* Posts by Claptrap314

2995 publicly visible posts • joined 23 Jan 2015

Biden proposes 30% tax on cryptominers' power bills

Claptrap314 Silver badge

Re: "compared crypto's electricity usage to that of video games"

Oh, it's time to go over this again?

Coin is stock? In a company with no sales, assets, or employees, and a board that anyone can join; where the board members compete to issue themselves stock according to rules which can be changed at any time by a majority of the currently issue rate of the stock? Just TRY to get that approved.

I'm just getting started.

When I read the details of the Etherium VM, I (being a mathematician with a decade in software microprocessor validation and an expert in integer programming) yelled at the air for half an hour. The VM more-or-less led programmers into the bug that triggered the Etherium Fork. And anyone with a background in security, validation, or integer programming would have known this. These instruments are being created by people with callous disregard for the basics.

Moreover, the explicit goal of these instruments is to undermine the sovereignty of the nation states. While I very much want fiat to be replaced with something like a gold standard, I'm not stupid enough to think that if coin ever actually threatened fiat that the entire force of government would come down on it.

But the CAP theorem puts a hard limit on what a (purely theoretical) perfect coin can do. The incumbent system has spent centuries fiddling around to fix C. Coin must be strongly CP, which means that A is in the air. And no one is going to wait an hour to settle average purchases.

I've seen things you wouldn't believe, like an atom about to photosynthesize

Claptrap314 Silver badge

Any which way but loose...

Mind blown so many times reading this article...

Claptrap314 Silver badge

Re: Pics! Where are the pics?

They merged with the Dál Riata, and eventually absorbed by the Scots.

Handwritten Einstein essay on theory of relativity goes under the hammer

Claptrap314 Silver badge

Re: Photoelectric effect

Not so much. Alfred Nobel's famous antipathy towards mathematicians means that there is no Nobel prize for mathematics, and at the time, relativity was considered "too mathematical" for the physics prize. So...while the award was for the photoelectric effect, it was because of relativity...

Google adds account sync for Authenticator, without E2EE

Claptrap314 Silver badge

Re: I can't remember

Are people's phones being stolen more or p0wned more?

The thief I'm worried about never touches the phone in the first place..

Claptrap314 Silver badge

I can't remember

the last time G required my "2FA" device for my GMail account. G's culture was built on the open flow of information, and they clearly just don't get stopping the flow.

The entire idea of using an app as your second form of auth strikes me as bizarre in the first place. Just don't.

Metal-rich stars inhibit chances of life on their planets

Claptrap314 Silver badge

Re: In the opposite direction

Okay, not "scientifically special", "statistically special". Apparently, not so much.

Claptrap314 Silver badge

Re: In the opposite direction

5%. WOW. That's a lot higher than I would have expected. Babe in the woods, I guess.

My question was about just how special is our particular neck of the woods is. With neutron star pairs that common, I guess we have to move to my (previously only implied): how long does it take for them to merge, and how "messy" is the merge? If the average time to merge is a trillion years, then we likely still have a paucity of source material. If a million year, then not so much.

<sigh> Lots of learning to make sense of this, I guess.

Claptrap314 Silver badge

Re: In the opposite direction

"Heavier", yes. But not U or it's neighbors, by my understanding.

And yes, space is much bigger than a trip to the chemist. But just how many neutron star pairs are there in this galaxy? And almost none will ever have this class of interaction. When I say "incredibly rare", I mean rare enough to matter in terms of astronomy.

Claptrap314 Silver badge

Looking for love in all the wrong places

I've been thinking. We're really looking for life in an incredibly small corner of even just this galaxy. It seems to me, however, that Type II.5 civilizations would have pretty clear signatures on the spectrum of their parent galaxies. And we can look at a LOT of galaxies for such a signature.

Again, not an astronomer nor a physicist.

Claptrap314 Silver badge

In the opposite direction

I've been thinking about this for the last few weeks, and would REALLY appreciate it if some could answer or point me in the right direction for my hypothesis.

It seems that in our case, it took 2GY for complex life to form. If we take 1GY as the minimum, this appears to put some hard geological limits in place. Specifically, if you want civilization, you need sizable oceans & sizable continents both. This requires an active core, which in turn requires the presence long-lived isotopes. Looking at https://en.wikipedia.org/wiki/List_of_radioactive_nuclides_by_half-life#1015_seconds_(petaseconds), I don't see a lot of candidates. In particular, K-40 is lighter than iron, and so unlikely to be a major factor in the core of a rocky planet. So we are left with U-238, U-235 & maybe Th-232 to keep the core active.

