HNHacker News
TopNewBestAskShowJobs

marcus0x62

2,505 karma · joined August 12, 2016

[ my public key: https://keybase.io/marcusb; my proof: https://keybase.io/marcusb/sigs/FfWIyWDQEtS7d7asyDjJdVYrzGGI9FJaaqhHh-a6VCU ]
submissionscomments
marcus0x62··on I Tried to Fix Government Tech for Years. I'm Fed Up
From the article:

> The White House got involved, requiring months of in-person mediation meetings. I was never able to get the domain back

marcus0x62··on I Tried to Fix Government Tech for Years. I'm Fed Up
> The problem is that this is the first time any of us are hearing of these inefficiencies.

If this is the first time you’ve heard of inefficiencies of this kind, you’re in a filter bubble.

marcus0x62··on US and UK refuse to sign AI safety declaration at summit
> Despite what Sam Altman (a high-school graduate) might want to be true

> I linked a Yudkowsky paper above examining how empirically feasible it might be

...

marcus0x62··on Thomson Reuters wins first major AI copyright case in the US
> License what? Every available copyrighted work? Even getting a tiny fraction is not practical.

Maybe the strategy is something like this:

1) Survive long enough/get enough users that killing the generative AI industry is politically infeasible.

2) Negotiate a compromise similar to the compulsory mechanical royalty system used in the music business to “compensate” the rights holders whose content is used to train the models

The biggest AI companies could even run the enforcement cartels ala BMI/ASCAP to compute and collect royalties owed.

If you take this to its logical conclusion, the AI companies wouldn’t have to pre-license anything, and would just pay out all the royalties to the biggest rights holders (more or less what happens in the music industry) on the basis that figuring out what IP went into what model output is just too hard, so instead they just agree to distribute it to whomever is on the New York Times best seller list at any given moment.

marcus0x62··on Ilya Sutskever's startup in talks to fundraise at roughly $20B valuation
Lacroix's for closers. Only.
marcus0x62··on 'The Licensing Racket’ Review: There's a Board for That
> It was amazing to see all of the self-built decks, sheds, and unpermitted home modifications that were death traps.

/r/DIY loves to harp on that kind of thing, but most of the "death trap" critiques I read there are for things like decks 12" above grade. People need to get a grip.

marcus0x62··on Jacksonpollock.org
I wonder what the art dealers in Who The #$&% Is Jackson Pollack[0] would think of this?

0 - https://www.imdb.com/title/tt0487092

marcus0x62··on Seagate: 'new' hard drives used for tens of thousands of hours
For personal use, its really hard to see how this would go wrong. You get an (arguably) much better drive in the Ultrastar, and even if the resellers (typically 2 year) warranty doesn't pan out, the drives are cheap enough compared to new you can replace one or two in a typical RAID-6 array out of pocket and still come out ahead.
marcus0x62··on Seagate: 'new' hard drives used for tens of thousands of hours
Arch Linux. It’s an easy default for me, although I’ll probably build the next iteration on FreeBSD with ZFS. I don’t have much faith that btrfs or bcachefs will catch up to ZFS in the next few years.
marcus0x62··on Eliza Archaeology Project
The ELIZA Archaeology Project documents the early history of the ELIZA chat bot and contains an Early pre-Lisp implementation written in MAD (Michigan Algorithm Decoder) that until recently was thought to be lost.

The source listing is here: https://sites.google.com/view/elizaarchaeology/code

marcus0x62··on I got a heat pump and my energy bill went up
(when I made the comment above, most of the article was behind a subscribe-to-view wall.)
marcus0x62··on Staffers unload on Amazon 'leadership' after return-to-office for desk shortage
https://www.aboutamazon.com/news/workplace/how-to-build-your...
marcus0x62··on I got a heat pump and my energy bill went up
If you look at the PGE bill that is visible before article gets cut off, his electricity use went way up year over year and his natural gas use went down. I'm guessing he got an electric heat pump to replace his gas furnace, and just pays a lot more per kWh for electricity than he was paying per therm or cuft or whatever of natural gas.
marcus0x62··on Staffers unload on Amazon 'leadership' after return-to-office for desk shortage
I thought the Amazonian spirit was to just go to the hardware store and buy a door and some angle brackets and make your own desk?
marcus0x62··on Amazon's AI crawler is making my Git server unstable
Quixotic[0] (my content obfuscator) includes a tarpit component, but for something like this, I think the main quixotic tool would be better - you run it against your content once, and it generates a pre-obfuscated version of it. It takes a lot less of your resources to serve than dynamically generating the tarpit links and content.

