HN user

dylanfw

173 karma
Posts4
Comments36
View on HN

his employees (also non-US and under no affirmative obligation to learn the laws of every country in the world just because they run a website)

Employees of financial businesses are absolutely obligated to learn the laws of every country where they provide services.

The "surprise" is not that the agent can respond with private repository details, it's that it can receive and act upon prompts issued by someone other than the person running the agent, hence "prompt _injection_".

Or to come back to the SQL injection analogy, no one is surprised that the web app can query the database for password hashes. The surprise is that it can be instructed to do so when loading the next image in a carousel.

I think OP is commenting more so on the reversal of the developer’s relationship with rules of syntax than their personal capabilities.

Fork Bomb 6 years ago

Change that `except Exception:` to just a bare `except:` to catch KeyboardInterrupts as well and prevent Ctrl+C from killing any of them while it expands.

This reminds me of a passage in "Godel, Escher, Bach" by Douglas Hofstadter discussing the Golden Record[1].

""" [C]onsider a meteorite which, instead of deciphering the outer-space Bach record, punctures it with colossal indifference, and continues in its merry orbit. It has interacted with the record in a way which we feel disregards the record's meaning. Therefore, we might well feel tempted to call the meteorite "stupid". But perhaps we would thereby do the meteorite a disservice. Perhaps it has a "higher intelligence" which we in our Earth chauvinism cannot perceive, and its interaction with the record was a manifestation of that higher intelligence. Perhaps, then, the record has a "higher meaning"-totally different from that which we attribute to it; perhaps its meaning depends on the type of intelligence perceiving it. Perhaps. """

1: https://en.wikipedia.org/wiki/Voyager_Golden_Record

Thank you! That makes complete sense when I consider the 4 color example of a world map. I didn't even consider that most graphs would have "overlapping borders" on such a map.

An extra thank you for apparently creating a new account to assist me. (I think that's what the green username indicates, at least).

Could somebody clear up my confusion with these two statements that appear contradictory?

"Do four colors suffice to color any map? — took more than a century to answer (the answer is yes, in case you were wondering)."

and

"Returning our attention to colorings in which connected nodes are supposed to be different colors, we have no guarantee that the five colors in our palette will be sufficient to color the graph G"

How can it be that 4 colors is sufficient for any graph, but for our hypothetical graph G we can't be sure that 5 colors are sufficient?

“[A] lot of these jobs he talks about are what I call "zero-sum jobs" - it sucks that they have to exist, but if any individual firm stopped having them, that firm would be behind.”

This part of it all, in particular, reminds so much of “Meditations on Moloch”[1] . If anyone hasn’t read through this, I highly recommend it. It’s an inspiring look into how human society gets trapped into these games where no one wins, but to stop playing is much worse.

1: http://slatestarcodex.com/2014/07/30/meditations-on-moloch/

Those guys were writers, not philosophers in the first place.

It's interesting that you begin with a comment like this to seemingly dismiss Satre and Camus as not being real philosophers, and then you proceed to put forward your own terribly unfounded philosophy with no supporting argument.

Chrome's XSS filter can still be circumvented in quite a few instances. The easiest way I've seen is when the attacker controls at least two variables and can split the XSS across them in such a way that neither half appears malicious but when loaded into the page they create a malicious script.

Example: ?a=<script>void('&b=');alert('XSS')</script>

The value of a is <script>void(' and the value of b is ');alert('XSS')</script>.

I haven't seen this yet, but for anyone that's interested: Trent Reznor and Atticus Ross (Nine Inch Nails, Social Network, Gone Girl, Girl w/ the Dragon Tattoo, and more) provide the score for this film.

Whitehead and Russell famously took several hundred pages in Principia Mathematica to prove the validity of the proposition 1+1=2. What is it that kids are understanding that W&R took much pain over?

W&R proved 1+1=2 in their axiomatic system. It wasn't done to prove once and for all that 1+1 is in fact 2, but to show that their system produced mathematical truths. The truth of 1+1=2 was already assumed and understood since they were kids, and that's why it was necessary that their system also produce it.

Of course PM was obliterated by Godel shortly after.

Apologies. Throughout my CS undergrad I had only been given the impression and understanding that Big-O measured worst case (lower bound, no worse than), Big-Theta average case, and Big-Omega best case (upper bound, no better than). Looking into it more now, I see that there are some more subtleties I either missed in class or was never taught.

Thanks for correcting me!

Its average case is O(n log(n)). Its worst case is O(n^2). Which do you call its big-O?

I know this is irrelevant to the larger point of your post, and I'm sure that you know this already, but the worst case is the big-O. This is just another reason why "big-O" is not the most helpful thing to discuss in practice.

No, the companies involved have clout to lobby to change it.

This used to be how the US operated, how both majorities (women) and minorities got the right to vote, and more.

You might be giving a bit too much credit to company lobbyists and not enough to law-breaking activists. Both examples involved extensive illegal actions to accelerate change.

In what way are you connecting recent password dumps to hackers attacking Certificate Authorities? If someone controlled the CA, they would also need to control the target website and/or the victim's home network in order to MITM the connection and snag the credentials. Also, this would allow them to capture plaintext passwords and as far as I know all of the major password dumps recently have been hashed passwords indicating that the database was breached, not that a CA was compromised and thousands of users were MITMed.