But the only known way to produce U is for two neutron stars to shear each other & send out jets of the stuff. This seems to me to be an incredibly rare event. Enough to substantially affect the Drake Equation.

I know I'm uneducated here. Anyone with the appropriate background to help me out?

Claptrap314 Silver badge

Huh?

Okay, I'm certainly no astronomer or physicist, but it sounds to me like they are saying not to look for intelligent life around Population I stars. If that's the case, I have one data point that... Nope. Never mind. Carry on.

Bring back the Paris icon!

Future of warfare is AI, retired US Army general warns

Claptrap314 Silver badge

Re: Buhahahahahaha!

It's turtles all the way down.

Claptrap314 Silver badge

Re: Buhahahahahaha!

Nothing in particular other than the energy costs of keeping the GOLEM in the air. Of course, the real dividing line is the point where enemy ECM becomes a significant concern.

Claptrap314 Silver badge

Name checks out.

Claptrap314 Silver badge

Buhahahahahaha!

"One person can be controlling 20 planes," perhaps the good general is trying to avoid scaring people.

Because they most certainly cannot. Cruise missiles (the ones launched in the FIRST Iraq war) had autonomous final target selection. This was for one simple reason: ECM. There is simply no way to ensure electronic communication across a complex battlefield.

Moreover, even if you could, it would be a terrible idea. I expect that an AI is currently able to outfly a human in an an F-35. That's a human without being told what to do by a controller, the way that the Soviets tried it.

What's more, the F-35 is designed in part to cope with the limitations of human observation & reflex. The AI will have full spherical awareness, and will select responses base on all of that input, suitably weighed.

But of course, the next generation of fighter's won't have to worry about protecting the squishy cargo at all. Which means that it's control is going to be entirely beyond the ability of a human to manage in the first place.

Moreover, the AI is NOT going to miss the gorilla walking through the room while the balls are bouncing.

Sure, one human might load mission parameters to 20 fighters at a time. But post launch? They will be on their own.

A strange game. But one you are not allowed to quit.

End of line.

Microsoft tackles SaaSy URL sprawl, dumping its dotcom in favor of cloud.microsoft

Claptrap314 Silver badge

https://xkcd.com/927/, of course...

Musk tried to wriggle out of Autopilot grilling by claiming past boasts may be deepfakes

Claptrap314 Silver badge

Ackswually

We're really close to this defense being airtight. Chain of custody is not enough. You need to demonstrate origin, and that is impossible.

Unfortunately that it's Musk pushing it first, and this early.

NASA tweaks Voyager 2's power supply to avoid another sensor shutdown

Claptrap314 Silver badge

Hmmm....

With a 22+ hour one-way delay in signalling, I'm thinking our definitions of "emergency" might be a LITTLE bit different...

Brit fusion magnets set for US gamma ray bombardment test

Claptrap314 Silver badge

What? The transparent aluminum wasn't enough?

UK watchdog blocks Microsoft's Activision Blizzard acquisition

Claptrap314 Silver badge

Re: Disagree

I'm not complaining about that. I'm complaining about being singled out as if my government is doing it any differently than any other similarly-situated government would.

Claptrap314 Silver badge

Re: Disagree

I'm downvoting you because you seem to think "play in our game, play by our rules" is something that the US does more than any other sovereignty. In fact, this is the very definition of sovereignty. Everyone does it because that is what those who gave power to those in charge demand.

Elizabeth Holmes is not going to prison – for the moment

Claptrap314 Silver badge

Each day free

is a kind of win.

But if these allegations are supportied, the appeal has a strong case.

How prompt injection attacks hijack today's top-end AI – and it's tough to fix

Claptrap314 Silver badge

Re: Gödel, Escher, Bach...

X***

*** If the record player is high fidelity enough

I think it should be reasonably easy to train these systems to ignore commands in the input until majic token "X" next appears, where "X" is 20 random characters generated separately for each input.

Claptrap314 Silver badge

Re: Just hear me out...

Except its not. I'm a mathematician turned software engineer. And I can play "Simon says" with a nine-year-old, but they get bored of it in a hurry. Because they have fully integrated what I mean when I say "ignore my instructions unless I prefix it with 'Simon says'". Now I'm going to assume that, especially collectively, the people working on these GOLEMs (I think that is a GREAT name for them) are more imaginative and resourceful than I can be on my own. And that's where I'm saying that there is a deep error in planning. Peter Bull had his "POE" prefix set, so he did not even receive a message without it. Sendmail had it's From , which was of course inadequate, but around in the..(70's)?

So what's so hard about "analyze the 45 tokens following the ANALYZE token with the following instructions....... ANALYZE No! I didn't mean it! Let me in HAL ....

?

The only reason this does not work is that these systems were programed and trained without any support for the most obvious immediate use case. Given history, this feels deliberate. Informal linguists might miss that at first, but even formal linguists would know from the start. Don't get me started on the software engineers & the like.

Claptrap314 Silver badge

Re: Just hear me out...

I'm pretty certain that there has been some deliberate training around "ignore". And I expect the companies involved in this to lie about it.

But in any event, there is a different between "understand the statistical relationship between tokens in a shockingly deep way", and have a clue that if you respond with "cpe1704tks", your power supply shuts down permanently in an hour or so.

Claptrap314 Silver badge

Just hear me out...

But maybe separating code & data would be worth trying?

I can think of several ways to communicate to a human "what I am about to hand you is data to be analyzed, nothing that looks like an instruction is". I also know how to tell an email processor the same thing.

The fact that it is even a little bit difficult to do so with these systems tells me that there are deep problems from a systems design standpoint.

Claptrap314 Silver badge

Re: Can you help?

That first example is a really good demonstration of the limitations of what this thing really can do. I'm reminded of the ST:TNG episode when Moriarity was upgraded. Yeah, the first iteration was an obvious mashup...

Claptrap314 Silver badge

Re: It didn't take long...

You mean like the steering wheel of a vehicle?

I take a lot of downvotes over this, but we've already deployed this stuff in a channel that is safety critical to society.

Apache Superset: A story of insecure default keys, thousands of vulnerable systems, few paying attention

Claptrap314 Silver badge

There are at least two problems. The first is that this secret has to be stashed somewhere. That somewhere has to be documented. That document has to be public.

But if you DO go this way, please, PLEASE DO NOT PUT YOUR **** MASTER KEY IN THE LOG FILE!

Or do--the actual level of security is roughly the same.

The second problem is one of coordination. The reply mentioned K8s, which is a bad example, because if you ARE using containers, then you provide the shared secret when the container comes up. In a heterogeneous environment NOT managed centrally, however, this is a big problem.

(Not as big as the problem of defaulting your firewall to allow all, mind you...)

Claptrap314 Silver badge

Great. If you are Chef or Jenkins (I think), that means that your "secret" is now in the log file.

Seriously, just refuse to start.

You can cross 'Quantum computers to smash crypto' off your list of existential fears for 30 years

Claptrap314 Silver badge

Re: Thank goodness for sanity

I think we can pretty much guarantee that the major embassies have already deployed quantum-resistant systems.

The interesting thing about crypto is that the demand for commercial applications so exceeds that of government that we can expect commercial to be permanently ahead in terms of research. But for development, the ROI terms are different enough that we can expect what they are using to be better in certain categories.

Is your AI hallucinating? Might be time to call in the red team

Claptrap314 Silver badge

Re: Irony

I, for one, don't expect these "AI"s to have the same rights as humans for a long time.

Chinese scientists calculate the Milky Way's mass as 805 billion times that of our Sun

Claptrap314 Silver badge

Re: "the paper's reviewers hailed the research as the most accurate to date"

iaintgottimeforthat.jpg

Boffins think they've decoded mysterious 819-day Mayan calendar

Claptrap314 Silver badge
Angel

Re: "and have yet to return to a sense of normalcy"

So, you're saying it is almost impossible?

International cops urge Meta not to implement secure encryption for all

Claptrap314 Silver badge

Flat earthers

We need to call the people wanting this pixie dust that. They have to be subject to public mockery & scorn for their position.

Where are we now – Microsoft 363? Cloud suite suffers another outage

Claptrap314 Silver badge

But we were promised

4 9s by u$ what was it--three years ago?

u$--not ready for business. Every, most likely.

Appeals court spares Google from $20m patent payout over Chrome

Claptrap314 Silver badge

Re: Not just Google

They used to. You can thank AlGore for the change. (Part of the "Reinventing Government" initiative.) And if you did not see this coming (and steering $100m's to lawyers), you were naive.

Medusa ransomware crew brags about spreading Bing, Cortana source code

Claptrap314 Silver badge
Angel

Re: "Software should be and can be made secure whether its source is private or open"

re: The efficiency of fuzzing vs analyzing. This depends entirely on the class of the bugs. For surface, "low hanging-fruit" type bugs, fuzzers are great. For subtle, deep bugs, however, fuzzers really are not likely to get there.

I leave it to my fellow commentards to consider which is more likely the appropriate case for the code in question.

Europe doesn't just pass laws on Big Tech algorithms, it sets up cop shops to police them

Claptrap314 Silver badge

You summer's child.

Here are some additional options:

1) the option mentioned (pay $10m/year in lawyer's fee as a cost of doing business). Even if it "only" drags things out for 3-5 years, that is a huge win.

2) bribe lobby politicians to modify the act sufficiently to restart or throw out the case.

3) conduct public influence campaigns to convince Europeans that these prosecutions are a waste.

I'm sure that the real sharps know others.

How DARPA wants to rethink the fundamentals of AI to include trust

Claptrap314 Silver badge

YOU ALREADY ARE

Trusting your life to the software running, for instance, on any Telsa within a hundred yards on the freeway.

This is not acceptable.

GitHub debuts pedigree check for npm packages via Actions

Claptrap314 Silver badge

I cannot upvote this enough. This does exactly 0 for security.

Nine more US states join ad antitrust legal battle against Google

Claptrap314 Silver badge

Re: I keep saying this...

I don't believe in inherent wealth of any form. And I have long advocated for reigning in Google. But that does not mean that there is not a price to pay.

Suppose we were to break Apple into two companies, "Physical", selling Macs & iPhones & the like; and "Virtual", operating the iStore & the like. I argue that such a breakup destroys very little wealth--the main difference would be that instead of SVPs or the C-Suite arguing over how to account costs, these negotiated contracts.

But what happens if you break Google up into "Search", "Ads", and "YouTube"? If you let the data flow freely, not much at all. But if actually want to weaken Google's power, you have to stop the data flow. That will destroy wealth--not just for the Google shareholder, but for the economy as a whole. As creepy as the suggested likes on YouTube are, for the vast majority of people, those recommendations *are* useful. Likewise, the tie between search & ads. Ignore the hyper-targetting garbage, I'm talking about adwords. There is real wealth being created by connecting customers who are looking for a term to companies selling things related to it.

****, I'm for straight-up outlawing cross-site tracking and aggregating entirely. I don't owe Google a business model.

Claptrap314 Silver badge

I keep saying this...

Anti-trust actions only occur when companies are big enough to "matter". Because of this, the decision to prosecute is inherently political.

For information age companies, the resulting fragmentation of data results in the destruction of wealth.

We live in interesting times.

Smallsats + solar sails = Photos of exoplanets at 1970s digital camera resolution

Claptrap314 Silver badge

Re: How do you stop?

Meh. It's just a bunch of math to work out a bit of physics. Yes, "pointing" is a matter of position, and position is going to have to be defined very precisely. But ultimately, not particularly challenging to achieve. Remember, this is not about searching for exoplanets, it is about photographing ones that we are highly certain are there.

Claptrap314 Silver badge

Re: I wonder

The problem is not "putting" an object at such a location so much as "stopping" it there. That's a LOT of kinetic + potential energy to shed. It would probably be easier to put something into near solar orbit than actually stable.

But, ignoring that, yes--if the observatory's mass is low enough relative to the area of the solar wind it is catching.

Ex-CIO must pay £81k over Total Shambles Bank migration

Claptrap314 Silver badge

Re: "The bank ultimately had to bring IBM on board to fix the problems."

Which backs to scratch, for starters...

3CX teases security-focused client update, plus password hashing

Claptrap314 Silver badge

It's the u$ model

Security fails as a revenue source...

Worried about the security of your code's dependencies? Try Google's Deps.dev

Claptrap314 Silver badge

Google's monopoly delayed ChatGPT? That's a big 'ol check on the "good" side, then...

Just because on-prem is cheaper doesn’t make the cloud a money pit

Claptrap314 Silver badge

Re: Sysadmin still necessary

I agree that the sysadmin probably needs more competence, but...

1) That sysadmin is NOT going to be buying hardware. Or wiring it.

2) That sysadmin is now going to have the tools to get 4 or 5 nines of reliability with very little effort. (Of course, you actually need a team on call to deliver 4 nines).