0 - https://marcusb.org/hacks/quixotic.html

marcus0x62··on Free Our Feeds
As I said, Mastodon/ActivityPub has its issues. If the goal of "Free Our Feeds" was "let's build activity pub into a better mousetrap" or "let's design a protocol that fixes Activity Pub's flaws", I'd be all for it. As it stands, Free Our Feeds is engaged in a pointless exercise: they want to "free" Bluesky/AT-proto from control of Bluesky and build a "fire exit" for Bluesky users if Bluesky "turns evil". They are building something that can only work if Bluesky lets it work. They cannot force Bluesky to interoperate or allow data/social graph migration. They are building something in case Bluesky "turns evil" that will only work if Bluesky doesn't "turn evil." It makes no sense.

https://marcusb.org/posts/2025/01/your-feeds-are-already-fre...

marcus0x62··on Google begins requiring JavaScript for Google Search
I run a not-very-popular site -- at least 50% of the traffic is bots. I can only imagine how bad it would be if the site was a forum or search engine.
marcus0x62··on General Motors Is Banned from Selling Driving Behavior Data for 5 Years
> anyone ever want to drop the guise of privacy and have the surveillance is out in the open?

An essay about such a society: https://web.archive.org/web/20030212145443/http%3A//www.wire...

marcus0x62··on Quixotic: Bot and LLM Content Obfuscator
Author of Quixotic here. Thanks for posting this. I submitted this a while back; there are a few comments on that thread (https://news.ycombinator.com/item?id=42516759). Right now, there is also a discussion about a semi-related tool on the front page over at (https://news.ycombinator.com/item?id=42725147)
marcus0x62··on Nepenthes is a tarpit to catch AI web crawlers
Author of a similar tool here[0]. There are a few implementations of this sort of thing that I know of. Mine is different in that the primary purpose is to slightly alter content statically using a Markov generator, mainly to make it useless for content reposters, secondarily to make it useless to LLM crawlers that ignore my robots.txt file[1]. I assume the generated text is bad enough that the LLM crawlers just throw the result out. Other than the extremely poor quality of the text, my tool doesn't leave any fingerprints (like recursive non-sense links.) In any case, it can be run on static sites with no server-side dependencies so long as you have a way to do content redirection based on User-Agent, IP, etc.

My tool does have a second component - linkmaze - which generates a bunch of nonsense text with a Markov generator, and serves infinite links (like Nepthenes does) but I generally only throw incorrigible bots at it (and, at others have noted in-thread, most crawlers already set some kind of limit on how many requests they'll send to a given site, especially a small site.) I do use it for PHP-exploit crawlers as well, though I've seen no evidence those fall into the maze -- I think they mostly just look for some string indicating a successful exploit and move on if whatever they're looking for isn't present.

But, for my use case, I don't really care if someone fingerprints content generated by my tool and avoids it. That's the point: I've set robots.txt to tell these people not to crawl my site.

In addition to Quixotic (my tool) and Napthenes, I know of:

* https://github.com/Fingel/django-llm-poison

* https://codeberg.org/MikeCoats/poison-the-wellms

* https://codeberg.org/timmc/marko/

0 - https://marcusb.org/hacks/quixotic.html

1 - I use the ai.robots.txt user agent list from https://github.com/ai-robots-txt/ai.robots.txt

marcus0x62··on Nevada court shuts down police use of federal loophole for civil forfeiture
That bill of rights does not exclusively deal with criminal law. At least the first and fifth amendments deal partially with civil law. The seventh amendment exclusively relates to civil law.
marcus0x62··on Free Our Feeds
Its a joke that is successfully run and federated by multiple parties at scale, which is what the signers of this initiative claim to want. Bluesky/ATproto is for all practical purposes run and controlled by a single entity.
marcus0x62··on AI agents may soon surpass people as primary application users
"Company that hopes to make a lot of consulting revenue from selling AI agents says AI agents are going to be the next big thing."
marcus0x62··on 403ing AI Crawlers
Self plug, but I made this to deal with bots on my site: https://marcusb.org/hacks/quixotic.html. It is a simple markov generator to obfuscate content (static-site friendly, no server-side dynamic generation required) and an optional link-maze to send incorrigible bots to 100% markov-generated non-sense (requires a server-side component.)

