HNHacker News
TopNewBestAskShowJobs

riskable

4,421 karma · joined October 14, 2011

Father, Hacker (Information Security Professional), Open Source Software Developer, Toymaker, and 3D printing enthusiast. Message me:

Discord: riskable#4986

Matrix: @riskable:matrix.org

Twitter: https://twitter.com/riskable

submissionscomments
riskable··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
Define, "advancing humanity."

Are we talking about turning everyone into philosophers and somehow ascending to a higher plane of existence? Yeah, AI isn't going to help with that (probably).

Or are we talking about useful, positive benefits to every day people like better speech recognition, tools for the visually impaired, disease research, physics research, science in general, and loads of other areas where AI is improving things?

riskable··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
That's what this boils down to: What are our rights?

Everyone has a right to scrape the Internet. That includes corporations who scrape the Internet to train AI models.

If we take away that right, how would the Internet even work? It wouldn't.

Example: I could tell curl right now to download this techcrunch article and all the comments about it on HN and I'd be violating no law. I'd be infringing on no one's rights.

If I then distributed these downloaded files without permission then I'd be violating copyright law. The thing it certainly would not be is theft!

People claim AI companies are "stealing" human labor but that's not true. They're saving (in their databases) the fruits of human labor and other bots/software. Then they're using that data to train AI models.

The only conclusion I can make whenever someone says "AI is theft!" is that they have no idea what they're talking about.

My assumption is that what they really mean is, "AI is bad for labor!" and possibly, "cheap AI is incompatible with capitalism." Which very well could be true.

But if AI really undermines the value of labor that much, the problem isn't the AI, it's capitalism.

riskable··on A 386 PC for Your RP2350
Are you kidding me? It costs a fraction of the competition and you can use just about any pin for anything you want! It makes designing boards for the RP series so simple and easy!

Contrast that with STM32 where you have to constantly reference the data sheet to make sure you're using the correct pins for say, I2C when you're running in a particular mode. And since you're running in that mode, you now can't use other pins for certain things. Ugh! I hate it!

Then there's the issues with picking the right-size part number and making sure the pins you want are 5V tolerant, checking that you're using the correct ADC, and... Ugh! It's a pain in the ass!

Other chips aren't much better as they all have those same problems.

ESP32 is nice because of the zillions of built-in peripherals but configuring the damned thing can get really complicated really fast. It's so complicated, in fact, that they had to make a Makefile (as in `make menuconfig`) that rivals the Linux kernel in the sheer number of options/submenus.

riskable··on OpenAI bots knew about the RubyGems caching vulnerability
We already have it.

Good luck convincing the current DOJ to do anything useful at all though! It is currently intentionally stacked with incompetent cronies who have been told that their job is to attack the President's enemies and ignore the misdeeds of his allies.

It will remain like that until he's gone (and not replaced with another Republican wannabe dictator).

riskable··on OpenAI bots knew about the RubyGems caching vulnerability
Ah damnit, you beat me to it. Excellent sense of humor, friend :D
riskable··on Flock cameras used to arrest a child for playing on a swing?
To be fair, the powers that be do see children and their families as "actual criminals." They literally charged them with a crime!

This is their idea of what counts as a real criminal. Instead of, say, someone who rapes children. They'll vote for that person!

riskable··on Flock cameras used to arrest a child for playing on a swing?
"Better to die in fire than let some dark-skinned person sneak into your home, rape your daughters, murder you, and steal your stuff." -The classic American right-wing rage machine
riskable··on Anthropic boss Dario Amodei calls for AI development to slow down
Big AI bro wants to regulate AI industry so that only Big AI can exist in that space. Seeks to surreptitiously ban open weights models and similar competition from Western markets via complicated regulations and fines that only rich businesses could ever afford to fight or pay.
riskable··on Your intellectual fly is open when you use an LLM to author a post (2025)
It's because they view the LLM's output as "their thoughts." They told the LLM (via the prompt) what to do—often with loads of run-on sentences and long trains-of-thought. From their perspective, the LLM is just acting as a translation tool, saving them the trouble of having to think (about grammar, ideal wording, or even the order in which their thoughts should be presented).

They treat it as "just another tool" to improve efficiency. Like using a drill instead of a screwdriver.

Then there's people who are so lazy they give LLMs instructions like, "write a LinkedIn post about how AI is changing the future of work for thumbnail consultants." That's when it moves from "translating your thoughts" to "writing for you."

I think the issue is that it can be hard to tell the difference. We need better terms for these things so we can differentiate use cases.

riskable··on Your intellectual fly is open (2025)
I've come to trust their grammar corrections implicitly. So much that I've setup a "Fix Grammar" command with Obsidian Copilot that I'll just let it run on a whole chapter (YOLO mode):

    Proofread the following text for grammar, punctuation, and typos while
    strictly preserving the author's voice, pacing, and intentional stylistic
    choices (such as sentence fragments or character dialogue quirks).

    Rules:
    - Correct objective spelling errors, misused words, and unintended punctuation mistakes.
    - Smooth out unintentional syntactic snags without homogenizing unique phrasing.
    - Retain all Markdown formatting.
    - Return ONLY the corrected text with no intro, summary, or explanations.

    Text to edit:
    {selection}
About a year ago, all three big AI vendors could end up with strange "corrections" that would throw you off, but not anymore. As far as I'm concerned, they've solved "the grammar checking problem."

The complexity in this command is there for phi4:14b and qwen3:14b which I run locally via ollama. If the text doesn't have any Obsidian callouts or similar, fancy stuff I just use either of those and they do a fantastic job in seconds. For Big AI (e.g. Gemini, GPT-whatevs, Claude) you can literally just tell it, "fix the grammar." No need for the lengthy command.

NOTE: I am decent with English grammar so most of what needs fixing is typos I didn't spot or misplaced commas and periods inside/outside of quotes (I always screw that up without thinking—even though I know the rules! LOL). Occasionally, Big AI (Gemini, specifically) have disagreements about whether a comma is necessary in a particular spot but it's always of no real consequence.

riskable··on How to Spot AI Writing
If you can't tell if a text was modified by AI, then all accusations that a text was written by AI must be ignored. Not without strong evidence.

Yet here we are: The mere accusation of a work being touched in any way by AI is all it takes for publishers to drop it like they were just handed molten iron.

AI is being treated by publishers and traditional authors like the fruit of the poisonous tree. This won't stop anyone from using AI to aid their work in various degrees, but what it will do is force everyone to lie about it.

riskable··on How to Spot AI Writing
The "problem" is that people—the ones that actually care whether or not something was written by AI—don't just want to spot text that was generated by AI (like in your examples). They also want to spot text that was re-written by AI.

Before I explain the great big difference (which you probably already understand, just bear with me), know that the folks who are most up in arms about it are authors. They see their art as sacred. An ancient tradition of storytelling that deserves respect not for its output, but for the act and talent of producing it. To these folks, the very concept of using AI to generate or modify text in any way is against their religion.

Now for a real world example that would violate their principals that wouldn't bother normal people at all: A beginner or someone who's just terrible at storytelling has a story in their head and they do their best to write it down. It might look like this:

MC: "You call that a knife?"

...and so on and so forth, with poorly written descriptions of scenes, run-on sentences, etc. Then they feed that script into AI and go back and forth until they have text that they like.

To traditional authors, this is straight up EVIL. It's against everything they believe in! That person didn't write the story! They just came up with a poorly-written outline and the AI converted it into something more digestible.

Normal people will read such a story and—if it was created with the latest AI models—will never know the difference. It probably won't be a fantastic story or super well written but it will be passable. Even if they find out the process that went into it they won't care. And that pisses off these authors the most.

There's degrees to this, too: If you wrote an OK story, AI can be used to make it better. You can feed it multiple paragraphs and have it analyze the flow and offer simple suggestions for ways you could re-word sentences to improve them. Basically acting as a personal editor.

Is that "written by AI"? I would say, "no" but traditionalist authors would disagree. To them, any use of AI to write your story violates the very nature of storytelling.

...and it pisses them off to no end that you can't just run texts generated in this way though a program to tell whether AI was used in its creation.

riskable··on I Found Ultra-Pure Quantum Crystals in an Abandoned Mine in the Atacama Desert
The quest: Recover data stored in the quantum crystal matrix by building a tachyon pulse emitter.
riskable··on A new spam policy for “back button hijacking”
If you don't manage the history properly in your SPA, pressing the back button could take the user out of the app entirely.

If you don't let web developers manage history/state like this, we'd be going back to the inefficient world of, "every forward/back movement loads a whole page." (With lots of unnecessary round trip messages between the client and server while the user waits for everything to load).

