rocqua

Joined 10 years ago

Karma
9,897
Submissions
4,607
Member since
Jun 25
[ my public key: https://keybase.io/rocqua; my proof: https://keybase.io/rocqua/sigs/AD9P-qxDGGDOohLYLbex3ZY3mUsdH4wAEMxYDgnxXAE ]

Currently working for TNO in the department Cyber Security and Robustness.

View on Hacker News

Recent submissions

Comment · 1 day ago
Except that plenty of exchanges can also blacklist a wallet, and then block transactions that include funds that (indirectly) come from those blacklisted wallets.
Comment · 1 day ago
Frozen funds remain frozen, until they are unfrozen.

So mechanically Tether pockets the difference, unless they unfreeze. But as a matter of accounting, because of the unfreeze capability, the liabilities of the frozen Tether stay on the books. So they can't just spend the money. It also makes it hard for Tether to compensate the victims from the frozen funds.

The alternative would be to let Tether burn funds, but that is highly problematic for well intentioned users. Because a freeze can be challenged in court and reversed. A burn cannot.

Comment · 1 day ago
Russia uses crypto for sanctions evasion and money laundering. They also indirectly profit of it from their domestic ransomware operators using crypto. But Russia does not gather state funds through hacking. That is pretty much uniquely a North Korean thing.
Comment · 1 day ago
Did you do the bankruptcy proceedings? They payed out quite well.

Turns out there was decent money to be made in having your MtGox Bitcoin stolen.

Comment · 3 days ago
An interesting part of this is actually in defeating secure-boot or bitlocker. If a device is misconfigured for PXE boot with an otherwise locked down UEFI system, and strong secure boot. This could let you break the boot-chain and then disable secure-boot or extract keys from a TPM.

The main question here is how often devices you'd want to try this against have PXE boot enabled. I'm thinking of locked down laptops mostly. Either corporate laptops, or manufacturer locked-down devices (chromebooks, I think some microsoft surfaces).

Comment · 3 days ago
Even if there is a passphrase, this would likely allow for brute-forcing it.
Comment · 3 days ago
If you want to filter this, you should probably do that at the network level, not the host level. Ideally at switches, otherwise with firewalls.
Comment · 4 days ago
It's not the type of problem where a useful solution can be verified in Lean. Which makes LLMs a lot less good at solving that type of problem.
Comment · 7 days ago
I think the implication is heavy distillation.
Comment · 8 days ago
only if you tell it to be controversial.
Comment · 10 days ago
In practice we have Certificate Transparency Logs that let us check whether a CA has issued a certificate for a domain you control without you asking them to.

This really reduces how much we need to trust the CAs, because we can detect any untrustworthy actions after the fact. Now detecting after it happened is too late. But it does mean that mistakes or malicious actions are much more expensive to a CA. In practice this has really reduced the risk, especially to those whom aren't interesting enough to burn a valuable capacity on. Which is the vast majority of people. Though perhaps if you count TLS traffic weighted by importance that count is different.

Comment · 16 days ago
The thesis behind private equity is: people from finance can run small business better and more efficiently than small businesses owners.

A small part of that is more efficient administration. But the bulk of it is squeezing the customers harder, and squeezing the business for credit. Sometimes combined with a sector roll-up causing a monopoly.

Trust busting would help a little. But a lot of the pain comes from the squeezing of customers. And that’s much harder to fight back on, other than avoiding private equity.

Comment · 19 days ago
These runs are very likely also going to be a part of Reinforcement Learning and internal distillation no? As well as being analysed for what reasoning directions worked well, and which directions did not work well.

The mathematical results are valuable as PR, but the real value might be in the improvement this can bring to other training runs.

Comment · 27 days ago
It’s not ‘spare goes to training’. These data centres are training first. Inference is really rather efficient, so not why datacenters are so big.
Comment · 27 days ago
I think it’s just that the dangerous jobs are avoided y those who can avoid them. So they are left to those who have little choice, which depresses wages. This is rather immoral, but Covid made quite clear that the essential jobs weren’t the high-status or high-paying ones.

I find this worrying because the entire economy is built on the idea of cheap physical snd cheap unskilled labor. So if we do a good job educating, we’ll need to fill these jobs by paying more rather than preying on the desperate. And I don’t see the current world being willing to pay more.

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton