Kiboneu

Joined 12 years ago

Karma
501
Submissions
200
Member since
Jul 11
https://kibotronics.net/lists/

[email protected]

Verify my pubkey in the 'contacts' page, it should have this fingerprint: 2721 8B2C 48A9 C983 4E43 EDC7 76F4 9827 1FEF 7144

View on Hacker News

Recent submissions

Comment · 2 days ago
Good idea, I will stop having fun this instant.
Comment · 2 days ago
See the last paragraph of my comment.
Comment · 3 days ago
If you want to do a version of this yourself quickly --

Install Luanti with Minetest (open source minecraft), and instruct your agent to write a mod that gives it network access to the game's Lua interpreter. The agent can then do anything from modifying the world state directly to controlling NPCs.

I had it build giant bases similar to black mesa in half life with power distribution mods. It would write solvers to optimally place the power cables / repeaters in accordance to the spacial dimensions of the rooms that it would build (lol). I guess this is how I discovered vibe gaming.

I suppose you can have multiple agents interact with each other through that, provided an adapter to proxy agent player navigation and perception to get real information asymmetry between them. Or just emulate / hook the client and do away without a remote Lua mod entirely.

Comment · 15 days ago
Comment · 25 days ago
Comment · 2 months ago
Just wrap it in wireguard. WG won't respond to any incoming handshake without a valid and authorized client key, it's essentially invisible.
Comment · 3 months ago
This is one of the laziest false comments that I have ever read.
Comment · 3 months ago
See also: a "font" that only people high on drugs can read!

https://qri.org/blog/psycrypto-contest

https://www.youtube.com/watch?v=oD4nV0CMkBI

Of course, the psychedelic hidden message is reversible with some video processing techniques for everyone else to see. And calling it cryptography is a mis-use of the term. Still an interesting use of the effect.

I don't think "ghost font" will work as well as the author claims.

Comment · 4 months ago
> WASM has strong tried and proven sandboxing. We basically can build on nearly 30 years of experience. The decoders don't need a lot of access, they can basically be pure functions.

I've heard that kind of sentiment many times before. It's not a good (thought-terminating) mindset to have for any secure software.

There are several WASM implementations, WASM is just a format. "Pure functions" are pure at a superficial level. Many people say that they don't mutate global state, but they do ... it's just hidden. The decoders "not needing a lot of access" doesn't matter if the WASM engine is pwned through arbitrary code execution inside the environment, or if it's contorted to bypass the access control you are mentioning through various side-effects.

Comment · 5 months ago
> The conclusion I’m currently at is that I don’t know and probably can’t ever know.

I think about this quote often, straight from Data's voice module in another episode:

'The most elementary and valuable statement in science, the beginning of wisdom, is, "I do not know".'

Comment · 5 months ago
Ah yes, the TSA of the internet.
Comment · 5 months ago
In other words, Cloudflare requires you to substantially increase your browser’s attack surface in order to visit websites.
Comment · 5 months ago
> "Blue pill" attacks on Vista and Xen [...] Her work demonstrated that hardware virtualization is not in fact the security panacea we wish it was, but that it too is vulnerable to attack just like any other layer of the stack.

Blue-pilling is a method for malware to hide from the OS by virtualizing it, not an attack on VMs. That's why it's called "blue pilling". I do agree though that VMs are not airtight and VM escapes have been demonstrated.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton