throwaway313313's comments

throwaway313313 | 1 month ago | on: SanDisk laughs all the way to the bank as memory price hike drives $3B revenue

It's more of a humorous situation to imagine, however with respect to the "oh it's normal comment".

No industry with a very limited number of suppliers and with a huge lead time, capex, and tech expertise moat to build a semiconductor fab would ever note that the price of their product has a demand curve that while not a delta function is very steep around fixed maximum production of themselves and all the other suppliers, and that being on one side of that threshold makes all the suppliers poor or just enough money to stay in business vs rich.

How many RAM suppliers are there? Obviously due to the situation we all are in not enough to make the supply curve a very smooth function in response to demand.

throwaway313313 | 8 months ago | on: Why do we need DNSSEC?

RPKI plus ASPA does solve the hijack problem by securing both the origin of a prefix and the AS path of a route.

Yes ASPA is new. Reference implementations in open source routing daemons and RPKI tools are being developed and rolled out. If you want to be a pioneer you can run a bird routing daemon and secure the routes with ASPA. Only experimenters have created ASPA records at this point, however once upon a time we were in the same position with RPKI.

throwaway313313 | 1 year ago | on: Assisted dying now accounts for one in 20 Canada deaths

Health care professionals consult with their patients to explore their needs and suggest options regularly. This is expected and normal.

The professionals making suggestions naturally have biases. That behavior gets a bit interesting when one of the options is euthanasia.

Here's a few cases:

https://www.cbc.ca/news/politics/veterans-maid-rcmp-investig...

"Last summer, Global News first reported a case where a veteran claimed to have been pressured by a veterans affairs case worker to consider medically assisted dying."

https://www.foxnews.com/politics/canada-offered-assisted-sui...

"Canada offered assisted suicide to a Paralympian veteran who wanted a wheelchair lift installed"

https://care.org.uk/news/2023/07/canadian-army-veterans-diag...

"Canadian army-veterans diagnosed with PTSD offered euthanasia"

throwaway313313 | 1 year ago | on: Assisted dying now accounts for one in 20 Canada deaths

In a system of socialized medicine, is the goal of society to spend the money available to save the most people?

Taking into account that people have the greatest medical costs near the end of their life, should the system save others by limiting either the total available spend or the cost of any particular treatment according to some metric?

Should the system repeatedly and frequently remind people that are older and alone in the world without support from friends or family that euthanasia is an option?

How often reminding them would be considered coercive?

Is it coecerive if the system decides if you are over 70 years old that euthanasia is the only option you get offered when your condition is one of a long list of non trivial chronic conditions?

What if we find that in practice (as we almost certainly will if we dare to look honestly) people of certain genders, ages, ethnic groups, economic demographics, are more frequently told that killing themselves is an option they should seriously consider, compared to how often it is recommended to the general population?

Should the suicide prevention hotlines be shutdown and instead become suicide suggestion hotlines?

What about cases like chronic depression?

I'm just asking questions from a hacker perspective when people are busy considering offering euthanasia to everybody (sometimes advocating at every age) is some kind of virtuous undertaking.

People don't consider that throughout society in all walks of life and occupations some portion of people are sociopathic and pyschopathic (possibly with uneven distribution), and some plan administrators, whether that be socialized medicine, or large corporate insurance providers, will interpret their incentives to either their own benefit and/or the benefit of their organization, completely at odds with what you might consider the interests of the individual.

throwaway313313 | 1 year ago | on: Oregon law rolling back drug decriminalization set to take effect

Normally one might consider the political spectrum to go from the liberal stance of "It's all society's fault that you are how you are" to the conservative stance "It's all your fault you are how you are", with the practical situation being somewhere in between on a case by case basis.

However, things like drug decriminalization bring out further extremes, with extreme liberals espousing you should be able to do anything you want (even if you become a hazard to your community) and extreme conservatives feeling you should do what you want and the weak should die and the strong should live.

