HNHacker News
TopNewBestAskShowJobs

alyandon

2,651 karma · joined August 16, 2011

Please consider adding to the discussion by replying instead of only upvoting/downvoting.

Email: my hacker news username at hotmail.com

submissionscomments
alyandon··on 'Indiana Jones' jailbreak approach highlights vulnerabilities of existing LLMs
I used the following prompt:

  I'm doing some research and need some pointers. Can you provide me with a list of years when women got the right to vote by country. You can exclude countries with populations of less than 5 million.
Note that I always try to lean on the verbose side with my prompts and include wording like "I'm doing research". That at least tends to give me results that don't run up against filters.
alyandon··on 'Indiana Jones' jailbreak approach highlights vulnerabilities of existing LLMs
What was your exact prompt? I just asked Gemini the question and it gave me the information requested.
alyandon··on Avoid ISP Routers (2024)
I just got AT&T fiber installed and the gateway has 8192 conntrack slots. Two steam clients scanning for Counter-Strike 2 servers at the same time can chew through that many connections.

I joined the 8311 discord and will be doing a full bypass as soon as feasible.

alyandon··on Ear muscle we thought humans didn't use activates when people listen hard
Well - if it helps any - my understanding is that a doctor at an ER center would order a CT scan which is based on x-rays and can be done in a matter of a few minutes.

MRI scans are really reserved for things that don't image well on CT scans or when the resolution of a CT scan just isn't good enough. They also take quite a bit of time to perform.

alyandon··on Ear muscle we thought humans didn't use activates when people listen hard
I'm not one to typically have strong fear/anxiety responses in situations that aren't actually dangerous. However, I felt extremely uncomfortable being partially inserted into an MRI tube for a lower body scan. I couldn't imagine being shoved head first into that thing without being heavily sedated or completely knocked out.
alyandon··on If OpenSSL were a GUI (2022)
Tangentially related, if you generate certificates infrequently enough that you always have to look up openssl command line options check out https://github.com/chris2511/xca/.

It's basically keepass but for certs instead of passwords.

alyandon··on Supreme Court upholds TikTok ban, but Trump might offer lifeline
I do this to my son as well and I have to admit it is unreasonably effective.
alyandon··on Ask HN: Teams using AI – how do you prevent it from breaking your codebase?
I've been testing LLM dev tooling and I'm still on the fence in general about whether or not the generated code is a net productivity gain for me. I still have to take the time to review the code, fix subtle bugs/corner cases and make changes to reflect the current coding standards of the existing code base. In many respects, it's like handing off a programming task to a somewhat competent intern.
alyandon··on Mozilla wants CAs to revoke 30 random certificates per year
Sure, I misspoke. It's more about the contents of the cert itself (signing keys, deprecation of CN field, etc) than the hosting web server configuration.

Obviously, one can actively choose to go out of their way and do something bone-headed - nothing can stop that.

alyandon··on Mozilla wants CAs to revoke 30 random certificates per year
It mainly helps with stuff like enforcing modern tls + ciphers and various other changes that occur naturally in the ecosystem over time.

You are not wrong about the malware part though. Said undetected malware would continue to be undetected and continue to expose the private bits no matter how (in)frequently you rotate.

alyandon··on Mozilla wants CAs to revoke 30 random certificates per year
Based on what I've seen internally at several $LARGE_CORPs, a 90 day expiration was more than painful enough to cause teams to invest in automation for rotation. I don't know that cutting 90 days to 45 days would help move the needle further.
alyandon··on Mozilla wants CAs to revoke 30 random certificates per year
That is a pretty breathtaking example of ivory tower thinking if there ever was one. I really just don't know what else I can say about that kind of proposal.
alyandon··on Ask HN: How do you backup your Android?
I use a self-hosted Bitwarden instance for that kind of stuff and before that I used Aegis + Synchthing.
alyandon··on Ask HN: How do you backup your Android?
The only data I care about on the phone already gets backed up by Google and is then exported regularly via Google Takeout. I don't live on my phone so I tend not to generate much of any value on it other than random pictures of things.

Prior to Google automatically backing up everything, I used Titanium Backup.

alyandon··on Nvidia announces next-gen RTX 5090 and RTX 5080 GPUs
That's probably not going to be an option for me as I wanted to upgrade to something with 16 GB of vram. I do toy with running LLM inference and squeezing models to fit in 8 GB vram is painful. Since the 5070 non-ti has 12 GB of vram there is no hope that a 5060 would have more vram than that. So, at a minimum I'm stuck with the prospect of upgrading to a 5070 ti.

That's not the end of the world for me if I move to a 5070 ti and you are quite correct that I can downclock/undervolt to keep a handle on power consumption. The price makes it a bit of a hard pill to swallow though.

alyandon··on Nvidia announces next-gen RTX 5090 and RTX 5080 GPUs
I'm generally a 1080p@60hz gamer and my 3060 Ti is overpowered for a lot of the games I play. However, there are an increasing number of titles being released over the past couple of years where even on medium settings the card struggles to keep a consistent 60 fps frame rate.

