pdkl95

Joined 13 years ago

Karma
17,069
Submissions
3,692
Member since
Aug 10
"PDKL 95"

1. (noun) - The drug used by the Superbrights as a means of forwarding Cataclyst[1] ideology. At high doses, the drug erases all sense of "self", but can be used at low doses to force a change in perspective by violently disrupting the mind's established, "normal" way of interpreting reality.

2. (noun) - The most efficient (and dangerously destructive) means of breaking out an established paradigm, into a different Prigoginic[2] Level of Complexity.

3. (name) - The internet alias of an insane nerd in the San Francisco Bay Area. A UNIX and Free Software advocate, who has been programming from a very young age. Expect a strange mix of very-traditional UNIX philosophy and technique, mixed with seemingly random or surreal tangents.

[1] http://en.wikipedia.org/wiki/Schismatrix#Ideologies

[2] http://en.wikipedia.org/wiki/Ilya_Prigogine

View on Hacker News

Recent submissions

Comment · 4 years ago
> a crappy but cost-effective approach with a high margin of error may rise to prominence.

The tech startup that eventually creates that will call this "efficiency". This type of 'solution' is exactly what capitalism creates.

> I would love to have a real-time dashboard/HUD with measures of disorganized speech patterns or affective intensity

> It would be hard to make it not distracting

Not only would it be distracting, it could also bias you in unexpected ways.

> I would love to have a real-time dashboard/HUD with measures of disorganized speech patterns or affective intensity,

I already don't trust a lot of the mental health industry because of the very bad experiences[1] I've had in the past. The easiest/fastest way to guarantee I never visit a psychiatrist again is to start using that kind of "AI" tech without first showing me the source code. "Magic" hidden algorithms are already a problem in other medical situations like pacemakers[2] and CPAP[3] devices.

> make up for the trade-off of not being in the room

Maybe what you need isn't some sort of "AI" or other tech buzzword. It sounds like you need better communication technology that doesn't lose as much information.

--

On the more general topic of "AI in psychiatry", I strongly encourage you to play the visual novel Eliza[4] by Zachtronics. It's about your fear of a cheap, high error rate system with an additional twist: the same system also optimizes your role into a "gig economy" job.

[1] a brief description of one of those experiences: https://news.ycombinator.com/item?id=26035775

[2] https://www.youtube.com/watch?v=k2FNqXhr4c8

[3] https://www.vice.com/en/article/xwjd4w/im-possibly-alive-bec...

[4] https://www.zachtronics.com/eliza/

Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
> The problem is that the people using said libraries don't know what they're doing.

I would like to suggest that the problem is that the skilled people that understand how to write crypto systems are providing libraries that are easy to misuse. Instead of providing a library that is likely to be used incorrectly without a lot of specialized knowledge, provide infrastructure that manages the crypto so the average developer doesn't need to become an expert on crypto systems.

HTTPS is a useful example. Instead of providing webapp authors a library of cypher/hash functions and warning that they shouldn't roll their own transport layer security and then acting shocked when those authors try to use that library and make a lot of mistakes, we instead separate the crypto step into a separate layer of infrastructure so the average webapp author can easily use crypto without having to learn a lot of specialized knowledge. Someone writing a Ruby on Rails app shouldn't have to write functions like pervade_encrypt($data)/pervade_decrypt($data) to move out of the plaintext world of HTTP and utilize encrypted transport. They only need to buy/LetsEncrypt a cert they can install in their webserver. They can even delegate that to their hosting provider.

"If it's possible for a human to hit the wrong button and [cause a catastrophic failure] by accident [or inexperience], then maybe the problem isn't with the human - it's with that button. [...] People make mistakes, and all of our systems need to be designed to be ready for that."

>> Tom Scott, https://www.youtube.com/watch?v=dabnx8VSdkE

Comment · 4 years ago
Comment · 4 years ago
> is relatively high entropy at <= 13-bits

That is only true if-and-only-if we pretend those 13 bits are the only identifying information being sent to Google when requesting a font. The HTTP request is almost certainly being sent to Google wrapped inside an IP protocol packet. For most[1] requests, there are at least 24 additional bits (why 24? see: [3]) of very-identifying data in the IPv4 Source Address field. More fingerprinting can be probably done on other protocol fields, and IPv6 obviously adds an additional 96 bits. Yes, IP addresses are not unique, but ~13 bits is easily sufficient to disambiguate most hosts on a private network behind a typical NAT. Correlating the tuple {IPv4 Src Addr, x-client-data} received on a font request is trivial: it only requires a user to login to any Google webpage that includes a font request.

>> re: your [1]

    A given Chrome installation may be participating in a number
    of different variations (for different features) at the
    same time. These fall into two categories:

       Low entropy variations, which are randomized based
         on a number from 0 to 7999 (13 bits) that's randomly
         generated by each Chrome installation on the first run.

       High entropy variations, which are randomized using
         the usage statistics token for Chrome installations
         that have usage statistics reporting enabled.
How many users have 'usage statistics reporting' enabled, and are there for a "High entropy variation"? Is it enabled by default and thus will only be disabled by the minority of people that know how to opt-out?

[1] Google reports[2] they currently see about a 60%/40% ratio of IPv4/IPv6.

[2] https://www.google.com/intl/en/ipv6/statistics.html

[3] my previous posts on this topic - re: x-client-data https://news.ycombinator.com/item?id=23562285 re: 24-bits-per-IPv4 https://news.ycombinator.com/item?id=15167059

Comment · 4 years ago
Comment · 4 years ago
Comment · 4 years ago
Sci-fi is often a metaphorical representation of society. However, it's shocking how many episodes of Max Headroom have become literally true.
Comment · 4 years ago
> I could not enter my own apartment because my phone was dead

Whenever I hear about "smart" devices as a replacement for something that is safety/security critical (like a lock), the question of what happens when the internet and/or power fails is rarely even considered. Does the lock fail open or closed? Does the door open if there is a fire in the building that damages the internet/power wiring? If it fails open, does that mean someone can bypass the lock by simply cutting the network/power cables outside the building?

There might be reasonable answers to these questions at a large business building that can afford fallback options, but I'm not sure there are good answers for e.g. residential situations.

Comment · 4 years ago
Comment · 4 years ago
While other comments have discussed the technical utility of symbols, I believe symbols can also be seen as useful syntactic sugar that helps communicate intent. Strings used for indexes. named args, and other structural purposes can be represented in a way that is visually distinct from strings used as text.

The technical benefits are nice, but this type of ergonomic feature is why ruby has remained my favorite language for over a decade.

Comment · 4 years ago
Comment · 4 years ago
Using language like "fire fast" might presuppose a situation where someone is going to be "hired" - possibly involving a lot of work, life changes, and moving/other expenses - only to have their effort/money wasted when they are "fired fast".

What if instead of "fire fast", the idea was re-framed/restructured into the new employee initially working as some sort of consultant with a short term contract? Use telecommuting/work-from-home or other temporary workarounds to defer expensive/disruptive things like moving to live near the company until after the defined "trial" period. Instead of "firing fast", you either let the temporary consulting contract expire or you proceed with the actual hiring process and the deferred tasks.

Maybe this isn't possible in practice, but it seems like we could design a workaround to this problem if were sufficiently creative.

> think about the effects it has on others

Unfortunately, that takes proactive effort. Unless there is a mechanism to actively incentivize spending time and energy to protect others, most of the time that effort will be spent on "more important" things. ~sigh~

Comment · 4 years ago
http://www.ranum.com/security/computer_security/editorials/d...

"The Six Dumbest Ideas in Computer Security"

> #1) Default Permit

> #2) Enumerating Badness

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton