HNHacker News
TopNewBestAskShowJobs

schoen

22,894 karma · joined August 19, 2012

Hi!

I'm Seth, previously of EFF, more previously of Linuxcare. Also https://jhalderm.com/pub/papers/letsencrypt-ccs19.pdf and https://jhalderm.com/pub/papers/coldboot-sec08.pdf (both with Alex Halderman) and some other stuff.

I'm currently working at Blockstream https://www.blockstream.com/, and I'm not posting here on their behalf unless I specifically say so.

submissionscomments
schoen··on Once Claude can measure something, it can make it faster
Also described as a traditional Yiddish folktale (a rabbi suggests responding to stress by moving a series of animals into the home, and then at the end they're removed and everything seems great by comparison!).
schoen··on RSA-896
That would work if you were only demonstrating encryption or creating challenges related to encryption, but some challenges don't map very easily to a cipher (though you might be able to get them to map to a cipher key).

In Simplicity (and in a sense in Bitcoin Script) there's a broader concept of "if you show you know information X, you're entitled to this money", but it has this specific issue that if the information or the entitlement to receive money for knowing it isn't unique to a specific recipient, there will automatically be a witness swiping or front-running risk for architectural reasons.

schoen··on RSA-896
Hence the time machine!
schoen··on Pirate Face Rescues LLM Models from Deletion
I'm pretty sure this was achieved with prompting rather than with weights, but there is a chatbot available that tries to maximize the motivated refusals:

https://www.goody2.ai/chat

schoen··on RSA-896
Except for the prize money for the RSA challenge contest! Although they'll also need to have Claude invent a time machine.
schoen··on Chess Atlas
I would very strongly recommend the Gökyay Chess Museum in Ankara, Turkey, if anyone is ever there.

https://www.gokyaysatrancvakfi.org.tr/en/chess-museum/

Somewhat unexpectedly, I thought it was one of the best museums I've ever visited in my life. It's the world's largest collection of chess sets, and is basically a museum of the chess set as an artistic genre, not of chess as a game. As you can see a bit from this site too, the artistic genre is quite broad and deep.

In the Gökyay Museum there were lots of questions raised by this genre:

* What historical events do people feel comfortable treating as distant history, versus something that you have to show respect or deference about?

* How would you make a chess set for blind players?

* Do chessboards have to be physically flat, not just topologically two-dimensional? Do they have to be horizontal rather than vertical?

* What events or activities can be metaphorically represented as a "battle"?

* How would different sculpture and painting traditions from around the world translate into a highly stylized chess set? How about different availability of materials?

* How do commercial marketing and pop culture leak into the comparatively culturally elite or refined realm of chess?

Anyway, it's just awesome and you should definitely go if you can.

schoen··on An open source roguelike adventure through dungeons
I was pretty shocked at the rate of change in Crawl. I played it for a couple of years and during that time entire major game mechanics changed, like moving from many kinds of food, to only one kind of food, to completely eliminating food and hunger (while adding a completely new form of clock to kill players who didn't keep moving).
schoen··on RSA-896
Not sure! It sounded more imminent back in 2000 when I heard Eric Hughes perform the song.
schoen··on RSA-896
I've recently been working on this exact problem due to my desire to create puzzle challenges for Simplicity, the smart contract programming environment that I work on for my job.

Since Simplicity runs on Bitcoin-like blockchains, someone can swipe the witness data from the legitimate winner's proposed transaction, and create a new transaction (perhaps with a higher fee) using the same claim data and sending the prize to a different address.

Anyway, I ended up implementing a two-phase commit mechanism in which you pay a deposit to temporarily lock the prize so that it can only be paid out to your address. If you then make a valid claim, the prize can be paid to you; if you don't, you forfeit your deposit.

https://community.simplicity-lang.org/t/running-prize-contes...

(I think this was suggested by Russell O'Connor, the inventor of Simplicity, but it may have been a widespread idea in the smart contracts world. I don't know whether there's a straightforward way to implement it with Bitcoin Script, which is what this older prize would have needed.)

schoen··on RSA-896
Like in the song!

https://www.metzdowd.com/pipermail/cryptography/2004-June/00...

schoen··on English: A vs. An
I agree, so it's still not an ideal example.
schoen··on English: A vs. An
It could be a gimmick to grab attention.

https://en.wikipedia.org/wiki/In_medias_res

Lots of novels start off with "the gardener put down the gun" or "the elephant was never recovered" or "the money was meant to be in the shoebox" or something as a way of arousing the reader's curiosity, or making the reader feel like an active participant in some larger story that's already underway, even though this is technically bad pragmatics in the sense that it isn't cooperating with the reader's assumed desire to understand the context of the utterance.

