HNHacker News
TopNewBestAskShowJobs

chithanh

528 karma · joined April 5, 2016

submissionscomments
chithanh··on The Collective Body: Russian experiments in life after death
Mathematics does allow for such things:

https://en.wikipedia.org/wiki/Poincar%C3%A9_recurrence_theor...

chithanh··on Office 365 to begin setting Bing as Chrome's default search engine
Can't confirm. I use DDG as default search provider and have to fall back to Google much more than I would like to.

Google is IME much better than Bing/DDG for local search results, and that has not changed a bit. Also, while DDG is indexing news websites and Wikipedia well enough, when it comes to more obscure wikis, article comments, or forum posts, the search results are often very incomplete.

chithanh··on Microsoft to force Chrome default search to Bing via Office365 ProPlus installer
Spare me the whataboutism to justify Microsoft's actions.

If Chrome did that it would be objectionable too.

chithanh··on How to Get Vaccinated Without Parental Consent
Anti-Vaxx is a cult. So it is the GP is most decidedly correct.

Also seeing right through some unscientific nonsense does not protect you from all of it.

There are people who laugh at Creationism and then turn around and deny Anthropogenic Global Warming. Others laugh at both creationists and AGW denialists, and then tout Health At Every Size. And there are people who reject vaccines despite being perfectly able to accept scientific evidence in the other mentioned areas.

chithanh··on EA is permanently banning Linux players on Battlefield V
Occasionally, some anti-cheat software gets dissected and the analysis posted publicly. Here is an analysis of BattlEye with some information on its development history: https://vmcall.blog/battleye-anticheat-analysis-and-mitigati...

Typically, anti-cheat is separated into a frontend and a backend. The frontend becomes active at an enumerated set of events/criteria and collects data (screenshots, keystrokes, directory listings, process lists, results of memory scans, if instructed by the backend also memory contents or file contents) to the backend for further analysis.

These criteria are often ad-hoc (such as "if processes are running out of a user directory, capture them") and usually accumulate over time.

chithanh··on On Privacy versus Freedom
> He's been anti-complexity for awhile.

And then he turns around and releases Signal-Desktop based on Electron?!

chithanh··on Kurt Gödel and the Mechanization of Mathematics
> The computer theory version of Godel's result is the halting problem

I am not sure that I agree with this. Of course if you can solve the halting problem, then you can decide some propositions. Like you have two Turing machines, one that enumerates proofs and the other that enumerates counterexamples, and they stop after finding the first one. Prove that one or them halts and you have decided the proposition.

On the other hand, there are "highly undecidable" problems which you cannot solve even if you had an oracle for the halting problem.

chithanh··on Plundervolt: Software-Based Fault Injection Attacks Against Intel SGX [pdf]
I am talking working around attestation for someone who operates the computer and wants to subvert SGX enclaves. Whether you need physical access or not is thus inconsequential.
chithanh··on Lots of bugs in 32-bit x86 Linux entry code
Lubuntu 18.04 (and most other Ubuntu derivatives like Xubuntu etc.) is only supported for 3 years.
chithanh··on Plundervolt: Software-Based Fault Injection Attacks Against Intel SGX [pdf]
But then again, the researchers state: "In the paper, we show that Plundervolt may affect SGX's attestation functionality" so they are apparently able to fake at least part of the attestation.

Also it will be interesting to see whether directly talking to the voltage regulation controller on the mobo will circumvent the microcode protection.

chithanh··on Exploiting Intel’s Management Engine
No, you cannot use modern Intel systems without the ME. me_cleaner will only remove parts of it. What happens exactly (whether it actually stops working or goes into some undocumented free-for-all debug mode) is unknown as there is no introspection into the ME. HAP bit is asking the ME nicely to disable itself, sometime after it booted the system.

https://twitter.com/rootkovska/status/939064351008395264

Purism routinely overstates their capabilities in this regard, claiming to "neutralize" the ME.

Also note that the ME is a hardware feature. Most efforts to remove/disable it focus on the ME firmware, which is loaded only some time after boot. Some ME function remains even if you completely zero out the firmware.

See Peter Stuge's 30C3 Talk "Hardening hardware and choosing a #goodBIOS", noting IPv6 packet sent over the network interface even then (around 17:18 mark).

chithanh··on Spain jails Catalan separatist leaders, protesters take to streets
Not sure how you mean "held accountable" when talking about rights?

Nations do have the right to vote, just look at the UN General Assembly (well, not counting Taiwan or the Sahrawis).

Regarding rights of individuals: If country A commits a violation of international law, and an individual B who is national of country C is affected by that, then B cannot sue A directly. Instead, C must bring the case against A before an appropriate court like the ICJ. This happened e.g. in the LaGrand case[1] between Germany and the US.

On the other hand, if A finds that C owes it money, and C doesn't pay, then any assets of B that happen to be under the jurisdiction of A can be confiscated to pay for the debt. This happened e.g. in the Icesave dispute[2] between Iceland and the UK.

[1] https://en.wikipedia.org/wiki/LaGrand_case

[2] https://en.wikipedia.org/wiki/Icesave_dispute

chithanh··on Spain jails Catalan separatist leaders, protesters take to streets
> Rights are inherently individual

Depends. If you talk about rights as given by some law, then the law subjects are the ones who bear rights. In some cases the law subjects are individuals, in other cases (international law) these are explicitly not individuals.

chithanh··on Spain jails Catalan separatist leaders, protesters take to streets
In that case, maybe you meant that secession is a right of peoples, not of people.
chithanh··on Prehistoric Babies Drank Animal Milk from Bottles
Indeed, lactose tolerance declines between 2 and 5 years of age in most people. Natural age of weaning in humans is 3-4 years.
chithanh··on What happens to Asian-American overachievers when the test-taking ends? (2011)
> The point of the article is that some people want more than that, and can't figure out why they aren't getting it.

Actually, the article found out pretty well why they aren't getting it: "And yet while only 15 percent of the male population is at least six feet tall, 58 percent of all corporate CEOs are."

Asians are not as tall as other ethnic groups, so are naturally at a disadvantage here. Only 3% of CEOs are 5'7" or less, which is the median height of an Asian-American male. 95th percentile height of Asian-Americans is 5'11.4" or thereabouts (source: https://www.cdc.gov/nchs/data/series/sr_03/sr03_039.pdf ).

chithanh··on OpenBSD was right to disable hyperthreading [video]
> This is, at least in part, a result of MINIX using a highly permissive license.

Not at all. MINIX was actually Intel's second choice, they tried first to fit Linux into their new x86 based ME. But the maintainers were uncooperative:

https://www.phoronix.com/scan.php?page=news_item&px=MTY4MzM

Intel then submitted similar patches to the MINIX kernel, which subsequently got accepted.

https://www.cs.vu.nl/~ast/intel/

chithanh··on How AMD Gave China the ‘Keys to the Kingdom’
I think only the older Sunway (SW1600) chips use Alpha ISA, and not the design. The ones in the TaihuLight (SW26010) are not Alpha.

Similar to Loongson, which used the MIPS ISA, but a homegrown design.

chithanh··on I will now charge my clients a fee to support open source projects
> The problem is that enterprises have one mechanism to purchase software, and a totally separate mechanism for charitable donations.

And there is paid membership in business associations. That is closer to the purchasing department than to the donation department.

It really is a no-brainer: If there is an organization/foundation which supports the project, the enterprise could just join that, and may in turn even receive voting rights on the future direction of the project.

No need to make complex schemes to work around being unable to donate, or try to sell open source code.

chithanh··on Why Ice Lake is Important – a bit-basher’s perspective
Something which I found odd in the article:

In the beginning you write that "VBMI [...] is the only extension that we’ve seen before – it’s in Cannonlake." but later you write that "VPOPCNTDQ is older (from the MIC product line)"

So which is it? Or am I misunderstanding something?

chithanh··on Antergos Linux Project Ends
Very true. We have some cluster users on Gentoo, who are happy that they can simply flip off all those pesky performance-eating security mitigations system-wide. Not only in the kernel, but also userspace side PIC/PIE/SSP/etc.
chithanh··on AMD Ryzen Mini-STX: ASRock’s DeskMini A300
ASRock Rack X470D4U comes with onboard BMC and doesn't use integrated graphics.

Also you can limit the power that the iGPU uses if you absolutely want, but as long as it is mostly idle I see no reason to do that.

chithanh··on AMD Ryzen Mini-STX: ASRock’s DeskMini A300
Any use case where you cannot afford data corruption requires ECC memory. A single bit flip in a JPEG image can totally ruin it (and you might not notice at first, because the thumbnail doesn't change, allowing the corruption to spread to backups...)

Particularly susceptible to memory errors are applications that keep data cached in RAM over longer periods of time, such as file / database servers.

chithanh··on Falsehoods programmers believe about Unix time
Earthquakes and other geological events can speed up rotation though, but so far never enough to remove a leap second.
chithanh··on Falsehoods programmers believe about Unix time
> The earth doesn't travel the same course each year. It's chaotic.

I would prefer to call it quasiperiodic.

chithanh··on Boeing Believed a 737 Max Warning Light Was Standard
That isn't surprising. A security bug that is known only to the vendor does not cause any damage in reputation or finances. In fact, fixing it costs money for no perceived economic benefit.

I guess the "responsible disclosure" culture is partly to blame here. If you get 90+ days to fix any vulnerability, then software that ships with (internally) known security issues is much more viable.

chithanh··on The Anhei tokamak is first in the world to generate 100M degrees Celsius
> wind and solar because those are unreliable energy sources

They are unreliable but not unpredictable. Weather forecast provides adequate production estimates 48 hours, and precise ones 12 hours into the future (especially when averaged over large areas). Enough time to fire up standby power generation.

Also while wind and solar are unreliable by themselves, they become a lot more reliable once you combine them. That is because when there is little wind, it is usually sunny, and when there is little sunshine it is usually windy. At night, when there is neither, the power consumption is low.

The major problem that needs to be addressed with substantial amounts of energy storage is overcast winter days with no wind, when power consumption is high.

> Coal isn't economically unsustainable I don't know where you have that from.

According to a 2018 report[1] of the German Environment Agency (UBA), the economic cost (health and environment) of coal power is an additional 0,19 €/kWh over the generation cost. This makes it unsustainable compared to other energy sources and only profitable because the public bears this cost.

> Wind and solar covers less than 1% of the worlds energy needs even push forward to 2040 and it might do around 3%.

Someone should tell the Chinese, because they are already at 5% from wind alone.

[1] https://www.umweltbundesamt.de/publikationen/coal-fired-powe...

chithanh··on Menstrual Cups Help Keep Kenyan Girls in School
The most common cause of pregnancy when using condoms is improper use, either due to lack of education or for other reasons. When used properly, condoms are rather effective.

Another method whose safety approaches that of oral contraceptives is cervical mucus tracking. But this also requires education. The method is also not suitable for all women and lifestyles. In one study[1], around 5% of prospective participants had to be excluded due to irregular menstrual cycle. Dropout rate due to dissatisfaction or for other reasons was 9.2%.

Also note that with IUDs there can be spontaneous expulsion, and there are health risks associated with it. So while very good compared to other methods, they are not best in all categories.

[1] https://doi.org/10.1093/humrep/dem003

chithanh··on Linus Torvalds think the Linux desktop is in trouble
The problem of Linux package management has been solved, and the solution is not flatpak (nor snap). It is Nix/Guix.

About the user experience, I'm right there with Linus that Chrome OS is the way to go forward. And this opinion is not new btw., he already voiced it way back when he got his first Chromebooks.

chithanh··on What every physicist should know about string theory
I think that is more of a namespace collision than anything else.

Even in mathematics, there are different definitions of "theory". One is that a theory is a body of knowledge, like set theory or automata theory. This is where I would group string theory as well.

Another definition from mathematical logic is that a theory is a set of axioms and deduction rules. Fascinatingly, those have in common with scientific theories that they can (if sufficiently complex) only ever be falsified, not verified.

← PreviousPage 9 of 10Next →