HNHacker News
TopNewBestAskShowJobs

riskable

4,416 karma · joined October 14, 2011

Father, Hacker (Information Security Professional), Open Source Software Developer, Toymaker, and 3D printing enthusiast. Message me:

Discord: riskable#4986

Matrix: @riskable:matrix.org

Twitter: https://twitter.com/riskable

submissionscomments
riskable··on Award-winning AI literature
So, so many people would disagree with you. "Bouncing an idea off an LLM" is fruit of the poisonous tree in a lot of people's eyes because you involved an LLM at all.

I see this stance every day on writing Discords. Just mentioning that you used an LLM for anything (even unrelated to the story you're working on) can get you banned.

riskable··on Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier
The problem is that advertising works! I hate that it works!

Marketing and advertising aren't the same thing but I swear both sides of that coin have devolved via some process of carcinization where their claws emerge from the darkness everywhere people gather. Especially places where those claws are inappropriate and unwanted and yet it still works.

riskable··on Disney Raising Prices Days After Confirming Ads Will Now Show Up on Every Tier
I actively/mentally block products I see in ads now. For example, when I use Amazon's terrible search feature, I'll make a mental note of which listings are "sponsored" and make sure NOT to buy them. Ever, if possible.

When I see ads for things on YouTube, I automatically assume it's a scam... Because it almost always is!

riskable··on Award-winning AI literature
We really need more terms for AI-assisted writing. There's degrees to everything and writing is one of those things where there's LOADS of gray areas. Did you use AI for research? What about generating random names for characters/places? Did you use it to check your grammar (why do people even care about this? They do!)?

Anything touched by AI is starting to become "the fruit of the poisonous tree" for a lot of people and it's getting ridiculous. I've chatted with people who will refuse to read a story because they think the cover art was generated by AI (even though they don't really know; they're just guessing). "It's AI slop."

One of the listed stories was almost disqualified for that very same reason (AI cover art). Another was controversial because the author used AI to generate a random name for a disease.

If we had better terms for the levels of AI involvement, maybe people would get a little less worked up about it?

riskable··on Qwen3-Coder writes less secure code when told it's for a US persona
Exactly. I don't have the power to replicate the testing but this is the type of thing that easily makes the news!

If you have the power to do so, why wouldn't you perform your own testing right now and release the results? It's a marketing/status gold mine.

If you find that western models don't have the described anti-china bias, then maybe you won't publish anything since it's not as interesting—that would be evidence there's no conspiracy.

Hence my conclusion that if we don't hear anything soon, the anti-china accusation is false.

riskable··on Qwen3-Coder writes less secure code when told it's for a US persona
I agree that shared data centers and an international team of AI researchers would be best. The key, though, should be absolute transparency. All the data should be accessible to the public in such a way so that the resulting models can be replicated. Even if it's unlikely that anyone would have the hardware necessary to do so.

The only concern is copyrighted works in the training data. Example: If a government filled it with millions of books, that data should be accessible to the public (to verify everything). However, that would piss off publishers to no end.

riskable··on Qwen3-Coder writes less secure code when told it's for a US persona
> I'm pretty sure Western models have their own biases just in a different direction.

This statement warrants testing.

If we don't see an equivalent study out in a few days saying that this is true, it's clearly false. The methodology of the study was clear and easy to replicate (in short order, though you'll need the hardware/money for tokens). No reason why other groups shouldn't be performing the same exact tests with Western models (open weights or not).

riskable··on Qwen3-Coder writes less secure code when told it's for a US persona
It's a bad smell for China if "westernization" makes code more secure.

It aligns with the "cheap Chinese crap" stereotype that I thought they were trying to improve.

To summarize my take: Come on, guys! Really‽

riskable··on Qwen3-Coder writes less secure code when told it's for a US persona
Just another reason why governments need to release their own FOSS/open weights models. They need to do this now, before it's too late. Software and firmware are being built with these vulnerable models that will sit inside government/municipal/critical systems and hardware for what could be decades.
riskable··on What is going on with ceiling fans
People will be blown away by the results!
riskable··on Google breaks promise to provide 10 years of updates to Chromebooks
It's a special version of Android that has a developer mode that unlocks a virtual (sandboxed) Linux environment. Because otherwise, no one would be able to use git (Android's filesystem abstraction is so slow for git, it's worse than NTFS).

Inside the virtual layer, you get real ext4/btrfs and real terminal applications will run at near-native speeds (supposedly) but their ability to interact with other applications (Android side) will be limited.

In short, it's not a real computer. Not a general-purpose one, anyway.