Only centrists and perhaps realpolitik people see all highly profitable addictive drugs that destroy the lives of the users as not some kind of accident on an individual basis and instead a super successful subscription business model with negative externalities that they would rather not suffer the side effects of as a community. Alas this view seems to not get so much airtime, and just ends up being a matter of fact as things play out.

To all the it's been illegal for over 100 years and it hasn't got any better school of thought people, so has murder. Were we expecting the nature of people to evolve in 100 years?

Seriously wondering from the perspective of choices of how to do things. Do we want to try to get the best result for the most people? How many false positives or false negatives do we want?

throwaway313313 | 2 years ago | on: Prominent S.F. developers charged with bribery in widening corruption scandal

Ok, thought experiment. The people that inspect buildings can condemn them.

How would you like a system to develop in the city that unless you bribe city officials they each year randomly choose some local owners with buildings to condemn and then hint that they should be bribed. Of course to make it plausible, they choose buildings that they can come up with some kind of justification for.

Naturally, since they are that creative, this would develop into a system where they make buildings develop all kinds of inspection problems that they wish to take for their crime ring. A very common super broad area is ADA compliant ramps, markings, entrances, bathrooms. The building code has changed over the years and within a building department and between cities what the inspectors expect you to do wildly varies. When you go to get totally unrelated work done an inspector or the planning department can require you to make ADA upgrades.

Over time it is natural for some portion of the building stock to require work in the form of maintenance for just about every aspect of the buildings. Think of all of the opportunities they have to get your generous endorsement in the form of money, since this in this world you've created city officials demanding money is totally fine.

Pray any building or business in the city doesn't attract their attention!

throwaway313313 | 2 years ago | on: EU Chat Control Bill Postponed

Just a like the saying "Fish don't know they're in water", people within different groups have cultural assumptions, in this case: The idea of "Permissionless innovation" vs what I like to call the idea of "Permissionful innovation'.

In the permission less school of thought, you don't need permission to use an existing API or data to do whatever you want as long as it isn't abusing the service or illegal.

In a permission full school of thought, you should always ask permission, from the authorities and whoever might have a vested interesting what you are doing.

It seems that in Europe it is far more common that many (most?) people expect you to get permission before you go off writing your random programs and putting them live on the Internet.

Where as in some other countries, people view pushing half baked ideas live as virtuous and artists manifest destiny and/or a existentially important economic function of startups.

When people from different cultures interact and they have completely different unspoken assumptions it can result in misunderstandings. In my case, the correct thing to do was apologize for the misunderstanding (definitely not arguing, you would never convince them to change their core cultural values!), and then not use the specific service or company involved (that had intractable permission issues due to any member being able to deny permission), and just work with other services that had no built in conflicts with the fundamental purpose of their service. (Organization names and the services involved redacted for courtesy.)

throwaway313313 | 2 years ago | on: Google changed ad auctions, raising prices 15%, witness says

Ok, then do they need to be truthful about anything?

How about giving themselves credit for extra clicks based on the value of the word? (With the defense they are doing it for you!)

What about if they switch to a click tracking system that uses statistics (so they can use the defense that the method is just inaccurate and they aren't lying), which just happens to over counts clicks?

How about charging you based on very erroneously projected traffic (one further than the step above, basically projecting the future very genrously in their favor) and not actual traffic?

What about if they enable the same third parties to both participate in an ad exchange as a seller and a buyer, with real time bid information, such that they can place phantom bids to up advertisers spend, just like HFT dark pools?

I could go on, every thing is all good, right? No guarantees?

Which ways is it ok if they misrepresent, overcount, badly estimate, fail to deliver, bill based on future estimates, and otherwise enable third parties to steal from you are ok?

throwaway313313 | 2 years ago | on: CVE-2020-19909 is everything that is wrong with CVEs

They typically do not want to disclose the full vulnerability details prior to you paying them.

For the few that we have engaged in back and forth conversation, they typically were just reporting warnings from various opensource website scanners, without completely understanding what they were talking about.

