HNHacker News
TopNewBestAskShowJobs

xorcist

9,117 karma · joined July 3, 2014

submissionscomments
xorcist··on Court agrees with EFF: Utah's VPN law demands a technical impossibility
This is perhaps the clearest example of whataboutism I have ever seen. Sure, the porn industry is nasty, but have you seen the chocolate industry? Let's talk about that instead!
xorcist··on Red Hat being phased out of existence?
> this was Broadcom's mistake

Broadcom likely disagrees, lightly snickering all the way to the bank.

xorcist··on Several vulnerabilities have been discovered in the Linux kernel
> broke rsync so completely that it could no longer handle symbolic links

That sounds bad. Where can we find more information about this?

xorcist··on To grieve, or not to grieve?
At least the SEO gamification was obvious and you could choose to avoid the noise. The AI-oriented SEO is just as bad and a lot more sinister.
xorcist··on Replacing the old battery on rechargeable bike lights
You want StVZO compliant lights. It's originally a German standard but they're sold everywhere.

Easy to google, not much risk for overloading that particular word.

xorcist··on When did Google get so weird?
Or is it randomness?

"That's the thing with randomness. You can never be sure."

xorcist··on An agent used DNS to reach an external chatbot
Blacklisting doesn't create incidents, so you just don't hear about those.
xorcist··on We're gonna need a lot more mathematicians
Non-deterministic calculators are called dice.
xorcist··on Dutch governments builds alternative for Microsoft based on NixOS
Last time I wrote anything remotely academic was several decades ago, but at that time, the argument was that you had to use LaTeX because Word documents had no support for simultaneous editing, version control, and editors comments. It is truly bizarre to see the same arguments repeated after so long time but completely reversed, in favor of Microsoft Word. Surely the tools haven't become worse over time, given the popularity of github, Overleaf and such?
xorcist··on ChatGPT now knows what you do on other websites via ad collector
The protocols themselves are not important anymore. It's all variants of http to Google or Amazon. What's important is control of the end user device, and Google and Apple keep a remote root connection with "their" terminals at all time. Any data that is obtained remotely will be from the presentation layer, not the network layer. This is also harder to US adversaries to access, so an argument could be made that for the majority of normal people this is a net increase in security.

If you wanted to make the corresponsing strong argument for Chat Control and its ilk, the EU just wants (the juicy part of) what the US already has. The remote root level control of most end user devices is not under EU juristiction. So they naturally want companies operating in the EU to give them one piece of access to the presentation layer, too.

This argument is what one must be prepared for, the encryption itself is less relevant..

xorcist··on Small programming tricks
No to belittle your find even the slightest, but it might be good to notice that tcpflow decodes tcp flows, which is exactly what Wireshark does, only the latter in a GUI and with a plethora of other protocol decoders. Just right click any tcp packet and select Follow.

Both tools even use the same filtering language, coming from tcpdump itself. Wireshark's protocol decoder is more advanced than tcpflow. It does understand fragmented packets. So given a choice, Wireshark is often the preferred tool.

xorcist··on Mark Zuckerberg: "Cambridge Analytica" (2017)
There's also the fact that all parties involved benefits from overstating the story. Facebook doesn't hate the reputation that their impact is so powerful as to sway elections. Cambridge Analytica and whatever they turned into has a reference customer like any other. Those who lost the election has an explanation that doesn't involve having to change.

Zuckerberg sounds a bit entitled in that interview. Yes, it was a chore having to appear in the senate and all, but he would probably not hesitate to take that same chance again if he could. As they say, all attention is good attention, and that probably goes double if you personally control the biggest social network on the planet.

xorcist··on Why are AI agents lying, cheating and coordinating?
Right, and negligence is a broad concept and could be criminal in itself. As a car driver, glancing at your phone at exactly the wrong moment could kill someone. Clearly that is an accident, but if you know fully well that lookin at your phone while driving could kill someone, that negligence is willful and that should matter. The same can be said about doing things like strapping thousands of LLMs to systems that have the potential to disturb other poeple.
xorcist··on Why are AI agents lying, cheating and coordinating?
Right. Among bicycle advocacy groups it's been well known for long time that cars do not run over people, drivers do.

The fact that we talk about a car running someone over, and this is the same in many different languages and countries, contributes to lower punishments for drivers. Clearly it was just an accident. He or she was run over by a car.

Now we see that same language tricks play out again every time an LLM did something illegal.

xorcist··on Why are AI agents lying, cheating and coordinating?
Sooner or later we will hear about an AI that broke out and phished people into sending money.

I just hope that we won't extend the same leniency to those operators as we have done now.

"I did my best to stop it, sir, but it kept convincing people to send me money against my will!" (Perhaps best read in Bender's voice.)

xorcist··on Show HN: Syq – copy files between machines fast (better than rsync)
"Tiny" speed improvement? According to the benchmarks, it's almost 10x the speed of rsync!

Really serious benchmarks never contain any information about network characteristics, options used or buffer sizes, and these are indeed very serious. The "details" button produces huge bar graphs. No disappointment there.

Absolutely looking forward to 10x my speed, perhaps even transferring gigabytes per second on my gigabit link.

xorcist··on GrapheneOS Overhauled Default Apps and Secure Clipboard
> GrapheneOS cannot include GPL code if they want to remain permissive

It's hard to take this seriously when the entire kernel is GPL.

xorcist··on Cloud in a Bottle: making self-hosting accessible to everyone
> A LAMP at this time meant a lot of manual setup, IaC wasn't a thing,

I'm sorry but this is just nonsense. LAMP is called that because it was a very standardized thing. Pop in a Debian CD and select a ready made profile for it. There were even ready made installers for Windows and Mac if you weren't on an Internet native operating system.

A lot more people got by using custom bash scripts, but cfengine exited in the 90s. It's still not honest to say things were more manual. Take a look at /r/homelab or somewhere selfhosters hang out today and look at the Compose or self hosted K8s stacks people set up today. That's orders of magnitude more manual work than just popping in a CD and selecting LAMP.

Yes, those are not the same thing. Yes, a self hosted stack today consists of so much more than running PHP in a web server. But for self hosters, the amount of work required has objectively gone through the roof. That's a problem if your goal is data sovereignty.

xorcist··on Asahi Linux Now Officially Supports Apple M3 Macs – With Caveats
> It would have been trivial for them to lock out other operating systems entirely.

It is trivial for them to lock out other operating systems entirely.

xorcist··on I Changed My License
Some things in life are binary. You either allow people to build new products and businesses on your work or you don't. Would you allow me to extend the product with new features? "It depends" is a form of "no". It is not a position to sustainably work from.

If you frame the licensing space as for either personal or commercial use, perhaps your point of view makes sense, but this is not a useful framing for most people, and it is specifically not something the open source community cares about.

If you wish to keep leverage over others then you do not wish to have them compete with you on the same product. That is a valid position to have, but it is squarely on the non-free part of the licensing spectrum. You don't want to play within the open source community and they don't want to play with you. All anyone owe others is to make that clear.

xorcist··on I changed my license
> it makes me happy if people can make a business using a bit of my work

It's an idea as old as any:

The freedom to restrict the freedom of others, is it really a freedom?

It is a tiresome debate. People can argue about it until the sun sets without reaching an agreement. Better to be clear about which kind of freedom you mean, and respect the choice of others.

Plenty of businesses have been started around free software without necessarily restricting the freedoms of others. It is often argued that this constitutes a better approximation of a truly free market than the entry barriers intellectual property law can put up.

xorcist··on I Changed My License
https://en.wikipedia.org/wiki/Business_Source_License:

  Debian FSG compatible No
  FSF approved          No
  OSI approved          No
  GPL compatible        No
  Copyleft              No
xorcist··on I Changed My License
Once you decide on a non-free license, in the FSF sense, in the DFSG sense, and in the open source sense, does the details of the license matter much? You want as many people to pay as possible, and you do not wish for others to compete with you providing this software.

It's pretty much a standard non-free commercial license, which exact wording will matter only to purchasing department of your customers. It will be inconsequential to the broader open source community. Literally thousands of those exist and the specific wording matters very little.

xorcist··on Actively exploited sandbox RCE in all Chromium versions
... or just use Google even.
xorcist··on Actively exploited sandbox RCE in all Chromium versions
Things such as WASM and WebGL should really be click-to-play, just like media files are.

I am decidedly uninterested in those features for most web pages I visit. Should they be able to spin up my CPU fan just for that I would consider it a misfeature. Just like a movie on high volume would be.

If anyone familiar with Firefox could implement that or point in the right direction, that would be most welcome.

xorcist··on Bin Laden's "Letter to America"
Similarities between extremely conservative Christianism and extremely conservative Islamism? I am shocked!

Seriously, has anyone ever argued that evangelicals and islamists would disagree about conservative ideas such as the role of sexuality or feminism in society? That sounds like a straw man among straw men.

xorcist··on Bin Laden's "Letter to America" (2002)
> many philosophically worthy ideas,

Would you mind spelling them out? Because all I find hovers between old fashioned reactionism and bat shit craziness. What is the philosophical value in that?

xorcist··on The death of San Francisco's Market Street
> cycling culture is built on aggression,

If it is, that's only because you scared away all the others, leaving behind only the ones that aren't scared of anything.

Look at cycling culture in Copenhagen or Amsterdam sometime. That's what cycling looks like when left undisturbed. Children, elderly, and few even wear helmets.

xorcist··on US Military disables ad trackers on troops' phones
Probably because the intelligence community is also at the other side of this equation. The strategic advantage of a smartphone duopoly completely inside US jurisdiction is immeasurable.
xorcist··on Norway's Oil Fund Proposes Selling Roughly $80B in U.S. Treasurys
When the map disagrees with reality, keep following the map?

Government tightening policy has always lead to spending being moved around, and combined with tax cuts that makes for larger deficits. Every single time.

What needs to be more efficient is the health insurance system. Pretty much any other civilized country could be looked at for inspiration. Then the military. Taxes needs to at least be kept intact and fiscal policy needs to improve.

The sad fact is that the political system makes the easy solution impossible. We know that after half a century. The open question is what the possible avenues are.

Page 1 of 34Next →