Hacker Newsnew | past | comments | ask | show | jobs | submit | wombatpm's commentslogin

Imagine if companies could pay meth addicts in meth the amount of work they could get out of them would be incredible.

I imagine they actually do, in that pay is just meth with extra steps. But for some reason a lot of the hiring isn't happening. Would be interesting to know where the barriers are.

There are lots of functional meth addicts who aren’t antisocial criminals who simply work a normal job whilst high.

As soon as you make something foolproof, the universe evolves a better fool

Fine. Make the universe work for it. The whole system becomes more resilient as a result.

Look at our immune system. Incredibly complex and clever, and able to keep us alive in the face of all sorts of pathogens. It exists because of this cat and mouse game, played over millions of years.

There's people in the highlands of PNG who regularly eat each other. Of course, many are thought to have died due to prion diseases. But now these tribespeople seem to have become largely immune to prion disease. Incredible.


The best way to make them work for it? Put it on paper.

Put what on paper? I don’t understand your comment.

Don’t store important and sensitive data in databases or computers at all. Put it on paper.

Computers make copying, processing, manipulating, and disseminating information easy. That is a bad thing for some kinds of information.


We still get diseases though, proving the point that millions of years of evolution are still not enough to build a perfect defence.

Your comment on PNG, seems to ignore Kuru


It explicitly mentions Kuru as "prion disease", it ignores that the mortuary practice of eating various parts of respected dead has long passed in time .. although the lingering effect on the woman and children that ate portions of the brain in the 1970s, early 1980s, is still residual in a very few.

From an evolutionary PoV a perfect defence is overkill - with two separate defences against prion diseases in that region it's only the rare variation that causes any issue - and that rarely occurs before a new generation is birthed - ie. 'perfect' from the PoV of the selfish genes.


The claim is that people in PNG are "largely immune" to these diseases, where kuru shows that they are not, and the "cure" was a stop in the practice, not some evolutionary upgrade

They are largely immune to Kuru - the number of people that could contract it (ie. the number who ate brain) was significantly larger than the number of people who actually did contract it.

The resistance came about via two separate "evolutionary upgrade"(s).


I cannot find any such claim in the literature.

It appears to me that, like BSE (aka Mad Cow disease) it really depends on exposure.


It was specifically endemic to the Fore, not so much to the Yate and Usurufa, and not particularly at all to other highland people in the general region.

There's a twofer that skittled the Fore, a ~1900 mutation that created a new form of infectious prion proteins, and a local variation that saw less uptake in the Fore of a resistant prion protein (alongside other resistant prion protein).

So, over the highlands region, there was general resistance thanks to several evolved variations, in one specific locale (the Fore) there was insufficient resistance to the mutation that hit a peak of 200 deaths / annum for about three years(?) in the late 50s.

I can't speak to "the literature", I just had a lot of conversations with the people on the ground (Mike Alpers, etc), on again / off again, since the mid 1960s.


Acshually a protective mutation was quickly being selected for (more precisely, the lack of it was strongly selected against).

Paper about Kuru and mutations referenced in comment here: https://news.ycombinator.com/item?id=49719102


The paper relies on the fact that people who were dying did not have the gene, but those that didn't ... did

That's not really enough to say "We have found the gene" - it's just really good data to warrant further investigation

Also, the incubation period of the disease is up to 50 odd years, have there been follow up studies?


> millions of years of evolution are still not enough to build a perfect defence.

Who said anything about a perfect defence? And since when was that the bar?


The context is very clear - but, sure you can play word games, why not.

Just, you're doing it on your own.


What seems obvious to you doesn't seem obvious to me. I'm not a malicious or incompetent enemy. But you will need to explain your perspective for me to understand it.

This is the key truth that we keep forgetting

I'm not really sure what point you're trying to make, or how this relates to computer security.

Funny - now you're talking about context...

You seem mad about something I've said? I'd appreciate if you come out and say it instead of making vague insults, awesome_dude.

NASA was supposedly a CMM level 5 organization and they still managed to crash a mars probe because of bad unit conversions.

A piece of software Lockheed made gave its outputs in US Customary units (not following their specification), and NASA expected it in SI units (as their specification expected)

That should have been checked multiple times by NASA before they launched it.

It seems like it should have been checked by Lockheed not NASA since supposedly NASA provided a specification, that specified the units, and paid for the software no?

