HNHacker News
TopNewBestAskShowJobs

Chabsff

822 karma · joined April 27, 2020

submissionscomments
Chabsff··on The simple beauty of XOR floating point compression
I'm not sure that's a very fair comparison, as this algorithm does point-wise streaming compression/decompression. I could see myself using something like this in a FPGA context or within a tight acquisition inner loop for example.
Chabsff··on The simple beauty of XOR floating point compression
Not having to make that kind of decision in the first place is inherently valuable in of itself, which I believe is what's being showcased here.
Chabsff··on Stanley Kubrick did it his way
It's not, in fact, the only way. The alternatives are time and/or money. Not having access to the resources needed to accomplish something is not a license to resort to socially unacceptable means.

Now, there's an argument to be made that actors who accepted to work under Kubrick knew (or at least ought to have known) what they were getting into, which blurs things a lot in this specific case. But "It's the only way" is going too far imo.

Chabsff··on The simple beauty of XOR floating point compression
That's already (one of) the main property that the algorithm is exploiting: That f64 is an horribly overkill representation for the data since it was generated using a microsecond clock, leading to a lot of trailing zeros.

So yeah, dropping more significant digits should lead to even better compression.

But if we are going to be massaging the data based on what we know/need, there are better ways to go about compressing it. e.g. I'd expect that simple fixed-point quantization with a delta encoding would compress better than this. What I find cool about this is that it dynamically figures things out without having to deal with any priors.

Chabsff··on Notepad++: Help us to take down the parasite website
Fraudulently pretending to be a trusted authority (trusted enough to click a download link clears the bar) is sufficient to get flagged as Social Engineering, under the deceptive content category, by Safe Browsing. See https://developers.google.com/search/docs/monitor-debug/secu...
Chabsff··on FuryGpu – Custom PCIe FPGA GPU
You probably know this already, but for anyone else curious about going down that road: For this type of use, it's definitely worth it to constrain yourself to FPGAs with dedicated high-bandwidth transceivers. A "basic" 1080p RGB signal at 60hz requires some high-frequency signal processing that's really hard to contend with in pure FPGA-land.
Chabsff··on Claude 3 beats GPT-4 on Aider's code editing benchmark
According to them: https://support.anthropic.com/en/articles/7996881-what-is-yo...

The very first part of the answer to "How do you approach GDPR" is:

> "We approach data privacy and security holistically, [...]"

Which reads to me as a polite way to say: We don't want to be GDPR-compliant.

Chabsff··on Rust data structures with circular references (2021)
Rust's safety mechanisms don't exist just to prevent bugs from escalating into security issues, they exist to prevent the whole class of bugs related to reference handling from being present in the first place. That's supposed to mean programs that work more consistently. Handwaving techniques that lead to programs panicking as "Well at least it doesn't become a security concern" is missing the forest for the trees.
Chabsff··on Rust data structures with circular references (2021)
> languages that do not currently have this ability

That seems to be a very common position, and one that's super weird to me. C and particularly C++ absolutely have that ability with library support if you know what you are doing.

The only material difference, from my point of view, is that the default behavior of the language is different.

I will fully grant that the path of least resistance being dangerous is a huge issue in C/C++, and one that Rust addresses, but extending that all the way to saying that the language lacks the ability is really excessive.

Chabsff··on Key Stable Diffusion Researchers Leave Stability AI as Company Flounders
If Stability was a nonprofit, sure. Otherwise, lol.
Chabsff··on Show HN: Nebula – A network agnostic DHT crawler
This is not a particularly egregious example, but it's kind of spectacular how everything crypto adjacent revels in technobabble.

The detractors of the ecosystem (myself included, to be honest) will be quick to point out that obfuscating the tech as magic as much as possible, as well as creating an inside group lingo, is key to onboarding and retaining people into it. But it's fascinating how that percolates throughout the dev community behind it as well.

Chabsff··on Ibis, a federated Wikipedia alternative
Wikipedia is one of the few initiatives where not being satisfied with 99% accessibility is absolutely warranted. If your goal is to dethrone it, you have to bite that bullet.
Chabsff··on Detect when your installed Chrome extensions have changed owners
Pedantically, outdated Chrome extensions make for a poor attack vector in the first place because the majority of users get automatic updates, including being disabled/removed by Google themselves if the dev is gone and a problem is found.
Chabsff··on Detect when your installed Chrome extensions have changed owners
I don't think anyone (at least not me) is claiming that auto-updates are very good. However, I will argue 'till the cows come home that they are better than the alternative in many cases.

Installing software in the first place is placing a lot of trust into whoever made that software from the get-go. There are a myriad of ways a bad vendor can abuse a software installation without having to involve auto-updates. Singling that as a specific abuse vector that's orders of magnitude worse than giving filesystem access to an opaque binary just doesn't make much sense to me.

If I don't trust a vendor enough to allow auto-updates, then I don't trust them enough to install the software in the first place (dev dependencies notwithstanding for obvious reasons). Combine this with the well known fact that optional updates just don't get installed, and the cost/benefit calculus of the feature becomes not that hard to motivate.

Fwiw, I also think that a switch to disable the feature should always be present for those of us who care.

Chabsff··on Detect when your installed Chrome extensions have changed owners
Yep.