I do serve a legit robots.txt file to warn the scrapers I know about away.

marcus0x62··on Free Our Feeds
I'd take this more seriously if the call to action was to support Mastodon. I understand Mastodon has its problems. I also understand that at-proto might, in some hypothetical future, not be reliant on a single entity to run and manage. But, warts and all, Mastodon is already free from the kind of centralized control that is decried in the linked article, while Bluesky is not.
marcus0x62··on The history and use of /etc./glob in early Unixes
I wonder what the point of these accounts is - they show up in almost every post now. If the goal is farming karma, they aren't doing a very good job.
marcus0x62··on Decentralized Syndication – The Missing Internet Protocol
That's supposed to be WebMention, right? It is standard (W3C), but not widely deployed.

https://www.w3.org/TR/webmention/

marcus0x62··on Emacs Users: I'm Okay, I Promise (2022)
I still use Emacs, but I feel the author's pain. I was developing Emacs-induced RSI in my early 20s. Taking a job where I didn't type nearly as much had the side-effect of letting the RSI fix itself.
marcus0x62··on Stop Trying to Schedule a Call with Me
> The counter approach is: - Make complete information available as transparently as possible and don't gate it. - Be forthcoming about weaknesses. Don't force prospects and customers to find them. - Ensure that when a prospect or customer does want to talk to someone, they immediately reach someone who can handle the problem or answer the question (no need for escalations.) - Never have an AI agent call someone unless the customer specifically requests that and be sure that all AI agents immediately disclose that they are AI. - Offer flexible e-mail list subscription options (monthly, quarterly, annually, only release notes, etc.) - If the product is not a fit, try to offer something useful anyway such as a suggestion of another product that might be a better match for their needs.

From the perspective of designing a sales org to do this it is, roughly, a sales-engineer focused sales organization with the sales engineers on a minimal commission plan (i.e., a pooled 80% base/20% commission plan instead of something like an individual 70/30 plan.)

I never saw it in practice, but it would probably have something like a 2:1 ratio of sales engineers to account managers. On the plus side, sales engineers are less costly to employ than account managers. On the down side, this will almost certainly result in lower revenue.

> Value based pricing is one of the reasons why a lot of companies end up in these situations. Rather than setting a standard price, the company does a detailed investigation of the customer to try to find out how much value they will gain from using the product and then they set the price based on that determination. Although it maximizes revenue in theory, it is slow and invasive.

In my experience (working in tech sales for a few large manufacturers,) this is almost never a routine practice of the sales team. It is sometimes discussed in sales training, and very, very occasionally put into practice, but the Achilles heel is your last comment: it is slow and invasive. Sales people are a diverse group, but they are united by the belief that time kills all deals.

Product teams do large scale market segmentation and price sensitivity studies -- that's where you get all of the packaging options. Sales teams? If they have a large existing customer, that customer will already have a standard discount level. That's the starting point for any given negotiation. For new customers or smaller customers, the sales team will try to sell at the 'standard' price, where by 'standard', I mean the prevailing discount level in their region. Variables that will ultimately cause the price paid to change: fiscal year-end/quarter-end, competition, bundling, "incentives" / customer "budget." I put those roughly in terms of how powerful a lever they are to move the price, on average.

Fiscal year-end/quarter-end. One challenge with trying to root out traditional sales/purchasing behavior is that customers are trained to reinforce the behavior. While it doesn't always work (a sales rep might be significantly under or over goal and might want a deal to slip into the next quarter/year,) if a customer can force a deal to get done around the end of the vendor's fiscal periods, they have significant leverage to negotiate a lower price if the vendor believes the deal might slip.

Competition - this one is pretty obvious, but adding a competitor to your purchase evaluation and letting the vendor you want to buy from know that you are seriously considering their competitor will likely result in a lower price. Bonus points for the purchasing team telling the vendor their engineers like the competitor's product better, but the purchasing team really wants to buy from you because they love you so much. Double bonus points for telling both vendors that.

Bundling -- if a manufacturer has multiple products, they often will voluntarily increase their discount level to induce the customer to buy a product 'suite'. The sales reps are often under immense pressure to sell the newer and flakier products on their price lists, and this is usually the only way it gets done. On the plus side, the customer gets more product for the same price. On the down side, the extra products included often aren't worth using, and come renewal time, the true total cost of ownership becomes apparent.

"Incentives" / "customer budget" - these are both, typically, BS in that the vendor doesn't usually have a magic "incentive" to offer a one-time discount. The sales rep just got (or thinks they can get) approval for a lower price. Similarly, while customers most certainly do have budgets, they often lie and say they can't buy x because it exceeds their budget, when their internal sales people (the purchasing team) just wants a lower price. I refer to the purchasing team as "internal sales people" because they often-times have a commission incentive just like the vendor sales rep: it isn't uncommon for them to have a personal, individual bonus tied to driving vendor contracts down in price. In some cases, it is a direct commission -- i.e., the purchasing agent (or sometimes budget owner) gets 10% of any monies saved.

I wish you the best of luck, but other than taking people completely out of the equation, I think it is really hard to eliminate this behavior in practice because 1) it is so thoroughly ingrained amongst both vendors and customers and 2) it works.

marcus0x62··on The Tsunami of Burnout Few See
> This is giving me permabear vibes.

I’ve been reading Charles High Smith for at least 15 years. He’s definitely a permabear. Of course, that doesn’t mean he’s wrong.

← PreviousPage 3 of 27Next →