HNHacker News
TopNewBestAskShowJobs

wepple

3,233 karma · joined May 8, 2013

Security engineer. Strong opinions loosely held.
submissionscomments
wepple··on Happy 10k Day
> It makes me feel safer

You sound like a really unsafe driver who shouldn’t be on the road, period.

wepple··on AI finds 5k-year-old civilization beneath Dubai desert
SAR sounds like it’s doing the heavy lifting here. Can anyone shed light on how SAR and ML works together? Radar data fed into feature identification?
wepple··on MacBook Air M4
The first 3 break expectations or norms. Clearly labeled price and specs doesn’t.
wepple··on Hot take: GPT 4.5 is a nothing burger
> It feels bad to delete a 4.5 chat.

This is interesting, but feels like a you personal thing. I don’t feel bad wiping message conversations with my SO

wepple··on The need for memory safety standards
Yep. Hence my comment. Smashing the stack is an afterward condition of some kind of memory error. If you’re going to do that, why not mention heap overflow and others? It just seems unusual.
wepple··on AI's Biggest Flaw? The Blinking Cursor Problem
I tend to know people on chat are human and therefore what they’re likely capable of and not capable of.

And I’m not expected to use them as a tool. By contrast I can probably pick up any Ryobi power tool that I’ve never seen before and work out how to make it do its thing, and probably what its purpose is

wepple··on The need for memory safety standards
Your distinction between stack smashing and buffer overflow is puzzling
wepple··on The need for memory safety standards
Two reasons

- modern languages prevent you from having to think about it at all. You shouldn’t have to sanitize, it should work

- there are a load of issues that have nothing to do with sanitization but everything to do with memory. Race conditions, type confusion, UAF to name a couple. If we focus on sanitization, we still need memory safety to fix those

Also sanitization is non-trivial for complex inputs

wepple··on Coral USB Accelerator with Google's Edge TPU
I don’t know what’s more “wtf” - your first message or the actual follow-up with proof. Why?
wepple··on HP Acquires Humane's AI Software
> We understand this transition may be difficult

You have to be a right knob to describe this as a “transition”

wepple··on HP Acquires Humane's AI Software
Ugh smart… makes me want to throw all my electronics into a volcano

But yeah what you said is way worse

wepple··on Leaking the email of any YouTube user for $10k
If I did, would you know?

And if I did, it wouldn’t stop people from doing co-ordinated disclosure either, would it? Same with high end exploits - some folks do co-ord disclosure because it feels good and is great for your CV; others sell gray market and we generally have no idea what’s being traded.

(With the exception of say, zerodium or 0xcharlie’s various talks)

wepple··on Leaking the email of any YouTube user for $10k
You don’t think the daily mail would buy a story about how firstname.lastname@nypd.ny.gov posted a comment in support of the KKK?
wepple··on Leaking the email of any YouTube user for $10k
Yeah, I think this is valid. “I’m confident I can find someone who will buy this” vs “I’ll message grugq”, roughly?
wepple··on Leaking the email of any YouTube user for $10k
You’re talking about this as if there aren’t other countries who actively infiltrate power infrastructure and for whom this is the most low risk mild attack (if you can call it that)

I’m not speaking theoretically, which I suspect most on this thread are.

wepple··on Leaking the email of any YouTube user for $10k
You don’t think there are folks with content they’d very much not like to be directly associated with them? Comments, videos, likes, etc
wepple··on Leaking the email of any YouTube user for $10k
There’s 100% an active market for this, and I think tptacek is simply wrong on this point (the others are valid)

The likes of Cambridge Analytica didn’t go away, they exist and absolutely go hunting for data like this.

The ability to map between different identifiers and pieces of content on the internet is central to so many things - why do you think adtech tries to join so many datapoints? Let alone things like influence campaigns for political purposes.

I’m not talking about assasination plots, but more mundane data mining. This is why so much effort in the EU has gone into preventing companies from joining data sources across products - that’s embedded in DMA

wepple··on Leaking the email of any YouTube user for $10k
> Threat actors buy vulnerabilities that fit into existing business processes

Selling crazy stories to the media is as old as time.

This vuln would give you a lookup table from email->YT

SELECT * FROM table WHERE email LIKE “%.gov”

wepple··on Leaking the email of any YouTube user for $10k
You could dump all the data over a matter of weeks, then you’re sitting on a treasure trove that will pay out over 5+ years.

You could sell it non-exclusively to every data broker

wepple··on Anthropic: "Applicants should not use AI assistants"
Maybe I’m wrong, but while we’re fact checking, can you provide a source?
wepple··on Anthropic: "Applicants should not use AI assistants"
Huge miss on the gun analogy. The likes of NRA are pushing for 50-state constitutional carry. Everyone has a gun on their person with no licensing requirements. Yet at the NRA conference they ban guns.

There’s probably actually some other hidden factor though, like the venue not allowing it.

Edit: FWIW those late night TV shows are nothing but rage bait low brow “comedy” that divides the country. But the above remains true.

wepple··on I am rich and have no idea what to do
What might start as “wow! A whole new place” ends up being “ok, just another new place” for many people.
wepple··on I am rich and have no idea what to do
This is how interpreted the post. Listing “throwing parties” as one of your hobbies shows they don’t really have deep passion curiosities like the things you listed can be.
wepple··on Ask HN: Predictions for 2025?
Most of your points feel very “water discovered to be wet”

Except: Lab-grown meat and plant-based protein alternatives will become more mainstream

That one seems to have been trending negatively and I expect it to continue

wepple··on Ask HN: Predictions for 2025?
You don’t understand what most people do for work. I’d be very surprised if 10% of jobs are wiped out.
wepple··on In Defense of Y'All
What’s your word for it?
wepple··on Gemini 2.0: our new AI model for the agentic era
Versatile is far worse. It’s so broad to the point of meaninglessness. My garden rake is fairly versatile.

Agentic to me means that it acts somewhat under its own authority rather than a single call to an LLM. It has a small degree of agency.

wepple··on GM exits robotaxi market, will bring Cruise operations in house
> I think Tesla is going to win this.

If Tesla can do level 5 in 2-3 years as you say (and that might be a pretty big “if”), that places them 5+ years behind Waymo.

What leads to the win here, then? Waymo constrained by the cost of LIDAR? Is it truly such a massive % of build cost that they can’t succeed? Is it that Tesla is vertically integrated?

wepple··on Why America's economy is soaring ahead of its rivals
Perhaps I’m simply not normal, and hence frustrated that someone suggested my desires are forced or taught.

I do tend to be the one neighbor out in the yard the most by an order of magnitude.

I also have a 60 acre rural property because even a quarter acre in the suburbs doesn’t give me enough space to play.

wepple··on Why America's economy is soaring ahead of its rivals
It’s likely linked to my non-trivial ADHD that I need the space to work on whatever thing I go into a rabbit hole on any given year. Even in the suburbs I’ve had the fire department called; I probably would’ve been arrested had I been in a townhouse.

I moved from Brooklyn NYC to NJ suburbs and my 15 year mortgage on 4 bed 2 bath decent yard was about the same as a 1 bed 1 bath 3rd floor walk up that was pretty snug once you had two people and two cats.

← PreviousPage 3 of 34Next →