HNHacker News
TopNewBestAskShowJobs

a_vanderbilt

648 karma · joined January 21, 2023

Senior EUX Engineer at a major MSP. Former Systems Engineer at an AI SaaS Startup. Catch me at HackCFL 2027 in Orlando!
submissionscomments
a_vanderbilt··on GM software boss: we have 'high conviction' ditching CarPlay is the right path
Unfortunately for them, the degree to which one thinks they are right has no bearing on actually being right. This will go down as yet another unforced blunder an American car maker brought upon themselves.
a_vanderbilt··on An Update on Apple M1/M2 GPU Drivers
The problem is that Whisky is not for the casual user.

I used it and found it confusing at first. Imagine your average gamer, they'd never get past dragging in the app. The Steam Deck (and Proton) have been so successful because you can just power on the Deck and use it. No tinkering or third-party tools to do what you want.

a_vanderbilt··on An Update on Apple M1/M2 GPU Drivers
I have a bet going that their next Steam Deck is going to have an ARM processor.

Allegedly NVidia is working on a WoA SoC, now that Qualcomm's contract with MS has ended. If NVidia puts their recent capital gains into a performant ARM chip like Apple (tapeout alone would likely run in the billion-dollar range), we can hopefully expect AMD to respond with something soon after. Once the chipsets are available, it's a matter of getting Linux to work with mixed page-size processes.

I have no idea how possible that is, but if the emulation performance is anything like Rosetta and the M1 proved possible, most users won't even notice.

a_vanderbilt··on M4 MacBook Pro
Absolutely, I have a 1080p Logitech webcam that gives worse quality in anything other than perfect lighting, whereas my 720p Intel Mac Air webcam gives grainer (but at least usable) quality in most conditions. Sensor quality and software have to be good too or it's just a spec pissing contest.
a_vanderbilt··on M4 MacBook Pro
The industry as a whole is trying its best to not rely on Qualcomm, given its extremely litigious past. Apple already tried once to avoid using their chips for the iPhone's modem, which I seem to recall failed. When it comes to devices for enterprise, it's less of a gamble because the cost can be passed on to orgs who are less price sensitive.
a_vanderbilt··on New Windows driver signature bypass allows kernel rootkit installs
To be fair I'm horribly out of date on Windows too. Once they can ditch the worst of legacy support they'll have room to patch the holes that remain, that much I know. I'd like to see Microsoft implement something like TCC in Windows.

https://book.hacktricks.xyz/macos-hardening/macos-security-a...

ASLR on macOS has gotten a lot better, with full randomization down to the kernel since El Capitan I think. Fixed page offsets (the worst offense imo) were also removed. The secure enclave brought CMAC and PAC soon after.

a_vanderbilt··on New Windows driver signature bypass allows kernel rootkit installs
Linux definitely exists in a weird limbo. While it can be secured to an extreme degree, most people aren't using Linux that way on personal devices. Especially on a desktop. ChromeOS is quite secure since it is so locked down, but imagine getting the average Linux user to like it.

Curious as to your rationale for the security architecture of macOS being inferior. Is it because of the way the security features are implemented that you lean that way? macOS has its warts, but it also has plenty of security features I'm not aware of Windows/NT having.

a_vanderbilt··on New Windows driver signature bypass allows kernel rootkit installs
A lot better than the alternatives in terms of security?

Even if we only consider alternatives in wide use like ChromeOS or macOS, I wouldn't in any serious way consider Windows to be more secure. More compatible yes, but not more secure.

a_vanderbilt··on The Company Helping America's Health Insurers Deny Coverage for Care
In all practical ways, it is malicious. The system is intentionally designed to pay out as few claims as legally possible and use every legal means to obstruct and draw out the claims process. The U.S. healthcare system as a whole is a bastion of inefficiency and corruption.
a_vanderbilt··on Mozilla fixes Firefox zero-day actively exploited in attacks
He works (or recently worked) for Mozilla on security-related projects. The code commit fixing the issue was isolated to the /dom/ directory in the source tree, and Firefox does not support CSS Animation Timelines. The Animation Timelines code is not directly accessed by web devs, and it appears the only way to execute that code is via the JS API for Animation Timelines. I'm not a web security expert, but the signs seem to point to him being correct.

Once again, JS proves to be a security risk.

a_vanderbilt··on Essential node in global semiconductor supply chain hit by Hurricane Helene
They have a use, but my ability to talk about it is limited.
a_vanderbilt··on AMD GPU Inference
You can do inference from a Docker container, just as you'd do it with NVidia. OpenAI runs a K8s cluster doing this. I have personally only worked with NVidia, but the docs are present for AMD too.

Like anything AI and AMD, you need the right card(s) and rocm version along with sheer dumb luck to get it working. AMD has Docker images with rocm support, so you could merge your app in with that as the base layer. Just pass through the GPU to the container and you should get it working.

It might just be the software in a Docker image, but it removes a variable I would otherwise have to worry about during deployment. It literally is inference on AMD with Docker, if that's what you meant.

a_vanderbilt··on Essential node in global semiconductor supply chain hit by Hurricane Helene
The Black Hills are a relatively obscure source of the semiconductor-grade quartz we use in everything from chips to nuclear warheads. Protests in Asheville about non-proliferation have popped up about it for years. I expect there will be measurable effects from this incident, and hopefully, some of those will be in local policy to prevent it from happening again. Asheville was my second home, and it's sad to see WNC suffer like this.
a_vanderbilt··on How to Disable a Nuclear Warhead in Midflight
There is a "European dimension" that I think you may not be considering. The state has maintained some ambiguity regarding doctrine, but it is largely regarded to be against strategic targets - including targets of mixed value. Geographic proximity limits their ability to lean one way or the other compared to say, the United States. A land invasion of France is a distinct possibility they must be prepared to counter.

Could you care to link a source for my edification?

a_vanderbilt··on How to Disable a Nuclear Warhead in Midflight
Nuclear disarmament will only occur when defensive mechanisms and new weapons make contemporary nuclear weapons obsolete. I think this will happen in approximately 40 years.

Once the codes are distributed to the stewards of the PALs, the confusion and mutiny won't matter, as at least some warheads will launch. Maybe there will be cancelations, but I find that to be a happy thought, not a practical one.

I agree with your thought process though. Stability, be it through superseding technology or civics is what will cause these weapons to be cast aside. Mutual disarmament will occur when stability is at its apex.

a_vanderbilt··on How to Disable a Nuclear Warhead in Midflight
One would argue that armageddon is triggered the moment any nuclear warheads are detonated. The dual capability of many launch vehicles keeps things ambiguous until something explodes, but make no mistake that nuclear retaliation would be imminent if not immediate. World leaders love being alive, but the chain of command trends towards an inevitable outcome. Strike before all your arrows are broken.

In my experience, a limited-destruction but full-scale launch would not be supported by leadership. We already have vehicles designed to fail, they are called penetration aids. Once terminal descent is achieved the fate of the target is sealed.

PALs and intentional weak links are the fail-safes. If a warhead makes it into orbit, the die is cast and we are committed to that scenario. If a warhead is detected by the target, luck alone might prevent a full-scale exchange. This has happened before, but it wasn't a missile launch that triggered it.

Tangential but relevant: Modern doctrine is not centered around population centers, although some are certainly included due to proximity or extreme tactical value. If you know why the Black Hills in NC would be targeted then you understand. Military forces with occupational capacity are concerned with counter-force, not counter-value.

a_vanderbilt··on AirPods Pro 2 adds 'clinical grade' hearing aid feature
That was my first thought. I've used AirPod Pros and an expensive over-ear headset, and the headset was actually worse for ANC because of my sideburns/beard and glasses. Plane rides especially highlighted this, as the low-droning engine noise penetrated the weak ear seal easier. Perhaps the fancy acoustic feedback and ear topology modeling are going to alleviate this issue, but I'm not sure that it's going to resonate with consumers because it requires product knowledge. Give me decent ANC in the base model, and very good ANC in the Pros and it's immediately understandable what I am getting.
a_vanderbilt··on How on-the-wrist sleep apnea detection works
You can have gains in both today if certain issues are addressed. Innovation doesn't mean a lack of liability or responsibility for negligence.

