HNHacker News
TopNewBestAskShowJobs

costco

2,675 karma · joined December 30, 2019

chrisjtarry \at\ gmail.com

https://github.com/chris124567

submissionscomments
costco··on Cloudflare Turnstile solver library (no headless browser required)
That’s what I did :) It was useful for trying all the different types of Turnstile (managed [with and without action/cdata], non interactive, invisible, under attack, interactive challenge page)
costco··on Cloudflare Turnstile solver library (no headless browser required)
BTW, I did fix all the issues I was able to reproduce when using German and French IP addresses. Please email the address in my profile if you encounter any other problems (and make sure you are using the latest commit).
costco··on Cloudflare Turnstile solver library (no headless browser required)
We do https://github.com/chris124567/cfsolve/blob/master/src/http/...

wreq/wreq_util can do it for you for certain popular browsers but there is also support setting custom values in the profile file

costco··on Cloudflare Turnstile solver library (no headless browser required)
Mainly Claude and Muse Spark. It seemed happy to help if it was convinced that I controlled the website with the test captchas on it. I’ve also found the more Claude saves memories of working on the project the less conflicted it gets.
costco··on Cloudflare Turnstile solver library (no headless browser required)
Author here. I submitted this a few days ago but seems like it was added to the second chance pool so now it’s on the front page. Anyways, I have received a report from a user that this solver did not work for them with European proxies but did with US proxies… so they may be serving different versions for different regions. I will fix that soon. I’m not at my computer right now but it was working when I tested it a few hours ago (Cloudflare constantly changes things).
costco··on Cloudflare Turnstile solver library (no headless browser required)
My understanding is that there is some sort of rate limiting around PATs per Apple ID (that’s why they require you to be signed in). Also if you want to scale to millions per day you don’t want to have to use headless browsers.
costco··on Cloudflare Turnstile solver library (no headless browser required)
For the last few builds released by Cloudflare, I basically just told an agent “Hi they changed something. Please fix.” And waited for a few hours (mostly spent in Rust compilation) until it came back fixed. Keeping the codebase clean while doing that long term is honestly the harder part.

Yes, that was my goal. I will update this for the next couple of weeks, but probably not forever. However I think this is a pretty good foundation for future efforts.

costco··on Start Doing Graph Theory
You know this is easily verifiable right…. I just put 10 random pages into Pangram and they all came back 100% human. And now I feel bad for making an even greater proportion of comments on this thread not about graph theory.
costco··on Show HN: How random are you?
This is a nice spin on the Aaronson oracle:

> In a class I taught at Berkeley, I did an experiment where I wrote a simple little program that would let people type either “f” or “d” and would predict which key they were going to push next. It’s actually very easy to write a program that will make the right prediction about 70% of the time. Most people don’t really know how to type randomly. They’ll have too many alternations and so on. There will be all sorts of patterns, so you just have to build some sort of probabilistic model. Even a very crude one will do well. I couldn’t even beat my own program, knowing exactly how it worked. I challenged people to try this and the program was getting between 70% and 80% prediction rates. Then, we found one student that the program predicted exactly 50% of the time. We asked him what his secret was and he responded that he “just used his free will.”

costco··on Beam: Reflection's 501B open-weight model
https://github.com/facebookresearch/metaseq/blob/main/projec...

I really enjoyed reading the log book from the training of OPT-175B at Meta… I guess it’s all classified info but it’d be fun to read a blog post about the crazy day to day issues you run into when doing things at this scale :)

costco··on Show HN: Automatically hide flamebait/shallow/political comments on HN
Wow that was quick :) Meh, I feel like comment points have become somewhat untethered to comment quality (at least assuming threads are roughly sorted by comment score). It’s a good heuristic usually but it’s wrong often enough for it to be difficult to rely on.

I want to improve the classifier scores too. There’s some parameters in the loss function I could play around with more when training which basically optimize for more false negatives or false positives. Problems with no ground truth are very frustrating lol (though I suppose dang/tomhow’s manually written warnings could be treated as labels instead of using labels from GPT, but I suspect there’s not enough of them).

costco··on Nvidia agrees to acquire Hugging Face for $13B
This is the last time I will engage in self promotion for a while but the above comment and some of its replies are a perfect demonstration of my latest guidelines violations project… https://classify.stylometry.net/violations/49458425?threshol...
costco··on Show HN: Automatically hide flamebait/shallow/political comments on HN
That’s very nice. Feel free to integrate if you want :) Just request https://classify.stylometry.net/violations/49458161 or whatever item ID (as long as it was posted later than a few weeks ago) and it will return the scores for that post/comment and all its children.
costco··on U of Michigan drops first-semester grades to ‘curb mental health crisis’
I'm pretty sure you would get into Berkeley with that profile. Also you can just major in math and get a job as a software engineer anyways. I agree that the system has reached the point of absurdity though. ETH Zurich and KU Leuven have the best solution to this issue in my mind, which is to let everyone in but make the classes ridiculously hard so that 50% leave in the first year.
costco··on Writing by hand is good for your brain
Very interesting. Hunter S. Thompson described the same technique for learning to write. I'll try it even if it only gets applied to technical blog posts...
costco··on How to stop Claude from saying load-bearing
If you put important Anthropic blog posts like the Fable announcement or J-Space through Pangram, you get 100% human written. Considering that the overwhelming majority of the code there is written by AI, I think this is an admission that AI writing is slop and AI code is pretty good.
costco··on To study how chips work, MIT researchers built their own operating system
Related (2019):

https://gamozolabs.github.io/metrology/2019/08/19/sushi_roll...

