Develop open software that competes with walled gardens in quality and ease of use?

- Sponsor open software?

- Use open software?

- Engage in lobbying?

- Drop exploits (that would be worth a pile of gold) to let people jailbreak devices?

- ...

- Fake-care or real-care?

throw_me_uwu··on Ask HN: Can we stop with the political posts?
"Just" don't engage with them. A more technical solution is to make a custom feed that filters out what you don't like.

I have a script that generates an html file, sorting posts to tiers based on domain or keywords. Just as an example the shitty tier posts are now: bbc, wsj, vox, arstechnica; the top tier: itch.io, twitter, arxiv, github. Any posts from rare domains get into top tier, posts from frequent domains to middle tier. So it's mostly sorted to my preferences.

throw_me_uwu··on The Plot to Poison Children's Minds
Clean your watch history or create a new account. Youtube algorithm is very good, just watch / like videos you want more in recommendations, use private tabs for everything else.

Twitter algorithm is much worse for example and has bugs, you'll need to grind for some time to get rid of popular trash and politics. Any engagement with bad content will only bring you more of it in the feed, and there's tons of baits to engage with something stupid. So mute any accounts and words you don't like, click "not interested" on posts, but it's really slow to update.

throw_me_uwu··on Limbo: A complete rewrite of SQLite in Rust
It'd be cool if it was possible to run user provided SQL queries safely without sandboxing/wasm.
throw_me_uwu··on Love being interrupted when my monitor asks me to accept user agreements
I doubt "boycott" thing would work, but "nerd recommendations" as browser addon would actually be useful.
throw_me_uwu··on Linux kernel contributor swatted and handcuffed live on stream [video]
1300 is a nice sample size if you're sampling randomly.

If 1/3 of people have a trait, you'll get a good sense it's common after asking 300 people, even if the total population is a million. Surveying more gives diminishing returns as the result quickly converges on the real proportion.

The real problem with all surveys is the sampling isn't truly random, which skews results.

throw_me_uwu··on Confirmed: Reflection 70B's official API is a wrapper for Sonnet 3.5
But does reputation work? Will people google "Matt Shumer scam", "HyperWrite scam", "OthersideAI scam", "Sahil Chaudhary scam", "Glaive AI scam" before using their products? He wasted everyone's time, but what's the downside for him? Lots of influencers did fraud, and they do just fine.