I just had a quick scan of the incident report (https://llis.nasa.gov/llis_lib/pdf/1009464main1_0641-mr.pdf) and:

> "The output from the SM_FORCES application code as required by a MSOP Project Software Interface Specification (SIS) was to be in metric units of Newtonseconds (N-s)"

(MSOP = Mars Surveyor Operations Program). One of the recommendations was

> "Conduct software audit for specification compliance on all data transferred between JPL and Lockheed Martin Astronautics"

So yes, NASA should have checked the provided software more thoroughly, but also Lockheed should have actually followed the spec they were given. I doubt the SIS is available online to check any harder


No, if NASA chose not to triple check everything before sending something into space then they are as much to blame as the supplier. Blindly assuming something works like it should without testing it makes an ass out of u and me.

Very fitting for the AI age as well. "Yeah I just put the specs of the project you're paying me to do (in NASA's case, probably 100% public funds) but Claude the gimp missed the units because all previous training data use Stones and Yards as units, you should have verified it yourself! I just prompt!"

Should have been checked by both. Lockheed should have checked because of contractual obligations; NASA should have checked because of minimal engineering practices (bugs happen in all your dependencies).

They happen and some are put there on purpose too. In this case it's not a "bug" in your dependencies, and yes NASA since it's using public funding should have been more careful, but ultimately it's Lockheed that was paid to do something no?

I work in aerospace.

Both parties fucked up.

Lockheed's job is to follow the customer's specifications.

NASA's job is to check to make sure what they paid for is what they received.

I do this every single day as a quality inspector here. I don't know why a bunch of highly-degreed engineers can't do a simple job that a person with oonly a GED does without fail.


Actually no, it's Lockheed's that should have had a test-suite and conformance-suite for it, but probably only has a C-Suite. If the program is non-trivial proving its correctness can be very expensive to prove, both money and time wise, and something that is done contrary to the spec is obviously on the one executing the spec and being paid for it, which probably wasn't cheap and probably these expenses add to the "NASA only burns money..." narrative.

"Actually no, it's Lockheed's that should have had a test-suite and conformance-suite for it"

Tell me you don't run AS9100D quality inspections without saying so directly.


Well, it seems like simple test & conformance suites would have been enough to catch this, so you wouldn't need to run AS9100D quality inspections.

Besides it looks like the first AS9100 Standard was released after the incident even happened - perhaps even as a result of this.

So it's totally irrelevant that you both audit software in the space and know the Standard, no pun intended


AS9100 is based off of ISO9001. It doesn't fucking matter, the responsibility is on both parties.

Again, tell me you don't actually handle quality without directly saying so.


yeah Mr. Quality supervisor

That is why the good lord invented acceptance tests.

Did any martians hack the probe?

Martian packets are those with source addresses like 192.168.1.1 (on the public internet), 127.0.0.1 or 0.0.0.0.

Jeff Goldblum with a thinkpad, maybe

Jev Goldblum? He’s all the hype today

Artificial Life, um, finds a way

You need to know that addition is a thing and have reasonable confidence that 2+2=4 before attempting 2+3

Good to clarify the definition of seamstress with DiscWorld/Pratchett quotes floating around.

Explanation: in discworld, seamstress is a euphemism for prostitute, so much that people can't find actual seamstresses.

Happy to be corrected.

Couldn't remember the word tailor, and seamstress felt very outdated and weird, hence the explanation.


Seamstress is still a thing, and different from a tailor AFAIK (probably a lot of overlap)? I have 2 friends for whom that's their job, and they do refer to themselves as seamstresses

Same seed gives the same sequence. Use that to debug Monte Carlo simulations all the time.


This has all happened before when the CSS encoding scheme for DVD’s was cracked with the short decss program. And the MPAA wants after everyone and every posting of the code. I had the Tshirt with the code that I bought to support the guy being sued.


Why bother publishing the code? Anyone with LLM access can recreate it. Instead write up your findings on how it works. Publish that in a blog, submit it to Wikipedia and Reddit. Player piano did security through obscurity. Now make it less obscure.


code with compilation instructions can be understood and used by much more people than a long conversation between a human and 2 top tier LLM only accessible through costly agreements and providing nondeterministic output. Going from a prompt to working code you have to traverse a pretty steep paywall...(yes 20 to 200 dollars per month is steep if you compare it with the rest of the software stack like compilers/interpreters and text editors, which is usually free)


Please note: This is America where potential civil immigration charges can result in summary execution because poorly-trained wannabe-cop racists with guns make needless escalations. If law enforcement thinks it’s a crime, it’s a crime until the courts say otherwise.


99% of American law enforcement does not care about a piano disc encoder.


But you can smuggle them in containers and trucks to accomplish the same strike thousands of km’s away.


That's happened once, which was quite something to pull off, but don't think that's normal.


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: