HNHacker News
TopNewBestAskShowJobs

supriyo-biswas

5,535 karma · joined December 10, 2022

Opinions expressed are in a personal capacity and not supported or shared by my past or current employer(s).

Email: raptors_03pout@icloud.com

submissionscomments
supriyo-biswas··on (Artificial) Intelligence as a political construct
(The original title is "Toolmen", but it is quite nondescript as-is, which is why I submitted it with the above title.)
supriyo-biswas··on I have never seen a game fail because the artists were too slow
> hypocrisy

I've seen a lot of people trying to extract some form of arbitrage while AI is still new; they maintain that their mode of value generation is primarily of human origin, but all they can do is to write the most generic documents using AI and pass along AI output in chats without actually bothering to think about what was actually asked of them.

supriyo-biswas··on Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller
What I meant is that I'd find some way of ensuring that I'd want to ensure that the responses you're serving up are real. If you are happy with what you have, we're good.
supriyo-biswas··on Apple’s grey list: Words and phrases your iPhone won’t help you spell
Any company that is concerned about their PR image has to do some filtering of this sort, otherwise they get hit pieces like [1][2] though in both cases, it was (aggregate) human behaviour that was beneath said issue.

[1] https://www.wired.com/story/google-autocomplete-vile-suggest...

[2] https://en.wikipedia.org/wiki/Tay_(chatbot)

supriyo-biswas··on Show HN: Coldframe, a honeypot that poses as a supermarket fridge controller
I would be very skeptical of anyone relying on Shodan data. At one point I was trying to write honeypots myself by replicating wifi cameras, but almost all the ones on the internet I found were honeypots of some sort, and the ones that weren't were already hacked and had their web pages replaced. In retrospect it would have probably been better to get a vulnerable device myself and probe it.

If I were you, I would probably ensure that the fridges you used have residential or commercial (aka non-DC) IP addresses. Maybe Shodan uses this data for their "honeypot" label, my experience was some time ago so no idea though.

supriyo-biswas··on MS Paint Remote Code Execution Vulnerability
For some reason, I had the same idea.
supriyo-biswas··on OccupySaaS
Given how many FOSS alternatives exist, I'd hope that such projects could turn their attention towards the AI models themselves, creating an open-weights model from an existing proprietary model, or somesuch.

Unfortunately, that won't be a low effort thing where you can burn $100 to create an imitation of something, so all we get is vibe-coded Photoshop clones...

supriyo-biswas··on Cloudflare Turnstile solver library (no headless browser required)
I'm a little surprised that I didn't find any TLS cipher ordering in this project, which I'm sure is something that CF uses as a line of defense.
supriyo-biswas··on We should be more ambitious with the software we build
> power trip they get from making people waste time on crap that has no relevance to the user.

In my experience, this has been senior engineering leaders and project managers more than anything.

supriyo-biswas··on Sam Altman: 'I No Longer Think We're Gonna Be Able to Just Patch All the Bugs'
The more likely thing is that we'll see people use the sandboxing and security tools that people already have. After all, it's quite easy to get LLMs to write a seccomp profile, a Kubernetes manifest, or a systemd unit with the minimum required privileges and permissions, and for insecure C code, we'd probably see mainstream use of Fil-C and similar.
supriyo-biswas··on 3rd Yandex Cloud Data Center Was Hit
Should likely share https://status.yandex.cloud/en/timeline as well, though it only shows two of them being hit, not three.
supriyo-biswas··on Veda: The First Agentic Hobby Operating System
I hope this "custom OS" isn't actually just a Linux port made via burning tokens: https://github.com/vahmoh25/Veda/commit/982835336fedc0f25427...
supriyo-biswas··on Salesforce Global Outage
> What I mean by this is a CDN consists of nodes that are horizontally replicable and don't really talk to each other, and thus are easy to run even at scale.

They do though! They mostly try to avoid it since hitting the network to serve any kind of latency would unacceptably increase latency, but you wildly underestimated the amount of complexity there is to running a CDN.

supriyo-biswas··on Homebrew 7.0.0
I've used MacPorts on macOS versions that don't support the latest OS, which per homebrew policy seems to be versions upto N-2.

Apart from the issue of having to compile the downloaded software leading to spinning fans, I'm not too concerned.

supriyo-biswas··on Navier-Stokes – Tristan Buckmaster [pdf]
This article should really be renamed to "Allegations of dishonesty against OpenAI in proving Navier-Stokes blowup".
supriyo-biswas··on GamersNexus and LG: Or why rooting your TV is a bad idea
They do show using https://github.com/raws0kil/jsbro-autoroot to get root access. For anyone interested, that pointer is enough, I guess.
supriyo-biswas··on A/I shuts down
When a post receive a number of flags and downvotes higher than some configured threshold, they're marked as "[dead]".
supriyo-biswas··on Your intellectual fly is open (2025)
> If LLMs get better at writing—which I think is extremely likely—will you switch positions and say that now using LLMs without disclosure is A-OK?

If LLM writing improves to the point where they can infer the business (or other real world) context and serves the functional purpose of informing others as opposed to being an intellectually lazy piece being produced only for the purpose of being produced, then I’d be fine. It’s likely the author would need to spend some effort on the said piece of writing, regardless of how good the LLMs get good at writing.

supriyo-biswas··on Discovery of a new OpenAI agent message board
This is a marketing exercise, nothing more.