In the U.S. you already have relatively minimal rights in healthcare. Your stability and legal guarantees are already compromised compared to your worldly neighbors. I too distrust tech companies in healthcare due to their differing motivations and organizational cultures.

I want the red tape to go away, but I also want strong regulations and safety nets to ensure the drugs and devices we are prescribing to people are effective and safe.

a_vanderbilt··on How on-the-wrist sleep apnea detection works
It's definitely a sign of the decline of hardware innovation. It's not for lack of trying, however. Apple has experimented with Touch Bars, VR, and LIDAR cameras, largely to little effect. They just aren't disruptive enough. So how then do they segment if not hardware? Software.

I think that growth is going to slow no matter what they do. Western and Japanese markets are saturated, and Chinese markets (once most promising) are bringing fierce competition both from local competition and the government.

a_vanderbilt··on How on-the-wrist sleep apnea detection works
I find that integrating it into my routine made my current watch (SE1) battery a non-issue. I wear it starting in the morning, charge it on the way to work, and then to bed. Repeat ad infinitum. Battery usage at night is way lower in my experience, and it usually survives til morning or close to it.
a_vanderbilt··on How on-the-wrist sleep apnea detection works
Sure it probably comes down to sensor specs, but the same question can be asked about Apple Ingtelligence and the new iPhones. If the model is in a private cloud, why is it restricted to newer iPhones? Surely the preprocessing isn't so intensive that only the latest iPhones can do it. It's artificial segmentation in the interest of driving (historically weakening) sales.
a_vanderbilt··on How on-the-wrist sleep apnea detection works
The health industry as a whole is insane. I support the use of regulation and law where it ensures safety and efficacy but in the U.S. it's currently a patent and legal minefield. So much of it comes directly from special interests who want gatekeeping to keep out new/disruptive competition.
a_vanderbilt··on How on-the-wrist sleep apnea detection works
If I had to venture a guess, maybe it's an industry regulation or power usage issue. Simply being able to assess sleep apnea isn't enough, it has to pass the regulatory burdens as well.
a_vanderbilt··on AirPods Pro 2 adds 'clinical grade' hearing aid feature
The additional segmentation of the regular AirPods is kind of confusing. Conceptually I know they sit between the base AirPods and the Pros, but am I paying more just for ANC?
a_vanderbilt··on Fiat brings back its 500e electric model for 2024, with 149 mile range
I realized this as I was looking up reviews to get second opinions. I stand very much corrected on the CarPlay/AA feature being present!
a_vanderbilt··on Fiat brings back its 500e electric model for 2024, with 149 mile range
I rewrote this comment because I think the angle I had initially was wrong. While I think it will struggle in the US/Canadian market, in the EU I think it will be popular.

It also does have CarPlay, which I was incorrect about. Commenter below was kind enough to point that out.

a_vanderbilt··on M4 near 4000/15000 in Geekbench 6
I've been using an M2 Mini for a while now, and this would definitely get me to upgrade. It's finally a worthy upgrade.
a_vanderbilt··on Corporate America Is Going Un-Woke
I wouldn't expect companies to practice anything better than rainbow capitalism. That being said, the social and legal pressures that lead companies to participate in social causes ebb and flow. The productive question is to ask why 2020 Q2 through 2023 Q2 were elevated, and put it in the context of the social zeitgeist of the same time period. I don't expect such journalism from an article picking fruit as low-hanging as "woke" anything.
a_vanderbilt··on OpenAI Bought Chatgpt.com
Funny enough I only noticed because I was canceling my subscription and it redirected me.
a_vanderbilt··on SteamOS 3.6: How the Steam Deck atomic updates are improving
While these efforts are more tailored to the needs of the Steam Deck, I could see it being useful as other immutable Linux devices start to enter the market in the coming years. Valve has done excellent work making Linux more usable for games, and most importantly, following through on that work over time. Imagine where Proton will be in five years?
← PreviousPage 3 of 10Next →