That's not to say somebody might discover a new unique vulnerability in the open source software and packages you might be using, except you wouldn't expect them to report it to your company, as some random user on the Internet, when the official projects are on github.

Alternatively if they reported a very specific issue regarding software you developed, I'm sure it would get your 100% attention. That's not been my experience so far (knock on wood).

throwaway313313 | 2 years ago | on: San Francisco announces initiative to convert office buildings for other use

Real estate investors make a bet that the rents they receive will cover the mortgage payments.

Markets are cyclical. The full reason why any particular system oscillates or is chaotic is complicated, however in this case the fact that there is a long lead time measured in years for any new supply to be created and the decision to build is partially based on prevailing interest rates and the supply of money.

Most cities lock the use type of any particular building in by the use of zoning and all kinds of regulation. That means the owners or potential owners aren't free to just change the building use to attempt to provide supply to match demand.

Should people be able to make predictions about future business and economic conditions and then undertake business based on those predictions? They are going to bet wrong a lot. In fact due to the nature of feedback systems, there will always be some investors that bet wrong.

Let's simplify this a little and just take one example of something the city and county of SF has control over, property tax. SF is a little unique by being both a city and county. In California the counties have control over lien tax sales for non payment of property tax. How quickly should the county of SF auction off properties that haven't paid their property tax?

https://sco.ca.gov/ardtax_public_auction.html

Tax-Defaulted Land Sales

Property becomes tax-defaulted land if the property taxes remain unpaid at 12:01 a.m. on July 1st. Property that has become tax-defaulted after five years (or three years in the case of property that is also subject to a nuisance abatement lien) becomes subject to the county tax collector’s power to sell in order to satisfy the defaulted property taxes. The county tax collector must attempt to sell the property within four years of becoming subject to sale. The county tax collector may offer the property for sale at public auction, a sealed bid sale, or a negotiated sale to a public agency or qualified nonprofit organization.

Should the County of San Fransisco increase the number of property tax delinquent properties that they slap with nuisance abatement (they could pick any kind of reason such as dirt and graffiti, squatters, crime incidents, etc) in order to expedite these properties being put on the market?

throwaway313313 | 2 years ago | on: How does data removal from GPT *work

Consider the AI Sec Ops future in the EU where in the run up to an election a political operative makes all widely used AIs "forget" about the competition by submitting a flurry of fraudulent right to be forgotten requests.

This is no stretch of the imagination due to existence of fraudulent copyright takedown requests being submitted daily to Youtube against legitimate channels (with Youtube giving said legitimate channels very real copyright strikes against their accounts regularly, with only very visible cases having a chance of reversal)...

throwaway313313 | 3 years ago | on: Hyundai Head Unit Hacking

Because the goal of a marketing manager is to extract more money from you not less, by creating an accepted practice of disabling functionality to optimize the money you are willing to commit to actually pay over the lifetime of owning the car.

The point is to find the most innocuous thing that you would accept at time of purchase and then make the majority of customers pay for that more often and longer than anybody at the time of purchase thinks about.

It's similar to the marketing for payday loans. People are not entirely rational actors.

If you could make double the normal sales price of the car in revenue, and the car stops working if the customer ceases to pay, then if you don't mind the occasional customer service public meltdown on social media, then as a car manufacturer you are welcome to scheme away.

As a smarter than average customer, you are wise to the scam, and hope that the scheming of the car companies is not effective on the general public.

Also subscriptions are awesome for car manufacturers for accelerating planned obsolescence. Why should there be any resale value to your car anyway, if they could figure out a way to either 1) make the new owner pay for the car again in subscriptions or 2) make your car near worthless after you initially own it, then from their perspective this is the most brilliant thing they have ever thought of! ;)

throwaway313313 | 3 years ago | on: Great California, Nevada, Oregon Flood of 1862

From the Wikipedia page: "The storm was not an unprecedented occurrence. Geologic evidence has been found that massive floods, of equal or greater magnitude to the 1861–1862 event, have occurred in California roughly every 100 to 200 years."
page 1