HNHacker News
TopNewBestAskShowJobs

Dunedan

2,748 karma · joined November 8, 2016

submissionscomments
Dunedan··on Waymo One is now open to everyone in San Francisco
> Tesla lacks the ability to resim counterfactuals with confidence since they don't have HD ground truth.

Tesla does have HD ground truth data for verification generated by their own LIDAR-equipped vehicles. However, according to a recent tweet by Elon Musk [1], they don't need LIDAR for that anymore.

[1]: https://nitter.poast.org/elonmusk/status/1788064109633875999

Dunedan··on OpenAI and Apple Announce Partnership
That quote is about their own LLMs, not about the use of ChatGPT.
Dunedan··on OpenAI and Apple Announce Partnership
Apple doesn't even bother to highlight their cooperation with OpenAI. Instead they bury the integration of ChatGPT as the last section of their "Apple Intelligence" announcement: https://www.apple.com/newsroom/2024/06/introducing-apple-int...
Dunedan··on JIT and GIL removal are not even my most anticipated Python 3.13 features
And that's exactly why it's so dangerous to use pickle, because it doesn't prevent you from executing untrusted code. It doesn't matter if you only pickle strings and bytes, as long as you unpickle any data, an attacker can replace that data with something which results in arbitrary code execution.

If you only want to store bytes, the safe way to do so is to use the dbm module directly, which doesn't pickle/unpickle the data you provide.

Dunedan··on JIT and GIL removal are not even my most anticipated Python 3.13 features
Mind that shelve, by utilizing pickle, is susceptible for arbitrary code execution when loading untrusted data.

Depending on the use case it might be better to just use the dbm module directly.

Dunedan··on Using Vectorize to build an unreasonably good search engine in 160 lines of code
Don't enable JavaScript.
Dunedan··on CVE-2016-6187: Yes, I know. It's 8 years ago
The link code seems to be from 2024, so no need for a "(2016)".
Dunedan··on Telegram has launched a pretty intense campaign to malign Signal as insecure
> You cannot download Signal from F-Droid. You need to download it from the Google Play Store.

You can also download the APK directly from their website: https://signal.org/android/apk/

When doing so Signal uses its own update mechanism to stay up-to-date.

Dunedan··on How much time should you spend sitting versus standing?
Nothing prevents somebody in Europe to stay at home without significant exercising all day, especially now as a lot of jobs are work-from-home.
Dunedan··on Tesla conducting more layoffs, including entire Supercharger team
Replacing a few executives is something quite different than laying the whole team off.
Dunedan··on Tor: From the Dark Web to the Future of Privacy
> People can do things altruistically - there doesn't always need to be a bitcoin-style monetary incentive.

For a few years Oniontip [1] allowed tipping Tor relay operators with Bitcoin. In my opinion that was a quite nice combination of technologies, as it allowed to anonymously tip operators of a service providing anonymity on the internet.

[1]: https://github.com/DonnchaC/oniontip

Dunedan··on Generation Z is unprecedentedly rich
I'm not so sure about that. Mind that they talk about household income, not individual salaries.

The median personal income in 1975 has been $26,450 [1], although that's across all generations (not sure if your number is).

Edit: Unfortunately the statistics about the median household income [2] don't date back that far.

[1]: https://fred.stlouisfed.org/series/MEPAINUSA672N

[2]: https://fred.stlouisfed.org/series/MEHOINUSA672N

Dunedan··on Generation Z is unprecedentedly rich
IMO this it just a very bad hit piece. It's just picking whatever fits its narrative.

> The average 25-year-old Gen Zer has an annual household income of over $40,000, more than 50% above the average baby-boomer at the same age.

Might be worth mentioning that this isn't inflation corrected. Oh and of course averages don't tell the whole story.

> Gen Z’s economic power was on display at a recent concert by Ms Rodrigo in New York. The mostly female teenagers and 20-somethings in attendance had paid hundreds of dollars for a ticket. Queues for merchandise stalls, selling $50 t-shirts, stretched around the arena.

That says literally nothing about the economic power of a whole generation.

> In 2022 Americans under 25 spent 43% of their post-tax income on housing and education, including interest on debt from college—slightly below the average for under-25s from 1989 to 2019.

Aren't way more Americans up to 25 still living with their parents, compared to previous generations, because of the high housing costs? I imagine living with your parents is much cheaper than any other housing option.

> Their home-ownership rates are higher than millennials at the same age.

Well, millennials had a worse start for sure, however what about home-ownership of other generations at that age?

> Gen Zers are also producing fewer innovations. According to Russell Funk of the University of Minnesota, young people are less likely to file patents than they were in the recent past.

Fresh off the press this got apparently debunked: https://www.unibas.ch/en/News-Events/News/Uni-Research/Resea...

I could go on.

Dunedan··on The xz attack shell script
Adding a script to regenerate good and bad binary files might have worked for this use case pretty well too.
Dunedan··on The xz attack shell script
I believe software of a certain complexity can't be finished and will always need updates, even if you exclude new features, as the whole eco system of hardware and software is constantly evolving around it. Here are a few reasons why:

- bug fixes (as every non-trivial software has bugs)

- improved security (as the kernel adds security functionality (capability dropping, sandboxing, ...), software can utilize this functionality to reduce its attack surface)

- improvements of existing features (e.g. utilizing new CPU extensions or new algorithms for improved performance)

Dunedan··on The xz attack shell script
> Any given commercial operation that claims any credibility for itself does supply chain analysis before adopting a dependency. This is, among other things why ordinarily you'd pay RedHat to maintain a stable Linux Release for you and why projects such as FreeBSD severely limit the software they ship in the default install.

