HN user

danielheath

4,442 karma
Posts0
Comments1,369
View on HN
No posts found.

I don't know how it's really used in the wild, so to speak.

Commit signing primarily exists because linux kernel development happens via email, which isn't a secure channel.

In that context, signing is used to prove provenance; a commit signed by someone with merge rights gets included, and if you repeatedly sign bad code you'll have your right to merge revoked.

you can hold me accountable for that commit

I wouldn't personally want to be held accountable for a commit I'd never so much as read, so I would never sign (even locally) a commit until I'd looked at it.

I mean, "no microprocessor" means no engine designed in the past 30 years, because the fuel pump needs one.

"No antenna/modem I can't readily remove" might be _slightly_ more achievable.

even an old one

My overlocker was made in West Germany (when that was a country), and is still going strong.

Threading was a bit tricky the first few times, but the manual is really exceptionally well written.

I'd make a stronger claim: there is (today) _no such thing_ as a "neutral observer".

Our state of mind is a product of our own senses and experiences; we can't hope to comprehend 100% of the relevant facts.

A statement may appear (relative to your experiences & thoughts) to be neutral - but that tells us little about its underlying neutrality.

The confusion is, in part, because one of the functional underpinnings of capitalism is “make a bet” as a method of allocating resources.

Those whose bets paid off didn’t “earn” the money, they “won” it. Calling it “earned” confuses “being morally deserving” with “receiving”.

The positive functional effect of “take a risk and get more money if it pays off” is that folks who allocate capital well end up with more capital to allocate.

Of course, this is imperfect ; there are those who allocate capital poorly (by some definition) yet win returns anyways, and some who allocate it well while being unable to capture the value they create.

It is, but… you’ve seen the marketing material being put out?

“AGI is just around the corner and could destroy humanity if we don’t solve alignment” is something AI leadership at multiple companies have publicly said.

Those provisions would broadly be civil (not criminal); the vendor would have to identify you had reversed the blob and then take you to court, and then win.

They could also try for criminal charges if you’re in a relevant jurisdiction.

I hate that sort of thing - when I rolled my own proof-of-work bot protection (providers wanted $$$$), I set it up so that

A) you'd have to open >200 tabs, and B) if any tab solves the proof-of-work, any that are still waiting to do so reload in the background.

It's circumstantial evidence, but Occam's Razor also applies.

It's not a hostile DOS in the traditional sense (I've mitigated a few of those) - no "pay us to make it stop", no pattern to the requests other than "fetch every unique URL a few times".

It wasn't happening until financial incentives to gather large datasets for AI training appeared.

Bad actors (using residential proxies & claiming to be a real browser) mostly showed up after folk started blocking ones that identified themselves as AI scrapers.

It's obvious to blame AI training because there's a shortage of better explanations. Who else would be paying for these (expensive) residential botnets, only to use them to (eg) web-scrape wikipedia (which offers free downloads of its content in a structured format)?

The simplest explanation of the technical behavior is "a bot coded to follow every link it sees & save the results", and the simplest explanation of the motive to run such a bot is "to train a large language model".

They showed up when the AI money did. The evidence is circumstantial, but… some of them are remarkably well engineered (from a “how difficult is it to identify this traffic” perspective, in a way that never existed before (I have been running a quite sizeable site for 8 years, over 200k registered users, and you don’t need to register to use 99% of it).

I more meant "I had 200m in the bank and accidentally spent 170m of it to start constructing a police HQ".

If you bulldoze a building when it's only 2% of the way through being constructed, you should probably be able to get 98% of the resources spent back - whether housing demand, money, whatever you spent.

Possibly 100% back until you hit 5%, just to allow for those mis-clicks.

Spent a bit of time with it.

Biggest peeve so far: It's very easy to build the 'premium' version of a building (eg police HQ instead of police station) and utterly annihilate your city budget - with no ability to cancel / undo.

"Click on the correct-looking-but-actually-wrong button functionally ends your game" is... not great.

Other than that, I'm really enjoying it.