HNHacker News
TopNewBestAskShowJobs

danso

168,452 karma · joined June 14, 2011

Amateur data scientist and photographer in Chicago.

Formerly: teaching at Stanford and programming+newsing at ProPublica.

Blog: http://www.danwin.com

Twitter: https://twitter.com/dancow

[ my public key: https://keybase.io/dnguyen; my proof: https://keybase.io/dnguyen/sigs/69iS-DQno44YqjgaowUD_Zze660k3fojXZmHob-bgxA ]

submissionscomments
danso··on Bobby Prince Jr (composer of classic Doom soundtrack) has passed away
What a life. Survived the Vietnam War, tried to become a lawyer, became a music composer. And he got married to his soulmate at the age of 60, one year after receiving a lifetime achievement award for his video game music.
danso··on I found 10k GitHub repositories distributing Trojan malware
Being reminded of this anecdote from NYMag's recent cover story (which had previously been reported in a WSJ story[0]) about a Disney engineer who downloaded an AI-gen tool from Github and "checked the code himself, it had looked legitimate":

https://archive.is/yAUNy

> He had no idea why the hackers had targeted him or what their plan was, whether they would drain his family’s finances or stalk his home. Eventually, after running another anti-virus program, he found a piece of malware hidden in a plug-in he had downloaded from GitHub, the open-source coding site, one day in February when he was messing around with an AI image generator. He had checked the code himself, it had looked legitimate, and others had reviewed it positively. But it seems it contained a Trojan-horse virus that gave the hackers free rein of his PC. Once inside, they just had to wait for Van Andel to log in to 1Password. From there, they were able to steal all his credentials, plus many of his multifactor-authentication codes, so every time Van Andel logged in to an app, a website, or an account, they could follow behind him. They’d had access for months.

[0] https://www.wsj.com/tech/cybersecurity/disney-employee-ai-to...

danso··on Midjourney Medical
At the surface level, this sounds very similar to Theranos's mission: create a non-invasive testing method that replace traditionally invasive/costly testing methods so successfully that it becomes silly not to gather and sample as much of your health data as possible, in the hopes that more data will eventually translate to better diagnostics.

Of course Theranos failed because they faked the testing tech (and allegedly also the test results) during their failed journey in developing their novel testing tech. Ostensibly, Midjourney is not going down that path, but I wonder why Midjourney thinks its brand is valuable when introducing this product? Because if someone were to accuse Midjourney of being the next Theranos, then Midjourney's fame for a AI-image generation service would slot in perfectly with a grift selling miraculously cheap body imaging tech.

danso··on US Government directive to suspend access to Fable 5 and Mythos 5
I was using Fable to review my codebase and came back from the gym an hour later to find that I had suddenly used up my entire Max plan quota for the next 5 hours

(I have never had an agent do enough to burn up the 5 hour quota on Max)

(edit: just switched my CC model to 4.8 and my 5-hr cycle reset back to 0%, even though it previously had 2 more hours to go)

danso··on I Am Not a Reverse Centaur
Back when image-gen was made widely available (2023ish, feels like eons ago), there were people who took genuine satisfaction with their art prompting skills. It did come off as a bit cringe though: https://www.reddit.com/r/saltierthankrayt/s/KxwhqJ5hrU
danso··on Failing grades soar with AI usage, dwindling math skills in Berkeley CS classes
The article says they looked at CS 10 and 61A, which IIRC are the intro classes at Berkeley. Why do you think that amounts to “cherry picking” versus being a reasonable starting point for analysis (esp if those classes, as they are for one of the quoted professors, aren’t graded on a curve)?
danso··on Elon Musk has lost his lawsuit against Sam Altman and OpenAI
How do you imagine justice functioning in a system that lacks a statute of limitations?
danso··on Kickstarter is forced to ban adult content by payment processors
Has Mir in the past ever implemented any kind of bans or restrictions for specific vendors or use cases?
danso··on Instructure Security Incident Update
Sounds like a ransom was paid:

> With that responsibility in mind, Instructure reached an agreement with the unauthorized actor involved in this incident. As part of that agreement:

> The data was returned to us. We received digital confirmation of data destruction (shred logs).

> We have been informed that no Instructure customers will be extorted as a result of this incident, publicly or otherwise.

> This agreement covers all impacted Instructure customers, and there is no need for individual customers to attempt to engage with the unauthorized actor.

danso··on Japan's New Care Workers: Bodybuilders, Wrestlers and MMA Fighters
Non-paywall link: https://www.nytimes.com/2026/04/25/world/asia/japan-care-wor...
danso··on I want to live like Costco people
I was just struck by this line:

> there were hordes of people standing lifelessly in a huge line waiting to check themselves out

Where are the retail experiences where people waiting to checkout are expressing an abundance of joy in life to you? Is the problem the “horde”? Sure, popular places tend to have a lot of people. I’m not sure why Costco customers act way less fun to you than at other places? This whole comments reads like a petulant “everyone is a NPC but me” screed

danso··on Canvas is down as ShinyHunters threatens to leak schools’ data
I wonder how much old data Canvas keeps around? Are students who graduated in 2016 going to be at risk of having their academic data leaked?
danso··on I want to live like Costco people
How are people supposed to act while waiting in line to check out?
danso··on Her life savings mysteriously disappeared after a systems glitch
Sorry but this is rich. The vast, vast majority of times that Github goes down, even though the issue is almost always resolved within the day if not in the next couple of hours. Yet we'd all agree that "Github is down" posts are worth their time on HN, even though everyone knows how to access to status API, because it's not so much about being notified about the outage but understanding why it happened.

