HNHacker News
TopNewBestAskShowJobs

scrupulusalbion

63 karma · joined July 7, 2015

submissionscomments
scrupulusalbion··on 10-year Treasury yield plunges below 0.5%
Thanks for the recommendation!

Here's a PDF version of it: https://mises.org/library/driver

scrupulusalbion··on The EARN IT act is an attack on end-to-end encryption
>what happens when messaging with ciphertext becomes illegal

Back in the late 90s, Ron Rivest proposed Chaffing and Winnowing [0]. In that scheme, no ciphertext is transmitted and therefore no encryption is involved; only plausible plaintext is transmitted. The receiver filters out the chaff, leaving only the intended message. Perhaps one could construct an end-to-end winnow-chaff scheme (E2EWC) to replace existing E2EE schemes.

[0] https://en.wikipedia.org/wiki/Chaffing_and_winnowing

scrupulusalbion··on Why the Intellectual Dark Web Exists
>they were first treated as a single group of lock-step individuals by those looking to oppress them. Is it crazy that to respond, they respond as a group?

I think it plays into the propaganda of the oppressive regime by not asserting individuality. "See, they identify as the group we claimed they were the whole time," the regime would say.

That being said, there is acting as a member of a group and identifying as a member of that group. The former need not entail the latter. For instance, donating money to the ACLU doesn't change your identity to ACLU-er (et simis). No, you are just helping that cause.

scrupulusalbion··on No boundaries for Facebook data: third-party trackers abuse Facebook Login
>it seems pretty reasonable to assume all third-party elements on the web are hostile.

The trouble is that a lot of good and bad JS/CSS/content is gotten from third-party sites. Some websites are simply useless unless your browser loads third-party JS (e.g. Bootstrap). The ability to load third-party code/content is built into HTML and web developers naturally take advantage of that capability.

scrupulusalbion··on Some U.S. law enforcement agencies are using GrayKey to bypass iPhone encryption
I see two issues here:

(1) Whether LE agencies are actually finding it more-and-more difficult to access devices that employ encryption. I think this is plausibly true, simply because there are more such devices being sold than ever before (from the perspective of senior LEOs).

(2) Which LE agencies is he talking about? If he is refering to all agencies, then he might be right. Many LE agencies have very limited budgets. However, if he is talking about the more well-funded and competent agencies, then he is probably wrong

>I wish there was some punishment for Government officials for lying to the public. You can be prosecuted for lying to the FBI, so why shouldn't they be prosecuted for lying to you

Get rid of the punishment for lying to LEOs and it is all fair and equal. They lie to us and we lie to them, both without punishment. It would still be illegal to lie to judges.

>(the voter, who is supposed to have the power in a democracy)

The purpose of democracy is to use elections to legitimize a limited group of persons to use the power of the State. The power of voters is limited to selecting who will be in that group. The rest of the power of the State is in the power of the hands of those who were selected.

scrupulusalbion··on Hello: A new social network founded by Orkut's creator
>I’m finding that “social networks” should be a consequence of a product that solves a real problem, not that product’s raison d’etre.

Facebook mainly solves one problem: How do I keep in communication with the many people I know IRL? This is a real problem for many people, especialy when you have friends/family all over the country/world.

Any would-be strict competitor with Facebook will have to deal with a bootstrapping problem: How do you get enough people who know each other IRL to sign up and use the website?

Relaxing any one aspect of that, I think, will make success much easier:

* Enough people: You could have a niche focus (car forum) or a niche community (forum for one Eve Corp).

* Know eath other IRL: You could have an anonymous forum (4chan) or a pseudonymous forum (Reddit).

* Sign-up: Twitter, YouTube, and most forums don't require signups to view user-provided content. 4chan doesn't even require login to post.

scrupulusalbion··on Computer system transcribes words users “speak silently”
I doubt this could ever be used to arbitrarily read minds. Even if you could do the measurements without the targer knowing, you would have to somehow correlate the target's real thoughts with those measurements. In the article, the targets voluntarily provide that correlation to measurements during a training phase. It might be the case that some neuro-physical patterns might be common across targets, but that seems very unlikely.