Basically, the ability to manage history is a user-centric feature. It makes the experience better for them.

riskable··on France to ditch Windows for Linux to reduce reliance on US tech
Windows uses Group Policy (which isn't particularly secure for many reasons) while Linux uses configuration files (e.g. udev, AppArmor, stuff in /etc like fstab) in conjunction with file permissions. However, you can go way farther by compiling your own kernel that has certain functionality removed (e.g. USB mass storage).

Managing lots of configuration files/scripts across many thousands of servers, desktops, devices, etc is a long-solved problem. Most enterprises use Ansible or similar.

In almost every way, managing many thousands of Linux desktops is much simpler and more straightforward than Windows. If you're using Ansible playbooks, you can keep everything nice and tidy in a single place and everything you'd ever want to customize is managed via a plaintext file you can modify with your editor of choice.

You can organize them however you want or even use a GUI to change stuff (if you pay for Ansible Enterprise or whatever it's called... Or use one of the FOSS alternatives).

Managing Linux desktops at scale really isn't much different than managing Linux servers at scale.

riskable··on France to ditch Windows for Linux to reduce reliance on US tech
Firefox has /usr/lib/firefox/distribution/policies.json which lets the sysadmin lock down what users can do with the browser. Example: If you wanted to block all extensions except for a whitelist, you could control that via that file.

There's a bazillion tools that let you manage files like that across thousands of servers/desktops but the hot one right now in enterprises is Ansible (which would make it trivial to push out an update to such a configuration).

Chrome has a similar file: /etc/opt/chrome/policies/managed/lockdown.json

"Ah yes, but what stops the user from downloading the portable version of a browser and using that?"

You can mount all user directories with +noexec. Also, Apparmor lets you control which applications can make network connections if you want to get really fine-grained.

Other applications have similar policy files. For example, Visual Studio Code has /etc/code/policy.json which—for example—would let your company lock down which extensions are allowed to be used/installed.

riskable··on France to ditch Windows for Linux to reduce reliance on US tech
On a Linux desktop you can lock down waaaaay TF more stuff than Group Policy allows. The only difference is you need a sysadmin that knows what they're doing. You can't just point and click a button that prevents users from connecting USB devices. Instead, you use a combination of groups, udev rules, and systemd-logind. There's also ways to do it with PAM if you want.

The most popular way to control user desktops that I've seen is to have your user login via LDAP (just like AD), optionally with Kerberos and then have their permissions to various things controlled via those groups. For example, if you were building a "desktop policy" for Linux users across your organization, you'd probably make a .deb or .rpm that installs some udev rules that grant or deny access to various things based on which groups the users are in.

Of course, you can also control things down at the user level. You could put a script in /etc/profile.d/ that does whatever you want when the user logs in. You can even make it dependent on how they login (detect remote SSH session or local login).

There's also dconf and KDE's Kiosk mode if you really want to lock shit down to annoy TF out of your users (haha).

Once you've got your Linux desktops setup the way you want (which is usually just a matter of making your_company_desktop.deb or .rpm) to customize things/permissions, you have so much power to do things you can't do on Windows. The fine-grain control in Linux is unreal: You can give a specific user access to run and do very, very specific things as root (Windows Administrator equivalent) without much effort at all.

Linux also lets you lock down the hardware in ways Windows doesn't support. For example, you can chattr +i to make certain devices/files immutable. You could compile a custom kernel that doesn't even have USB mass storage support. What's more secure than that? Haha.

BTW: You can also make all USB mass storage devices read-only with a simple udev rule. You can even add exceptions for special things!

riskable··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
The time for regulatory action against Microsoft was thirty years ago and the need for it has only grown since then.

The FTC wasn't doing their job between 1980-2020 because of their ridiculous standard of, "if it doesn't raise consumer prices, it must be allowed." This lead to massive consolidation in many industries which of course ended up raising prices and hurting consumers anyway.

Recently they've had some wins but overall they're still failing to do their job.

riskable··on Microsoft terminated the account VeraCrypt used to sign Windows drivers
No. Embrace, Extend, Extinguish was replaced by the AAA strategy: Acquire, Assimilate, Abandon. They were trying to be more Google-like with that "Abandon" step I think.

They've since moved on to the SSS strategy: Ship, Slip, Slop.

riskable··on Veracrypt project update
You think it would succeed at that? Come on. Copilot is for entertainment purposes only!
riskable··on I've sold out
Listen, one does not simply walk into a new project without naming it properly. It's your precious!
riskable··on My Experience as a Rice Farmer
China has a minimum purchase price of corn that's set by the government in order to maintain food stocks. It's also part of a larger jobs program (that I don't know much about).

China also imports 80% of its soybeans which means it's based on the rising/falling prices of oil and whatnot.

In the US, soybeans are a very important crop that's fed to livestock and also used in biodiesel production. There's enormous soybean "crush" infrastructure in the US to support the biodiesel market and the side effect of this results in tons of extra soybean oil. It ultimately ends up with soybean oil being cheap compared to everything else.

riskable··on OpenAI closes funding round at an $852B valuation
This assumes that these companies aren't going to use smaller providers or hosting models themselves. THAT is the great big assumption going into all the Big AI funding.

I think it's a very, very bad assumption. After trying GLM-5 and Qwen3 on Ollama Cloud, not only were they faster than OpenAI's offerings (by a huge amount) it was just as good if not better at doing what I asked of it.

Claude Code is still superior to anything else but GLM-5 and Qwen3 are easily just as good as GPT-5.X (for coding).

riskable··on Show HN: Baton – A desktop app for developing with AI agents
How can people afford to use Claude Code like this‽ Is everyone just playing with it on their employer's dime or what?
riskable··on Why the US Navy won't blast the Iranians and 'open' Strait of Hormuz
> What makes you think the us army would unite against them?

I'd turn that around and ask, "What makes you think the people would accept the gun nuts rebellion?"

Many would be celebrating in the streets if the military showed up with tanks and started blasting. Furthermore, there's enough people in the military from far, far outside whatever state is being threatened to care that much about the locals.

"Fuckin' Texas gun nuts" <starts shooting>

riskable··on Do your own writing
I use bullet points a lot in my writing and it seems that, specifically is causing people to accuse me of either:

    * Being an AI bot.
    * Using an LLM to generate it.
It's driving me bonkers!
riskable··on Hold on to Your Hardware
If this ends up being true, desktop Linux adoption might make inroads. Windows apps run like crap on ARM and no one is bothering to make ARM builds of their software.
riskable··on Earthquake scientists reveal how overplowing weakens soil at experimental farm
10,000 years of feast and famine. Until the enlightenment, people were basically just guessing and sharing anecdotes.
riskable··on FCC updates covered list to include foreign-made consumer routers
I have a PC hooked up to my TV in my living room that has been running the latest version of Kubuntu for over 18 years now. It has had many upgrades in that time but it's still the same basic hardware: A CPU, some memory, USB ports, a video card, and an ethernet port on the back.

That "genericness" is what's missing in the router space. Literally every consumer router that comes out has some super proprietary design that's meant to be replaced in its entirety in 3-4 years. Many can run Linux, sure, but how many have a replaceable/upgradable board? How many are like a PC where you can install whatever OS you want?

Sure, you can forcibly flash a new OS (e.g. OpenWRT) but that is a hack. The company lets you do that because they figure they'll get a bit more market share out of their products if they don't lock the firmware so much. They key point remains, however: They're not just hardware—even though they should be!

The world of consumer routers needs a PC-like architecture change. You can buy routers from companies like Banana Pi and Microtik like this but they're not marketed towards every-day consumers. Mostly because they're considered "too premium" and require too much expertise to setup.

I think there's a huge hole in the market for consumer-minded routers that run hardware like the Banana Pi R4 (which I have). When you buy it, you get the board and nothing else. It's up to you to get a case and install an OS on it (with OpenWRT, Debian, and Ubuntu being the normal options).

We need something like the Framework laptop for routers. Not from a, "it has interchangeable parts" perspective but from a marketing perspective. Normal people are buying Framework laptops because geeky friends and colleagues recommend them and they're not that much more expensive/troublesome than say, a cheap Acer/Asus laptop.

riskable··on Meta will shut down VR Horizon Worlds access June 15
I honestly think VR hasn't taken off yet because every VR headset since forever has been a locked-down platform or not a stand-alone device (meaning: You need a powerful PC to use it, which makes the cost too high for casual players). The development barrier to entry is far too high and the market far too small.

The Steam Frame is a full PC that doesn't require a tether. I think it'll change everything if it doesn't cost a fortune (which it might). The possibilities for 3rd party hardware and the open ecosystem of a complete Linux distro + Steam are endless.

Day one of the Steam Frame I'm sure we're going to see all sorts of open source tools/scripts that make it better. Then 3rd party hardware will be announced and suddenly everyone's going to want one because all those things together make it sooooo nice.

← PreviousPage 2 of 34Next →