What exactly is "clickbait" here? Is the disappearance "mysterious" or not here? I'm not a banking tech engineer, so I don't have the slightest clue how a bank's app could completely glitch out for days about something as critical to people as their life savings. Were you even aware that this is something that could just happen? Do you have a notion that this issue would have resolved itself without the aggressive petitioning by the account holder? Explain to us how you would go to the FDIC with a claim when the FDIC covers customers with provable losses, and the article reports that this person was so ghosted out of the system that Fidelity's customer support was telling her, “Are you sure you shouldn’t be calling Schwab”?

From the article:

> Ms. Gruntmane felt she had little choice, and was forced to cancel her 20 or so patients for the day. After a quick stop at home to retrieve her personal computer, identification and other records, she got back into her car and started driving. “It just felt out of, like, a psychological thriller,” she said.

> As she was driving through Vail, she called her mother, who suggested trying to reach Fidelity’s fraud department one more time. She pulled over, and finally reached a rep who was more helpful. He also couldn’t immediately find any evidence of her accounts, but she had found one account number to share with him. After a second hourlong call, he promised they would continue to investigate, but said it was most likely a systems-related issue.

Explain to me how this isn't of interest to people who touch online systems? Is there a status.fidelity.com that we have access to, that you could point out how systemic or non-systemic this kind of incident is?

danso··on Her life savings mysteriously disappeared after a systems glitch
Gift link: https://www.nytimes.com/2026/04/25/your-money/fidelity-inves...
danso··on An update on recent Claude Code quality reports
Genuine question: is the cost to keep a persistent warmed cache for sessions idling for hours/days not significant when done for hundreds of thousands of users? Wouldn’t it pose a resource constraint on Anthropic at some point?
danso··on US special forces soldier arrested after allegedly winning $400k on Maduro raid
It’s arguable that opening the doors for greedy soldiers to do a little insider trading and inadvertently expose the illegal covert violent raid that they’re party to might be one of the few positive outcomes in a society gamified by Polymarket
danso··on SpaceX says it has agreement to acquire Cursor for $60B
Has the availability of deepfake porn generation reduced the demand for deepfake porn featuring real people? When deepfake generators are capable of creating convincing imagery of flawless ideal fake humans, why do you suppose there’s so many real humans who report being non-consensual subjects of deepfake porn?
danso··on What killed the Florida orange?
gift link: https://slate.com/business/2026/04/florida-state-orange-food...
danso··on Who is Satoshi Nakamoto? My quest to unmask Bitcoin's creator
Doesn’t this fierce debate exist because people cannot agree what Satoshi would have written had he known Bitcoin would take off in such a massive way, versus what Satoshi believed back when bitcoin was just a paper? If it actually is the case that Adam Back is Satoshi, we shouldn’t find it surprising that Back’s views on bitcoin changed as bitcoin’s viability and real world impact changed
danso··on Who is Satoshi Nakamoto? My quest to unmask Bitcoin's creator
Pretty compelling story. Not necessarily for its revelations, but for the fact that John Carreyrou and the NYT decided to publish it at all. If it were by anyone else, I would have stopped reading after the first thousand words of meandering narrative, but Carreyrou is staking his massive and impeccable investigative journalistic reputation on this mountain of circumstantial evidence and statistical analysis. Him torching his reputation (especially with Elizabeth Holmes fighting hard for a pardon/clemency!) would be as interesting as a story as actually finding Satoshi's real identity.

The evidence is good. What was more interesting to me is the section where he explains how he eliminated all the other asserted and likely candidates. Since the story is already a very long read, I imagine much of this section got left out. So some of the reasons for eliminations are too brief to be convincing on their own. For example:

> What about other leading Satoshi suspects, I wondered? Were there any who fit the Satoshi profile better than Mr. Back? A 2015 article in this newspaper put forward the thesis that Satoshi was Nick Szabo, an American computer scientist of Hungarian descent who proposed a Bitcoin-like idea called “bit gold” in 1998. Mr. Szabo remained at the top of many people’s lists until recently, but a heated debate that played out on X about a proposed update to the Bitcoin Core software exposed his ignorance of basic technical aspects of Bitcoin.

