HN user

costco

2,430 karma

chrisjtarry \at\ gmail.com

https://github.com/chris124567

Posts21
Comments375
View on HN
airbus-seclab.github.io 7mo ago

A deep dive into QEMU: The Tiny Code Generator (TCG), part 1 (2021)

costco
83pts2
book.sv 8mo ago

Show HN: I scraped 3B Goodreads reviews to train a better recommendation model

costco
606pts259
tinyhack.com 1y ago

Decrypting encrypted files from Akira ransomware using a bunch of GPUs

costco
257pts58
firehose.lol 1y ago

Show HN: Watch/filter new domains from certificate transparency logs

costco
7pts0
www.washingtonpost.com 1y ago

With social media, a bullied teen found fame among child predators worldwide

costco
6pts1
forum.torproject.org 1y ago

Another police raid in Germany

costco
530pts334
www.natlawreview.com 2y ago

Commerce Department Proposes Imposing "Know Your Customer" on IaaS Providers

costco
144pts137
www.botting.rocks 2y ago

ShapeSecurity's JavaScript VM: Part 1

costco
1pts0
github.com 2y ago

Crashes in HTTP server used in routers found with simple fuzzing

costco
54pts4
www.youtube.com 2y ago

Lessons from building GitHub code search [video]

costco
256pts100
www.youtube.com 2y ago

Lessons from building GitHub code search [video]

costco
1pts0
www.klittlepage.com 2y ago

Why I always hit the crosswalk button (2015)

costco
114pts299
www.frontiermyanmar.net 3y ago

Seeing the world from the hills: A study of the United Wa State Army

costco
2pts0
www.wsj.com 3y ago

SEC drops 42 enforcement cases after employees accessed restricted records

costco
3pts0
arxiv.org 3y ago

Hot Pixels: Frequency, Power, and Temperature Attacks on GPUs and Arm SoCs

costco
55pts27
ptspts.blogspot.com 3y ago

How to make smaller C and C++ binaries

costco
145pts130
www.gov.uk 3y ago

UK proposal to criminalize possession of “SIM farms”

costco
34pts1
www.city-journal.org 3y ago

When the Irish Ran New York

costco
1pts0
lists.torproject.org 3y ago

Tor Snowflake and Private Bridges Enumeration Attack

costco
1pts0
assets.publishing.service.gov.uk 3y ago

UK proposal to criminalize “sophisticated encrypted communication devices”

costco
234pts170
stylometry.net 3y ago

Show HN: Using stylometry to find HN users with alternate accounts

costco
676pts511

If you put important Anthropic blog posts like the Fable announcement or J-Space through Pangram, you get 100% human written. Considering that the overwhelming majority of the code there is written by AI, I think this is an admission that AI writing is slop and AI code is pretty good.

reCAPTCHA is a great success story of security through obscurity because probably less than 100 people have reverse engineered it and much less than that have produced a working solver for it that doesn't require a headless browser. Snapchat would be another good example - almost no one is going to put in the work to understand this [0]. Most companies just half ass it though and accordingly achieve nothing with the obscurity at all besides worse performance.

[0] https://web.archive.org/web/20201128060507/https://hot3eed.g...

I wish we lived in a world where price wasn't the only way to filter out annoying passengers... if this experiment works maybe it will prove you can offer amenities more widely if you set high standards. I want an airline where at the end of the flight you rate the people next to you thumbs up or thumbs down and if someone gets >= 3 thumbs downs they are banned from the airline for 5 years. Eventually ordinary people would be able have the serene experience that only those in first class can presently enjoy as the people who get up thirty times to retrieve items from carry on or eat obnoxiously are removed.

This wouldn't have helped here but there is a related field of research called hotel recognition. Many of these videos are filmed in hotels so being able to recognize if it was a Mariott or even better a non chain local hotel can be very helpful to investigators. They basically train CNNs that learn to pick up on the bathroom fixtures or kind of bedding used by different hotels. One researcher in particular has done a tone of work on this: https://scholar.google.com/citations?user=mNoB9SgAAAAJ&hl=en

I wonder if you could get the interior of every house from Zillow/realtor websites and then do something like this for every house in the country... Clearview for bedrooms?

The malleability of the ciphertext matters because it enables certain circuit tagging attacks as the article explains. It means that the exit relay could confirm you are using a guard relay also controlled by them and thus discover your origin IP address.

There are many reasons that these cryptographic tagging attacks are a lot worse than just the timing correlation attacks that are possible if you control the guard and exit of a client: https://archive.torproject.org/websites/lists.torproject.org...

What do you think the probability that someone else read 15 books you also read is? It’s very unlikely unless they are all staples of a genre, part of the same series, or just extremely popular in general. 3-5 books is how much I would use on that page. I have found interesting accounts of medievalists, people who work at think tanks, etc with it.

Fake users I would agree should be filtered, but I don’t think filtering out users who gave it a bad review is necessarily the intended behavior. If I put in 3 semi obscure Russian history books, I am presumably looking for someone who is an expert in Russian history to see what else they read. In that case I don’t care if they didn’t like one of the books or not. Approximate matches would require something like LSH or cosine similarity of average input book embedding against average embedding of read books of every user which I think wouldn’t work well anyone for retrieving anyone with a moderately long interaction history.

Thank you for the kind remarks. I would say your request is reasonable and it’s something I thought about but it’s worth noting that if you scroll down on a Goodreads book page you can see all of the users who gave it 1 star, 2 stars, etc (not just reviews, ratings too). And in fact Goodreads does not tell people this but these lists include private users. So someone looking to cause controversy would probably just find an incendiary book and look for everyone who gave it 5 stars. My data does not include people who marked their account as private or only visible to those who are signed in and also does not give information on stars. It is also very easy to remove your data if you are so inclined. I only log request URLs but I can tell that many thousands of people visited the site and less than 10 opted out despite “Remove My Data” being prominently displayed and referenced in the attached text to my post.

Also, I don’t use them but based on forum posts I read I think other services like LibraryThing or Storygraph do expose similar information about book readers.

I would agree the results are generally OK but do not feel magical in most cases (I think in some specific cases they do though). The results can be not great if you add books across many disciplines. For instance if you add "The Elements of Typographic Style" and "The Design of Everyday Things" (https://book.sv/#671857,18518), you do get "Grid Systems in Graphic Design" but under its German name "Rastersysteme für die visuelle Gestaltung."

Note 1: If you only provide one or two books, the model doesn't have a lot to work with and may include a handful of somewhat unrelated popular books in the results. If you want recommendations based on just one book, click the "Similar" button next to the book after adding it to the input book list on the recommendations page.

I use `fetch` on relative endpoints so that's odd. There shouldn't be any external API calls on my website other than whatever the Cloudflare captcha uses. I also use HTTPS-only in Chrome and did not experience any issues. I just tested Firefox with HTTPS-only on/off and Safari on my phone and I was able to import shelves for multiple users. Are you sure that you do not have any privacy settings on (can you access your shelf in Incognito mode)?

I use a Hetzner server with Ryzen 7 3700X and an SSD.

I think I could get the model to work with ONNX web but it'd be a 2GB download so the user experience wouldn't be too great. My Meilisearch index is ~40GB but I don't know how much that could be compressed down.

Here's how the similar page for books is generated, which I forgot to mention on the "how it works" page: https://gist.github.com/chris124567/8d06d64bfe827cb7f6121f93...