If the target is in your custody and you coerce him to give training data, then he could just give garbage data. You tell him to think "fish barrel neuton whale", but he really thinks "somebody once told me".

Do sub-vocalizations only occur for certain categories of thoughts? I suspect that facial memories do not induce sub-vocalizations.

scrupulusalbion··on The secret life of NaN
Can arithmetic be applyied to NaN a la i? (e.g. 5 + 2 * NaN = 5 + 2NaN)
scrupulusalbion··on For Decades, Our Coverage Was Racist
Suppose this were an individual's own blog post:

"I was a racist prior to the 70s. Here's some articles where I show clear racism from that time. In the 70s I had a change of heart. Here's some articles from the 2000s where I clearly show that I am no longer a racist, but in fact the opposite of a racist."

This would not be an apology, because it doesn't stop at showing one's previous racism. It continues on to try to give evidence of current virtue as if that were a remedy for past racism. However, the real problems generated by racism are not cured by changing your position on race.

The NG article puts this in the proper context of intention:

>But when we decided to devote our April magazine to the topic of race, we thought we should examine our own history before turning our reportorial gaze to others.

Do they mean they are going to expose other magazines as being racist? While that might be historically interesting, it doesn't seem remotely professional. If they are planning to publish such exposes, then the current article is clearly an attempt to preempt the natural claims that NG was racist too.

scrupulusalbion··on China Demands Dalai Lama Reincarnate After Death
This is an excellent article. From the Wiki article on the Dalai Lama[0]:

>Since the time of the fifth Dalai Lama, his personage has always been a symbol of unification of the state of Tibet, where he has represented Buddhist values and traditions.

This explains the interest by the Chinese Communist Party in wanting the Dalai Lama spirit to stick around. If he goes away, then political turmoil is sure to follow.

Also, this bit reminded me of an episode of Mike Judge's King of the Hill:

>They present a number of artifacts, only some of which belonged to the previous Dalai Lama, and if the boy chooses the items which belonged to the previous Dalai Lama, this is seen as a sign, in conjunction with all of the other claimed indications, that the boy is the reincarnation.

[0] https://en.wikipedia.org/wiki/Dalai_Lama

scrupulusalbion··on NSA Retreats from Targeted PCs If They're Already Infected by Other APT Malware
>Territorial Dispute will search files on the infected computer for file names and registry keys known to have been used by malware deployed by other nation-state hacking groups.

This seems rather easy to defeat; it is analogous to security by obscurity. You only need to learn (1) what files and registry entries that specific malware generates and (2) what subset of those are harmless. If Territorial Dispute only looks at file names, then that makes things even easier.

scrupulusalbion··on Tim Berners-Lee: we must regulate tech firms to prevent 'weaponised' web
>Google is the weapon used by all the groups involved.

This also shows that Google is a power-deficient gate-keeper, because they are buckling under pressure over search results.

Somewhat OT: Wikipedia has a list of Swedish Jews[0], but Helle Klein, for instance, is not on that list. She does have a Wikipedia article and it clearly has her on a different list of Jews.[2] In fact, Wikipedia has a list of lists of lists of Jews.[3] Wikipedia probably gets zero flak over this fact, because there is zero neo-nazi rhetoric surrounding the lists.

[0] https://en.wikipedia.org/wiki/List_of_Swedish_Jews

[1] https://en.wikipedia.org/wiki/History_of_the_Jews_in_Sweden

[2] https://en.wikipedia.org/wiki/Helle_Klein

[3] https://en.wikipedia.org/wiki/Lists_of_Jews

scrupulusalbion··on With Windows 10, Microsoft Disregards User Choice and Privacy
Honestly, having two computers has been the only way I can sanely function at work. We have to use Windows for at least one application. My solution has been to setup a second desktop (these are small towers), install Linux on it, and remote into the Windows from the Linux machine. Oddly enough, I can actually play some video games on the Windows machine through that remote session.

We replace computers two to three times per year; I get to pick from generally four-year old computers. I assume that a second computer is not an option for most at work.

scrupulusalbion··on “It's The Future”
Virtues are generally disregarded by those who seek instant gratification.