That sounds like you assume RedHat would've caught the vulnerability in xz-utils, before shipping it in the next release of RHEL. I'm not so sure about that, as there is only so much you can do in terms of supply chain analysis and such a sophisticated vulnerability can be pretty hard to spot. Also mind that it only got discovered by accident after all.

Dunedan··on The xz backdoor thing reminds me of a story
> You’re not required to have a copy of annemployee’s ID on file?

In Germany you definitely don't have to. None of my past or current employers has ever seen my ID.

Dunedan··on Ahrefs Saved US$400M in 3 Years by Not Going to the Cloud (2023)
dupe of https://news.ycombinator.com/item?id=35094407
Dunedan··on Elizabeth Goodspeed on the delicate art of nostalgia in branding
And while talking about Bahlsen: Check out their stylish, yet utterly unusable website: https://www.bahlsen.com/
Dunedan··on Elizabeth Goodspeed on the delicate art of nostalgia in branding
> In 2021, Bahlsen’s redesign was acclaimed by the design community for its clean, bold modernity (even winning them a D&AD award). Nonetheless, the rebrand resulted in a 12% drop in sales the following year. This decline was attributed to a variety of factors: low on-shelf recognition, reduced emotional resonance, and smaller, less appetising photos than the original, “dated” packaging. In other words, even if the branding was good, it didn’t feel right.

Or, you know, maybe sales dropped, because inflation caused by Russia invading Ukraine hit and people spent less money on more expensive foods like Bahlsen cookies.

Dunedan··on Forum reactions to Satoshi's Bitcoin paper
I find it pretty incredible how critical the responses regarding the technical feasibility were and how Satoshi Nakamoto had thought of every one of them already when writing the whitepaper, as it's visible from his answers.
Dunedan··on How China Built BYD
What baffles me is Tesla's paralysis compared to BYD. Wasn't Tesla's goal to do rapid expansion to stay on top of everybody else volume wise? Nowadays Giga Berlin produces way less vehicles than anticipated and the only new factory being planned is Giga Mexico, which also seems to proceed slower than expected. In addition while the next vehicle from Tesla will probably be a smaller and cheaper car, it's still at least a year before they'll be able to ship it. All that while Tesla seems to have lots cash at hand, so why don't they expand more aggressively?
Dunedan··on AMD's Mild Hybrid Strategy: Ryzen Z1 in Asus's ROG Ally
> On the desktop scene, AMD’s Ryzen 7950X3D mixes cache configurations and has mild clock speed differences. For portable devices, the Ryzen Z1 here mixes cores with different physical designs and has larger clock speed deltas across the chip. AMD’s other consumer offerings do not use hybrid configurations.

There are also desktop APUs using a combination of Zen 4 and Zen 4c cores (Ryzen 3 8300G, Ryzen 5 8500G), as well as other mobile CPUs doing the same (Ryzen 3 7440U, Ryzen 5 7545U).

Dunedan··on Apple Vision Pro: An Early Review by Andrej Karpathy
Here is the original source: https://twitter.com/karpathy/status/1753842145075818707
Dunedan··on Damn Small Linux 2024
Aren't you mistaking disk space for memory size? Available disk space in 2002 was much larger.
Dunedan··on The 37signals Employee Handbook
Two days ago: https://github.com/basecamp/handbook/commits/master/
Dunedan··on OpenWrt One/AP-24.XY: new open source router board by OpenWrt and Banana Pi
That picture doesn't represent the actual hardware. Pretty confusing, but at least they acknowledge it in its description:

> For illustration only, not a rendering of the OpenWrt One/AP-24.XY board

Dunedan··on Show HN: GodotOS – Fake operating system interface made in the Godot engine
... or to just update to a newer version of Firefox.
Dunedan··on Higher fees, more ads: streaming cashes in by using the old tactics of cable TV
Also mind that even when paying the additional $3/month, it's not completely ad-free, as Freevee content will still show ads.
Dunedan··on Outlook/Hotmail is no longer blocking my mail server
Thanks for responding, really appreciated.

> made a prediction with high confidence

Do you somehow track the amount of false positives these predictions generate? How do you tune the prediction to not generate too many false positives?

> but in real life, you absolutely need to be proactive

Why is Microsoft the only provider who needs to do such proactive blocking? Why don't you need to do that for email addresses associated with Office 365?

> I think you should give me even more detailed feedback since there’s not much I can do except give a vague high level explanation unless you help me by being specific.

My story is very much the same as for everybody else having the same trouble, including the person whose blog post sparked this discussion: A root server for personal use located in the data center of a mid-sized hoster, running a mail server as part of its duties. In my case the whole mail setup runs on IP-addresses separate from everything else. Mail volume to Microsoft would probably be on average 1-2 emails per month. No issues whatsoever getting emails delivered to other mail providers, only to Microsoft. This whole setup is in place since several years.

← PreviousPage 3 of 20Next →