* Posts by Michael Wojcik

12269 publicly visible posts • joined 21 Dec 2007

Apple tells suppliers to use 'Taiwan, China' or 'Chinese Taipei' to appease Beijing

Michael Wojcik Silver badge

Re: Slave labour

Really. "Reintroduction" of slavery? It never went away; we just nationalized it.

Michael Wojcik Silver badge

Re: Red-line

Eh, you know the old saying: Don't ascribe to shilling what can adequately be explained by fanboyism.

DuckDuckGo says Hell, Hell, No to those Microsoft trackers after web revolt

Michael Wojcik Silver badge

Re: Batbing

crosby.bing.com

chandler.bing.com

maraschino.bing.com

bong.bing.com

web.bing.com

absor.bing.com

grab.bing.com

bri.bing.com

Really they had so many better options.

Michael Wojcik Silver badge

Re: Terminology

Yes, and it's a term of art in IT security.

Shall we complain about, say, the use of "facial recognition" rather than "guessing"? We could be here all day.

Too little, too late: Intel's legacy is eroding

Michael Wojcik Silver badge

Ambitious?

Intel's Sapphire Rapids Xeon Scalable processors are without a doubt its most ambitious chips ever

Oh, I think there's some doubt. How is Yet Another x86 Chip more ambitious than, say, Itanium? I'm not claiming Itanium was good, but it was more ambitious than just another generation of the same damn architecture. And the iAPX 432 was significantly more ambitious than Itanium. Even the i860 was probably more ambitious than Sapphire Rapids.

I take your point that Sapphire Rapids is trying to cram a lot of improvements into this x86 generation, but it's still the same old ISA and the new features are known quantities. Sapphire Rapids is Intel playing catch-up, not taking a chance on something new.

UK wants criminal migrants to scan their faces up to five times a day using a watch

Michael Wojcik Silver badge

Re: What has immigration status got to do with criminal punishment?

not sure about that they already made an idiot actor president back in the 80's

Bullshit.

I'm not a fan of Reagan or his policies, but he had been governor of California, among other jobs, before he became president; and his papers provide a huge amount of evidence to show that he was a well-informed policy wonk with a great deal of insight into the functions of government when he was first elected POTUS.

There's little question that he suffered severe cognitive decline over the following eight years, but he was much more than an actor and far from an idiot. The US has had its share of terrible and mediocre presidents. Reagan, whether you like his policies or not, and despite his decline while in office, was not one of them.

Michael Wojcik Silver badge

Re: What has immigration status got to do with criminal punishment?

At least you guys would never make an idiot president because he was funny on a TV show

Damned calumny. Trump was never funny.

Claims of AI sentience branded 'pure clickbait'

Michael Wojcik Silver badge

I don't believe "trick" implies sapience or even agency, much less sentience (which would appear to be utterly irrelevant to tricking). Care to support that claim?

Common usage includes constructions such as optical illusions "tricking" viewers. I don't think anyone's claiming sentience for optical illusions.

Michael Wojcik Silver badge

Re: Monkey See, Monkey Do...

Distinguishing mechanical interlocutors from human ones is how the Turing Test is defined.

Turing's "Computing Machinery and Intelligence" is not a long or difficult piece.

Michael Wojcik Silver badge

Re: Turning tests

The Imitation Game (which is more than simply "talk to the computer") wasn't proposed as a test of sentience. It was proposed as a test of mechanical thinking, which is a different cognitive category.

And its force is not as a practical decision procedure anyway, but as a shot across the bows from the good ship Pragmatism. The question Turing's essay examines is "on what grounds, if any, can we argue that the external attributes of cognition are not sufficient to conclude cognition?".

That said, I agree that people serious about AGI don't think the Imitation Game is a good practical decision procedure. Robert French cataloged a number of objections to that project in a CACM piece years ago, for example.

Michael Wojcik Silver badge

Re: Definition

It's likely there's no "universally accepted definition" of any concept. With billions of human beings with vastly different sets of life experiences, probably all of whom hold at least some perverse opinions, universal agreement just isn't possible.

It's also not how language use and the interplay of ideas among humans work. In the best case we converge on functionally constructive intersections of understandings.