Most of the times that I bring up the concept of virtue to my peers in age they seem either confused with the concept or contemptuous of it. They behave like virtue is a purely religious thing, yet caution in the face of possible danger is a very basic survival skill.

scrupulusalbion··on My condolences, you’re now the maintainer of a popular open source project
> users are treated as both beta-testers and maintainters, and are expected to find and fix bugs themselves.

FWIW, this is probably both an historical attitude and a population difference. If you and a colleague at a university just made csh to get your jobs done, then you will help each other out by doing the development. Because ya'll are also the entire userbase, then you are also the beta-testers. Back then, if you used a computer, it was because you were either developing software or entering data for a developer. Not very many non-developer users touched computers until the 80s; most people developed some kind of software, even if it was trivial BASIC programs on a Commodore.

In the OSS world, you have always been expected to contribute fixes to bugs that affected you, because the tools and source code were in your hands. For most non-developers, there exists only a lack of skill to stop them from fixing bugs or at least filing usable bug reports.

Nowadays, there are much more users who cannot or do not submit bug reports, let alone develop software. Nevertheless, the attitude since the days of csh has not changed much, because not a generation has passed since OSS went somewhat mainstream (e.g. in the data center).

Whether OSS will leave behind the historical attitude that users should be able to understand the software they use (this seems a responsible attitude to me) remains to be seen. Regardless, the developer-base will likely continue to proportionally shrink and users will proportionally become less able to understand their computers.

scrupulusalbion··on Intel x86s hide another CPU that can take over your machine
> Recent Intel x86 processors implement a secret, powerful control mechanism...

Recent is overflowingly unhelpful, considering AMT (a part of IME) popped up in ICH7 back in mid-2005 [0]. It is unfortunate that Doctorow is associated with this rubbish journalism.

For what its worth, anything that has DMA can takeover a CPU that is reading instructions from RAM. AMT/IME are just explicitly intended to do that.

For those concerned, and probably rightly so, about AMT/IME, the simplest solution is to use a non-Intel NIC [1]

[0] = https://en.wikipedia.org/wiki/I/O_Controller_Hub#ICH7

[1] = https://software.intel.com/en-us/articles/intel-vpro-technol... ["Intel Active Management Technology communicates only through the onboard network interface of Intel vPro technology. Additional wired network interface cards are not supported and are ignored by Intel AMT."]

scrupulusalbion··on Serverless Architectures
I think the word serverless is being used from the perspective of whether you have to maintain it yourself. Its just outsourcing, but that is a bad word so let's make a better trendy word.

Things like Bitcoin and Bittorrent would better fit the word serverless. However, you need servers of a sort for Bitcoin to work (e.g. you need nodes and miners) and you need an initial seeder for each torrent to get going.

Since serverless seems to be mostly about a class of applications, I think only those that function either without network access or without contacting any specific organizations computers (i.e. servers) would qualify. This would make my browser fundamentally serverless, since I can browse files locally. Suddenly my browser seems like a glorified file viewer and One Note is rsync with an editor attached.

scrupulusalbion··on Appeals court upholds FCC's net neutrality order
> Meanwhile, public utility water outclasses bottled,

Bottled water is often just tap water.

Flint Michigan has undrinkable water as a result of decades of mismanagement from the entrenched local politicians.

The water in my city makes me nauseous to drink, so I have to buy distilled in gallon or larger containers. It is fortunate that most of my water usage is showering.

Ah, but these are anecdotes.

> Americans have been working together to foster functioning and great societies through government for ages now. It's you that wants to test this brave new world.

The victims of the Drug War (primarily poor and minorities) must live ruined lives from this "functioning and great [society] through government for ages now."

They are just anecdotes.

World-class government sucks.

scrupulusalbion··on Steps to Turn Off the Nagging Self-Doubt in Your Head
Are you sure that this is an America/California/Silicon-Valley feature? That your own internal critical voice arose as a result of growing up with your father (a German) seems to indicate that you got it from either having an immigrant parent, a German/European parent, or a parent who was just a negative nancy. I don't mean to be critical of you or your father; I mean to point out that the criticism=>negativity idea doesn't seem to be a strictly American thing.