https://gamozolabs.github.io/metrology/2019/12/30/load-port-...

costco··on Security through obscurity is not bad
reCAPTCHA is a great success story of security through obscurity because probably less than 100 people have reverse engineered it and much less than that have produced a working solver for it that doesn't require a headless browser. Snapchat would be another good example - almost no one is going to put in the work to understand this [0]. Most companies just half ass it though and accordingly achieve nothing with the obscurity at all besides worse performance.

[0] https://web.archive.org/web/20201128060507/https://hot3eed.g...

costco··on Airline adds bunk beds for economy travelers but bans snacks, smells and cuddles
I wish we lived in a world where price wasn't the only way to filter out annoying passengers... if this experiment works maybe it will prove you can offer amenities more widely if you set high standards. I want an airline where at the end of the flight you rate the people next to you thumbs up or thumbs down and if someone gets >= 3 thumbs downs they are banned from the airline for 5 years. Eventually ordinary people would be able have the serene experience that only those in first class can presently enjoy as the people who get up thirty times to retrieve items from carry on or eat obnoxiously are removed.
costco··on Show HN: I built an SDK that scrambles HTML so scrapers get garbage
This is an interesting idea... it'd be a fun side project to implement enough of a CSS engine to undo this
costco··on Xweather Live – Interactive global vector weather map
This is awesome and very fast especially given all the data displayed!
costco··on Dark web agent spotted bedroom wall clue to rescue girl from abuse
This wouldn't have helped here but there is a related field of research called hotel recognition. Many of these videos are filmed in hotels so being able to recognize if it was a Mariott or even better a non chain local hotel can be very helpful to investigators. They basically train CNNs that learn to pick up on the bathroom fixtures or kind of bedding used by different hotels. One researcher in particular has done a tone of work on this: https://scholar.google.com/citations?user=mNoB9SgAAAAJ&hl=en

I wonder if you could get the interior of every house from Zillow/realtor websites and then do something like this for every house in the country... Clearview for bedrooms?

costco··on Why does SSH send 100 packets per keystroke?
I think he's referring to CPU mitigations: https://en.wikipedia.org/wiki/Transient_execution_CPU_vulner...
costco··on Court report detailing ChatGPT's involvement with a recent murder suicide [pdf]
Protip: Settings -> Personalization -> Base style and tone -> Efficient largely solves this for ChatGPT
costco··on Counter Galois Onion: Improved encryption for Tor circuit traffic
The malleability of the ciphertext matters because it enables certain circuit tagging attacks as the article explains. It means that the exit relay could confirm you are using a guard relay also controlled by them and thus discover your origin IP address.

There are many reasons that these cryptographic tagging attacks are a lot worse than just the timing correlation attacks that are possible if you control the guard and exit of a client: https://archive.torproject.org/websites/lists.torproject.org...

costco··on Building a Minimal Viable Armv7 Emulator from Scratch
Nice article and especially so for including the parsing that most people just outsource. What's great about using an emulator is that you can also do fun things with the syscalls like implementing your own "virtual filesystem" instead of just translating directly to the x86_64 equivalent syscall: https://github.com/gamozolabs/fuzz_with_emus/blob/master/src... (not my code but basically something like this)
costco··on Show HN: I scraped 3B Goodreads reviews to train a better recommendation model
OK, I think the problem was that you are only supposed to input the user ID number. I just limited the form to numbers only and updated the description to make this more clear.
costco··on Show HN: I scraped 3B Goodreads reviews to train a better recommendation model
Hi, I just realized that the confusion here was that you are only supposed to input the numeric user ID. I just limited the form to numbers only and updated the description to make this more clear.
costco··on Show HN: I scraped 3B Goodreads reviews to train a better recommendation model
I am not familiar with Cinematch, is there a writeup about it? When training I used every input book and did not include ratings as a feature. In the future I want to experiment with treating 1 or 2 star ratings as negative feedback.
costco··on Show HN: I scraped 3B Goodreads reviews to train a better recommendation model
Can you access your profile page in incognito (ie is your account public)? Alternatively, if you have more than 5000 books in your shelf, that might break it. I just tried a number of users and I was able to import them all.
Page 1 of 13Next →