So your "universally accepted definition" bar is useless, I'm afraid.

Michael Wojcik Silver badge

Re: generally agree...

machines are machines

Sure. Now show that human beings aren't machines, and that human cognition isn't mechanical.

I believe we're still a long way from AGI, based on my own experience with ML, my readings in AGI research, and my experience in other fields (particularly the study of writing and the philosophy of mind). And I think "sentience" is very much the wrong metric, and largely uninteresting, and I wish the media would stop bandying the term about as if it's some sort of gold standard.

But I've yet to see a persuasive dualist argument that human cognition is somehow special and can't be mechanized. (And, yes, I've read Penrose's.) I don't even think the QECTT needs to be invoked; I think cognition is most likely conventionally computable.

Solana, Phantom blame Slope after millions in crypto-coins stolen from 8,000 wallets

Michael Wojcik Silver badge

Bad week for Solana

... since it's just been revealed that most of the Solana ecosystem was a house of cards created by one developer through a network of sockpuppets.

https://web3isgoinggreat.com/web1#ian-macalinao-pseudonyms

And yet the continual parade of fraud, theft, and failure among cryptocurrencies and DeFi seems to have no effect on the cryptocurrency fans – most of whom appear to know essentially nothing about the underlying technology.1 Sigh.

1And, honestly, a lot of the CS and economics research around cryptocurrencies, "smart contracts", DeFi, etc is really quite interesting. Just search Colyer's old Morning Paper archives and skim a few; you'll see what I mean. It's just unfit for use in practice.

Michael Wojcik Silver badge

Re: There is a name for this....

Yes, and at first glance it looks like it was an attack against a wallet implementation, not against the cryptocurrency itself. Not that it matters much, particularly to the people who lost (notional) money. (How much of that could be converted into hard currency or goods & services is always a question.)

Financial exchange's efforts to replace core systems with blockchain founder – again

Michael Wojcik Silver badge

Re: doomed, doomed I say

Combining an ancient language, a decrepit processor and a useless blockchain

That's not what ASX are trying to do. They're taking a COBOL-on-Itanium application, which does not use blockchain, and trying to replace it with a new application that uses neither COBOL nor Itanium but does use a blockchain.

It may be a daft plan,1 but it's not what you described.

1Frankly, it's hard to see how a half-assed toy implementation of an append-only ledger is an improvement on the techniques that exchanges have been using for decades. Migrating the existing CHESS application off Itanium would be a good idea. Porting it to another language is a questionable one. Reimplementing it entirely using blockchain and DAML seems ludicrous.

Michael Wojcik Silver badge

Re: Interesting

There are plenty of good applications of Merkle trees already, like zfs and git. We really don't need good applications of blockchain, which is just a toy Merkle tree.

As Bruce Schneier has pointed out, we already have plenty of algorithms for append-only ledgers. Blockchain isn't novel and isn't particularly interesting.

HPE says $30m Solaris verdict against it didn't provide 'evidence' of copyright

Michael Wojcik Silver badge

Re: "originally" written by Sun?

Solaris switched to an SVR4 base with Solaris 2, aka SunOS 5, in 1992.

SVR4 itself combined AT&T SysV with a bunch of BSD 4. There's a lot of cross-pollination. Could you find matching source lines in OpenSolaris and, say, the listings in John Lions' Commentary? Seems not implausible.

Michael Wojcik Silver badge

I routinely support software that's more than ten years old, and not infrequently over twenty years old.

Not all software is Windows.

Linux may soon lose support for the DECnet protocol

Michael Wojcik Silver badge

By 1999 or 2000, nobody was deploying anything but TCP/IP, and maybe AppleTalk if you had a marketing department in the building.

SNA is still holding on in some IBM shops.

Yes, it's true: Hard drive failures creep up as disks age

Michael Wojcik Silver badge

Re: I'm shocked

It's a suspect conclusion anyway. None of the billions of people alive at the moment have died, so there doesn't seem to be any correlation between being alive now and dying.

Ex-T-Mobile US store owner phished staff, raked in $25m from unlocking phones

Michael Wojcik Silver badge

So do I, but I think people have a right to buy subsidized phones if they don't mind putting themselves under contract to a carrier. I might think that's a dumb decision, but it's theirs to make. And if they do that, they're agreeing to a locked phone.

More importantly, perhaps, note in this case the miscreants were also unlocking stolen phones.

How a crypto bridge bug led to a $200m 'decentralized crowd looting'

Michael Wojcik Silver badge

Re: Heh

To be fair, X.509 and PKIX (and related standards like the CA/BF BR) are nearly as fraught with poor design decisions and implementation problems as smart contracts are. Unfortunately there's nothing better that's also standardized and widely used.

Michael Wojcik Silver badge

the big thing about "smart contracts" is they are supposed to be code that has the full force of a legal contract

"Supposed" by whom? I don't believe I've ever seen that claim even by smart-contract enthusiasts. It's hard for something to have the full force of law when it's not recognized by the law.

Smart contracts aren't contracts under any sensible definition of the term.

But that said, I agree that it's not immediately obvious what law or contractual arrangement might have been broken here, so it's not clear to me what criminal or civil action would be available, even if the perpetrators could be identified. Maybe something under the rather sweeping and arbitrary computer-misuse statutes that legislatures have pumped out, since violations of those are pretty subjective. Maybe a terms-of-license violation, if there's also a license agreement that attaches somehow. Eventually there's likely to be some tax-code violation, unless the perps report the income properly in their jurisdictions.

Bot army risk as 3,000+ apps found spilling Twitter API keys

Michael Wojcik Silver badge

Obvious fix

What can be done? The answer is

... don't use Twitter. There, problem solved.

Michael Wojcik Silver badge

Re: I wonder how much blame can be attributed to poor code examples

Code samples? Who has time to read code samples?

I assume the developers of these apps just copy and paste from StackOverflow.

AI-friendly patent law needed 'as a matter of national security', ex-USPTO boss says

Michael Wojcik Silver badge

if all you have done is build a neural network and trained it, then I'm afraid it isn't novel. We already know how to do that

This is flat-out wrong.

There are infinitely many ANN architectures, and even if we confine ourselves to those that are both practical to implement and useful, it's a vast space. There are a similarly huge number of training processes, objective functions, rectification functions, and so on.

Moving from GANs to Diffusion networks was most definitely a novel innovation, for example.

And none of the interesting models are just a single ANN. They're complex stacks of ANN layers with complex interconnects. Even with a single layer, it's not just a question of "a neural network" – you haven't even specified recurrent or convolutional or whatever.

Your argument is absurd, frankly. It's like claiming we know how to write software, it's "old and obvious", and so nothing new can ever be done with software.

Michael Wojcik Silver badge

Re: Greedy bastards blatantly milking a broken system

USPTO rejects about half of all applications. That's hardly "rubber-stamping".

New Outlook feature: It freezes up when dealing with tables in emails

Michael Wojcik Silver badge

One of the first things I do when I get a new work machine is go through Every Single Option in Outlook, disabling previews and automatic image display and a zillion other chunks of the attack surface. And also misfeatures like "replace as I type".

There are, alas, many stupidities which cannot be disabled, but this helps.

Michael Wojcik Silver badge

Re: ...and on Mac, don't dare to use emojis

How about "don't use emoji", full stop?

("emoji" is a Japanese word, and as such both the singular and plural are "emoji". "emojis" is a barbarism.)

Michael Wojcik Silver badge

Re: Screen Reader support

Screen readers don't have a problem with plain text, in my experience. Perhaps someone who uses them more extensively can explain why complex tables would be better. (My guess is that they wouldn't.)

Michael Wojcik Silver badge

Writing well is in part a design process, for any useful definition of "design". That follows clearly from both composition research and from rhetorical theory. You could also support it based on, say, linguistic pragmatics.

Michael Wojcik Silver badge

Re: Seems the Magic 8 Ball was right then...

Outlook (aka Lookout!) has always been a mess. Mine averages two synchronization errors a day; it especially has difficulty with the concept of deleting a message.

Around 2000 I pointed out on VULN-DEV that even if you disabled pretty much everything you could disable, Outlook would still insist on rendering Windows metafile graphics embedded in messages. Because there could never be an exploitable vulnerability in the complex metafile rendering engine, yeah? So stupid.

Of course, the fundamental problem is MIME, which was a terrible idea and we're all still paying the price for it.

US regulators set the stage for small, local nuclear power stations

Michael Wojcik Silver badge

Re: @Dr Syntax - "more radioactive"

Where I live a huge portion of the power is wind based

Where I live, we're at 100% daytime solar on average. But that's because we have low population density, not a lot of manufacturing, a lot of sunlight and a lot of space for PV farms, and the sunlight is predictable – rain almost always comes in the late afternoon, which makes planning for the battery installations and switchover easier.

I don't expect that to work everywhere.

There are places where solar works well for supplying a lot of the domestic power requirements. There are places where wind works well. It's conceivable that we could build really big solar-thermal plants in desert areas and ship power around using HVDC, or even reform carbon-rich waste into hydrocarbons (propane would be my choice – good existing infrastructure and easy to convert some ICEs to run on it – but whatever).

But today renewables aren't a drop-in replacement for other sources. If we want to cut down on fossil fuel consumption for electricity generation, I don't see how we'll do it without nuclear, at least in the short term.

Data brokers amass profiles of pregnant women – and, of course, it's all up for sale

Michael Wojcik Silver badge

Re: Human trafficking

As with so many things, it's profitable and so someone will do it, until externalities are converted into direct costs. And the only way to do that in a case like this is regulation. We need to regulate these data brokers out of existence.

Michael Wojcik Silver badge

Re: "One of these was Boris Johnson, but he paid the price,"

This is Alito. It's far from the worst thing he's ever said.

We're talking about the SCOTUS justice who thinks it's fine if the police murder anyone they think might be guilty of a crime, using whatever means might come to hand. He's a lousy jurist, a lousy thinker, and a lousy human being.

Thomas is arguably worse – arguing in favor of allowing corporal punishment in schools, for example – but he's not such a loudmouth.

Weirdly, so far the Trump appointees have managed to be not as bad as those two, Dobbs v. Jackson aside. Gorsuch was on the reasonable side of cases involving compelled speech and LGBTQ+ employment rights, for example; he's also been decent on tribal rights. Kavanaugh was on the right side in Garza and Trump v. Vance. Barrett doesn't have much of a record yet, but she hasn't been as stalwart a friend of business and authoritarianism as Alito and Thomas (see e.g. Hollyfrontier). We'll see what happens in coming years.

Michael Wojcik Silver badge

Re: I used to be nice to christians, not any more

there are even those who don't have any all-powerful boss you have to blindly obey

Sure. Sikhism, though it's technically monotheistic, rejects the idea of a monopoly on absolute truth, for example. Hinduism and Shinto give you a whole catalog of gods to pick from.

On the other hand, while Sikhism historically hasn't been used to motivate religious oppression (rather the opposite in fact), Hinduism and Shinto have. Neither monotheism nor the concept of a single supreme authority are necessary for abusing religious beliefs as an endorsement of violence.

Personally, I don't invest in untestable hypotheses (which is what, by definition, any belief in the supernatural is). But I think the vitriol directed against religion is a bit misplaced, because what history shows is that ideologies can be grounded in many sorts of beliefs, and can be harnessed to oppress regardless of the ontological status of those beliefs. Take for example the eugenics and scientific racism movements, neither of which were yoked to religion.

I do think there is something to be said for programs in rationalist thinking, even though we know humans will never be very good at it; and I even agree with Richard Rorty (against, for example, Stanley Fish) that non-substantive commitments to certain philosophical ideas can help people be better. But on the whole it's really easy for people to justify being shitty to one another, and getting rid of religion wouldn't change that.

Why the end of Optane is bad news for all IT

Michael Wojcik Silver badge

Re: Insane

Shrug. Most of my test suites are network-bound. And when I'm writing software, I'm thinking-bound. If compiling is taking up a significant amount of my productive time, I'm Doing It Wrong.

My point, of course, is that even this use case is limited. Some development might be sufficient I/O-bound that it becomes a killer app for Optane, but apparently it wasn't enough of development to matter to the people making the purchasing decisions.

Michael Wojcik Silver badge

The thing about files is that the provide pieces of storage with a purpose.

Exactly. The story of information technology, since long before there were mechanical computing machines of any sort, much less digital ones, is a story of partitioning and organizing information. Written language was invented specifically to label bullae and represent their contents. "Files" are contemporaneous with the earliest efforts to store and manipulate data.

Works like Yates' Control Through Communication illustrate the evolution of this process. If POSIX filesystems bear a certain resemblance to earlier technologies such as pigeonholes, flat filing, and vertical filing, that's because those systems did the job.

Personally, I'm far from convinced of the benefits of non-volatile RAM, variations of which we've had for ages. Keeping everything in memory is a whopping great increase in the attack surface, for one thing. Having multi-level storage and control over my working set is just fine with me, thanks anyway.

OS/400 famously had its "single-level store", where all objects were mapped into a large virtual address space. Obviously the implementation had to make use of virtual memory and paging because the hardware couldn't physically support all the data the system had access to, but it implemented just the sort of "everything's an address" metaphor that Liam is asking for. It was OK. It was not revolutionary.

There are other ways of organizing user information which make more sense for particular use cases, like Sugar's journal mechanism for children learning to use computing technology. The filesystem metaphor isn't necessarily optimal for every use case. But I'm struggling to think of a use case where single-level storage really conveys any significant benefit.

It's on: Twitter vs Elon Musk trial to start October 17

Michael Wojcik Silver badge

This is true – and I believe efforts to force Twitter to "be fair" and the like are dangerously misguded – but it says nothing about whether Twitter as a cultural phenomenon is toxic and awful, which was what OP actually claimed. Something can be right with the law and still horrible.

But, of course, what that means is the law is the wrong way to combat Twitter and the like. Counterspeech – user education campaigns, social movements against using social media, more resources going to educating people in critical thinking and rhetoric1 – is the only approach that isn't worse than the disease.

1So that they might at least develop decent skills in argumentation, for the love of god. Christ, I don't know how anyone can bear to read tweets. Whenever I see one quoted somewhere there's an excellent chance it will be shallow drivel.

Michael Wojcik Silver badge

Re: I don’t have a dog in this fight

TL;DR: You're wrong.

Identifying bot accounts1 is a very different problem from estimating how many bot accounts exist.

Twitter have explained their methodology for the latter, and they've given the Muskrats access to the data. No one from Team Musk has yet shown any evidence that Twitter's estimate is far off; we just have a lot of wild handwaving claims from Elon about it.

Beyond that, the Court of Chancery is really, really unlikely to find anything about the bot numbers constitutes a material adverse effect. "Material adverse effect" is a term of art in M&A law; it's not just "anything that gives Elon sadface". The bar for an MAE is really high, full stop.

Also, the contract doesn't say anything about accurate bot numbers. What it says is that Twitter is obliged to respond to reasonable requests for information that has a relevant business purpose. Twitter gave Musk's Minions what they asked for. They provided their estimates; they provided their methodology; they provided the "firehose" of information about Every. Goddamned. Tweet. They can't invent more information. That's it. That's the whole thing.

Musk's lawyers are throwing up a cloud of smoke, but so far they haven't shown anything that has any real weight.

1More specifically, bots posing as mDAUs, monetizable Daily Active Users. No one questions that there are a lot of overt bots on Twitter; Twitter encourages that use case. What's at issue (well, not actually at issue, but what Musk and his lawyers are pretended is at issue and what some rather gullible observers think is somehow important) is how many accounts are 1) routinely active, 2) presenting themselves as real meat people, and 3) actually bots.

Michael Wojcik Silver badge

And violate a court order? Hello, contempt charges!

Delaware corporations are under the jurisdiction of Delaware, including the courts of Delaware. Musk can't just take his ball and go home.

Even if he could get away with re-registering Tesla elsewhere, the Equal Powers clause would let Delaware pursue remedies.

But in any case, selling the shares of Tesla that Musk owns does not depend in any way on where Tesla is incorporated. It depends on whether the court has power over Musk's finances, and to the extent he is personally liable, it does. (Yes, the actual agreement is between paper holding corporations but I can't see the Chancery flinching at piercing the corporate veil in a case like this.)

Michael Wojcik Silver badge

The Court does seem to be keen to get this done and dusted

SOP for the Chancery, which moves quickly.

Michael Wojcik Silver badge

If their names and signatures are not on the merger contract with Twitter, then they're not liable.

Unfortunately for them, their signatures are on other contracts connected to the merger, and the substantial analyses I've seen from lawyers claim they quite likely are liable.

Michael Wojcik Silver badge

Re: Core issue of ???

Twitter's bot numbers are unlikely to be considered material by the court. Devin "LegalEagle" Stone did a fairly thorough analysis of the case on his YouTube channel, and he noted that the Court of Chancery is rarely willing to admit something is a material issue significant enough to void a contract.

Stone's analysis is worth viewing. Basically, nothing we've seen in public so far from the Muskovites looks very promising. Twitter is in much the stronger position.

Apple's secret car team tosses keys to Lamborghini lead

Michael Wojcik Silver badge

Re: Exclusive Apple features

- Front grill features a smug grin

The sad thing is that this would be an improvement on most of the grills currently featured by automakers. Sure would beat Toyota's "Sad Fish" and "Angry Predator" looks, for example.

Michael Wojcik Silver badge

Venting windows will not be an option. You might think you need or want to be able to open the windows, but that's just because you're trapped in assumptions based on current designs.

The entertainment system will only stream iTunes. That's for your protection.

There will be no physical controls, just an enormous touchscreen.

We're likely only seeing 'the tip of the iceberg' of Pegasus spyware use against the US

Michael Wojcik Silver badge

Re: "Tomato, tomahto"...

Well, of course. That's what makes their "terrorism" defense such a useful canard to hide behind. "We tell customers they can only use it against terrorists!" they cry, knowing full well that 1) their customers are happy to define nearly anything as terrorism, and 2) there's no way that requirement can be enforced anyway.

Apple network traffic takes mysterious detour through Russia

Michael Wojcik Silver badge

Just one of many

BGP leaks – some significant proportion of which are likely hijack attempts rather than accidents – are really common. Like, on the order of a hundred a day, according to studies I've seen. Some are successful, at least briefly; others are not.

That's a small proportion of BGP announcements, which at the moment, judging by RIS Live, are running around 150/second. But it's certainly a problem.

Internet Health Report shows 23 Internet partitions due to routing in the past 24 hours.

IBM puts NIST’s quantum-resistant crypto to work in Z16 mainframe

Michael Wojcik Silver badge

Re: Um, guys, get your story straight

If that secret allowed someone to drain your bank account, along with everyone else who used your bank, I think you would say that 28,800 seconds is still way too quick!

By the time we have general QC at that scale, at a price point where it's sensible to use it to "drain [someone's] bank account" (based on some hypothetical attack that you didn't bother outlining), I suspect we'll either have much bigger problems to worry about, or more likely will be long dead and hence not worried about anything.

General QC has made impressive progress in recent years. It is still nowhere near the point where "hey, I'll just break any asymmetric public key I run across" is at all plausible. If things go very well for QC research, we just might have, in a few years, a machine which can break a modestly-sized public key with some days' worth of setup and a day or so to run. A key. One at a time. At very large cost. (Dilution refrigerators aren't exactly cheap to run.1)

Ain't no one gonna lose their savings to a QC attack on their HTTPS connection to their bank. That would be a bit like being murdered by nuclear weapon. You may have some enemies, and it's theoretically possible for one of them to put together a working fission bomb in their garage, lug it over to your place, and blow you to smithereens; but it's not a realistic threat. There are much, much, much easier and cheaper ways to achieve the same end.

1And how soon before we're at Peak Helium? That stuff is easy enough to make – if you're the sun. Here on Earth it's kind of a problem. The geniuses in Congress got rid of a big chunk of the US supply, so...

Michael Wojcik Silver badge

Re: CRYSTALS-Kyber

They're not IBM's names. The CRYSTALS (Cryptographic Suite for Algebraic Lattices) project is an inter-organizational effort. Two of the team members have IBM affiliation, but it's not owned or run by IBM.