Google thinks that the selling point will be that enterprises can have their locked-down environment in the Android OS which allows remote wipe capabilities and heavily-sandboxed apps while it also allows developers the power to run whatever they want inside their little virtual Linux sandbox (e.g. VS Code). Sort of like WSL.

What they fail to understand is that enterprises will want just as much control over that sandboxed Linux environment as they have over the Android side of things. Making the entire purpose of the device moot.

Another idea behind the project is that it will allow Google to sell laptops that run processors that are traditionally used in smartphones without having to port the drivers and whatnot to general, open source Linux. Things like deep sleep states with rapid resume should "just work" because it's using Android which was what the vendor targeted when they made the chip.

The foundation of the entire device is hacks upon hacks in order to avoid doing the right thing (and possibly giving up market share to generic OEMs that might make their own ARM laptops).

The actual solution to all these issues is for mobile processor companies like Qualcomm to just be good Linux citizens.

riskable··on Reverse-engineering a $35 backup camera display (AMT630A)
Hm. Have you thought about using a backup camera? =)
riskable··on America.gov
I tried to get it to generate code but it says that's forbidden by its system prompt. However, it was happy to recommend Python modules for accessing api.data.gov.
riskable··on Show HN: Raven – The harness of harnesses, built for RSI
I always figured that the free/open weights models like qwen3.8:27b would perform just as well if not better than Claude's latest if you just fed it back into itself enough times. This project seems to prove that this is indeed the case.

What I'd like to see now is how good it can get when you feed the micro models like qwen3.5:0.8b into itself to solve problems. Will it be like toddlers discussing neighborhood politics at a pretend tea party or will it actually get some decent results?

Another game-changer (if this style works out): Just get a model like qwen3.8:27b onto one of those model-on-a-chip cards that makes it 1000x faster and see how fast it can go using the same method.

riskable··on Windows 11½
Proving once again that Windows isn't ready for the desktop.
riskable··on The Rise of Audio AR (2024)
Software patents shouldn't exist.
riskable··on When did Google get so weird?
Well, that's what friends are for!

If asked my friends a weird question I know they are highly unlikely to know the answer to, of course they're going to get snarky with me. If I don't get a gentle ribbing out of it... Are they really my friend or just a polite acquaintance?

riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
Whoa there: Distillation isn't illegal. Who said it was?

That has yet to be decided in court. At best it's a violation of the terms of service, but the only restitution for such a violation is termination of service and by then it's too late.

Remember: Distillation is literally just giving the AI a prompt and seeing what it spits out. If that were illegal, we'd all be guilty whenever we used AI.

Examining your competitors doing business is as old as business.

riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
The law here is no: If you own a copy of the song, you can reproduce the lyrics in whatever way you want.

What you can't do is distribute the lyrics without the author's permission.

When you ask DeepSeek to retrieve the lyrics (and it does so), the real question is this: Is DeepSeek merely acting as an intermediary/ISP according to the DMCA (in which case they'd be protected under the safe harbor clauses) or are they illegally redistributing the lyrics without the author's permission?

Whether or not you own a copy of the lyrics is irrelevant from a legal perspective in this scenario.

My guess: If they just retrieved the lyrics from some website and delivered them to you (because you asked), they're an ISP. However, if they pulled them out of their own database, they're violating copyright.

riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
Those lyrics aren't in the model. They're either in the database DeepSeek makes tool calls into (unlikely), or they're out on the Internet and DeepSeek simply retrieved them on your behalf.

LLMs are far too lossy to be able to store such lyrics in their entirety. In fact, they're not even "lossy" since they're not even trying to record such information. They're just weights for how likely it is that any given word will come after another.

riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
Because it's everyone's right to scrape the Internet and save what you find?
riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
Sounds like an argument against capitalism rather than intellectual property.

If no one has to work to live, how many would spend time writing instead of working at a job they hate?

riskable··on Unsealed Briefs in Authors’ Case v. Microsoft/OpenAI
Just want to correct one thing: They're not AI evangelists. They're copyright survivors from the MPAA/RIAA wars (in the 90s and early 2000s).

Plagiarism requires near-perfect copying. If you summarize, paraphrase, or re-write something using different language, you're not plagiarizing anything.

Everyone has a right to summarize or paraphrase whatever TF they want. That includes Big AI companies and individuals using LLMs.

It is not worth giving up our rights just to placate a handful of very wealthy authors.

riskable··on Understanding the Impact of LLM Watermarking on AI Agent Behavior
They tested this in the research: They found that the statistical likelihood of bad tool calling was higher with watermarking compared to random seeds. At least, that was my takeaway (I read the whole thing).

This is because SynthID and similar watermarking methods for LLMs don't just change the random seed. They take additional steps (that I have yet to read about) in order to detect when someone changes a few words of the output, trying to remove the watermark.