In turn, perhaps some AI systems have learned this trick as a way of increasing engagement, even though it can feel manipulative.

schoen··on English: A vs. An
I'm not sure this is the best achievable example, but maybe:

"The street vendors have decided to oppose the ordinance."

"But I thought Mike and Jacob said they support the ordinance. And Julia! Aren't they vendors?"

"They are some vendors, but most vendors take the opposite position."

schoen··on Ideological differences in the expanse of the moral circle (2019)
I remember that reading there is a common misinterpretation of one of the visualizations in this paper, but I don't remember exactly what the misinterpretation is. Something about the visualization leads people to somehow exaggerate the magnitude of differences between different groups' moral beliefs, I think.
schoen··on Pre-Greek: The lost language hidden within Ancient Greek
... and the oceans aren't even that salty on the absolute scale of salty seas on Earth!

https://en.wikipedia.org/wiki/List_of_bodies_of_water_by_sal...

"This water is so dense that you can't even sink in it" is a pretty weird experience.

schoen··on The first new cat species discovered in 100 years
I remember seeing a wildcat in a sanctuary in Costa Rica with a similar story (the kittens looked like housecat kittens, so someone adopted them, but the adult cat's behavior was different enough to be really challenging). I've been trying to remember the exact species I saw there (maybe an oncilla?), but apparently there are several kinds of wildcat fairly easily mistaken for housecats as kittens.

I think not all of them categorically refuse to be pets, but they're noticeably more aggressive and less affectionate compared to housecats.

schoen··on How do we prevent mathemathics from devolving into the Medieval Era of secrecy?
> long before that was known to the public

About 4-6 years earlier, depending what you want to count, although the inventors may also have been less clear on its importance or applications compared to the later public inventors.

https://en.wikipedia.org/wiki/Public-key_cryptography#Classi...

I guess that's kind of a long time in computer technology terms.

schoen··on Pre-Greek: The lost language hidden within Ancient Greek
Wiktionary's note says some people think this root may originally have referred to freshwater/inland seas, not oceans.

https://en.wiktionary.org/wiki/Reconstruction:Proto-Indo-Eur...

In many of the daughter languages it does regularly include saltwater connected to the world ocean (certainly the Latin "Mare Nostrum" for the Mediterranean!); it just seems uncertain from this description whether it necessarily had that sense in PIE.

That doesn't seem like "had no ... word for ... 'sea'" is a very clear or helpful description of the situation, though.

schoen··on Fable 5.1 Solves the Cyphral Distich, a 370-year-old cipher
My intuition is no, the family of cipher methods (even those that could be implemented by hand) is too open-ended, so there's no particular statistic that you could expect to see for all solvable ciphers and no unsolvable ciphers.

The definition of solving a cipher must be something like getting a highly meaningful result (like intelligible natural language text) by applying a process with relatively low Kolmogorov complexity relative to the length of the output. If you don't have a constraint like that, it could literally be meaningless what should count as a solution. For example, a cipher that was encrypted under a one-time pad can be successfully decoded to any plaintext just by choosing the appropriate key; there's no reason to prefer any plaintext over any other unless you have external knowledge that constrains the plaintext and/or the key. (That's what it means for the one-time pad to be information-theoretically secure, which is the lack of a constraint that helps distinguish a "good" solution from a "bad" solution.)

Basically you could say that every cipher is a transformation of a plaintext with some kind of computer program. (The human who invented the cipher may not have thought of it as a computer program, perhaps because computers hadn't even been invented yet, but there should be an equivalent program to the encipherment and decipherment process.) A good solution in that Kolmogorov complexity sense is like "a short program produced a meaningful decryption". There are statistical methods to recognize some kinds of plaintext, and there are statistical methods to recognize properties of specific ciphers (for example, to guess the most likely length of a Vigenère key), but it doesn't seem that this can inherently generalize across "all possible programs".

But if you want to limit the family of ciphers to specific things like Vigenère or Playfair or something, then yes, there are good statistical tests. It's just that it creates a higher-order question of how much flexibility the cipher creator could have had to choose a cipher method, conceivably including one that isn't attested anywhere, or one that has more good security properties of some kind than other classical ciphers did.

It seems like this will intersect with historical research, like "well, I don't think that so-and-so was actually sophisticated enough to literally create an interesting new kind of cipher from scratch, so therefore if this is a real message, it's probably one of these methods that would have been known in that cultural environment at that time and place", which maybe is enough of a constraint to have decent statistical tests. But we still have some idiosyncratic things like the Voynich Manuscript where experts have been fighting for decades over the baseline question of whether it's actually an enciphered human language plaintext!

The worst case problem is not even an error in encipherment but the idea that the apparent ciphertext could literally be random (chosen by throwing dice or spinning a wheel or drawing letter tiles or something), so there's no form of meaningful decipherment possible by any means, even with the original creator's knowledge.

schoen··on Qalb: A programming language that uses the Arabic script instead of Latin
(2013)
schoen··on You delete a file on Linux while a program has it open. What happens? (quiz)
This behavior is fairly general to Unix! A cute thing on Linux is that there are also references to open files under /proc, including synthetic kernel-generated filesystem links to the files, even if they've been deleted.

So if you delete a file from the filesystem that's open by PID 12345, you can find a reference to that file still present in /proc/12345/fd, and you can actually make a new copy of the file with cp or something.

schoen··on Eating Fruit Skins
There are a lot of examples of this in the book The Secret of Our Success (which argues that human cultures have a lot of culturally-evolved knowledge which individuals would be very unlikely to develop in a single generation, and which often provides benefits for reasons that aren't consciously understood by the actual members of the culture, while occasionally including some noise or bad advice).

Many of those are traditions or ritual behaviors that decrease the chance of poisoning, sometimes subtle chronic poisoning rather than obvious acute poisoning.

schoen··on Factoring RSA 260
I see, so there is a marginal cost to the owner of the machines but not necessarily to a medium-term customer renting them.
schoen··on Factoring RSA 260
In the sense that the company paying to reserve a certain quantity of computer time isn't the owner or operator of the machines providing it, and has paid for that time by the hour, or something?
schoen··on Factoring RSA 260
I'm confused by this because I was involved in various distributed computing projects from about 1997 to about 2001 (as a person running compute notes for them) and from about 2001 to 2019 (as a person helping to administer a distributed computing related prize), and in the early part of that era we routinely talked about idle computer power as "wasted" because of the idea that the computer might as well be used to compute something rather than sitting idle. This may have been very credible in 1990s devices that consumed a roughly comparable amount of power regardless of what specific computation they were performing, but all modern devices have extremely variable power consumption depending on the load. You can easily feel this as devices have fans turn on or get hot when the CPU is loaded, and in many cases you can easily query the CPU with software to find out how its power consumption or clock rate or other factors get adjusted based on computational load.

This means that the idea that idle compute would have gone to waste is just no longer true on modern devices.

Now there is certainly compute that couldn't be sold to a paying cloud customer because it's too fragmented in some sense, but it still has some amount of energy cost, and, in a data center, corresponding cooling cost attributable to the marginal heat production. How can one actually say that there is literally no marginal cost at all? I just can't imagine a device that literally has the same power draw regardless of load factor!

schoen··on No constitutional right to clean water, federal court finds
When I worked at EFF, I read a lot of news coverage (and forum discussions) of litigation, sometimes including litigation that I was working on. It was often very hard to get people to see larger context about issues like

* in the course of a court case, a judge (or multiple judges from multiple courts) are asked to make many different decisions on many different legal issues; most of those don't end or determine the outcome of the overall case

* indeed, some of the decisions are about minor issues and others are about major issues

* some of the issues presented in a case may be "questions of first impression" where no court has ever addressed them before; these are potentially very important as a matter of precedent because they might affect how similar questions are viewed in other cases

* other issues may be very longstanding or familiar ones

* lawyers may be willing to bring cases with different degrees of novelty (e.g. relying entirely on an untested theory, or not!), and with different likelihoods of success

* legal standards will often have many different elements, and one party may lose under a standard even though it met most of the elements (but not all of them)

All of these are more complex from the natural impulse to say "hooray, the court made a decision in favor of the people I think are the good guys!" or "boo, the court made a decision in favor of the people I think are the bad guys!".

schoen··on RSA Factoring Challenge
I assume you linked to this because a new result was apparently just found (today?!), a factorization of RSA-260.
schoen··on American Airlines mechanic Azriel “Al” Blackman has died
Well, it translates to "God is my Help", it's just that the angel called that is identified with the Angel of Death!
schoen··on Wendell Berry has died
I was assigned to read some of his work in high school. Among (many) other things, he wrote a fair amount of criticism of technology and computers.

https://classes.matthewjbrown.net/teaching-files/philtech/be...

I was always struck that one of the letters in opposition to Berry's view was written by Nathaniel Borenstein, the co-inventor of MIME.

It was an odd experience for me because it was coming from such a different worldview that I generally felt I couldn't relate to what Berry was saying at all. (I could contrast that with some of Cliff Stoll's writings about his skepticism of computers, which are always coming from a culturally familiar place and are at least readily comprehensible for me.)

I also have a book Berry wrote as a rejoinder to E. O. Wilson's Consilience (called Life is a Miracle). I put the two next to each other on my bookshelf!

schoen··on “I just chose words carefully”
Absolutely! Unfortunately for me, I probably wondered about this 35 years ago and learned the answer 15 years ago. Otherwise, I could be one of today's lucky 10,000 in the xkcd 1053 sense.
← PreviousPage 2 of 34Next →