A 2015 article in this newspaper — Decoding the Enigma of Satoshi Nakamoto and the Birth of Bitcoin, by Nathaniel Popper [0]

[Szabo] proposed a Bitcoin-like idea called “bit gold” in 1998 — Szabo's post on his Blogger site [1]

but a heated debate that played out on X about a proposed update to the Bitcoin Core software exposed his ignorance — links to a Sept 29, 2025 tweet by Adam Back replying to Szabo, who had tweeted:

> Good info thanks. Follow-up questions: (1) to what extent is such an OP_RETURN-delete-switch feasible in practice? (I know it is feasible in theory, but there are many details of core that I am not familiar with). (2) has such a thing been seriously proposed or pursued as part of Core's roadmap?

exposed [Szabo's] ignorance of basic technical aspects of Bitcoin — links to another reply tweet by Back in October 2025 [3]:

> Nick, you're actually wrong because there is a unified weight resource. eg byte undiscounted chain space reduces by 4 bytes segwit discounted weight. no need for insults - people who are rational here are just talking about technical and risk tradeoffs like rational humans.

Szabo's tweet was: "Another coretard who thinks their followers are mind-numbingly stupid."

----

Can someone explain why this relatively recent tweet fight is convincing evidence that Szabo is too ignorant to have been behind Bitcoin? I know he went silent for a bit when Bitcoin first got big, but he hadn't revealed his ostensibly overwhelming ignorance until a few months ago?

[0] https://www.nytimes.com/2015/05/17/business/decoding-the-eni...

[1] https://unenumerated.blogspot.com/2005/12/bit-gold.html

[2] https://x.com/adam3us/status/1972888761257415129

[3] https://x.com/adam3us/status/1981329274721149396

danso··on Who is Satoshi Nakamoto? My quest to unmask Bitcoin's creator
> No one in the cipherpunks mailing list thought any of this was odd, probably because it was obvious to them who Satoshi was.

If dozens of people affiliated on a mailing list knew that Sbazo was Satoshi is a decade ago, would’t his identity be treated as an open secret by now?

danso··on Who is Satoshi Nakamoto? My quest to unmask Bitcoin's creator
I don't blame you for this initial reaction, which would have been mine too had I not known who the author was. I don't mean that I automatically trust anything published by the reporter who busted Theranos (and won two Pulitzers for other major investigations). But I do mean that if John Carreyrou and his editors decided to publish something this long, that means they (and they're lawyers) are willing to die on this hill, no matter how meandering the first paragraphs of his 1st-person narrative.

Since the story doesn't end with: "And then Adam Back bowed his head and said, 'You have found me, Satoshi'", I'm guessing they preferred to go for the softer "how we did this story" first-person narrative. There is no explicit smoking gun, like an official document or eyewitness who asserts Satoshi's identity. But the circumstantial and technical evidence is quite thorough, to the point where the most likeliest conclusions are:

1. Adam Back is Satoshi

2. Satoshi is someone who is either a close friend or frenemy of Back, and deliberately chose to leave a obfuscated trail that correlates with Back's persona and personal timeline.

danso··on Battle for Wesnoth: open-source, turn-based strategy game
Star Control 2 —- one of the greatest action adventure games ever made

https://sc2.sourceforge.net/

danso··on Iran-linked hackers breach FBI director's personal email
yeah it’s totally plausible that Google would risk the reputation and legal status of its global multi-trillion empire to dunk on one of the handful of people who have the near-unilateral authority to dismantle them
danso··on Iran-linked hackers breach FBI director's personal email
I too am very curious about this. Even if his password was exposed and he didn’t have 2-factor auth, doesn’t Google by default ask for confirmation — e.g. texting a number or backup email associated with the account — when seeing an unrecognized device? Maybe he didn’t have any alt contact methods associated with his account?

(which might not be that unusual, he’s old enough to have opened a gmail account upon launch, before extra info hoops were put in place, and maybe he never touched his account config in the past 2 decades?

danso··on We rewrote JSONata with AI in a day, saved $500k/year
Maybe they're like me, who didn't spend a lot of time investigating Claude until 4.6 launched and the hype was enough to be the tipping point to invest energy. I do know that I've been having good/great results with Opus 4.6 and the CLI, but after an hour or so, it'll suddenly forget that the codebase has tab-formatted files and burn up my quota trying to figure out how to read text files. And apparently this snafu has been around since at least late last year [0]. Again, I can't complain about the overall speed and quality for my relatively light projects, I'm just fascinated by people who say their agents can get through a whole weekend without supervision, when even 4.6 appears to randomly get tripped up in a very rookie way?

[0] https://github.com/anthropics/claude-code/issues/11447

danso··on Goodbye to Sora
I've always suspected video-gen is basically a loss leader for OpenAI, Gemini, and Grok. They can't convince the general population that AI is world-changing trillion dollar tech with "vibe coding", but realistic fake videos are impressive at a glance, and might convince many non-technical people that AI/LLMs are something revolutionary.
danso··on FCC updates covered list to include foreign-made consumer routers
Why shouldn’t people have a reaction to a policy that mandates a new approval process on a large class of consumer products?
danso··on Walmart: ChatGPT checkout converted 3x worse than website
> Someone can want a thing, even very badly, without wanting to put in the work for it.

Generally, such highly-motivated people end up being thieves and grifters

← PreviousPage 2 of 34Next →