> I think it leads to a 'shotgun approach' where if enough people "try try try" then yes some do succeed spectacularly while everyone else around them crashes and burns.

This reminds me of the Orks in Warhammer 40k, wherein the sheer psychic power of an Ork can make a war machine function; the machine would collapse if a non-Ork attempted to operate it.

I think the negativity about / criticism of oneself and one's identity (e.g. the self-effacing comic) is unique to Western civilization. Do people outside the West (e.g. Africa, Middle East, Asia, and perhaps South America) view themselves as backwards for how their lives work? Plenty of people, whether on the right or left, are critical of Western policies, especially regarding military and economic campaign in non-Western countries.

I am genuinely curious if people in non-Western countries see themselves as Westerners do (e.g. more bad than good).

scrupulusalbion··on Open-source geo is really something right now
This would mean that a floppy disc (hardware) and the filesystem used to arrange the bits thereon (software) are each a database. How is breaking down the distinction between database, filesystem, and storage medium helpful?
scrupulusalbion··on Intel and ME, and why we should get rid of ME
TL;DR: Build yourself a desktop with a non-vPro CPU and a non-Intel NIC. Check [0] for a list of such CPUs.

The usual recommendation is to either get a pre-2009 AMD machine (which is what my present desktop is) or get a Sparc machine. My boss won't buy me a desktop with an UltraSparc CPU, so I won't bother with that. AMD has substantially less documentation than Intel, AFAICT, so Intel products deserve investigation for their relative starkness.

An albeit outdate list of systems to avoid, see [1].

I will assume that you are trying to build a desktop from off-the-shelf parts.

For sure, get a CPU without vPro, since that downgrades the type of AMT/IME feature set to Standard Manageability:

"Please note that NON -vPro™ Intel® desktop procesors will make Intel® ME FW to switch its features set from full Intel® Active Management Technology to Intel® Standard Manageability that do not suport Intel® AMT KVM Redirection feature (it is disabled internally in the Intel® ME FW)." [2] When the CPU doesn't support AMT, then Standard Manageability is what is running in the background.

This says 2 things: (1) non-vPro desktop CPUs downgrade AMT to Standard Manageability and (2) IME is active regardless of the CPU's feature set.

What is Intel Standard Manageability? "Q8: What is Intel® Standard Manageability and can it run on a non-Intel® vPro™ technology-based CPU? A8: Some basic management capabilities are available on non-Intel® vPro™ technology-eligible Intel® Core™2 processors as well as Intel® Pentium® dual-core and Intel® Celeron® processor-based CPUs. Intel® Standard Manageability is available only on desktop systems right now (not notebook), and only includes basic capabilities such as hardware and software inventory and remote diagnostics." [3]

I can't tell if Standard Manageability is a lite version of AMT. Intel's documentation on it [4] isn't a whole lot of help.

Intel mentions that Atom and i3 platforms generally do not support AMT. [5]

At the bottom of this [6] page lists those Intel chipsets with IME. I'd consider that to be a list of chipsets to avoid, but those cover almost all modern chipsets, AFAIK.

For sure, don't use any Intel NICs: "Adding another NIC will not nullify Intel® vPro™ technology verification, but Intel® Active Management Technology communicates only through the onboard network interface of Intel vPro technology, and it is strongly recommended that an additional wired NIC is not added to the platform as this might cause some of the features of Intel AMT to not operate as expected." [7]

[0] = http://ark.intel.com/search/advanced?s=t&VProTechnology=fals...

[1] = https://communities.intel.com/docs/DOC-2033

[2] = https://communities.intel.com/thread/65350

[3] = https://software.intel.com/en-us/articles/intel-vpro-technol...

[4] = https://software.intel.com/en-us/blogs/2009/03/27/what-is-st...

[5] = http://www.intel.com/content/dam/www/public/us/en/include/re...

[6] = https://www.kernel.org/doc/Documentation/misc-devices/mei/me...

[7] = https://software.intel.com/en-us/articles/intel-vpro-technol...

scrupulusalbion··on Universal cancer vaccine claim
I presume this [0] is the referenced paper.

[0] = http://www.nature.com/nature/journal/v520/n7549/abs/nature14...

scrupulusalbion··on Why did ArchLinux embrace Systemd?
Its nice to see this sort of explanation. I just wish this had come out earlier, like when Arch was in the process of switching over to Systemd.

>Lack of confiurability. It was impossible to change the behaviour of initscripts in a way that would survive system updates.

I wonder how often updates (dist-upgrades or package updates?) actually break initscripts. Further, would it make a system no longer boot fully (e.g. to the GUI login prompt)?

scrupulusalbion··on Putting Love to the Stress Test
>we just downloaded a spreadsheet with X questions

If you don't mind me asking, from where did you get this spreadsheet?

scrupulusalbion··on Bash on Ubuntu on Windows
Did they even have any sort of filter? If they at least blacklisted these words [0], then that seems like a reasonable enough effort on its own. However, these developers would have had to be living in a bubble to not know about trolls from 4chan.

All in all, this is a lesson that some high-profile person/group eventually had to learn on our behalf. Now, when an unknowing manager asks why your chat bot needs to avoid certain offensive phrases because, "our clientele aren't a bunch of racists", you can just point him to this story. The actual racists are tame by comparison to what trolls will do to your software.

[0] = https://github.com/shutterstock/List-of-Dirty-Naughty-Obscen...

scrupulusalbion··on In the Future, We Will Photograph Everything and Look at Nothing
I thinks its important whether they are taking pictures of people in those situations. Tourist locations get plenty of photographs, but the people doing the visiting are properly the object of photography. I don't care about yet another picture of the Eiffel tower; a picture of someone standing before the Eiffel tower is much more interesting.
scrupulusalbion··on Mutt 1.6
> The unix principle works quite well for stuff like grep/find/awk but there is just now way you could make GIMP follow the unix principle.

It seems that the unix principle is most relevant when compiling a C program takes too long and no interpreters exist that are fast enough. So, you figure out all the higher level functionality that you will need for system administration and compile that long before needing to do any sysadmin work. When a problem arises on a system, you can write a shell script that uses those already compiled commands, instead of writing a C program and waiting for it to compile. If your initial code sucks, you don't have to debug and recompile; you just debug and re-run the script.

Compiling C programs is now substantially less time consuming, so you could use C for sysadmin work (shudder). C shell was perhaps a similar attempt to get the benefits of C, but without the downside of compilation times. I seem to recall some essay on the harmfulness of using csh, so C will continue to keep its place.

scrupulusalbion··on The Tools of a Blind Programmer
> depending on the language itself

Are there any languages or language families that you find easier to use? (inb4 COBOL is the easiest)

scrupulusalbion··on Google's Nest is disabling some of its customers' old smart-home devices
Perhaps a hybrid business model could be achieved by setting the hardware to talk to a central server of the user's choice. The server software would be open source and be manageable via a web interface, which is mobile-friendly. The company would simultaneously offer a cloud-based alternative for a monthly fee, so that the user could avoid having to setup his/her own server. As a third option, each device could be managed individually; this is likely most appropriate if the user only has a single device.

So long as the company does not go rogue and purposefully brick the devices, then the company could shutdown and the devices could still be usable. Further, other companies could provide remote management services for these devices. Being IoT devices, though, would make them still susceptible to security issues, but at least being able to use them on a segregated network could limit that from happening.

scrupulusalbion··on The Tampon of the Future
Do these toilets seriously not function without internet access? I guess I could see the toilet being essentially a sensor array with some networking hardware; the decision-making about your fecal content would then be done in a datacenter.

As long as the stupid thing still flushes without internet access; I have never been more concerned about an IoT version of an existing appliance not doing its job. That is, I could stand an oven or blender not functioning; a toilet simply must work or the bathroom itself becomes nigh useless. "Honey, our toilet won't flush; are we still being DDoSed?"

Page 1 of 3Next →