The other takeaway is that just by knowing a watermark is being applied gives an attacker an advantage in working around safety features because then they know the output isn't based on true randomness and can take advantage of that in a similar fashion to how breaking cryptography becomes easier when the RNG isn't truly random.

riskable··on I'm Tired of Being on the Network
I'm with you. There's so much cool stuff going on and new things to learn! Stuff to try and new tech to play with.

It sounds like the author got locked in some sort of, "I follow" loop where he got used to trusting certain companies to keep him interested and entertained, then they sold out to ads and the lowest common denominator of entertainment audiences.

The Internet is the same as it's always been! There's infinite ways to use it, full of all sorts of fun communities, new hobbies to spend too much money on (hehe), and endless amounts of people to engage with.

If your iPhone is bothering you that much, maybe it's time to try Android or go totally off the grid (so to speak) and install something like GrapheneOS on a used phone (the horror!).

How about designing your own damned phone? It's not impossible. Make a thick ass brick with a huge battery and dual screens that barely fits in your pocket but can do amazing things a normal phone can't: Give it an IR emitter so you can turn off TVs from a distance. A CO2 sensor so you can tell when any room you're in is getting stuffy. A friggin laser projector. Whatever!

Instead of being a passive intake of all things corporate Internet, make something. Contribute!

riskable··on I'm Tired of Being on the Network
Geeze! Going to the AliExpress app to check a package is for when you remember that you ordered something over a month ago and are wondering if it'll arrive soon. Not for regular checking!

Then you look and see it made it to your country last week and give a gentle nod to the app, then close it. Because you know, "any day now, I'll have 1000 of that $0.01 thing."

riskable··on How to Write with an LLM
All the Big AI APIs handle a million tokens of context. That's enough for 750,000 words or, several entire novels.

Context isn't an issue. It's style.

The argument the author is making is that if you use an LLM to write for you, you end up with a homogeneous work that's just like everything else.

In journalism, that's sort of what you want.

In novels/function, that's the opposite of what you want.

However, there's degrees to these things. If you're looking at a sentence you wrote, thinking there's something "off" it can be helpful to have the LLM rewrite it just to see how it thinks it could be better worded.

I've done this a few times and I do find it helpful. Just like the author, I never just accept what it gives me. I simply use it as an OK-ish copyeditor that's good at spotting issues and suggesting solutions.

riskable··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
Define, "advancing humanity."

Are we talking about turning everyone into philosophers and somehow ascending to a higher plane of existence? Yeah, AI isn't going to help with that (probably).

Or are we talking about useful, positive benefits to every day people like better speech recognition, tools for the visually impaired, disease research, physics research, science in general, and loads of other areas where AI is improving things?

riskable··on Microsoft exec called AI scraping 'the largest theft of labor in human history'
That's what this boils down to: What are our rights?

Everyone has a right to scrape the Internet. That includes corporations who scrape the Internet to train AI models.

If we take away that right, how would the Internet even work? It wouldn't.

Example: I could tell curl right now to download this techcrunch article and all the comments about it on HN and I'd be violating no law. I'd be infringing on no one's rights.

If I then distributed these downloaded files without permission then I'd be violating copyright law. The thing it certainly would not be is theft!

People claim AI companies are "stealing" human labor but that's not true. They're saving (in their databases) the fruits of human labor and other bots/software. Then they're using that data to train AI models.

The only conclusion I can make whenever someone says "AI is theft!" is that they have no idea what they're talking about.

My assumption is that what they really mean is, "AI is bad for labor!" and possibly, "cheap AI is incompatible with capitalism." Which very well could be true.

But if AI really undermines the value of labor that much, the problem isn't the AI, it's capitalism.

riskable··on A 386 PC for Your RP2350
Are you kidding me? It costs a fraction of the competition and you can use just about any pin for anything you want! It makes designing boards for the RP series so simple and easy!

Contrast that with STM32 where you have to constantly reference the data sheet to make sure you're using the correct pins for say, I2C when you're running in a particular mode. And since you're running in that mode, you now can't use other pins for certain things. Ugh! I hate it!

Then there's the issues with picking the right-size part number and making sure the pins you want are 5V tolerant, checking that you're using the correct ADC, and... Ugh! It's a pain in the ass!

Other chips aren't much better as they all have those same problems.

ESP32 is nice because of the zillions of built-in peripherals but configuring the damned thing can get really complicated really fast. It's so complicated, in fact, that they had to make a Makefile (as in `make menuconfig`) that rivals the Linux kernel in the sheer number of options/submenus.

Page 1 of 34Next →