That being said, I really like VS Code's approach of having auto-updates enabled by default, but making a switch to turn off the feature available for nerds like us who care.

That's the model to follow in my book.

Chabsff··on Detect when your installed Chrome extensions have changed owners
Unfortunately, it's been established for a long time now that users cannot be trusted to perform updates by themselves, no matter how naggy you get about it, even for the most critical of security fixes.

Automatic updates, again unfortunately, are critical to safety.

Chabsff··on HDMI Forum Rejects Open-Source HDMI 2.1 Driver Support Sought by AMD
It's obviously far from ideal. I was just pointing out that "welp, proprietary drivers it is" is not the only way forward.
Chabsff··on HDMI Forum Rejects Open-Source HDMI 2.1 Driver Support Sought by AMD
DisplayPort to HDMI converters trivially solve that. Let the TV consume HDMI all it wants while still "just" outputting DP from the computer.
Chabsff··on AI poisoning could turn open models into destructive "sleeper agents"
From an industrial point of view, the entire point of AI (as opposed to "traditional" algorithms) is to transfer more agency from humans to machine than is feasible with current techniques. Trust and safety are currently the two main things blocking that, which is why all of these discussions are very often worded in a way to maximally appeal to the purse holders of these industries.
Chabsff··on Building a Web Game in C
I mean that an organization would be a lot better than what you are doing now.

Alternatively, a "central" repo linking to the others would also work.

Right now, the site says that the link leads to the project, but instead, it links to you. That's giving the impression that the project's primary goal is to raise your personal profile.

Chabsff··on Building a Web Game in C
Quick bit of feedback: Having the project's GitHub link point to your personal profile comes across as rather gauche.

If you want to refer to a collection of repositories, using a GitHub organization, even if you are the only member, prevents people from assuming you are self agrandizing.

Chabsff··on Firefox on the brink?
Exactly. There are a plethora of browsers out there, and no one can be expected to test against all of them. As long as we go for a "government conforming to industry" mentality, then the cutoff has to be somewhere, and if Firefox doesn't make that cutoff, then that's all there is to it.

No browser deserves special treatment here. And this is as true for Firefox as it is for Lynx.

Chabsff··on Firefox on the brink?
Sort of agreed as of today, but this is not something that we just have to accept, especially considering the government doesn't really have a need to make use of the full suite of tools provided by the various existing standards. There are safe subsets to be picked in 2023.

The government doesn't design roads to conform to the top brands of cars and trucks. It specs them to a standard and any manufacturer can have their product certified as compliant. This both protects the public and gives anyone an opportunity to provide products no matter how small their market share is. Doing it the other way around would be madness, and I don't see why the same principle shouldn't apply here.

Chabsff··on Firefox on the brink?
Somehow, I don't think a single person enjoying the browser justifies 6 Million dollars a year in executive overhead alone.

That's what what success means in this context: Something that makes that expense worthwhile.

Chabsff··on Firefox on the brink?
Sure, but the government HAS to make that determination in a data-driven way. It cannot be based on anything subjective, for what should be obvious reasons.

On top of that, said lack of knowledge is a stated goal of all privacy-focused browsers. GA-blindness is an implementation detail of these policies. Any method the government could use to accurately track that information is effectively a bug in need of fixing from the POV of the browser's developers.

The most practical answer is, as was posted by someone else here, the government spec'ing to a standard instead of a set of browsers, which it really should be doing in the first place. The mere fact that the current setup means that the government accidentally makes and/or breaks winners in that space is justification enough.

Chabsff··on Firefox on the brink?
Per the article, this is irrelevant. The case being made is that the figure seen by the government falling under 2%, which it is getting close to, will trigger a chain-reaction of consequences that will dramatically hurt Firefox, and it's not clear if Mozilla, the organization, could weather that.

It doesn't particularly matter whether or not the figure is accurate in that context. Maybe that can be fixed easily by having Firefox contextually relax tracking a bit or by having the government change how they perform the tracking, but the status quo is not really sustainable. And that's really all the article is saying at the end of the day.

Chabsff··on Unaligned accesses in C/C++: what, why and solutions to do it properly
You are correct in principle, but the code in the original post definitely exhibits strict aliasing violations. Not only that, it didn't need to.
Chabsff··on Reflecting on 18 Years at Google
The distinction, and this is an important one, is that cookies have a hard cap of 4Kb of data per domain, making them nigh-useless for that purpose. All they are good for is recognizing a given user server-side across multiple page loads and storage of a few handful of user preferences. Cookies also get sent with every request, so using them as storage is just asking to balloon your bandwidth costs.

On top of that, using localStorage for storing large amounts of data rarely involves anything like a cookie warning because it's 100% client side unless manually sent back to the server. And even then, if you anonymize the data (i.e. you don't care who's storage you are using), you still don't technically need any warning.

All this to say: There is basically no relationship whatsoever between pervasive cookie warnings and the usage concerns you are voicing. Both are valid concerns, both are important stakes, but they have nothing to do with one-another.

Chabsff··on Reflecting on 18 Years at Google
I think you might be confusing cookies and local storage.
Chabsff··on The AI industry turns against its favorite philosophy
The operating key word here being "agreement", which, as far as I'm concerned, is the absolute antithesis of what EA is all about.
← PreviousPage 3 of 8Next →