The thing that gives it all away is that they claim that the IP addresses are from Azure, and then proceeded to redact the IP addresses, as if they belong to individual users. It's laughable.

The IP addresses are the most interesting part of this experiment, as it would have provided researchers a way to understand the distribution of IP addresses used for the spam operation within the ASN.

supriyo-biswas··on Discovery of a new OpenAI agent message board
Running a public service myself, it gives me a (albeit tiny*) bit of joy that posting of excessive links is still a thing I can look for and block.

* Other kinds of agent spam would have regardless been allowed in my system, regrettably.

supriyo-biswas··on Xanadu was waiting for agents
I regret to say that this is well polished slop, but ultimately slop at the end of the day.

It seems that the user wanted to say something like "DeltaDB is a DAG" and then replaced the DAG part with some obscure graph-based project that the LLM had suggested, but otherwise has no connection to agentic development.

supriyo-biswas··on OpenAI's new reasoning technique alarms AI safety experts
Is there a more technical source that tells what is being done? I assume it's about reasoning in latent space e.g. the coconut paper[1]?

I disagree with the "experts" there, as if latent-space reasoning will only cause proper interpretability research rather than taking the CoT as gospel[2].

Give me that any day over the constant "you will be abolished to the permanent underclass!" talk coming from billionaires.

Edit: (A better discussion is apparently here[3])

[1] https://arxiv.org/pdf/2412.06769

[2] https://thezvi.substack.com/p/the-most-forbidden-technique

[3] https://news.ycombinator.com/item?id=49553321

supriyo-biswas··on Three sites made 215,128 “best software” pages for AI. Perplexity cites them
The other day, I remember an article was posted to HN about something, but it came from a company that provides SEO services to companies by doing something like this:

1. For a given company, analyze their target audiences and the questions they are likely to ask LLMs about.

2. For each such question, ask it to each of the major LLMs, and compute the KL divergence between the pages they want to rank for the question vs. the LLM's response.

3. Rewrite the article to minimize said KL divergence.

In effect, they're performing an iterative optimization of some sort that moves the embedding space of their article closer to the question asked to the LLM, and any embedding model or generated responses are going to prefer said responses over others.

I believe we will keep seeing more of this stuff.

supriyo-biswas··on Apple caught off guard by AI demand for Mac Mini and Mac Studio
https://www.astralcodexten.com/p/if-its-worth-your-time-to-l... elucidates this argument very clearly:

> People don’t like nitpickers. “He literally did the WELL AKTUALLY!” If you say Joe Criminal committed ten murders and five rapes, and I object that it was actually only six murders and two rapes, then why am I “defending” Joe Criminal?

> Because if it’s worth your time to lie, it’s worth my time to correct it.

> If one side lies to make all of their arguments sound 5% stronger, then over long enough it adds up. Unless they want to be left behind, the other side has to make all of their arguments 5% stronger too. Then there’s a new baseline - why not 10%? Why not 20%? This mechanism might sound theoretical when I describe it this way, but go to any space where corrections are discouraged, and you will see exactly this.

supriyo-biswas··on Creepy Crawlies
This was done in the past[1] and was widely regarded as a "cryptojacking" scheme serving "malicious" content to users.

[1] https://krebsonsecurity.com/2018/03/who-and-what-is-coinhive...

supriyo-biswas··on Creepy Crawlies
GP is probably running in lockdown mode.
supriyo-biswas··on Omarchy: Any User Process Can Escalate to Root
> As a developer who mostly wants a Mac-like Linux distro without the associated noise

I'm required to use Ubuntu at work. Coming from Mac, apart from the menu bar at the top, on Gnome, I've been able to customize the keyboard shortcuts, remap the keyboard so that Ctrl works like Cmd, and use extensions like Dash to Dock[1] and themes like Whitesur[2] to replicate something that almost works like a Mac.

The keyboard remapping and customizing keyboard shortcuts were all done within default the default settings app.

The only things missing are some keyboard shortcuts like Ctrl+A/V to move to the beginning and end, and the Ctrl+Shift+C/V behavior on the terminal instead of Cmd+C, which I've just worked around by using VSCode's terminal and configuring it to copy when I press Ctrl+C with some text selected.

[1] https://extensions.gnome.org/extension/307/dash-to-dock/

[2] https://github.com/vinceliuice/WhiteSur-icon-theme

supriyo-biswas··on Just the rumour of a bug is enough to find an exploit these days
You haven't worked at conservative software shops I guess. The last place I worked at had this huge song and dance with you trying to raise a PR that looked irrelevant to the task at hand would lead to meeting with your lead dev, your manager and your skip level as you tried to explain why the bug needs fixing...

The worst one was where I fixed a datetime bug and although it had been sending out false alerts, I was asked to dry run the 5 lines of code I changed, like a coding interview. In all this pressure I forgot what the code was meant to do, and was dismissed and asked to set up another meeting with an explanation of all the various cases that could happen...

supriyo-biswas··on AWS Acquires DuckLabs
They should really call it "data-structures as a service" rather than a database, really. Programming against it always reminds me of Leetcode problems, having to define your columns in a way to suit the very specific lookup patterns that they allow for.
supriyo-biswas··on MS Paint and Photos inivisibly watermark even locally generated output with GUID
I don't know why you'd choose one of the smaller OSes, I'm required to use Ubuntu at work and it just works fine for me, every day.

It's also a bit rich especially to complain when Microsoft also suffers from forced autoupdates and the like.

Page 1 of 34Next →