HN user

marshray

11,802 karma

Marsh Ray Also: Mastodon: @marshray@infosec.exchange Bsky: @marshray.bsky.social GitHub: github.com/marshray

Posts34
Comments4,710
View on HN
marshray.substack.com 3y ago

GPT-4 upgraded with new original thought capability module

marshray
4pts2
www.bloomberg.com 5y ago

Salesforce.com Must Face Texas Victims over Sex-Trafficking

marshray
28pts7
geer.tinho.net 12y ago

We Are All Intelligence Officers Now - Dan Geer

marshray
2pts0
www.ietf.org 12y ago

New and improved man-in-the-middle attacks on SSL/TLS

marshray
2pts0
www.ietf.org 12y ago

Encrypt-then-HMAC is the only credible choice. Here's why

marshray
27pts3
news.ycombinator.com 12y ago

Since acquired, an embarrassingly silly video we made as a startup

marshray
1pts0
twitter.com 12y ago

Latency to Syria and Tor direct users in Greece

marshray
1pts1
paste.xinu.at 12y ago

International Journal of PoC || GTFO

marshray
8pts0
www.businessinsider.com 13y ago

It's Now Clear That Russian Intelligence Speaks For Edward Snowden

marshray
2pts0
news.ycombinator.com 13y ago

Anyone using LVM2 'thin' volumes in production?

marshray
5pts0
www.thenation.com 13y ago

The Nation: A Letter to Edward Snowden

marshray
2pts0
twitter.com 13y ago

Here's the inside of the bug that Ecuador found at their London embassy

marshray
7pts3
datadealer.com 13y ago

Data Dealer: Online game about personal data and privacy

marshray
2pts0
www.gwu.edu 13y ago

Most Congresspeople clearly remember this famous email retention incident

marshray
2pts0
news.ycombinator.com 13y ago

Idea to reduce the occurrence of negative low-value comments on HN threads

marshray
3pts4
ellipticnews.wordpress.com 13y ago

Joux kills [elliptic curve] pairings in characteristic 2

marshray
1pts0
github.com 13y ago

New datatype proposed for Erlang/OTP R17A: Maps

marshray
3pts0
rapgenius.com 13y ago

Leslie Lamport - The Part Time Parliament - Lyrics

marshray
1pts0
oercode.blogspot.nl 13y ago

What kind of programming language is SPREAD?

marshray
1pts0
github.com 13y ago

SECURITY: Surprising behavior in CryptoJS CTR mode suggests vulnerabilities

marshray
2pts1
imgur.com 13y ago

Designer turns negative client comments to funny poster

marshray
5pts0
github.com 13y ago

Riak 1.3.1 released

marshray
2pts2
blog.volema.com 13y ago

Libcurl remote code execution

marshray
129pts60
www.whispersystems.org 13y ago

The first Open Whisper Systems Spring Break Of Code

marshray
22pts1
news.ycombinator.com 13y ago

How do I evaluate the credibility and relative bias of an economic article?

marshray
2pts0
lorempixel.com 13y ago

Lorem Pixel

marshray
282pts51
www.crypticide.com 13y ago

Decyber: taking the fear out of cybersecurity

marshray
2pts0
www.phonefactor.com 13y ago

PhoneFactor acquired by Microsoft

marshray
1pts1
ritter.vg 13y ago

On Couchsurfing's New Terms of service

marshray
1pts0
www.contextis.co.uk 14y ago

Cloud providers found to be leaking data cross-customer via dirty disks

marshray
47pts15

Nice article.

Looking at the ONSemi datasheet for the BS170, it is very clear that the "Drain−Source Breakdown Voltage" spec only applies at "VGS = 0, ID = 100 uA DC".

Doesn't it cause problems for designers if the curves measured from actual devices look different from those shown in textbooks?

Not as much as you'd think, because (a) the measured curves are still within the stated parameters, and (b) many basic parameters vary from one part to the next (or as the same part drifts over time) even more.

Look at the values of V_GS used in the graphs: [2.34, 2.5, 2.63, 2.71 V]. They differ by 0.4 V. But the data sheet specifies V_GS(th) (the V_GS threshold needed to just start to turn on) as a range of 0.8 to 3.0 V!

A range isn't even given for the slope of the curve (g_fs). The datasheet only gives a "typical" value at a single operating point.

So the designer cannot rely on this parameter to determine the behavior of the circuit, only its general range and direction. You can't just use the bare transistor alone and expect to get an oscillator or amplifier that behaves predictably.

Any manufacturable circuit must ensure that these variations are completely dominated by negative feedback. This is why actual circuits tend to have networks of resistors and capacitors hanging off of every leg of every transistor.

Well, only if Clone/Copy is compatible with the semantics of the API. I.e., the called function doesn't need to modify anything. No &mut params (or data members) except perhaps `&mut self` (which would refer to definitions the same file).

That's usually the case for Rust programs because the language encourages it. Are Zig programs like that?

OK, so I asked ChatGPT "How do I prevent Spotify from automatically playing every time I get in my car?"

The answer looks entirely reasonable. I can't check the Android settings, but I was able to confirm that all of the suggested iPhone and Spotify and settings exist. Most of them I had already configured that way, some I didn't know about before.

Your comment seems to have little to do with the article?

Don't get me wrong - I personally "trust" an LLM as a source of facts about as far as I could throw a rack of GPUs. But this article you linked takes a whole lot of words to cast LLMs as the villian for amplifying a bit of bad information originally published by a usually reliable and widely-cited source:

"In short, either Phoronix mocked up the screenshots to demonstrate what the feature could look like, or perhaps they were testing a preview snapshot for FreeBSD 15.1 which was never shipped. Either way, it looks like other blogs and reviewers picked up on this and shared the information, presenting it as a feature which would be (or was included) in FreeBSD's latest version."

If dirt-simple type operations like copy-paste yield useful improvements with even a small probability that would seem to open things up for adaptive reconfiguration and whole other classes of optimizations like genetic algorithms.

Road to Elm 1.0 16 days ago

It's going to be hard to explain to future generations that the demand for computer-speakers was once such that sometimes they could even decide the language in which they spoke to the computer, and that really was a big deal back then because computers couldn't just switch back and forth like they can today.

Naming things using qualifiers like "large" has never aged well when transistors were involved.

For example, consider the term "short wave" radio which refers to wavelengths of at least 10 meters. Today's mobile communications use wavelengths 100x - 10,000x shorter.

We're discussing a blog post about a blatantly plagiarized website, and the ethical environment and professional choices that led to its creation and continued existence. We get to do that.

This isn't Reddit and we aren't "the internet". We aren't brigading and organizing harassment or whatever here.

That is why the particulars of the web designer's personal life and state of mind are mostly uninteresting.

But there are any number of humans who will tell you that humans are bad at multithreading the codes and all but the smallest codebases are headed for heisenbug deadlock city if you do things like they told you to in that Introduction to OOP with JavaTM book.

But is Claude going to tell you "No, dear user, this project is going to follow an excessively simple and sub-optimal locking regime because experience shows that it is easier to write code than it is to reason about its exponentially-growing complexity" ?

My experience inflicted stupidity.

We've all been there.

I find it nice that they linked to the original book. For every x earned let the original author earn many times more. It's probably a better deal than the author got from their legal publisher.

These two statements sound contradictory to me.

And who's fault is that? Google? Or this little slop maker that I'm (again stupidly) assuming is not a SEO hacker.

Why not both? I think there's plenty of blame to go around.

Also, the publisher who presumably convinced the author that it would be a good idea to assign them exclusive rights. The affiliate link the blog post refers to as "the author's own" actually belongs to the publisher.

When/where I grew up (the United States), private planes were thought of as auto-un-aliving machines for Doctors and Dentists.

Boomers and older generations tended to think of them as part of rural life. E.g. farmers would sometimes put an airstrip on a spare field. There's an episode of Mayberry (The Andy Griffith Show) in which Aunt Bea gets her pilots license.

He basically liked the idea of the book and used the bulk of its text as lorem ipsum in a demo for their most likely one person "digital agency" that probably has 3 clients including mom.

What is your basis for this belief?

Did you read the part about the obviously intentionally-added affiliate links to the original book?

The only part of copyright I agree with is right to inalienable attribution [...] So whoever made this silly little thing gets a pass from me.

Did you read the part about the fake site appearing higher in search results for the author's own name?

it’s becoming normal to just throw out “Claude says this” without doing any fact checking

That would be an improvement over most people I know at this point, who casually repeat verbally or repost words they got from a chatbot without so much as a quotation mark.