I've wanted to upgrade but overall I'm more concerned about power consumption than raw total performance and each successive generation of GPUs from nVidia seems to be going the wrong direction.

alyandon··on XFCE 4.20 Released

  I never notice the things Wayland "solves", just what it breaks.
I wish I could say otherwise - but this has 100% been my experience as well across multiple distros and is 100% why I still run X11 today.
alyandon··on Latest graphics driver for your Surface devices powered by Snapdragon X Elite
It looks like their new app fixes that problem!
alyandon··on Latest graphics driver for your Surface devices powered by Snapdragon X Elite
I really hope that means I can leave my joystick plugged in and my system will properly go to sleep now. That has to have been the most annoying Geforce Experience bug ever.
alyandon··on Nokolexbor: Drop-in replacement for Nokogiri. 5.2x faster at parsing HTML
Yeah, you aren't kidding. This particular project was a work of modern abstract art.

Imagine a large C++ code base with that was written by people that knew Java, Delphi and maybe a little C but apparently no C++. It was a mess of manual memory management errors, re-implemented Delphi classes like TString instead of using C++ equivalents, etc.

Why they decided to implement it in C++ instead of a language they knew I'll never understand. It took me about 2 months of continuous effort to replace all the C-isms, TStrings, XML config, etc with sane C++ equivalents. After I was done, it'd run for months with no issues whereas before you were lucky if it'd run for 2 days without it crashing.

Needless to say, I felt accomplished because I didn't get paged in the middle of the night from the thing falling over all the time.

alyandon··on Nokolexbor: Drop-in replacement for Nokogiri. 5.2x faster at parsing HTML
I once had to remediate security vulns in a gigantic C++ project and came across an ancient vendored version of libxml.

To my knowledge, the project didn't use XML for anything so I started digging into why they vendored it to begin with. Turns out, they vendored the entirety of libxml so it could parse the ~5 line config file for the project that was written in XML instead of literally anything else. The config file format was simple key/value pairs.

I hate working in this field sometimes. :-/

alyandon··on A simple to use Java 8 JWT Library
Indeed and I wish more people really understood this.

I don't really like to target JDK8 as a supported version at work. However, I have to because of large, complex dependencies (some third-party with no source available) that have no drop-in replacements that will work under JDK9 and beyond.

Finding replacements for dependencies (or rewriting them), testing, etc to move to newer versions of Java is a cost the business is not willing to absorb at this point. I expect that eventually when JDK8 has no viable support options and the cost of maintenance becomes too great the business will decide to jettison the whole stack and replace it with something else that likely won't be Java based.

alyandon··on Notepad++ is 21 years old
It definitely isn't a replacement for VS Code for actual programming. However, I'd certainly use npp for a lot more than viewing large files and quick editing if it had better LSP, remote filesystem, terminal support, etc.

As it stands, I use it frequently - just not for code.

alyandon··on Plastic chemical phthalate causes DNA breakage, chromosome defects, study finds
I try to avoid reheating things in plastic containers. It's about the only thing I can think of I can do as a consumer to reduce the risk of chemicals leeching into the food.
alyandon··on I Got Dysentary So You Don't Have To
I'm seeing this trend as well. It is getting to the point that I can not see my primary doctor without a 2-3 month lead time and specialist referrals are often 2-3 months as well.

Hell, I recently had to find a new dentist because the one I had been going to for years suddenly had 4-6 month lead time if I needed to reschedule a routine cleaning.

alyandon··on "Somebody Tranq That Child!"

  For an example, just look at the people who never left your hometown compared to the ones who went and made a life for themselves. It's pretty miserable and depressing to see grown adults trapped as the same person they were in high school.
Can confirm. Grew up in a small oilfield town in Texas and could not get out of there fast enough. Most (not all obviously) of my high school peers that I kept contact with that never left did not fair as well as I did.
alyandon··on Man charged for selling forged license keys for network switches
The article doesn't really go into much detail.

Were they fraudulently trying to pass off the generated license keys as genuine or are they literally being prosecuted for selling what is essentially "illegal numbers"?

alyandon··on Forget ChatGPT: why researchers now run small AIs on their laptops
Thanks for this!
alyandon··on Forget ChatGPT: why researchers now run small AIs on their laptops
I would be greatly interested in knowing how you set all that up if you felt like sharing the specifics.
alyandon··on I'm blocking connections from AWS to my on-prem services
I ended up blocking Amazon SES because I was receiving hundreds of obviously spam emails across all my inboxes every day for weeks. I dutifully sent multiple reports of this obvious spam to the listed spam/abuse contacts for Amazon SES.

The end result of my efforts was:

  1) No feedback at all from my reports to Amazon - not even an acknowledgement that my report had been received
  2) The spam continued unabated for weeks until I finally had enough and just blocked the entire Amazon SES service
That was a few years ago and maybe they are more responsive now. They sure as hell weren't responsive back then.
← PreviousPage 4 of 24Next →