cperciva

Joined 19 years ago

Karma
64,493
Submissions
8,698
Member since
Jun 21
Founder of tarsnap: http://www.tarsnap.com/

Email: <me>@tarsnap.com

Twitter: @<me>

View on Hacker News

Recent submissions

Comment · 1 hour ago
anyone making below $1,799/mo, with no asset test

Is that how it worked in 2005?

Comment · 3 hours ago
Does "opening a malicious web site in Chrome" count as "controlled conditions"?
Comment · 3 hours ago
By revealed preference, modern academia is about churning incremental papers in order to obtain tenure and research grants.
Comment · 5 hours ago
Linus said some silly things too. Fortunately the security and cryptography community mostly understood.
Comment · 6 hours ago
Comment · 8 days ago
Transmission is privately owned and operated but publicly controlled. Like other natural monopolies, the regulator tells the operator what to provide and how much they get paid for it.

The main reasons for this arrangement are political -- debt stays off the government's balance sheet, and labour disputes aren't "the government's fault".

Comment · 9 days ago
This is exactly how it works. People who are part of the embargo are responsible for making sure that anyone they share information with -- which should usually be nobody! -- are aware of and abide by the embargo.
Comment · 11 days ago
While much cheaper than going to disk, computing k independent hashes per key is still a bit expensive for very high performance systems.

Depends how big the bloom filter is. Most hashes are big and their bits are independent.

Comment · 13 days ago
Right, because there are established standards.
Comment · 13 days ago
AI-enabled hacking

Do people get locked up for fatal traffic accidents? Do doctors get locked up if they prescribe a medicine which leads to a patient's death due to a side effect?

Criminal prosecution, in civilized countries, requires both Actus Reus and Mens Rea. If you deliberately commit computer crime using an AI system, you'll already be prosecuted; the cases we keep hearing about from AI labs have no human intent behind them.

The accepted solution to unintended harms is regulation: We have regulations about automotive safety, we have regulations about pharmaceutical testing and approval, etc.

Comment · 22 days ago
No, CHERI supports sub-object capabilities.
Comment · 27 days ago
And drywallers get no respect.

I find this especially unfortunate given that, in my experience, drywallers understand the rest of the trades far better than vice versa, since they're in the position of being able to see everyone else's completed work.

Comment · 1 month ago
They aren't really separate applications, though. More importantly, that's not the primary effort (and cost) driver for this effort estimation model. I used the COCOMO model, an effort estimation model that was publicly available and widely used at the time. I then applied its rules to the Linux kernel of that time, as best I could.

COCOMO says that the cost scales superlinearly with the number of SLoC; my point is that drivers scale linearly because they're effectively separate projects. (In fact, to the extent that they're not separate projects, the cost in fact scales sublinearly since there's a bunch of code being copied and pasted when new drivers are written.) Your tool has this "--multiproject" concept; a better estimate would have identified which parts of the tree (primarily drivers) were functionally separate from the rest of the kernel.

I think its key point was absolutely correct: it would have cost far more than $50,000 USD to re-develop the Linux kernel of that time.

Oh, absolutely. I'm not disputing the conclusion; just the claim that an OS kernel is inherently more complex than another application of the same size.

Comment · 1 month ago
in fact, operating systems kernels are known to be more difficult to develop than typical applications.

I'm not convinced. The core OS kernel code, sure; but more than half of the Linux kernel is drivers, and those are not just applications but separate applications; a change in an Intel wifi driver is unlikely to interact in any way with the nvme driver.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton